{"report_id":"5362a43e-3a59-455e-b178-77f2d6b1bdde","version":6,"status":"done","tags":[],"date":"2026-02-08T06:10:06Z","url":{"schema":"http","addr":"www.qgbbzt.top/t1p20250515v25766.html","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"104.21.57.122","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.qgbbzt.top/t1p20250515v25766.html","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"title":"夫妻交换 主播 调教 性奴训练 - 性转型AV 私人飞机play-蜜桃臀 超高点击 前后双插 叫床 - 国产剧情 巴西狂野-回忆刺激 踩踏女王 欲求不满 约炮 - 性五星酒店 网红转型作-蜜桃臀 超高点击 前后双插 叫床 - 国产剧情 巴西狂野","dom":{"size":70292,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (59342), with no line terminators","md5":"18770fc1a3a889a58faab8469e09ae8a","sha1":"2f9970b1bf653c2a452b67a55be04af2b7959154","sha256":"6b2c8250deca1182bd314077f0874a0d439d13a05249a80b25d5e975374a4a70","sha512":"e285cc0ad392b5c3c06c565cb2147c962d7c634d672843d56a88263e539029d36a872db1a236ea19b69c2b4636687c73d244534275d47ff646ace5a6f158fead","ssdeep":"1536:n/tKl/Og/tpYupe8bLMAFrzI+nKNGH8SFeg9Jn+esiXx5gCPULRotgN:9aMAFrM+KNGH8S8ExG3","tlshash":"7b63e911aaa8845b023b92c1a9a077ecd042b1d8f9311d73b8e15ba6975ffd31c056ff","dom_hash":"domhash39c0e3880ecad3e29c3be9de42491171","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.qgbbzt.top/t1p20250515v25766.html","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"104.21.57.122","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-15T06:10:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"www.qgbbzt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"wap.yandex.com","ip":{"addr":"5.255.255.77","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"1998-09-24","domain_rank":101865,"first_seen":"2025-11-07T19:46:25.886375Z","last_seen":"2026-02-02T01:40:08.111566Z","alert_count":0,"request_count":1,"received_data":1862,"sent_data":488,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.qgbbzt.top","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-27","domain_rank":0,"first_seen":"2025-06-23T21:36:38.858559Z","last_seen":"2026-02-01T00:41:28.546481Z","alert_count":30,"request_count":30,"received_data":738069,"sent_data":14044,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"cdn.y-y-z-y-w-1.top","ip":{"addr":"104.26.9.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-02","domain_rank":0,"first_seen":"2025-06-28T06:13:31.284066Z","last_seen":"2026-02-01T17:57:47.878153Z","alert_count":0,"request_count":9,"received_data":1130317,"sent_data":4059,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.indexnow.org","ip":{"addr":"150.171.74.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"2021-05-27","domain_rank":2251126,"first_seen":"2022-03-05T02:31:52Z","last_seen":"2026-02-05T14:20:19.521975Z","alert_count":0,"request_count":1,"received_data":578,"sent_data":490,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"sp0.baidu.com","ip":{"addr":"103.235.46.115","port":443,"asn":55967,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"1999-10-11","domain_rank":220073,"first_seen":"2014-12-05T23:12:12Z","last_seen":"2026-02-04T13:15:04.378465Z","alert_count":0,"request_count":1,"received_data":116,"sent_data":495,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.y-y-z-y-w-100.top","ip":{"addr":"104.26.8.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-02","domain_rank":0,"first_seen":"2025-09-16T11:14:26.00479Z","last_seen":"2026-02-05T14:20:19.423065Z","alert_count":0,"request_count":2,"received_data":247499,"sent_data":906,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.bing.com","ip":{"addr":"23.36.79.144","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"1996-01-29","domain_rank":174,"first_seen":"2012-05-21T17:02:58Z","last_seen":"2026-02-05T10:52:52.954845Z","alert_count":0,"request_count":1,"received_data":607,"sent_data":486,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]},{"fqdn":"cdn.y-y-z-y-w-101.top","ip":{"addr":"104.26.9.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-02","domain_rank":0,"first_seen":"2025-10-24T20:33:56.540947Z","last_seen":"2026-02-05T14:20:19.573247Z","alert_count":0,"request_count":5,"received_data":754138,"sent_data":2265,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"yandex.com","ip":{"addr":"5.255.255.77","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"1998-09-24","domain_rank":573,"first_seen":"2012-06-19T21:43:21Z","last_seen":"2026-02-07T00:48:22.471457Z","alert_count":0,"request_count":1,"received_data":1862,"sent_data":484,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.qgbbzt.top/template/default/static/js/jquery.lazyload.js","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9dfc308833c7ae64a6e0e6bd33fb51d7","sha1":"527e4dbceb22c063ed1bc5bd2ec362d9a412892a","sha256":"f3a5e91219434ff92ae7b36b9582136a75f56b605ebeb54bac21efdfea4466d1","sha512":"383aec26af4153c8d03cf7ab898378d5be2d509fcc12e87daaccaf2a51f145ac57b08c3001db895ed95b24e807c5290d256e5570a519b2c478185b9472d27578","ssdeep":"","tlshash":"d641e5863f027534f179a9ad430f52096127d03b92d58dd1b089d8ecfcf86579a3698b","size":2232,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-04-03T21:20:26.492317Z","times_seen":18854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/template/default/static/js/jquery.lazyloadb.js?v=123","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f44ca4e618a576fc925e79eaafa726b","sha1":"81df654b4e412007bfe7a8809180eac7a436a182","sha256":"bb179daa61611474056bc9025edf3982f762d121a75c230852b23e2d4a9310a6","sha512":"cc567421cbab18a35587a9411cab3f3036f5aa06e244bbc81bfcb791877350b6465b8ace86589a94b50709dc916757c676114d42f8f520e13a0f4f6c87f6719d","ssdeep":"192:hRxnCNgindYz2rRUNM7vQvhzi8RUnjaCgc8QRGkeVbQi0uxxX8wg09zrPTyYRzEQ:hG0XMsd5CkvbQFqzrrRzz","tlshash":"7932a72c7da720a9a613603f5bff516870b488035407de40786ce9596fd0e3983beaf8","size":11307,"data":"","first_seen":"2026-02-05T15:06:38.583981Z","last_seen":"2026-02-12T03:34:57.032144Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/t1p20250515v25766.html","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c10161d4120bfe691cdf19e9a35e35c0","sha1":"416144fbd4ceb36ed9e2e604a72f582780f34e9a","sha256":"0a9e7c7aaf542a8ab2e055e41d914a19451d27a6c191a58566ade73f147f81ed","sha512":"1e389a8830fe6768af7e96663657e163c00216d5f9db26d97ae0c5b8c3a8ad7a2f4dc629d70ae4bf488dddd09fa4092e7f3bd6603c411ec63616b67f7625ee98","ssdeep":"","tlshash":"4ce0a75a2c90983a960a21664235c62852b1eb102632e1654d8e8c4e55946ddce0dbe0","size":429,"data":"","first_seen":"2025-12-22T17:45:37.117267Z","last_seen":"2026-02-24T07:54:41.835431Z","times_seen":3036,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/t1p20250515v25766.html","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e79a5d2248325704fab0ebcb903f0899","sha1":"d3ab8e61e940d5121506d6cbfb5142c55bbb7195","sha256":"225f9bab6112957815096de4a5fe9c1c38f0fda2f63711be012557e41fbee1af","sha512":"1f0207ba2e13a272840bdec720bd4232e72a797132182e2d5ea4ace4f082de0b7d8f8a7d5bbf4078de673317ec37702934de7ae4f245121ada3474a7237f43e3","ssdeep":"","tlshash":"9f900257b1146d0465513025d877402c042660412401d880540404625b2a0582069448","size":46,"data":"","first_seen":"2025-01-01T07:40:20.984154Z","last_seen":"2026-02-24T07:54:41.835904Z","times_seen":10992,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/ok/splb.script?v=2026020806","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4cd249d403cd26cf7cdabbc0c04ca7aa","sha1":"6db3b27dd3186231e8c7b7e06f4bf7beea89e33d","sha256":"b9a493eb932c71ee13bb2604e0f494ea8c62b464ffe4c9fb9cf0633ba732157e","sha512":"5c3fdd14bca100f2fdbb01b7dfa78a21ae1ea3d3476261f465e57c98f64b7f3c2010ae4ecbb13559dbb2ede12b61452561aa2d1086c1ebba7ca690feea5c3b76","ssdeep":"","tlshash":"3b2100486e91a424861704611977d7fcf6a47035385ad342ccadcd093f20f72ab7addc","size":1114,"data":"","first_seen":"2026-01-30T23:51:02.577704Z","last_seen":"2026-02-24T07:54:41.816049Z","times_seen":1212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/ok/splb.script?v=2026020806","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4cd249d403cd26cf7cdabbc0c04ca7aa","sha1":"6db3b27dd3186231e8c7b7e06f4bf7beea89e33d","sha256":"b9a493eb932c71ee13bb2604e0f494ea8c62b464ffe4c9fb9cf0633ba732157e","sha512":"5c3fdd14bca100f2fdbb01b7dfa78a21ae1ea3d3476261f465e57c98f64b7f3c2010ae4ecbb13559dbb2ede12b61452561aa2d1086c1ebba7ca690feea5c3b76","ssdeep":"","tlshash":"3b2100486e91a424861704611977d7fcf6a47035385ad342ccadcd093f20f72ab7addc","size":1114,"data":"","first_seen":"2026-01-30T23:51:02.577704Z","last_seen":"2026-02-24T07:54:41.816049Z","times_seen":1212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/ok/splb.script?v=2026020806","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4cd249d403cd26cf7cdabbc0c04ca7aa","sha1":"6db3b27dd3186231e8c7b7e06f4bf7beea89e33d","sha256":"b9a493eb932c71ee13bb2604e0f494ea8c62b464ffe4c9fb9cf0633ba732157e","sha512":"5c3fdd14bca100f2fdbb01b7dfa78a21ae1ea3d3476261f465e57c98f64b7f3c2010ae4ecbb13559dbb2ede12b61452561aa2d1086c1ebba7ca690feea5c3b76","ssdeep":"","tlshash":"3b2100486e91a424861704611977d7fcf6a47035385ad342ccadcd093f20f72ab7addc","size":1114,"data":"","first_seen":"2026-01-30T23:51:02.577704Z","last_seen":"2026-02-24T07:54:41.816049Z","times_seen":1212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/template/default/static/js/jquery.autocomplete.js","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"932466cf2976a99330383be9ffe8ca6b","sha1":"732c55aa5bbb6efb63fad871db9773139929d0e6","sha256":"22a879d897b0c6559e8a4f0e1d7f8866471478740a5b5cace3c29c97c8fdaf18","sha512":"e1ea60c13642bbc8ed8cd448007d5096c4067596b1fee2bea55f1fea765bab59f97f92fa973bdd329ccf78087be301325b14a206592a76c3699128459559159b","ssdeep":"384:EC8MJlHqBlgr2qMrLXej2Jy7fwaoSXo0TviE:Ed7Dr7OtZTqE","tlshash":"d3b2ec0979e3226292a7707e8faf0008b676a557240cdd50bd1ca7d02f54938b6f7fe9","size":25108,"data":"","first_seen":"2023-04-07T04:49:34Z","last_seen":"2026-04-03T21:20:26.502242Z","times_seen":19995,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/ok/splb.script?v=2026020806","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4cd249d403cd26cf7cdabbc0c04ca7aa","sha1":"6db3b27dd3186231e8c7b7e06f4bf7beea89e33d","sha256":"b9a493eb932c71ee13bb2604e0f494ea8c62b464ffe4c9fb9cf0633ba732157e","sha512":"5c3fdd14bca100f2fdbb01b7dfa78a21ae1ea3d3476261f465e57c98f64b7f3c2010ae4ecbb13559dbb2ede12b61452561aa2d1086c1ebba7ca690feea5c3b76","ssdeep":"","tlshash":"3b2100486e91a424861704611977d7fcf6a47035385ad342ccadcd093f20f72ab7addc","size":1114,"data":"","first_seen":"2026-01-30T23:51:02.577704Z","last_seen":"2026-02-24T07:54:41.816049Z","times_seen":1212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/t1p20250515v25766.html","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f2bee8d2a28e6eaedc31523b17a9cc04","sha1":"4ab4f59221444cef0c4424bb8edc121d4940a93b","sha256":"a1c7ec5971bbd366fef5609c38a1b47586af62f45f90f8e506353b3a1c602c18","sha512":"8827a9f45512270baae3c4e75587f4ed34800aacf6ee972c3573867370d33acabb9d5ebcbbef29215826df7f1eff6421b4b53e6e80eb0954724ed3c34340dbd7","ssdeep":"","tlshash":"d7d05e63315146f15dfe666f526a7b89747651d10809704118497c205530f5b22aabe4","size":247,"data":"","first_seen":"2025-01-01T07:40:20.985393Z","last_seen":"2026-02-24T07:54:41.836439Z","times_seen":10990,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/t1p20250515v25766.html","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e8ffbbd2246fcd979227391311e25d05","sha1":"cf7ea9319d8de32a5ea3bf5b0fbce18b28503791","sha256":"64b737571b92089b9d65972ccd1f5c6f6fac68a2191d4d7f1f4f3264ee98d2dc","sha512":"939205ebdcfe900a3a166c645e0c2627e77a0ceee92961b7136e949344f62057423be9561f679f167cf1786c7aeeb5760f90784856cb98c6507d046e1d01f4b8","ssdeep":"","tlshash":"5680000ccf22caa0380a80ab0ab3e03fb08800822c20c0e302cc08caa0a0fe20c88380","size":37,"data":"","first_seen":"2025-09-11T07:51:43.933487Z","last_seen":"2026-02-24T07:54:41.836946Z","times_seen":10250,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/t1p20250515v25766.html","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3fc9e3902bc4260ab392d4dc2feba221","sha1":"94d91ca2c619fdf5a5b549706e63e0f73046f339","sha256":"af904abaafda721c1d21b569d2962ac76362f2dc25a2c3c960ba925c2d7370b1","sha512":"e95da3c980754df949e38bff165cc0e5a644a82fd8bd5e39b05261542dc1b6978df8789ccd05fcdaa3d983df3bf6a0edf1daa7040248ab14d78ffb6245914df7","ssdeep":"","tlshash":"46a0021d9dd0cee565cac6977d37d03f499054812860c5e21cc858df9364bf50c9514c","size":68,"data":"","first_seen":"2025-09-11T07:51:43.935324Z","last_seen":"2026-02-24T07:54:41.837485Z","times_seen":10249,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/ok/splb.script?v=2026020806","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4cd249d403cd26cf7cdabbc0c04ca7aa","sha1":"6db3b27dd3186231e8c7b7e06f4bf7beea89e33d","sha256":"b9a493eb932c71ee13bb2604e0f494ea8c62b464ffe4c9fb9cf0633ba732157e","sha512":"5c3fdd14bca100f2fdbb01b7dfa78a21ae1ea3d3476261f465e57c98f64b7f3c2010ae4ecbb13559dbb2ede12b61452561aa2d1086c1ebba7ca690feea5c3b76","ssdeep":"","tlshash":"3b2100486e91a424861704611977d7fcf6a47035385ad342ccadcd093f20f72ab7addc","size":1114,"data":"","first_seen":"2026-01-30T23:51:02.577704Z","last_seen":"2026-02-24T07:54:41.816049Z","times_seen":1212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/ok/zhongjian.script?v=2026020806","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"535552634dc35d3b30dcb253cb0444b8","sha1":"b2937f2990c8a32a0665ac0ab8963f68ca6a48ce","sha256":"904cd7672abec95750e1e55fcfd8d654053587ac980c43dc5a21ad4ea3ee4216","sha512":"ea2d9de7f7dc3dbec96126dd958bfb76a40b29e0050cb9b86a18ec6255f7d9e708a4fc0be45915ef755891b7525a13319825e80fb6586884cc0908da0612b657","ssdeep":"","tlshash":"1921011d2ca40534e607046ba7bbe2bc76223106374bd711bd9e9c496f90fa446b69dc","size":1378,"data":"","first_seen":"2026-02-05T17:03:24.712106Z","last_seen":"2026-02-24T07:54:41.815522Z","times_seen":686,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/ok/dingbu.script?v=2026020806","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a0d81f78d9516f85c920498d0db6785b","sha1":"1e4be6fc2cd087aa2ad11b80baf3cc6f374e639a","sha256":"2d3c90b3e4f966c8fe85e9d370a03cb105caabfd319a63b17d6f0a1efd1f3113","sha512":"5414cce76e4c494418dcd33c31f1ad5db689c059acf820195a96946b3db75a166e3aa05dd0685cd2d6ce9acff543bc506623ae7b089ecd611d38554889821c75","ssdeep":"","tlshash":"f201f18c1cc27438995608322976e5bc76341124364ec2029c1cd8182f607a55a76dcc","size":779,"data":"","first_seen":"2026-01-30T23:51:02.634911Z","last_seen":"2026-02-24T07:54:41.817345Z","times_seen":1212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/t1p20250515v25766.html","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"db8fce4bfc7aa7921f236f4d56df0012","sha1":"f546e0d3b457dd9b03890dc21efb641663fa7572","sha256":"7c6ceb3e33963beaee40a57dad2c38e2ae6748d89c12ff73f36f50088181f9a9","sha512":"bd25c1dab98b76204828986a8767683701fccce8b793c7183f786ac4999b3c38a0979384c477334950cdd5fd785faa9d97bc0d336a38b541568f3b9e1b7781c2","ssdeep":"","tlshash":"60800008cea8ca303b88888b0a33c88eb0800082ac20c0e302cc0ac882b0fe00c80280","size":34,"data":"","first_seen":"2025-09-11T07:51:43.937242Z","last_seen":"2026-02-24T07:54:41.837953Z","times_seen":10252,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/t1p20250515v25766.html","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"53743946b0792e8f18ecae87538dfd44","sha1":"6ed50eb2c5983e84730109ec7cae3ad0d857ac18","sha256":"9dbaba39f60c43415fb12010e1869e8aae61c2c4cc8f838bc5e775a9ed8bd508","sha512":"8cac9a77f3d45ed3c410460fad7b4d7d718b1cdbfb6496ac27eb3a0c5a3e8e1190525359427bff1e7865f622a7e547715025695ba0dc59bac9b9d0b2cf3c9dfd","ssdeep":"","tlshash":"73800008cc20c820388888ab2a33c00bba80008a2c20c2e203ce8cca82a0fe00f80a80","size":34,"data":"","first_seen":"2025-09-11T07:51:43.939214Z","last_seen":"2026-02-24T07:54:41.838538Z","times_seen":10135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/t1p20250515v25766.html","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"53743946b0792e8f18ecae87538dfd44","sha1":"6ed50eb2c5983e84730109ec7cae3ad0d857ac18","sha256":"9dbaba39f60c43415fb12010e1869e8aae61c2c4cc8f838bc5e775a9ed8bd508","sha512":"8cac9a77f3d45ed3c410460fad7b4d7d718b1cdbfb6496ac27eb3a0c5a3e8e1190525359427bff1e7865f622a7e547715025695ba0dc59bac9b9d0b2cf3c9dfd","ssdeep":"","tlshash":"73800008cc20c820388888ab2a33c00bba80008a2c20c2e203ce8cca82a0fe00f80a80","size":34,"data":"","first_seen":"2025-09-11T07:51:43.939214Z","last_seen":"2026-02-24T07:54:41.838538Z","times_seen":10135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/template/default/static/js/js.js","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"92ade2d512b3981f1041c2ae3e9ba05e","sha1":"eb7073f4d643633d67b1e924d8d0046b2a64207b","sha256":"0967563fe34912f4a673c6be88057d276f23c892325e91271d97c54260031627","sha512":"abe7064dd0c55c34edd7ea873c029c1dc7341f65d87766d30345d45292d3e79f9d311f1062c0c67b77790a5d37e39a9bd07a4cc929fafd1dbd5fda07f8422cf9","ssdeep":"48:QPHizsoUdDOMSZekZTMucMGk5a+zu1H+ORPiyi7i5iIp8GvyU/5/i/WBbEbs8ib/:PZUYRf589H+OR/8G99r4ReEPi","tlshash":"e7a11f4af1a535651437363a0e7f60043777808ba88dee90f84c49e08fa923c55abfda","size":4787,"data":"","first_seen":"2025-01-01T07:40:20.941475Z","last_seen":"2026-02-24T07:54:41.804961Z","times_seen":10893,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/ok/splb.script?v=2026020806","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4cd249d403cd26cf7cdabbc0c04ca7aa","sha1":"6db3b27dd3186231e8c7b7e06f4bf7beea89e33d","sha256":"b9a493eb932c71ee13bb2604e0f494ea8c62b464ffe4c9fb9cf0633ba732157e","sha512":"5c3fdd14bca100f2fdbb01b7dfa78a21ae1ea3d3476261f465e57c98f64b7f3c2010ae4ecbb13559dbb2ede12b61452561aa2d1086c1ebba7ca690feea5c3b76","ssdeep":"","tlshash":"3b2100486e91a424861704611977d7fcf6a47035385ad342ccadcd093f20f72ab7addc","size":1114,"data":"","first_seen":"2026-01-30T23:51:02.577704Z","last_seen":"2026-02-24T07:54:41.816049Z","times_seen":1212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/ok/splb.script?v=2026020806","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4cd249d403cd26cf7cdabbc0c04ca7aa","sha1":"6db3b27dd3186231e8c7b7e06f4bf7beea89e33d","sha256":"b9a493eb932c71ee13bb2604e0f494ea8c62b464ffe4c9fb9cf0633ba732157e","sha512":"5c3fdd14bca100f2fdbb01b7dfa78a21ae1ea3d3476261f465e57c98f64b7f3c2010ae4ecbb13559dbb2ede12b61452561aa2d1086c1ebba7ca690feea5c3b76","ssdeep":"","tlshash":"3b2100486e91a424861704611977d7fcf6a47035385ad342ccadcd093f20f72ab7addc","size":1114,"data":"","first_seen":"2026-01-30T23:51:02.577704Z","last_seen":"2026-02-24T07:54:41.816049Z","times_seen":1212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/t1p20250515v25766.html","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"53743946b0792e8f18ecae87538dfd44","sha1":"6ed50eb2c5983e84730109ec7cae3ad0d857ac18","sha256":"9dbaba39f60c43415fb12010e1869e8aae61c2c4cc8f838bc5e775a9ed8bd508","sha512":"8cac9a77f3d45ed3c410460fad7b4d7d718b1cdbfb6496ac27eb3a0c5a3e8e1190525359427bff1e7865f622a7e547715025695ba0dc59bac9b9d0b2cf3c9dfd","ssdeep":"","tlshash":"73800008cc20c820388888ab2a33c00bba80008a2c20c2e203ce8cca82a0fe00f80a80","size":34,"data":"","first_seen":"2025-09-11T07:51:43.939214Z","last_seen":"2026-02-24T07:54:41.838538Z","times_seen":10135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/t1p20250515v25766.html","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"53743946b0792e8f18ecae87538dfd44","sha1":"6ed50eb2c5983e84730109ec7cae3ad0d857ac18","sha256":"9dbaba39f60c43415fb12010e1869e8aae61c2c4cc8f838bc5e775a9ed8bd508","sha512":"8cac9a77f3d45ed3c410460fad7b4d7d718b1cdbfb6496ac27eb3a0c5a3e8e1190525359427bff1e7865f622a7e547715025695ba0dc59bac9b9d0b2cf3c9dfd","ssdeep":"","tlshash":"73800008cc20c820388888ab2a33c00bba80008a2c20c2e203ce8cca82a0fe00f80a80","size":34,"data":"","first_seen":"2025-09-11T07:51:43.939214Z","last_seen":"2026-02-24T07:54:41.838538Z","times_seen":10135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/t1p20250515v25766.html","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"53743946b0792e8f18ecae87538dfd44","sha1":"6ed50eb2c5983e84730109ec7cae3ad0d857ac18","sha256":"9dbaba39f60c43415fb12010e1869e8aae61c2c4cc8f838bc5e775a9ed8bd508","sha512":"8cac9a77f3d45ed3c410460fad7b4d7d718b1cdbfb6496ac27eb3a0c5a3e8e1190525359427bff1e7865f622a7e547715025695ba0dc59bac9b9d0b2cf3c9dfd","ssdeep":"","tlshash":"73800008cc20c820388888ab2a33c00bba80008a2c20c2e203ce8cca82a0fe00f80a80","size":34,"data":"","first_seen":"2025-09-11T07:51:43.939214Z","last_seen":"2026-02-24T07:54:41.838538Z","times_seen":10135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/ok/flwz.script?v=2026020806","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5112ba66deee1ad99ec26adff2a0a430","sha1":"b8b5c9a0eb19bf49f17df968b7ac4f11e91301bc","sha256":"cfe641f102d09b5722c4a6909121dccbcb4d69de8bec9b769e400eec8748fbda","sha512":"01aeef2c8a6f68c09d10f3f4517f9c1b7e68826afd1d0a1c536983d367f1d687f0130caa1347071bf3ab2bd7f761ce794fb6e0535669591e9d07dc570091186e","ssdeep":"","tlshash":"e721f48c694064278f170924297bd6fda3a030b52c8ae7829c65cc043f607516f35ddd","size":1173,"data":"","first_seen":"2026-01-30T23:51:02.645897Z","last_seen":"2026-02-24T07:54:41.824415Z","times_seen":1210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/t1p20250515v25766.html","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"53743946b0792e8f18ecae87538dfd44","sha1":"6ed50eb2c5983e84730109ec7cae3ad0d857ac18","sha256":"9dbaba39f60c43415fb12010e1869e8aae61c2c4cc8f838bc5e775a9ed8bd508","sha512":"8cac9a77f3d45ed3c410460fad7b4d7d718b1cdbfb6496ac27eb3a0c5a3e8e1190525359427bff1e7865f622a7e547715025695ba0dc59bac9b9d0b2cf3c9dfd","ssdeep":"","tlshash":"73800008cc20c820388888ab2a33c00bba80008a2c20c2e203ce8cca82a0fe00f80a80","size":34,"data":"","first_seen":"2025-09-11T07:51:43.939214Z","last_seen":"2026-02-24T07:54:41.838538Z","times_seen":10135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/ok/dingbuwenzi.script?v=2026020806","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aff4788e0045155386f48bb57d7d0b0b","sha1":"dfb23d28fc23dc5354ab56b60f98030e890ae24b","sha256":"2c22a93400db6211d7cad0febaa598a9bffd088172bc5a6bbe321ef8408fc11a","sha512":"5f24aecb726805793a4ba26305d21d3d3b5a764db7f3fcf74735d0a096a3d51463547d98b7664a0c8cfdd5b22a38505131f66b192d90cad4b1b2404d2dba95e2","ssdeep":"","tlshash":"9c310ccae5425b3d0ec35e2129a7fafdd3e0b0b62d4b92839c24cc0c56056666926ee5","size":1778,"data":"","first_seen":"2026-01-30T23:51:02.654098Z","last_seen":"2026-02-24T07:54:41.834413Z","times_seen":1209,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/template/default/static/js/swiper-4.2.2.min.js","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4ac13876fd025fc6dd6856e705d1e2a","sha1":"c0e778fe38bc97357c0b2c4b9c1ce439daa52596","sha256":"1ddbfaeea8074f1a5f1ef55aae884c05cfdfccb36f3e83d79066d74d10e96eb2","sha512":"c047e147f52312eb9e538fcc8422375677503419e2db1f4f5ae5319efb6acd80be412ac89220a61790d9346a46473a49e0c5fd7564d5343c71f6f040835ef034","ssdeep":"1536:Tj2qhExfOYEWAGLzJgpa8K8lK9l3cMi5sVW56K7D3eMhg/jY4vHgZsUOU7eBWqTT:e2GL+4wK7yX/hgM+HgZsUOUyBWq/wFUJ","tlshash":"05d3184eb39061a551e36257525e8241a3b62409780ad0ac35b6cce7adbde4c13bfffc","size":133050,"data":"","first_seen":"2023-03-07T13:19:47Z","last_seen":"2026-04-03T15:27:37.234538Z","times_seen":12133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/t1p20250515v25766.html","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"53743946b0792e8f18ecae87538dfd44","sha1":"6ed50eb2c5983e84730109ec7cae3ad0d857ac18","sha256":"9dbaba39f60c43415fb12010e1869e8aae61c2c4cc8f838bc5e775a9ed8bd508","sha512":"8cac9a77f3d45ed3c410460fad7b4d7d718b1cdbfb6496ac27eb3a0c5a3e8e1190525359427bff1e7865f622a7e547715025695ba0dc59bac9b9d0b2cf3c9dfd","ssdeep":"","tlshash":"73800008cc20c820388888ab2a33c00bba80008a2c20c2e203ce8cca82a0fe00f80a80","size":34,"data":"","first_seen":"2025-09-11T07:51:43.939214Z","last_seen":"2026-02-24T07:54:41.838538Z","times_seen":10135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/t1p20250515v25766.html","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"53743946b0792e8f18ecae87538dfd44","sha1":"6ed50eb2c5983e84730109ec7cae3ad0d857ac18","sha256":"9dbaba39f60c43415fb12010e1869e8aae61c2c4cc8f838bc5e775a9ed8bd508","sha512":"8cac9a77f3d45ed3c410460fad7b4d7d718b1cdbfb6496ac27eb3a0c5a3e8e1190525359427bff1e7865f622a7e547715025695ba0dc59bac9b9d0b2cf3c9dfd","ssdeep":"","tlshash":"73800008cc20c820388888ab2a33c00bba80008a2c20c2e203ce8cca82a0fe00f80a80","size":34,"data":"","first_seen":"2025-09-11T07:51:43.939214Z","last_seen":"2026-02-24T07:54:41.838538Z","times_seen":10135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/t1p20250515v25766.html","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"39357708cc2707cb5e8f3c0cc0cd6bc7","sha1":"da14fce4bd6aa0240f7e2680eb6eb64286bbac68","sha256":"cd99c36227c000f27660e20d039763943d56b227356cbdf8660541ea421f0087","sha512":"964814d0504ddf8c2b658a195b6b3317114727d35b5ab0f692aadd8728ce7437740ea0a1c6821ee1fdd9651adcb15e0bd3b023a8cbc22bd408cdca3b7c30b92e","ssdeep":"","tlshash":"9101bddf9050665c06930064adfb39cce2bd0f2a8d646490e526c09115b863742ebed5","size":786,"data":"","first_seen":"2025-01-01T07:40:20.986664Z","last_seen":"2026-03-22T19:37:33.992744Z","times_seen":10734,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/t1p20250515v25766.html","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"72088bdcaeba5a0c61899d8c408fbf10","sha1":"20b0cad2d9e31c0db85cfd16c38fe18b0fa7a143","sha256":"6ee048b05a798c9c8be04249634a2f3dbf6e5272fa94c2fe6e636de3efef14c7","sha512":"9a2136644a60927dd6859499d19652080955e68ba9df4c544b50fe9a4302a8b553e1cb3314a874e537464cd6766f154258cb782e509dd5d400756fb4aa956105","ssdeep":"","tlshash":"2411cea717c4120b9ed5d898891ffd4fc06aa65c98d8cc4284032d11a7a37b606fead5","size":1029,"data":"","first_seen":"2026-01-11T01:47:46.998835Z","last_seen":"2026-03-25T10:45:38.446983Z","times_seen":1532,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/ok/splb.script?v=2026020806","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4cd249d403cd26cf7cdabbc0c04ca7aa","sha1":"6db3b27dd3186231e8c7b7e06f4bf7beea89e33d","sha256":"b9a493eb932c71ee13bb2604e0f494ea8c62b464ffe4c9fb9cf0633ba732157e","sha512":"5c3fdd14bca100f2fdbb01b7dfa78a21ae1ea3d3476261f465e57c98f64b7f3c2010ae4ecbb13559dbb2ede12b61452561aa2d1086c1ebba7ca690feea5c3b76","ssdeep":"","tlshash":"3b2100486e91a424861704611977d7fcf6a47035385ad342ccadcd093f20f72ab7addc","size":1114,"data":"","first_seen":"2026-01-30T23:51:02.577704Z","last_seen":"2026-02-24T07:54:41.816049Z","times_seen":1212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/template/default/static/js/jquery-3.6.0.min.js","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-03T21:29:41.560328Z","times_seen":444607,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/t1p20250515v25766.html","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"239d12f4199cd80d4c576014f83916c2","sha1":"976bac441610c8bec5db27c3b02c6aa3828f4cd7","sha256":"5909427e0ee7793c9eb11d4872a6089e9aaa594753e9e85822b9ec16b3130095","sha512":"1879460e0961a4a39dee3e73bf3e81ebeaf49acf5c3d316582591f1e4c4d4c040e845b4829ed44532914f0f8a3eef22db6f8dfc19f298c6b24d32fd709293434","ssdeep":"","tlshash":"25f0dcb53c88813c832602652333b259715a2929784ead14d21e18922891ca908bf80c","size":460,"data":"","first_seen":"2025-08-26T03:05:52.96285Z","last_seen":"2026-04-03T13:05:32.990829Z","times_seen":8062,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"wap.yandex.com/indexnow?url=https%3A%2F%2Fwww.qgbbzt.top%2Ft1p20250515v25766.html\u0026key=3dae21e1edb61632","fqdn":"wap.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"5.255.255.77","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:44.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yandex.tr","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 26 Aug 2025 08:03:35 GMT","end":"Mon, 23 Feb 2026 20:59:59 GMT"},"fingerprint":{"sha1":"7B:FF:02:81:48:EF:11:E9:F6:FD:BE:76:15:A5:57:2F:B5:AB:4D:B8","sha256":"CB:F2:F4:82:42:0E:5A:DA:F9:FA:58:F7:47:D8:16:57:DF:1D:5D:62:E0:76:47:38:38:20:65:93:68:B1:24:F8"}}},"request":{"raw":"GET /indexnow?url=https%3A%2F%2Fwww.qgbbzt.top%2Ft1p20250515v25766.html\u0026key=3dae21e1edb61632 HTTP/1.1\r\nHost: wap.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qgbbzt.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-xss-protection: 1; mode=block\r\nx-yandex-req-id: 1770530984689396-11191685748000692913-balancer-l7leveler-kubr-yp-vla-28-BAL\r\naccept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Sec-CH-Viewport-Width, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT, Width, Sec-Ch-Viewport-Height\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 100, \"success_fraction\": 0.001, \"failure_fraction\": 0.1}\r\nx-content-type-options: nosniff\r\nset-cookie: is_gdpr=1; Path=/; Domain=.yandex.com; Expires=Tue, 08 Feb 2028 06:09:44 GMT; SameSite=None; Secure\nis_gdpr_b=CNOIDRD58gIYAQ==; Path=/; Domain=.yandex.com; Expires=Tue, 08 Feb 2028 06:09:44 GMT; SameSite=None; Secure\n_yasc=OZlicHlFxx4lKwOt8Pu0ABFZrbejPKLY1e06acdl0Jg+9pUPVF1BpiCDx8ANmQQ=; domain=.yandex.com; path=/; expires=Wed, 06 Feb 2036 06:09:44 GMT; secure\ni=KfRiEYZy4QaNuftKyBs5TK9275I3ESnWRfpaI4z37RA0DucXfsFf0rpY8SwKzyP6GCBM1HtO3QfYWhJn3nM3iQcQZb0=; Expires=Tue, 08-Feb-2028 06:09:44 GMT; Domain=.yandex.com; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=7006929131770530984; Expires=Tue, 08-Feb-2028 06:09:44 GMT; Domain=.yandex.com; Path=/; Secure; SameSite=None\nyashr=7892735761770530984; Path=/; Domain=.yandex.com; Expires=Mon, 08 Feb 2027 06:09:44 GMT; SameSite=None; Secure; HttpOnly; Partitioned\nbh=YKjRoMwGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Mon, 15 Mar 2027 06:09:44 GMT; SameSite=None; Secure\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 100, \"endpoints\": [{\"url\": \"https://dr.yandex.net/nel\", \"priority\": 1}, {\"url\": \"https://dr2.yandex.net/nel\", \"priority\": 2}]}\r\ncontent-security-policy: default-src 'none'\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T21:31:01.969645Z","times_seen":13304312,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/ok/splb.script?v=2026020806","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:43.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qgbbzt.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 05:04:33 GMT","end":"Fri, 20 Mar 2026 06:02:08 GMT"},"fingerprint":{"sha1":"1D:0E:6E:FB:AB:08:90:F6:CF:EC:95:BC:C6:86:55:99:0E:AB:33:27","sha256":"E8:3B:D7:96:A2:8A:F9:12:38:87:06:AC:67:86:6F:F2:86:A1:B1:02:23:AF:C9:6B:76:57:13:26:85:D2:D5:5D"}}},"request":{"raw":"GET /ok/splb.script?v=2026020806 HTTP/1.1\r\nHost: www.qgbbzt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qgbbzt.top/t1p20250515v25766.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 06:09:43 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Sun, 08 Feb 2026 06:09:43 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=VYzDOAEKenITKo2F58Ln%2BPKcHb%2BAjf4%2B8b%2BGGRVkunpStU7jWzf3ehY5%2F26q6ompkRELP8kkpMkMVGSqqT6cR%2BnmPUEZyDeW%2B5srVsZeHo9XywcY8oweudPYBia7mBoKJQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9ca8f5b5d93335a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1114,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (447)","md5":"4cd249d403cd26cf7cdabbc0c04ca7aa","sha1":"6db3b27dd3186231e8c7b7e06f4bf7beea89e33d","sha256":"b9a493eb932c71ee13bb2604e0f494ea8c62b464ffe4c9fb9cf0633ba732157e","sha512":"5c3fdd14bca100f2fdbb01b7dfa78a21ae1ea3d3476261f465e57c98f64b7f3c2010ae4ecbb13559dbb2ede12b61452561aa2d1086c1ebba7ca690feea5c3b76","ssdeep":"","tlshash":"3b2100486e91a424861704611977d7fcf6a47035385ad342ccadcd093f20f72ab7addc","first_seen":"2026-01-30T23:51:02.577704Z","last_seen":"2026-02-24T07:54:41.816049Z","times_seen":1212,"resource_available":true,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"www.qgbbzt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.y-y-z-y-w-1.top/20250627/PuSZIjtl/1.jpg","fqdn":"cdn.y-y-z-y-w-1.top","domain":"y-y-z-y-w-1.top","tld":"top"},"ip":{"addr":"104.26.9.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:43.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.y-y-z-y-w-1.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 03:40:32 GMT","end":"Thu, 26 Mar 2026 04:40:27 GMT"},"fingerprint":{"sha1":"D3:5B:82:4B:C5:97:A4:4F:58:40:A0:3A:C1:12:3C:72:D5:E0:51:FD","sha256":"5D:0E:B3:92:12:5A:70:69:79:AA:E4:80:D5:BF:8F:FA:1C:A0:F3:B8:29:46:C3:4B:11:CC:1C:B5:6C:43:26:1E"}}},"request":{"raw":"GET /20250627/PuSZIjtl/1.jpg HTTP/1.1\r\nHost: cdn.y-y-z-y-w-1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qgbbzt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Feb 2026 06:09:43 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 29184\r\ncf-ray: 9ca8f5b7f9c956a3-OSL\r\nlast-modified: Sun, 31 Aug 2025 20:20:46 GMT\r\ncontent-disposition: attachment; filename=\"1.jpg\"\r\netag: \"68b4ae9e-7200\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccept-ranges: bytes\r\nage: 649919\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=bCC106TZ%2FaWkKcMkJlUdNTDIOzgVj1mgCfZV%2BU0oKeyp4zT8BFm%2Bcs1rA2nWPD%2F1BXQgEoYLuxGAZE1%2B9a9VcjuVv2jWQap4W9xu5ldWJIsp8SmzzJhRIS%2B7LFTLh7JVmEt%2Fvrg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29184,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 374x521, components 3","md5":"4d116783d2265448a862f84128935e0b","sha1":"3535c4c900a9d29d99d45540012a064b355138c6","sha256":"8a06945251403debf528f43f3dad35f76bfd866f81f1e2ec7a737bd86dcd961e","sha512":"15db81c9d316d3a25fe798fca99712389e571759d2d7dd58c5f0bbbfd252bd3ba7faa416bc501f548eeafad3741d92bddf458e3edf4433de8bf97cecc66c983b","ssdeep":"768:aDvyKpvY8sZDtbCad1NroO2iLS5PzZRQ1pJSvo:aDvyKmZDtbCajNETbZRQ51","tlshash":"67d2f1c1702449956b6fe1fb9a4c3ad282844fb13b84feac198719add7723960e4df48","first_seen":"2025-07-28T02:01:22.766879Z","last_seen":"2026-02-14T20:55:39.282523Z","times_seen":139,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/template/default/static/fonts/iconfont.woff2","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:43.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qgbbzt.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 05:04:33 GMT","end":"Fri, 20 Mar 2026 06:02:08 GMT"},"fingerprint":{"sha1":"1D:0E:6E:FB:AB:08:90:F6:CF:EC:95:BC:C6:86:55:99:0E:AB:33:27","sha256":"E8:3B:D7:96:A2:8A:F9:12:38:87:06:AC:67:86:6F:F2:86:A1:B1:02:23:AF:C9:6B:76:57:13:26:85:D2:D5:5D"}}},"request":{"raw":"GET /template/default/static/fonts/iconfont.woff2 HTTP/1.1\r\nHost: www.qgbbzt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qgbbzt.top/t1p20250515v25766.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 06:09:43 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 10876\r\ncf-ray: 9ca8f5b4affc35a6-OSL\r\nlast-modified: Mon, 19 Jan 2026 19:47:04 GMT\r\netag: \"696e8a38-2a7c\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\nage: 227009\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=PHTyIfrLg7W2u%2FohkiSOHyVx4g7SNJEdDODmM8x%2FtOpYW1z8A%2BNWoKOMLc96%2FVFko0I6SORLIJJsM2R2i9vSPJZN1PN35RuhcSGgIfrbFdU4LfsFQ7HVXFWI60jQsaOj9Q%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10876,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10876, version 1.0","md5":"5cee62397340d544c6f4409b4cdf2d34","sha1":"a20be023205adc515a20e53ad2a2eddb7f7b18bb","sha256":"2d51ecb92cd7115a3a6233235a75543e7d819e9d13c605dc3b66eeefc49b712e","sha512":"748d856e39c7f91db44334ff44f2e6c4647c3690755c1ef3009870d43ce05ae06791b3f4c8195b5cc05cf5fa91e3b8567757d39abc5e33c2b860f42a207bc105","ssdeep":"192:/vWbvjfCdev5N/GkBlCDUTMU5V9fxz0P6mw/ETEQHX2/5MQ8tGMtcNGpmquwfhKY:/IrCdU5N/bBlGUvV9tISqZm/5WtGMtcg","tlshash":"ad22b0468a3d6d689df0c07234e74a6d59dc69768a2fb8cb215371c3ade3e82c781849","first_seen":"2023-05-21T14:25:01Z","last_seen":"2026-03-26T02:20:02.125722Z","times_seen":11800,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"www.qgbbzt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/template/default/static/js/js.js","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:43.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qgbbzt.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 05:04:33 GMT","end":"Fri, 20 Mar 2026 06:02:08 GMT"},"fingerprint":{"sha1":"1D:0E:6E:FB:AB:08:90:F6:CF:EC:95:BC:C6:86:55:99:0E:AB:33:27","sha256":"E8:3B:D7:96:A2:8A:F9:12:38:87:06:AC:67:86:6F:F2:86:A1:B1:02:23:AF:C9:6B:76:57:13:26:85:D2:D5:5D"}}},"request":{"raw":"GET /template/default/static/js/js.js HTTP/1.1\r\nHost: www.qgbbzt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qgbbzt.top/t1p20250515v25766.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 06:09:43 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nlast-modified: Mon, 19 Jan 2026 19:47:04 GMT\r\netag: W/\"696e8a38-12b3\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\nage: 624515\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=1iG2rBBys49arpNZt8hWXHeitibsxCvdEHmqxUeaC%2BO4DFYy1twTlVNM7WKRRVMuwsN0EXAtejHvjBUTP7txYnnxt7b2FWwWuXr8t1w2kZYNMs1Iwoq%2BfPNcRlJ%2Fs3FrnQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9ca8f5b6ea2b35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4787,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"92ade2d512b3981f1041c2ae3e9ba05e","sha1":"eb7073f4d643633d67b1e924d8d0046b2a64207b","sha256":"0967563fe34912f4a673c6be88057d276f23c892325e91271d97c54260031627","sha512":"abe7064dd0c55c34edd7ea873c029c1dc7341f65d87766d30345d45292d3e79f9d311f1062c0c67b77790a5d37e39a9bd07a4cc929fafd1dbd5fda07f8422cf9","ssdeep":"48:QPHizsoUdDOMSZekZTMucMGk5a+zu1H+ORPiyi7i5iIp8GvyU/5/i/WBbEbs8ib/:PZUYRf589H+OR/8G99r4ReEPi","tlshash":"e7a11f4af1a535651437363a0e7f60043777808ba88dee90f84c49e08fa923c55abfda","first_seen":"2025-01-01T07:40:20.941475Z","last_seen":"2026-02-24T07:54:41.804961Z","times_seen":10893,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"www.qgbbzt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.y-y-z-y-w-1.top/20250629/JEldMXIJ/1.jpg","fqdn":"cdn.y-y-z-y-w-1.top","domain":"y-y-z-y-w-1.top","tld":"top"},"ip":{"addr":"104.26.9.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:43.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.y-y-z-y-w-1.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 03:40:32 GMT","end":"Thu, 26 Mar 2026 04:40:27 GMT"},"fingerprint":{"sha1":"D3:5B:82:4B:C5:97:A4:4F:58:40:A0:3A:C1:12:3C:72:D5:E0:51:FD","sha256":"5D:0E:B3:92:12:5A:70:69:79:AA:E4:80:D5:BF:8F:FA:1C:A0:F3:B8:29:46:C3:4B:11:CC:1C:B5:6C:43:26:1E"}}},"request":{"raw":"GET /20250629/JEldMXIJ/1.jpg HTTP/1.1\r\nHost: cdn.y-y-z-y-w-1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qgbbzt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Feb 2026 06:09:43 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 267072\r\ncf-ray: 9ca8f5b7b9b256a3-OSL\r\nlast-modified: Sun, 31 Aug 2025 20:37:28 GMT\r\ncontent-disposition: attachment; filename=\"1.jpg\"\r\netag: \"68b4b288-41340\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccept-ranges: bytes\r\nage: 621113\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=0dUUf72591ZHcmDdXESjOPqAZGcW6s4hCkV1GBePqaFgjOpqswcYwQHgfP5hZt6UJv43K%2Be4PdTaWbiqHAc4c9P%2BX7Jpu%2BO2t2HGIDZVWvjqZLA4yaT%2FN5I5vd206rL7oVCv%2FnQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":267072,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2045x2849, components 3","md5":"18a5510275784cc762cd248098be94af","sha1":"d68dc60eb824a1f5dc4b74b258ea8d71091595a5","sha256":"6bad2ef7715ac2ceb5f3ab897e61f03e4ad5ba69a6935638aac60bc7e64f38cc","sha512":"c752e4d623cf0f39a0be47cc585624dd99b75f3bfd30f496b028e57f0446002e38758ac5cdf298c38978cfa144a3f63618e8bc1dcff5cddc25f43642473c4eb5","ssdeep":"6144:J+/ChaCbFH19R3EjlAyPJ8PJsYbIGg1nG2uA:J+6HbFH19R3Ejl/hEI1wA","tlshash":"ad4412375e0c9d434b5487b14e46a6bb2a0278dd9c193f8f231dabc679383405a3e6e7","first_seen":"2026-02-01T08:02:31.015837Z","last_seen":"2026-02-13T11:17:19.89511Z","times_seen":137,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":14,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/template/default/static/css/style.css","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:43.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qgbbzt.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 05:04:33 GMT","end":"Fri, 20 Mar 2026 06:02:08 GMT"},"fingerprint":{"sha1":"1D:0E:6E:FB:AB:08:90:F6:CF:EC:95:BC:C6:86:55:99:0E:AB:33:27","sha256":"E8:3B:D7:96:A2:8A:F9:12:38:87:06:AC:67:86:6F:F2:86:A1:B1:02:23:AF:C9:6B:76:57:13:26:85:D2:D5:5D"}}},"request":{"raw":"GET /template/default/static/css/style.css HTTP/1.1\r\nHost: www.qgbbzt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qgbbzt.top/t1p20250515v25766.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 06:09:43 GMT\r\ncontent-type: text/css\r\ncontent-encoding: br\r\nlast-modified: Mon, 19 Jan 2026 19:47:04 GMT\r\netag: W/\"696e8a38-fbf5\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\nage: 270843\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=CQ9kk3fBt3BpLhgD%2BROb7GsbI%2FP4QSOrabA%2FR4DbtHkq2mzkoCJ3xo2xKBNKUTaMgdJ0N3jlMgq9xraKOcog6CHzgFt8H%2FdzX3rwVHpdSDpEN4sbYF1L5YzQA32YYeIezg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9ca8f5b4a80135a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64501,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"870483dadea9ebe3beb74daac361365f","sha1":"89df3d92ca18602160ad834c4a7ef35a2490b2b6","sha256":"afa29fae34d57515d6138145051c7b1ac2118fbf9a6e900c072e81fdb4c2e40a","sha512":"f1924d0870c2c755e2e1b78325774b9d8ca9db2b3a9c9563d2471e2d178032245686665fd55cf841335aa9735ccd8dd0e7a32fee1cec5ab1a4464b8956d182f0","ssdeep":"768:EYW8FtzzfFDzFQJ3MHrymUJFkFpFzrm5pnt0uG1U8lY4oyAgqvG:ESL3xz2J3MHKJiLprm5pnt0uG1U8mnY","tlshash":"77536361d6a3198a740fd1685fb99714237d8083890ecf6d7fde71a84f8e19894b3bc4","first_seen":"2025-11-22T01:24:25.748176Z","last_seen":"2026-02-24T07:54:41.827657Z","times_seen":3612,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"www.qgbbzt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.indexnow.org/indexnow?url=https%3A%2F%2Fwww.qgbbzt.top%2Ft1p20250515v25766.html\u0026key=3dae21e1edb61632","fqdn":"api.indexnow.org","domain":"indexnow.org","tld":"org"},"ip":{"addr":"150.171.74.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:43.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.indexnow.org","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft TLS G2 RSA CA OCSP 02","organization":"Microsoft Corporation"},"validity":{"start":"Thu, 05 Feb 2026 02:27:48 GMT","end":"Sat, 16 May 2026 01:27:48 GMT"},"fingerprint":{"sha1":"5B:41:7B:9B:D0:B3:0D:C5:AB:10:16:2A:8F:B0:F6:42:A6:70:44:6A","sha256":"EA:64:31:0B:45:C6:58:C7:FA:82:09:DE:84:9D:0A:BB:17:4E:56:BA:0F:D2:7B:80:92:3A:BF:61:F5:1B:71:54"}}},"request":{"raw":"GET /indexnow?url=https%3A%2F%2Fwww.qgbbzt.top%2Ft1p20250515v25766.html\u0026key=3dae21e1edb61632 HTTP/1.1\r\nHost: api.indexnow.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qgbbzt.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache\r\npragma: no-cache\r\nexpires: -1\r\nx-aspnet-version: 4.0.30319\r\nx-powered-by: ASP.NET\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cache: CONFIG_NOCACHE\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: A4BD4D8B051E446FB94AC1AD11F0EBAD Ref B: OSL231050215036 Ref C: 2026-02-08T06:09:43Z\r\ndate: Sun, 08 Feb 2026 06:09:43 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T21:31:01.969645Z","times_seen":13304312,"resource_available":true,"data":null}},"time_used":322,"timings":{"blocked":10,"dns":1,"connect":1,"send":0,"wait":295,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.y-y-z-y-w-1.top/20250627/yNlhafFI/1.jpg","fqdn":"cdn.y-y-z-y-w-1.top","domain":"y-y-z-y-w-1.top","tld":"top"},"ip":{"addr":"104.26.9.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:43.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.y-y-z-y-w-1.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 03:40:32 GMT","end":"Thu, 26 Mar 2026 04:40:27 GMT"},"fingerprint":{"sha1":"D3:5B:82:4B:C5:97:A4:4F:58:40:A0:3A:C1:12:3C:72:D5:E0:51:FD","sha256":"5D:0E:B3:92:12:5A:70:69:79:AA:E4:80:D5:BF:8F:FA:1C:A0:F3:B8:29:46:C3:4B:11:CC:1C:B5:6C:43:26:1E"}}},"request":{"raw":"GET /20250627/yNlhafFI/1.jpg HTTP/1.1\r\nHost: cdn.y-y-z-y-w-1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qgbbzt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Feb 2026 06:09:43 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 83168\r\ncf-ray: 9ca8f5b7b9ae56a3-OSL\r\nlast-modified: Sun, 31 Aug 2025 20:20:25 GMT\r\ncontent-disposition: attachment; filename=\"1.jpg\"\r\netag: \"68b4ae89-144e0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccept-ranges: bytes\r\nage: 111368\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ni5%2FAgE0GNLQabK0ym2gyLJ%2Bg8FpqTb3KHeeIenjXR7Mm3SrmdzGZ77GgKwen8qvImwckXo6SjDOQElKC0gD%2FERyR0N8ba6Bf3Gp0yXjOA7wS7b49IsgWkopu5Ci909NhwYBO3E%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83168,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 374x521, components 3","md5":"d22268c97b8b52d8a33613675c3f915b","sha1":"2634c298bf29ffa0e2bac9d6356b0c023ca6fb36","sha256":"1bd10925c816b178aee82aed26e6a0d13110634034dface40b8ea433650b1f5c","sha512":"8dfe36e117700e75292ea331315f4f876217e4d74c033027db9c6a153d3815ba4a28de2ce8eb90df25cf96ced4ecef8bbe70aa6c86a2e5b588a15d7e1f6205a7","ssdeep":"1536:bGjEhc+BBCSBPd6+nj3AtwOoLP76d3YFDLVPxGqbhoGtkQFGYgnfqoHu/Rd3:KmppdXncmLT++hPxGwW/fVu/b","tlshash":"1583023e69d5a7fab8fcbd66d68bea3a575d9f191e5b808180bc180334f01850f160db","first_seen":"2025-09-17T18:27:00.0504Z","last_seen":"2026-02-13T12:04:50.619639Z","times_seen":108,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":23,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.y-y-z-y-w-1.top/20250627/BgAbyIXZ/1.jpg","fqdn":"cdn.y-y-z-y-w-1.top","domain":"y-y-z-y-w-1.top","tld":"top"},"ip":{"addr":"104.26.9.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:43.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.y-y-z-y-w-1.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 03:40:32 GMT","end":"Thu, 26 Mar 2026 04:40:27 GMT"},"fingerprint":{"sha1":"D3:5B:82:4B:C5:97:A4:4F:58:40:A0:3A:C1:12:3C:72:D5:E0:51:FD","sha256":"5D:0E:B3:92:12:5A:70:69:79:AA:E4:80:D5:BF:8F:FA:1C:A0:F3:B8:29:46:C3:4B:11:CC:1C:B5:6C:43:26:1E"}}},"request":{"raw":"GET /20250627/BgAbyIXZ/1.jpg HTTP/1.1\r\nHost: cdn.y-y-z-y-w-1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qgbbzt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Feb 2026 06:09:43 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 32896\r\ncf-ray: 9ca8f5b8ca1656a3-OSL\r\nlast-modified: Sun, 31 Aug 2025 20:20:41 GMT\r\ncontent-disposition: attachment; filename=\"1.jpg\"\r\netag: \"68b4ae99-8080\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccept-ranges: bytes\r\nage: 889344\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=I3FkH0hhCXRgjpAn%2Bb0U5dGc9dNLpUTbooneAkdDTUjTjPSgzlgp8ckUsJWKBYHfmhKuf7%2FQCRC12xStn%2FqMGihCWQmlWlRa2TH73CflOU4sAg0zNQTM6tVlDpIEB4ltyWPXnpg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32896,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 374x521, components 3","md5":"4322b2b01de9c3852ebd4107d93f5712","sha1":"a0748b46decb9a36b0fb38e025017d950b293fa3","sha256":"43ccfffd6a7782365de7bbec081e7bac715f318527bd4308addf3c3fe8ddfead","sha512":"2e215f1cece99cbc34af1917aa6b9f4dd48789e159bcd0e4c9cdc2b0a70751229e688bded6a0c93370454fff8f0323dc79aedfd8af4df5c8745e819783bcba76","ssdeep":"768:aGm2IqYqDBcIrfcBhIJzt86hVFSNuxzZiCnIZiZbuZx:aMIqYJi26Jh86rHx1iLdf","tlshash":"8fe2f2177c54c20e9c4e4a7bc76b82c0f66c599d77f0209d6c9198258432204f7afdc7","first_seen":"2025-11-04T07:30:19.621195Z","last_seen":"2026-02-14T20:55:39.293127Z","times_seen":54,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/template/default/static/js/jquery-3.6.0.min.js","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:43.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qgbbzt.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 05:04:33 GMT","end":"Fri, 20 Mar 2026 06:02:08 GMT"},"fingerprint":{"sha1":"1D:0E:6E:FB:AB:08:90:F6:CF:EC:95:BC:C6:86:55:99:0E:AB:33:27","sha256":"E8:3B:D7:96:A2:8A:F9:12:38:87:06:AC:67:86:6F:F2:86:A1:B1:02:23:AF:C9:6B:76:57:13:26:85:D2:D5:5D"}}},"request":{"raw":"GET /template/default/static/js/jquery-3.6.0.min.js HTTP/1.1\r\nHost: www.qgbbzt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qgbbzt.top/t1p20250515v25766.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 06:09:43 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nlast-modified: Mon, 19 Jan 2026 19:47:04 GMT\r\netag: W/\"696e8a38-15d9d\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\nage: 79074\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=wnSi3wRSs271zC6UFIsL5YWFPPX9Zi4hvQVV59jb2iiaPugTWlRvZOwD5hnqgfv0fqG31R5uZfAY8ecz6SU3WfdB3%2B5Hk3destOfTOe8J8VlCLRz6kVgHQhNO1MIUeqN%2FA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9ca8f5b4b80235a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89501,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-03T21:29:41.560328Z","times_seen":444607,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"www.qgbbzt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/template/default/static/js/jquery.autocomplete.js","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:43.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qgbbzt.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 05:04:33 GMT","end":"Fri, 20 Mar 2026 06:02:08 GMT"},"fingerprint":{"sha1":"1D:0E:6E:FB:AB:08:90:F6:CF:EC:95:BC:C6:86:55:99:0E:AB:33:27","sha256":"E8:3B:D7:96:A2:8A:F9:12:38:87:06:AC:67:86:6F:F2:86:A1:B1:02:23:AF:C9:6B:76:57:13:26:85:D2:D5:5D"}}},"request":{"raw":"GET /template/default/static/js/jquery.autocomplete.js HTTP/1.1\r\nHost: www.qgbbzt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qgbbzt.top/t1p20250515v25766.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 06:09:43 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nlast-modified: Mon, 19 Jan 2026 19:47:04 GMT\r\netag: W/\"696e8a38-6215\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\nage: 270842\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=RdsFvZe%2BbcQ90jdgMUAs298l7wWMfAEtuMHucp7SfqdWPzwzmJxKSV8Hzeioe%2FIcqNz8siyPhkgRt0HKVKqY7bwazhQhizMmRIQHIftKrMkpfu%2FCIniBVHx9FRaNRGDv5w%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9ca8f5b4b80435a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25109,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"932466cf2976a99330383be9ffe8ca6b","sha1":"732c55aa5bbb6efb63fad871db9773139929d0e6","sha256":"22a879d897b0c6559e8a4f0e1d7f8866471478740a5b5cace3c29c97c8fdaf18","sha512":"e1ea60c13642bbc8ed8cd448007d5096c4067596b1fee2bea55f1fea765bab59f97f92fa973bdd329ccf78087be301325b14a206592a76c3699128459559159b","ssdeep":"384:EC8MJlHqBlgr2qMrLXej2Jy7fwaoSXo0TviE:Ed7Dr7OtZTqE","tlshash":"d3b2ec0979e3226292a7707e8faf0008b676a557240cdd50bd1ca7d02f54938b6f7fe9","first_seen":"2023-04-07T04:49:34Z","last_seen":"2026-04-03T21:20:26.502242Z","times_seen":19995,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"www.qgbbzt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/icon.svg","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:44.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qgbbzt.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 05:04:33 GMT","end":"Fri, 20 Mar 2026 06:02:08 GMT"},"fingerprint":{"sha1":"1D:0E:6E:FB:AB:08:90:F6:CF:EC:95:BC:C6:86:55:99:0E:AB:33:27","sha256":"E8:3B:D7:96:A2:8A:F9:12:38:87:06:AC:67:86:6F:F2:86:A1:B1:02:23:AF:C9:6B:76:57:13:26:85:D2:D5:5D"}}},"request":{"raw":"GET /icon.svg HTTP/1.1\r\nHost: www.qgbbzt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qgbbzt.top/t1p20250515v25766.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 06:09:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nage: 165544\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Fri, 06 Feb 2026 08:10:39 GMT\r\npriority: u=6,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=1%2BT%2BzsbN6A3KnNPFtjD1pPm2zWDVIKKdJKBD2SUDAa5YWMywPvxaWCTNG5fTCjqbEEUXJ3xi0yKZ4GaNvZyAyiHU13C4cfC90Hf2ezcOyke3%2FvKUuy6qPaYJlVrjtalqQA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9ca8f5bb2fbc35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":79403,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65412), with no line terminators","md5":"0d8ccd5e16a3b3ea7353dd1114c27526","sha1":"b886a48f1819604920d103a5dbdec0eeda5aaba0","sha256":"42d8e2e9b1628a7ef28ab5a189a66ad8cfca28d64a6143cb731fb0f273d964cc","sha512":"6ec4336f7c42f2f73b0c068638ea204dedbedf2663d100b79d5644d93068288ae5099b6bc13ae6bc85fa10357f7de546691abab5f97de3fc37f53ac734c92f75","ssdeep":"768:m0gTFh0JKV0WwSR0kJ0P040b0Z0NQ0BT03T0aT0n0R0k030VP0A0S0xJEyoC1cKS:SJEDqBvzZbsy/jAcI4aEcDRotgz","tlshash":"a1735223a6b5858b022d92d7dda0a3f8d113b3d8e738165bb4e64b57470af831c506be","first_seen":"2026-02-06T08:11:10.894504Z","last_seen":"2026-02-08T14:19:18.343997Z","times_seen":12,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"www.qgbbzt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/template/default/static/css/iconfont.css","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:43.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qgbbzt.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 05:04:33 GMT","end":"Fri, 20 Mar 2026 06:02:08 GMT"},"fingerprint":{"sha1":"1D:0E:6E:FB:AB:08:90:F6:CF:EC:95:BC:C6:86:55:99:0E:AB:33:27","sha256":"E8:3B:D7:96:A2:8A:F9:12:38:87:06:AC:67:86:6F:F2:86:A1:B1:02:23:AF:C9:6B:76:57:13:26:85:D2:D5:5D"}}},"request":{"raw":"GET /template/default/static/css/iconfont.css HTTP/1.1\r\nHost: www.qgbbzt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qgbbzt.top/t1p20250515v25766.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 06:09:43 GMT\r\ncontent-type: text/css\r\ncontent-encoding: br\r\nlast-modified: Mon, 19 Jan 2026 19:47:04 GMT\r\netag: W/\"696e8a38-ebe\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\nage: 624515\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=DrmEJnQrDiZ4Kj9%2FPVCJ1LnB6XWM%2F8GhVbONzNL%2Bil9bKRa2rcCm8O62%2BPz3y8StQFQjK2JGAi%2BUOU7%2Fav3spDWpwzNLSql5kWGXZH4CrfrKa0Z6QpiH7sM2EV9i6tPbtg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9ca8f5b4affb35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3774,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"ec69d21d62dbc6bd4d75e1cbf8ea7b62","sha1":"03f42de0831c304604972c0324c94943fbe6e474","sha256":"220bd2af147cba81cda216027ea5ce595506cc7ec441deec0ae82b8f3a17ee36","sha512":"27420cf9156e0b3961a47db65ad334591355d07a14102f72ef359dc4e1738075290d4b4396dc20356300d792baa0f0fbabe7174cb5e2ddce31eb5262b693ffdc","ssdeep":"","tlshash":"f971dd9099bd1cb01308d4d1234bb604ef19b2a69d864c5ff697fe8cafe33045092adc","first_seen":"2023-07-02T06:32:16Z","last_seen":"2026-02-24T07:54:41.814966Z","times_seen":11103,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"www.qgbbzt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sp0.baidu.com/9_Q4simg2RQJ8t7jm9iCKT-xh_/s.gif?l=https://www.qgbbzt.top/www.qgbbzt.top/","fqdn":"sp0.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"103.235.46.115","port":443,"asn":55967,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:43.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /9_Q4simg2RQJ8t7jm9iCKT-xh_/s.gif?l=https://www.qgbbzt.top/www.qgbbzt.top/ HTTP/1.1\r\nHost: sp0.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qgbbzt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 0\r\nContent-Type: text/plain; charset=utf-8\r\nDate: Sun, 08 Feb 2026 06:09:44 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T21:31:01.969645Z","times_seen":13304312,"resource_available":true,"data":null}},"time_used":2013,"timings":{"blocked":830,"dns":1,"connect":271,"send":0,"wait":350,"receive":0,"ssl":558},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.y-y-z-y-w-101.top/20250627/PV479mfb/1.jpg","fqdn":"cdn.y-y-z-y-w-101.top","domain":"y-y-z-y-w-101.top","tld":"top"},"ip":{"addr":"104.26.9.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:43.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.y-y-z-y-w-101.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 03:41:33 GMT","end":"Thu, 26 Mar 2026 04:41:31 GMT"},"fingerprint":{"sha1":"4C:1D:90:A8:31:19:D9:D6:45:3B:C9:76:90:A0:3F:D0:53:B8:56:4C","sha256":"3F:AA:47:32:38:7C:C6:24:C2:11:52:22:39:8D:6F:B0:42:DE:3C:12:F1:6E:83:96:2E:18:82:56:BB:71:CA:E3"}}},"request":{"raw":"GET /20250627/PV479mfb/1.jpg HTTP/1.1\r\nHost: cdn.y-y-z-y-w-101.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qgbbzt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Feb 2026 06:09:43 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 28320\r\ncf-ray: 9ca8f5b8cd87b517-OSL\r\nlast-modified: Sun, 31 Aug 2025 20:20:25 GMT\r\ncontent-disposition: attachment; filename=\"1.jpg\"\r\netag: \"68b4ae89-6ea0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccept-ranges: bytes\r\nage: 852332\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=azR6YXcLsRunAaluQPMv%2F8DbBM0dg9CrTL834brfW4iAElI5yfUOXuEk9B3f2ujWrALxN36bbehgnfoYKIuydjF2ikkB%2F3fR6xDjlF3k%2FNnPPiq5dsNnXqIrWJxSf5hfvnzs9%2F55iQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28320,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc61.3.100\", baseline, precision 8, 374x522, components 3","md5":"d4b078f789a8c7cb3a6711bdf8e51dbe","sha1":"c49a0e149d83b2a83d6e40ccb63e198a7e66d5fe","sha256":"5b962eb122fa1d0a801462fb2a4a21aa39bf4451b1f8cd89279ae8164636e3b4","sha512":"8e7a2858e45210e1ca53df638cb102a36f0b5c0fa22b8178019e59076b499667e30efdae3bd25a3bff04ea2dad25cb5edbecda6c3c9ac96ab6b3fbf99f1602bc","ssdeep":"768:wuEuWjq48uNKkeqBB/NsTmlOpS6IunAzTOceGkz:wuEuc+kPT/OiwFv8TRC","tlshash":"0cd2e0943bdbd4c94958cfb559ab256f846aec376a31732e302ec15e92243ec385064f","first_seen":"2025-11-29T06:43:31.584188Z","last_seen":"2026-02-13T10:28:17.409697Z","times_seen":103,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/ok/splb.script?v=2026020806","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:43.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qgbbzt.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 05:04:33 GMT","end":"Fri, 20 Mar 2026 06:02:08 GMT"},"fingerprint":{"sha1":"1D:0E:6E:FB:AB:08:90:F6:CF:EC:95:BC:C6:86:55:99:0E:AB:33:27","sha256":"E8:3B:D7:96:A2:8A:F9:12:38:87:06:AC:67:86:6F:F2:86:A1:B1:02:23:AF:C9:6B:76:57:13:26:85:D2:D5:5D"}}},"request":{"raw":"GET /ok/splb.script?v=2026020806 HTTP/1.1\r\nHost: www.qgbbzt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qgbbzt.top/t1p20250515v25766.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 06:09:43 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Sun, 08 Feb 2026 06:09:43 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=tSWnMNqUUxTg8ERnfCFYeNi7KQPfuZRSjhVRG%2B04YQ9Pdwaq6czStuByG%2BFTZZbBo3ZB7DHPI8iYQYpIIx4wxdAWOwbOujY2QHmm4F8zp6w%2BA4c6PySbrqm4irV%2BewTc7A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9ca8f5b6a9eb35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1114,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (447)","md5":"4cd249d403cd26cf7cdabbc0c04ca7aa","sha1":"6db3b27dd3186231e8c7b7e06f4bf7beea89e33d","sha256":"b9a493eb932c71ee13bb2604e0f494ea8c62b464ffe4c9fb9cf0633ba732157e","sha512":"5c3fdd14bca100f2fdbb01b7dfa78a21ae1ea3d3476261f465e57c98f64b7f3c2010ae4ecbb13559dbb2ede12b61452561aa2d1086c1ebba7ca690feea5c3b76","ssdeep":"","tlshash":"3b2100486e91a424861704611977d7fcf6a47035385ad342ccadcd093f20f72ab7addc","first_seen":"2026-01-30T23:51:02.577704Z","last_seen":"2026-02-24T07:54:41.816049Z","times_seen":1212,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"www.qgbbzt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/template/default/static/js/jquery.lazyloadb.js?v=123","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:43.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qgbbzt.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 05:04:33 GMT","end":"Fri, 20 Mar 2026 06:02:08 GMT"},"fingerprint":{"sha1":"1D:0E:6E:FB:AB:08:90:F6:CF:EC:95:BC:C6:86:55:99:0E:AB:33:27","sha256":"E8:3B:D7:96:A2:8A:F9:12:38:87:06:AC:67:86:6F:F2:86:A1:B1:02:23:AF:C9:6B:76:57:13:26:85:D2:D5:5D"}}},"request":{"raw":"GET /template/default/static/js/jquery.lazyloadb.js?v=123 HTTP/1.1\r\nHost: www.qgbbzt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qgbbzt.top/t1p20250515v25766.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 06:09:43 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: br\r\ncache-control: max-age=14400, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nage: 270843\r\ncf-cache-status: HIT\r\nlast-modified: Thu, 05 Feb 2026 02:55:40 GMT\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=yrpCWOkCR%2BHc0fBJJXuGIO%2FE%2FxO6Qq9jy663oIuqQFsuQFa0dj3tYDT20yzBFai%2FfZCv6O0ezLBsg27uHg8CA2DNhaRaaX2f3xZF7PITvRHfDt0w1NJWrZ1Js5SV8q1HkA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9ca8f5b4b80735a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11383,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"8f44ca4e618a576fc925e79eaafa726b","sha1":"81df654b4e412007bfe7a8809180eac7a436a182","sha256":"bb179daa61611474056bc9025edf3982f762d121a75c230852b23e2d4a9310a6","sha512":"cc567421cbab18a35587a9411cab3f3036f5aa06e244bbc81bfcb791877350b6465b8ace86589a94b50709dc916757c676114d42f8f520e13a0f4f6c87f6719d","ssdeep":"192:hRxnCNgindYz2rRUNM7vQvhzi8RUnjaCgc8QRGkeVbQi0uxxX8wg09zrPTyYRzEQ:hG0XMsd5CkvbQFqzrrRzz","tlshash":"7932a72c7da720a9a613603f5bff516870b488035407de40786ce9596fd0e3983beaf8","first_seen":"2026-02-05T15:06:38.583981Z","last_seen":"2026-02-12T03:34:57.032144Z","times_seen":15,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"www.qgbbzt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/static/picture/logo.png","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:43.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qgbbzt.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 05:04:33 GMT","end":"Fri, 20 Mar 2026 06:02:08 GMT"},"fingerprint":{"sha1":"1D:0E:6E:FB:AB:08:90:F6:CF:EC:95:BC:C6:86:55:99:0E:AB:33:27","sha256":"E8:3B:D7:96:A2:8A:F9:12:38:87:06:AC:67:86:6F:F2:86:A1:B1:02:23:AF:C9:6B:76:57:13:26:85:D2:D5:5D"}}},"request":{"raw":"GET /static/picture/logo.png HTTP/1.1\r\nHost: www.qgbbzt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qgbbzt.top/t1p20250515v25766.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 06:09:43 GMT\r\ncontent-type: image/png\r\ncf-ray: 9ca8f5b5389735a6-OSL\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"bb404a9f2b4a32bed0084965bc648351\"\r\nlast-modified: Tue, 01 Jan 2024 00:00:00 GMT\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nage: 79074\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=OOX6Kfvb7%2BxtFRYn%2BvdkeJDMZXKSrCd6DK3L%2B22rAmlrh0G04rUXFguuK%2BGphT89MkbgDCLmbrvb1DHhFNQBfmQoLu7qUZNHc1Seb1TDOHVZvTkkgp301wpXP5BxalQBLg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4241,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 100, 8-bit/color RGBA, non-interlaced","md5":"482d7f7a442644fab8cdef28458ef215","sha1":"14d4764637a755d035d4677bc6e0bc981e6b9367","sha256":"58547442dc1595246d9d4e97eb1ebce2eec8262784e7341d4bf11923fac03a8a","sha512":"36b1e45ec69a731dd25c65981855a1b753995edea00af9cabe153611cbbe98076b94b87665be77390c60cd9fe5c95c71b4e23b3655482c197959520cd2be90ba","ssdeep":"96:zQKCiDn7AFyVE3ACL7pCdCyTeeAKKsbhd6QqiX8gKn9IJqN61:EhiHAFj3Ak7pryTyPsbhd6QiLGJqN61","tlshash":"b0916eb3244dc3491a99ae022ab67784cd656d30446e42c5c9e1ff232714a331fb97c2","first_seen":"2026-02-01T00:41:33.030421Z","last_seen":"2026-02-12T03:34:57.047327Z","times_seen":29,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"www.qgbbzt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/ok/splb.script?v=2026020806","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:43.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qgbbzt.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 05:04:33 GMT","end":"Fri, 20 Mar 2026 06:02:08 GMT"},"fingerprint":{"sha1":"1D:0E:6E:FB:AB:08:90:F6:CF:EC:95:BC:C6:86:55:99:0E:AB:33:27","sha256":"E8:3B:D7:96:A2:8A:F9:12:38:87:06:AC:67:86:6F:F2:86:A1:B1:02:23:AF:C9:6B:76:57:13:26:85:D2:D5:5D"}}},"request":{"raw":"GET /ok/splb.script?v=2026020806 HTTP/1.1\r\nHost: www.qgbbzt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qgbbzt.top/t1p20250515v25766.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 06:09:43 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Sun, 08 Feb 2026 06:09:43 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=l7aqpx56ZGYl9nl38K8x%2Bmc5P0XjoOb%2BMyqB%2F4pJUQ7ylzPWdkukZyFiM9jZm5%2BF5feO1vIIwg1%2FYltYSPPGQq%2FIq7p4%2Bwl6vbmxqLDYc9HVKG4mQnvvNvWRCE6G16mrnw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9ca8f5b699d835a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1114,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (447)","md5":"4cd249d403cd26cf7cdabbc0c04ca7aa","sha1":"6db3b27dd3186231e8c7b7e06f4bf7beea89e33d","sha256":"b9a493eb932c71ee13bb2604e0f494ea8c62b464ffe4c9fb9cf0633ba732157e","sha512":"5c3fdd14bca100f2fdbb01b7dfa78a21ae1ea3d3476261f465e57c98f64b7f3c2010ae4ecbb13559dbb2ede12b61452561aa2d1086c1ebba7ca690feea5c3b76","ssdeep":"","tlshash":"3b2100486e91a424861704611977d7fcf6a47035385ad342ccadcd093f20f72ab7addc","first_seen":"2026-01-30T23:51:02.577704Z","last_seen":"2026-02-24T07:54:41.816049Z","times_seen":1212,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"www.qgbbzt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.y-y-z-y-w-100.top/20250629/ZsKFvM2m/1.jpg","fqdn":"cdn.y-y-z-y-w-100.top","domain":"y-y-z-y-w-100.top","tld":"top"},"ip":{"addr":"104.26.8.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:43.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.y-y-z-y-w-100.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 05:47:50 GMT","end":"Mon, 20 Apr 2026 06:47:44 GMT"},"fingerprint":{"sha1":"4A:39:B8:99:22:D4:7B:80:CB:A6:91:3E:6A:17:36:D0:1D:A4:B5:FC","sha256":"F0:48:F4:6E:1E:A1:24:03:09:BA:5E:D0:D5:8A:30:7F:78:06:C0:AE:16:C0:5C:94:2E:16:CA:57:51:28:8D:40"}}},"request":{"raw":"GET /20250629/ZsKFvM2m/1.jpg HTTP/1.1\r\nHost: cdn.y-y-z-y-w-100.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qgbbzt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Feb 2026 06:09:43 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 155392\r\ncf-ray: 9ca8f5b82db10b51-OSL\r\nlast-modified: Sun, 31 Aug 2025 20:36:49 GMT\r\ncontent-disposition: attachment; filename=\"1.jpg\"\r\netag: \"68b4b261-25f00\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccept-ranges: bytes\r\nage: 1855340\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=hNltRvxHFVMWtAKFVJqATlOU1LJVZMS5%2F2gmI11vz00ot41jzyN3wVXDbU28SXqSsoom6LkU%2BEN0srz6v3TJBMlMux%2By5nd5sCkRhRS2zu1ZIvYArXTC7wRjuhmWIBuxI0RtVg88qg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":155392,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1587x2212, components 3","md5":"bb5bbe57a48ecb447d1bf806d1a61e62","sha1":"a495c0dd17da996f3afdf3d031a54d7d6229f6dc","sha256":"c57faa8a8f167148f0908578710e1eb01d285decfadab9afdcae69881e3c2d5e","sha512":"5fc77f3a8ac2cca233300c3fda59fe05188a9fe86c86002fbaa9c570c612198e223ae0053e40fd3660e48f17d114e3f69dca731ef7940ef9b3424f134576b85a","ssdeep":"3072:ZvPL/0fBFORuFUn7BxvQkXuVHlJGManuaivbLEllT3Iae1bOI3++kCH962:9z/0fBFGr7jvp+1Xv4u1EHT3BCbOGCCr","tlshash":"c6e3023f780b454325a54bf8fca64ccf2731b7cefc657a8925598faf381028969589b0","first_seen":"2025-09-27T09:39:19.430778Z","last_seen":"2026-02-13T11:17:19.883341Z","times_seen":133,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":105,"dns":8,"connect":2,"send":0,"wait":23,"receive":7,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.y-y-z-y-w-101.top/20250629/J1O00RPM/1.jpg","fqdn":"cdn.y-y-z-y-w-101.top","domain":"y-y-z-y-w-101.top","tld":"top"},"ip":{"addr":"104.26.9.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:43.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.y-y-z-y-w-101.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 03:41:33 GMT","end":"Thu, 26 Mar 2026 04:41:31 GMT"},"fingerprint":{"sha1":"4C:1D:90:A8:31:19:D9:D6:45:3B:C9:76:90:A0:3F:D0:53:B8:56:4C","sha256":"3F:AA:47:32:38:7C:C6:24:C2:11:52:22:39:8D:6F:B0:42:DE:3C:12:F1:6E:83:96:2E:18:82:56:BB:71:CA:E3"}}},"request":{"raw":"GET /20250629/J1O00RPM/1.jpg HTTP/1.1\r\nHost: cdn.y-y-z-y-w-101.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qgbbzt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Feb 2026 06:09:43 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 159680\r\ncf-ray: 9ca8f5b81d31b517-OSL\r\nlast-modified: Sun, 31 Aug 2025 20:43:36 GMT\r\ncontent-disposition: attachment; filename=\"1.jpg\"\r\netag: \"68b4b3f8-26fc0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccept-ranges: bytes\r\nage: 704876\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=IsM3XspK%2F4h0MywFCqZcK8YXgRbZcVW2B3MESyNxZbvDuXRBmE8Mtno8c4WA1mKPry2IOBz%2F6PaZ0h3GUwPqXFLTvoFG9HABH6ovwlQM8c1pF3mItIPWoO%2FpL%2FuEBZ%2BxVv8eIrzN5g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":159680,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1622x2259, components 3","md5":"84d675d8bd36730007e16ed5b9eaa2ce","sha1":"60448c83c28f24a22ac7f4e829a00f11f8e28863","sha256":"306f0e977d8e35d761010cec9249e19db3cbd0999a54cf7139595e0b08143708","sha512":"5e07dfbbc0e6f0bf5553ff0bc93da206cacdbe6962ec884af572176496f2ebf17f1322705423b60723dfb3a718454f22d970eb4a1dc12140551fe21609e3654d","ssdeep":"3072:TFm0IgVB30WtlLjRZ1XlISsVosuk74UAUdukupA5P1Ne/pn200xkig6i:hm0IakWtlLjFKkUIkupA5N0/920wNxi","tlshash":"aff3024b9c06c607b472c7f9ae2acacdbb25235de6112b95aa174bcf3d306063d7d091","first_seen":"2025-11-11T19:11:30.360762Z","last_seen":"2026-02-13T11:03:07.10577Z","times_seen":167,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":76,"dns":5,"connect":1,"send":0,"wait":9,"receive":5,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.y-y-z-y-w-1.top/20250627/RBh7KNd0/1.jpg","fqdn":"cdn.y-y-z-y-w-1.top","domain":"y-y-z-y-w-1.top","tld":"top"},"ip":{"addr":"104.26.9.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:43.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.y-y-z-y-w-1.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 03:40:32 GMT","end":"Thu, 26 Mar 2026 04:40:27 GMT"},"fingerprint":{"sha1":"D3:5B:82:4B:C5:97:A4:4F:58:40:A0:3A:C1:12:3C:72:D5:E0:51:FD","sha256":"5D:0E:B3:92:12:5A:70:69:79:AA:E4:80:D5:BF:8F:FA:1C:A0:F3:B8:29:46:C3:4B:11:CC:1C:B5:6C:43:26:1E"}}},"request":{"raw":"GET /20250627/RBh7KNd0/1.jpg HTTP/1.1\r\nHost: cdn.y-y-z-y-w-1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qgbbzt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Feb 2026 06:09:43 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 101472\r\ncf-ray: 9ca8f5b7c9be56a3-OSL\r\nlast-modified: Sun, 31 Aug 2025 20:20:47 GMT\r\ncontent-disposition: attachment; filename=\"1.jpg\"\r\netag: \"68b4ae9f-18c60\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccept-ranges: bytes\r\nage: 306068\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=9cQVRpTc07fKA67uaM5MX1D%2BGiDyqh8VTjNukMSW1cbo5Qkk2ArBDJjo85qAsrzJGAdxKlTckh2XhiOsldv2i0EwBJs6u8P1ganJqyUJPKe0mKUB8aSr0mlMRvaYzqC7sC%2F%2FmP0%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101472,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 374x521, components 3","md5":"953d54a974930786e06c62ea30b94c43","sha1":"e1bad4477d981dcb0f264c08108de33e382dfd2d","sha256":"f775b0a889304ba053435eff4b051f17c11cd4515f4902c966879f02e13e13d8","sha512":"8557d3d798244de2beb512e17034b8b0c471b2e7c4101590f355bee63ed5a0bffa819e52b30e135180af40cb46819147645ab4b92fce6f8545322258af968f5c","ssdeep":"1536:FIFDwYqsBqet7LdmxT5jTYatiq3vfN/MM62BrE0updJfTN27ncgl63Wb66EVF:F6DwY1ztvdmxT1TRtb3vFZl8ZTIj6t6Q","tlshash":"4ea3123f1b2755fc7cc897d8fc1f6e2457286a2980623089d80ed936d55fa8262b49fc","first_seen":"2025-09-20T20:53:47.38771Z","last_seen":"2026-02-14T20:55:39.292021Z","times_seen":139,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":12,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/template/default/static/js/swiper-4.2.2.min.js","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:43.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qgbbzt.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 05:04:33 GMT","end":"Fri, 20 Mar 2026 06:02:08 GMT"},"fingerprint":{"sha1":"1D:0E:6E:FB:AB:08:90:F6:CF:EC:95:BC:C6:86:55:99:0E:AB:33:27","sha256":"E8:3B:D7:96:A2:8A:F9:12:38:87:06:AC:67:86:6F:F2:86:A1:B1:02:23:AF:C9:6B:76:57:13:26:85:D2:D5:5D"}}},"request":{"raw":"GET /template/default/static/js/swiper-4.2.2.min.js HTTP/1.1\r\nHost: www.qgbbzt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qgbbzt.top/t1p20250515v25766.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 06:09:43 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nlast-modified: Mon, 19 Jan 2026 19:47:04 GMT\r\netag: W/\"696e8a38-207ba\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\nage: 79074\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=b2EGNn4sQtc%2BYGJlxXSi%2FPbgaAj0Q4MQTu8kaG%2FrHi6a0ebWMT0oyCkBjccmovZWtMf%2BoBCsuuD4ArMDHyq35xyYrH9lKhxGteScW%2FJKliIhrs%2FHwWwIc76YOdUUg8%2BWxQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9ca8f5b4b80535a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":133050,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65279)","md5":"e4ac13876fd025fc6dd6856e705d1e2a","sha1":"c0e778fe38bc97357c0b2c4b9c1ce439daa52596","sha256":"1ddbfaeea8074f1a5f1ef55aae884c05cfdfccb36f3e83d79066d74d10e96eb2","sha512":"c047e147f52312eb9e538fcc8422375677503419e2db1f4f5ae5319efb6acd80be412ac89220a61790d9346a46473a49e0c5fd7564d5343c71f6f040835ef034","ssdeep":"1536:Tj2qhExfOYEWAGLzJgpa8K8lK9l3cMi5sVW56K7D3eMhg/jY4vHgZsUOU7eBWqTT:e2GL+4wK7yX/hgM+HgZsUOUyBWq/wFUJ","tlshash":"05d3184eb39061a551e36257525e8241a3b62409780ad0ac35b6cce7adbde4c13bfffc","first_seen":"2023-03-07T13:19:47Z","last_seen":"2026-04-03T15:27:37.234538Z","times_seen":12133,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"www.qgbbzt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/apple-touch-icon.png","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:44.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qgbbzt.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 05:04:33 GMT","end":"Fri, 20 Mar 2026 06:02:08 GMT"},"fingerprint":{"sha1":"1D:0E:6E:FB:AB:08:90:F6:CF:EC:95:BC:C6:86:55:99:0E:AB:33:27","sha256":"E8:3B:D7:96:A2:8A:F9:12:38:87:06:AC:67:86:6F:F2:86:A1:B1:02:23:AF:C9:6B:76:57:13:26:85:D2:D5:5D"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: www.qgbbzt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qgbbzt.top/t1p20250515v25766.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 06:09:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nage: 79074\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Sat, 07 Feb 2026 08:11:50 GMT\r\npriority: u=6,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=nD%2BgCUfl0EwzIQNHHqKWRp6RfIeR60XbFKmw7cY94zmm65UPauL2zF9i%2FSmCFTyNLJZEUiywr6zIfwPYLse8ttlGudgXG7IimfG72%2FkS63qPc0uwZ1nJE0RjcyFerpNlcw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9ca8f5bb2fb735a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":79699,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65412), with no line terminators","md5":"30d00d803a899b90da695488f07b5202","sha1":"835d828026ef9d7c1214ee83a4f669560ac20598","sha256":"7b259242102a7e5c7e8b65aff1c290ba0f411beedc11acaf066bacdccd055972","sha512":"9c4300e73a00148ea67e76e7054a2a58971b80360e622722db5595200f1a398e7d2c5c35a75ed826c21faf17b2a903b83a75da20d6db3d1ef5261b57b888ede4","ssdeep":"1536:/iTDiLQf1yubLS5XSv6OAxccbp7YOAztlH4aEm3Rotgz:NEF","tlshash":"fe736223e67444db033da2e7d9a067f9d213f2d4a635569bb4e14b6b474af830c402be","first_seen":"2026-02-07T08:12:13.201399Z","last_seen":"2026-02-08T14:19:18.359715Z","times_seen":10,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"www.qgbbzt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.y-y-z-y-w-1.top/20250629/MfBEJoU2/1.jpg","fqdn":"cdn.y-y-z-y-w-1.top","domain":"y-y-z-y-w-1.top","tld":"top"},"ip":{"addr":"104.26.9.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:43.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.y-y-z-y-w-1.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 03:40:32 GMT","end":"Thu, 26 Mar 2026 04:40:27 GMT"},"fingerprint":{"sha1":"D3:5B:82:4B:C5:97:A4:4F:58:40:A0:3A:C1:12:3C:72:D5:E0:51:FD","sha256":"5D:0E:B3:92:12:5A:70:69:79:AA:E4:80:D5:BF:8F:FA:1C:A0:F3:B8:29:46:C3:4B:11:CC:1C:B5:6C:43:26:1E"}}},"request":{"raw":"GET /20250629/MfBEJoU2/1.jpg HTTP/1.1\r\nHost: cdn.y-y-z-y-w-1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qgbbzt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Feb 2026 06:09:43 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 181760\r\ncf-ray: 9ca8f5b809d756a3-OSL\r\nlast-modified: Sun, 31 Aug 2025 20:37:00 GMT\r\ncontent-disposition: attachment; filename=\"1.jpg\"\r\netag: \"68b4b26c-2c600\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccept-ranges: bytes\r\nage: 1213193\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=SxwzXj3Xf%2FCs0LU5QOaDVIJeoaIKlBkU7COSbPlrAB7CZLZSjq6fRxJKgueG0DMFT9u0pvaofnMLrV0glBGlvPCfBagyUGF5SPkwwfRldg6E6LWSEnAzCO24EIObQZAX0f7gZrw%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":181760,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1615x2250, components 3","md5":"0ef1088e1eb2b7030f34d155ec27e820","sha1":"46930e9803c61edb29f6d2db5b3796493f5fa9ff","sha256":"5df9ec3c9635c2fa46e16fc69af2ce579fcce7cc8f81a5d277c30c1dbf26607b","sha512":"6efc68bf78be0aea7603795e3c8c430707b35c5462880702fc4c9987cb3f3e5095026f84ec3dfa2bf22bdc9dabcbfec9c5dc8b3afaa74d4f39f93febe3bedcbc","ssdeep":"3072:JmD/RU/fsR+a4apmYQIbERgfTFtchJK7NldEdcDsAw5BY0CDbiI1NTnZxyMB6PjC:JmFUne+a4adwSf6JK7buHAw2+qNTZx4C","tlshash":"45041203a187c993d03797b0dd418bcb5ce921eafe8039ef6557eeca3c902905e952b1","first_seen":"2025-11-09T05:56:20.988985Z","last_seen":"2026-02-13T12:37:52.045053Z","times_seen":63,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":71,"dns":0,"connect":5,"send":0,"wait":10,"receive":4,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.y-y-z-y-w-100.top/20250627/HAKTYYz8/1.jpg","fqdn":"cdn.y-y-z-y-w-100.top","domain":"y-y-z-y-w-100.top","tld":"top"},"ip":{"addr":"104.26.8.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:43.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.y-y-z-y-w-100.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 05:47:50 GMT","end":"Mon, 20 Apr 2026 06:47:44 GMT"},"fingerprint":{"sha1":"4A:39:B8:99:22:D4:7B:80:CB:A6:91:3E:6A:17:36:D0:1D:A4:B5:FC","sha256":"F0:48:F4:6E:1E:A1:24:03:09:BA:5E:D0:D5:8A:30:7F:78:06:C0:AE:16:C0:5C:94:2E:16:CA:57:51:28:8D:40"}}},"request":{"raw":"GET /20250627/HAKTYYz8/1.jpg HTTP/1.1\r\nHost: cdn.y-y-z-y-w-100.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qgbbzt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Feb 2026 06:09:43 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 90240\r\ncf-ray: 9ca8f5b8cdcf0b51-OSL\r\nlast-modified: Sun, 31 Aug 2025 20:20:41 GMT\r\ncontent-disposition: attachment; filename=\"1.jpg\"\r\netag: \"68b4ae99-16080\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccept-ranges: bytes\r\nage: 1033836\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=BwjEnA2bOBVHunWLoHYJIv4RgYgbJTJAivL0kzvDIbx074ZbmsWfUmZaUggmW2JpYvnEenZ7LWerZJStqA%2BXntnf4l2GR0MQy5hHICqc%2FQ%2BMvztAVoIBOgqbaPj%2F%2FdYszPbGYr%2BFeg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90240,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 374x521, components 3","md5":"9c7ec1d3f1b95ca5b24c331473aa64bb","sha1":"816487b56301fcc8d2a0339bc3c621ce5e5e253a","sha256":"852b908184a959c5d762e975a985ef5cc2a58057680dc3aefb6054ac13d79213","sha512":"f17130420ddff93266b93b9e8203437e6fc34262725413c85a8c4e63ef82ad75c34935c929cc13fd316351912f0d49598455b4ec4157147dc201422be12aa12f","ssdeep":"1536:nqcXyIUZWFY2kvsfiJSJYlqSz92mpUqNcgKjVA54qdkrftCLz7VB4v6aT//Uok:qcXyIUZWtkkQqYlt2mpUgBKjV+4qRz7v","tlshash":"c693024cdb5fb10aa51359ecc731a0978c0bdbab62932ea5e1d271f436372ed4684393","first_seen":"2025-10-07T13:10:46.915264Z","last_seen":"2026-02-13T10:28:17.424289Z","times_seen":97,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/template/default/static/css/txui.min.css","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:43.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qgbbzt.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 05:04:33 GMT","end":"Fri, 20 Mar 2026 06:02:08 GMT"},"fingerprint":{"sha1":"1D:0E:6E:FB:AB:08:90:F6:CF:EC:95:BC:C6:86:55:99:0E:AB:33:27","sha256":"E8:3B:D7:96:A2:8A:F9:12:38:87:06:AC:67:86:6F:F2:86:A1:B1:02:23:AF:C9:6B:76:57:13:26:85:D2:D5:5D"}}},"request":{"raw":"GET /template/default/static/css/txui.min.css HTTP/1.1\r\nHost: www.qgbbzt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qgbbzt.top/t1p20250515v25766.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 06:09:43 GMT\r\ncontent-type: text/css\r\ncontent-encoding: br\r\nlast-modified: Mon, 19 Jan 2026 19:47:04 GMT\r\netag: W/\"696e8a38-62a5\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\nage: 270843\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=pjpvsUCu2i55vI4ClJniMW%2BpciWpbNzsejFbgC%2BQcHq%2BvfgtMeNedaeahFQkdrEKI9bhZNJfYQvQTIiLFI0u5zgVJ982PjJihSD1UGOEURpyE3LjON5D%2BU%2BbiGbk06%2BenA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9ca8f5b4a80035a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25253,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"a1333d6e3bd1a4daed91c4dc4507935f","sha1":"c2886ac7c8d707bd6a764aac3225133315bde2b0","sha256":"fbb85f8d2bfaa8cad9c2ff625e42bc253ca9d4a52c6521fa09cc5faa3018c918","sha512":"082dc55c0d3e93ee53a7277d082200b2ebae3447a68a87dc8f9423e81546601ec18c1286764b3f0d9aee390383a7618fd5a2d1739c79e3dc7699012aea872616","ssdeep":"192:3za71Ub7MGYZYbA4BtsQgLNciAb40wCC2p0izVzkZKMc69V2qc3VF8Ty62on5lIg:3c1/qCQoNciAb4DCCG0wA9VDTWo","tlshash":"d1b232669f122808801f89d8df596ba98f7544a35f4f4eebe8917c28c3cd95404b3ede","first_seen":"2024-10-21T04:32:00.804369Z","last_seen":"2026-02-24T07:54:41.8133Z","times_seen":11016,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"www.qgbbzt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/ok/splb.script?v=2026020806","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:43.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qgbbzt.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 05:04:33 GMT","end":"Fri, 20 Mar 2026 06:02:08 GMT"},"fingerprint":{"sha1":"1D:0E:6E:FB:AB:08:90:F6:CF:EC:95:BC:C6:86:55:99:0E:AB:33:27","sha256":"E8:3B:D7:96:A2:8A:F9:12:38:87:06:AC:67:86:6F:F2:86:A1:B1:02:23:AF:C9:6B:76:57:13:26:85:D2:D5:5D"}}},"request":{"raw":"GET /ok/splb.script?v=2026020806 HTTP/1.1\r\nHost: www.qgbbzt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qgbbzt.top/t1p20250515v25766.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 06:09:43 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Sun, 08 Feb 2026 06:09:43 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=KZyKlspIPqdwNh611%2BIBOD2ePu3dNPcBFwntLfi16fZ2Mjseq6k1TTjmKK0fjWcuS%2FA5ehyrDMQiGVjvGtpLa6Mc0bETG4d0GbxDDqNOrOUXnqe988NkBvTYOsPqiTQ8nQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9ca8f5b5d93735a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1114,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (447)","md5":"4cd249d403cd26cf7cdabbc0c04ca7aa","sha1":"6db3b27dd3186231e8c7b7e06f4bf7beea89e33d","sha256":"b9a493eb932c71ee13bb2604e0f494ea8c62b464ffe4c9fb9cf0633ba732157e","sha512":"5c3fdd14bca100f2fdbb01b7dfa78a21ae1ea3d3476261f465e57c98f64b7f3c2010ae4ecbb13559dbb2ede12b61452561aa2d1086c1ebba7ca690feea5c3b76","ssdeep":"","tlshash":"3b2100486e91a424861704611977d7fcf6a47035385ad342ccadcd093f20f72ab7addc","first_seen":"2026-01-30T23:51:02.577704Z","last_seen":"2026-02-24T07:54:41.816049Z","times_seen":1212,"resource_available":true,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"www.qgbbzt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.y-y-z-y-w-1.top/20250629/pyXTrLMw/1.jpg","fqdn":"cdn.y-y-z-y-w-1.top","domain":"y-y-z-y-w-1.top","tld":"top"},"ip":{"addr":"104.26.9.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:43.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.y-y-z-y-w-1.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 03:40:32 GMT","end":"Thu, 26 Mar 2026 04:40:27 GMT"},"fingerprint":{"sha1":"D3:5B:82:4B:C5:97:A4:4F:58:40:A0:3A:C1:12:3C:72:D5:E0:51:FD","sha256":"5D:0E:B3:92:12:5A:70:69:79:AA:E4:80:D5:BF:8F:FA:1C:A0:F3:B8:29:46:C3:4B:11:CC:1C:B5:6C:43:26:1E"}}},"request":{"raw":"GET /20250629/pyXTrLMw/1.jpg HTTP/1.1\r\nHost: cdn.y-y-z-y-w-1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qgbbzt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Feb 2026 06:09:43 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 33760\r\ncf-ray: 9ca8f5b7a9ad56a3-OSL\r\nlast-modified: Sun, 31 Aug 2025 20:36:59 GMT\r\ncontent-disposition: attachment; filename=\"1.jpg\"\r\netag: \"68b4b26b-83e0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccept-ranges: bytes\r\nage: 884107\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=73%2B%2F%2BkA1f1lp4jadxYSto86U3b78hUCd9ZeCSM00wtLYn7Za2gZoLCIUVEKYUn4pDrXr0FMgs4BT6hu%2FQZvuHmYkAJUB%2FeI%2Fop%2Bg4x1CzhvMu5UnlVzNIM5ja1m%2BXhD5KHycRkc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33760,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 374x521, components 3","md5":"ebbccb8b0d98d66a1405a5f08e5613f6","sha1":"58081b6dd7eb80d4ac7b6c5fdd634d2a30f86b85","sha256":"e14f13739e467b297226c008f797ac0a48d8a80796ad86b1314a0f15e30aabec","sha512":"063568b2e2c38b04e216a0ea9dad2c3aca36e432f3aed92aaa4f050fe6767bfc48417456473066bd5e428242560a0d512d10cd17304f32a7f5794c1b0183b68b","ssdeep":"768:aieoyJxcuLJezdAsuCOyzctPWij+82xjkLgbfW0mAPJHPdwjKLAwJ:aayfXL/TC+WD82xygbe0mAPJvlLAe","tlshash":"8ee2e1a47e21f2079ea3d2b865b25606114fc6fbbe062dae4f061fc3d7bc41615ac385","first_seen":"2026-02-01T06:16:21.90202Z","last_seen":"2026-02-13T12:37:52.068244Z","times_seen":43,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":47,"dns":1,"connect":1,"send":0,"wait":22,"receive":3,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.y-y-z-y-w-101.top/20250629/VLRewhcc/1.jpg","fqdn":"cdn.y-y-z-y-w-101.top","domain":"y-y-z-y-w-101.top","tld":"top"},"ip":{"addr":"104.26.9.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:43.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.y-y-z-y-w-101.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 03:41:33 GMT","end":"Thu, 26 Mar 2026 04:41:31 GMT"},"fingerprint":{"sha1":"4C:1D:90:A8:31:19:D9:D6:45:3B:C9:76:90:A0:3F:D0:53:B8:56:4C","sha256":"3F:AA:47:32:38:7C:C6:24:C2:11:52:22:39:8D:6F:B0:42:DE:3C:12:F1:6E:83:96:2E:18:82:56:BB:71:CA:E3"}}},"request":{"raw":"GET /20250629/VLRewhcc/1.jpg HTTP/1.1\r\nHost: cdn.y-y-z-y-w-101.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qgbbzt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Feb 2026 06:09:43 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 23040\r\ncf-ray: 9ca8f5b7cd17b517-OSL\r\nlast-modified: Sun, 31 Aug 2025 20:37:39 GMT\r\ncontent-disposition: attachment; filename=\"1.jpg\"\r\netag: \"68b4b293-5a00\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccept-ranges: bytes\r\nage: 2624151\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=vAc1%2FiAgHWJNKK4ffitBpZWmHoFAPg%2Bk4UlLRq4VHYeQt%2BmsN3TZrNwSGdqN08%2BqIdUk5cUWgvfDVLKcKR5Bxv5%2BuXAbqfcXcZSQ0HCZw4vAjyQ4UPyqlCPyIcViB%2FUI%2Fh%2FS6uVhJg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23040,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 374x521, components 3","md5":"2dd8d045a88f58b38defb0bdbfe5d44c","sha1":"b7b072e2ad3bece13cc7bdacd21c1942a40726a3","sha256":"fccbb4e5b43978abb4503e74ee359219a43e474f586ac820c8e622f645c5bffb","sha512":"e5411ebb9df6fdc8c5d1e570bc0148994e1a08afe0f5668514e480a7ec0066941ba9672f57e76c0d0276887d2e25d1da58844269eac7e25ee229301a025850e2","ssdeep":"384:anBGGlebbtTf7s3PdbSWZGKXEmIK4RQESlPGFwsJIyu751cI/YxwFf:an/GbVkAKU7BM0JIrrcIowFf","tlshash":"f4a2f16db3c223c3da13d1718d11d3f010d6edc6a184be2e9399250ee9c50b257af30a","first_seen":"2025-07-27T03:24:39.798262Z","last_seen":"2026-02-13T11:17:19.89444Z","times_seen":39,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":54,"dns":1,"connect":1,"send":0,"wait":41,"receive":1,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/ok/dingbu.script?v=2026020806","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:43.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qgbbzt.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 05:04:33 GMT","end":"Fri, 20 Mar 2026 06:02:08 GMT"},"fingerprint":{"sha1":"1D:0E:6E:FB:AB:08:90:F6:CF:EC:95:BC:C6:86:55:99:0E:AB:33:27","sha256":"E8:3B:D7:96:A2:8A:F9:12:38:87:06:AC:67:86:6F:F2:86:A1:B1:02:23:AF:C9:6B:76:57:13:26:85:D2:D5:5D"}}},"request":{"raw":"GET /ok/dingbu.script?v=2026020806 HTTP/1.1\r\nHost: www.qgbbzt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qgbbzt.top/t1p20250515v25766.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 06:09:43 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sun, 08 Feb 2026 06:09:43 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=gDXQivq1pWzgIyxw418vVGo4VoIJhJRdbYXJjaAURcNCDc2kJxO68noUpybdA5rmA5JBOxRxtZEVl8ZAMa3c5irU60ukaHZ%2F0tQ43PGdurtnC8ppw2p9kfWfdYaNr1Uq7Q%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9ca8f5b578d235a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":779,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (338)","md5":"a0d81f78d9516f85c920498d0db6785b","sha1":"1e4be6fc2cd087aa2ad11b80baf3cc6f374e639a","sha256":"2d3c90b3e4f966c8fe85e9d370a03cb105caabfd319a63b17d6f0a1efd1f3113","sha512":"5414cce76e4c494418dcd33c31f1ad5db689c059acf820195a96946b3db75a166e3aa05dd0685cd2d6ce9acff543bc506623ae7b089ecd611d38554889821c75","ssdeep":"","tlshash":"f201f18c1cc27438995608322976e5bc76341124364ec2029c1cd8182f607a55a76dcc","first_seen":"2026-01-30T23:51:02.634911Z","last_seen":"2026-02-24T07:54:41.817345Z","times_seen":1212,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"www.qgbbzt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/ok/dingbuwenzi.script?v=2026020806","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:43.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qgbbzt.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 05:04:33 GMT","end":"Fri, 20 Mar 2026 06:02:08 GMT"},"fingerprint":{"sha1":"1D:0E:6E:FB:AB:08:90:F6:CF:EC:95:BC:C6:86:55:99:0E:AB:33:27","sha256":"E8:3B:D7:96:A2:8A:F9:12:38:87:06:AC:67:86:6F:F2:86:A1:B1:02:23:AF:C9:6B:76:57:13:26:85:D2:D5:5D"}}},"request":{"raw":"GET /ok/dingbuwenzi.script?v=2026020806 HTTP/1.1\r\nHost: www.qgbbzt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qgbbzt.top/t1p20250515v25766.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 06:09:43 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sun, 08 Feb 2026 06:09:43 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=BO%2FolMj9eYak1FigV%2FMHes%2Fvb6jIC0eoa0kfg6vmi%2FPCWdp3DujXoh4We4d91tc2oSGRsyYBksd%2B%2Fjd25VaTin4OYTpMzdFpGNJWh3cye0w6yaRcCxikbcrZUUg%2B7Lnalg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9ca8f5b578da35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1778,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1281)","md5":"aff4788e0045155386f48bb57d7d0b0b","sha1":"dfb23d28fc23dc5354ab56b60f98030e890ae24b","sha256":"2c22a93400db6211d7cad0febaa598a9bffd088172bc5a6bbe321ef8408fc11a","sha512":"5f24aecb726805793a4ba26305d21d3d3b5a764db7f3fcf74735d0a096a3d51463547d98b7664a0c8cfdd5b22a38505131f66b192d90cad4b1b2404d2dba95e2","ssdeep":"","tlshash":"9c310ccae5425b3d0ec35e2129a7fafdd3e0b0b62d4b92839c24cc0c56056666926ee5","first_seen":"2026-01-30T23:51:02.654098Z","last_seen":"2026-02-24T07:54:41.834413Z","times_seen":1209,"resource_available":true,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":363,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"www.qgbbzt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/ok/zhongjian.script?v=2026020806","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:43.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qgbbzt.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 05:04:33 GMT","end":"Fri, 20 Mar 2026 06:02:08 GMT"},"fingerprint":{"sha1":"1D:0E:6E:FB:AB:08:90:F6:CF:EC:95:BC:C6:86:55:99:0E:AB:33:27","sha256":"E8:3B:D7:96:A2:8A:F9:12:38:87:06:AC:67:86:6F:F2:86:A1:B1:02:23:AF:C9:6B:76:57:13:26:85:D2:D5:5D"}}},"request":{"raw":"GET /ok/zhongjian.script?v=2026020806 HTTP/1.1\r\nHost: www.qgbbzt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qgbbzt.top/t1p20250515v25766.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 06:09:43 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sun, 08 Feb 2026 06:09:43 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4Y%2Ffk0EK3y35J%2Bt4COh60ksEB2KL9GLg3U96CaUuqnoI7rjVRHd7sBayWFkbRFxe0UKdeEmfJTPml2tuRGtPyzbcZulpcXzF10xcZOH5WUuy7O9ptkwPuf1pUb0zArZq8Q%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9ca8f5b588df35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1378,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"535552634dc35d3b30dcb253cb0444b8","sha1":"b2937f2990c8a32a0665ac0ab8963f68ca6a48ce","sha256":"904cd7672abec95750e1e55fcfd8d654053587ac980c43dc5a21ad4ea3ee4216","sha512":"ea2d9de7f7dc3dbec96126dd958bfb76a40b29e0050cb9b86a18ec6255f7d9e708a4fc0be45915ef755891b7525a13319825e80fb6586884cc0908da0612b657","ssdeep":"","tlshash":"1921011d2ca40534e607046ba7bbe2bc76223106374bd711bd9e9c496f90fa446b69dc","first_seen":"2026-02-05T17:03:24.712106Z","last_seen":"2026-02-24T07:54:41.815522Z","times_seen":686,"resource_available":true,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"www.qgbbzt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/ok/splb.script?v=2026020806","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:43.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qgbbzt.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 05:04:33 GMT","end":"Fri, 20 Mar 2026 06:02:08 GMT"},"fingerprint":{"sha1":"1D:0E:6E:FB:AB:08:90:F6:CF:EC:95:BC:C6:86:55:99:0E:AB:33:27","sha256":"E8:3B:D7:96:A2:8A:F9:12:38:87:06:AC:67:86:6F:F2:86:A1:B1:02:23:AF:C9:6B:76:57:13:26:85:D2:D5:5D"}}},"request":{"raw":"GET /ok/splb.script?v=2026020806 HTTP/1.1\r\nHost: www.qgbbzt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qgbbzt.top/t1p20250515v25766.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 06:09:43 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sun, 08 Feb 2026 06:09:43 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=K7ivE2GuZTTWG7jpo0ZWBb4oaBpU6qg%2Fo959KCENyKh3HCXclvyP2aAbFdC%2Bak3HoJBNkviJkkzoI1%2Bb2zgIzf9dIr%2F5zwcBHY4m2PZ85INDRHCc8Uhm1EWlFIP3cIw1Uw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9ca8f5b588ea35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1114,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (447)","md5":"4cd249d403cd26cf7cdabbc0c04ca7aa","sha1":"6db3b27dd3186231e8c7b7e06f4bf7beea89e33d","sha256":"b9a493eb932c71ee13bb2604e0f494ea8c62b464ffe4c9fb9cf0633ba732157e","sha512":"5c3fdd14bca100f2fdbb01b7dfa78a21ae1ea3d3476261f465e57c98f64b7f3c2010ae4ecbb13559dbb2ede12b61452561aa2d1086c1ebba7ca690feea5c3b76","ssdeep":"","tlshash":"3b2100486e91a424861704611977d7fcf6a47035385ad342ccadcd093f20f72ab7addc","first_seen":"2026-01-30T23:51:02.577704Z","last_seen":"2026-02-24T07:54:41.816049Z","times_seen":1212,"resource_available":true,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":343,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"www.qgbbzt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/ok/splb.script?v=2026020806","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:43.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qgbbzt.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 05:04:33 GMT","end":"Fri, 20 Mar 2026 06:02:08 GMT"},"fingerprint":{"sha1":"1D:0E:6E:FB:AB:08:90:F6:CF:EC:95:BC:C6:86:55:99:0E:AB:33:27","sha256":"E8:3B:D7:96:A2:8A:F9:12:38:87:06:AC:67:86:6F:F2:86:A1:B1:02:23:AF:C9:6B:76:57:13:26:85:D2:D5:5D"}}},"request":{"raw":"GET /ok/splb.script?v=2026020806 HTTP/1.1\r\nHost: www.qgbbzt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qgbbzt.top/t1p20250515v25766.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 06:09:43 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Sun, 08 Feb 2026 06:09:43 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=6qQLU6NrnqeiBYF6T0vbRXp7WtrjSaeY3IgjqGHvJ7vH1aJBweK5vIZ2FTP66kDf6iLn7xmS9d29oGe%2FUgqS9eLGHevw%2FHL4lfbPV%2FklLEXuYMKGnj0LRbhXj9COm4g3Nw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9ca8f5b689d535a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1114,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (447)","md5":"4cd249d403cd26cf7cdabbc0c04ca7aa","sha1":"6db3b27dd3186231e8c7b7e06f4bf7beea89e33d","sha256":"b9a493eb932c71ee13bb2604e0f494ea8c62b464ffe4c9fb9cf0633ba732157e","sha512":"5c3fdd14bca100f2fdbb01b7dfa78a21ae1ea3d3476261f465e57c98f64b7f3c2010ae4ecbb13559dbb2ede12b61452561aa2d1086c1ebba7ca690feea5c3b76","ssdeep":"","tlshash":"3b2100486e91a424861704611977d7fcf6a47035385ad342ccadcd093f20f72ab7addc","first_seen":"2026-01-30T23:51:02.577704Z","last_seen":"2026-02-24T07:54:41.816049Z","times_seen":1212,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"www.qgbbzt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.y-y-z-y-w-1.top/20250629/CcrMMwKU/1.jpg","fqdn":"cdn.y-y-z-y-w-1.top","domain":"y-y-z-y-w-1.top","tld":"top"},"ip":{"addr":"104.26.9.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:43.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.y-y-z-y-w-1.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 03:40:32 GMT","end":"Thu, 26 Mar 2026 04:40:27 GMT"},"fingerprint":{"sha1":"D3:5B:82:4B:C5:97:A4:4F:58:40:A0:3A:C1:12:3C:72:D5:E0:51:FD","sha256":"5D:0E:B3:92:12:5A:70:69:79:AA:E4:80:D5:BF:8F:FA:1C:A0:F3:B8:29:46:C3:4B:11:CC:1C:B5:6C:43:26:1E"}}},"request":{"raw":"GET /20250629/CcrMMwKU/1.jpg HTTP/1.1\r\nHost: cdn.y-y-z-y-w-1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qgbbzt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Feb 2026 06:09:43 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 177952\r\ncf-ray: 9ca8f5b7b9b356a3-OSL\r\nlast-modified: Sun, 31 Aug 2025 20:37:06 GMT\r\ncontent-disposition: attachment; filename=\"1.jpg\"\r\netag: \"68b4b272-2b720\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccept-ranges: bytes\r\nage: 1372589\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2BKB1a2iXsp8M3pJn50PN02Jq07P8MWcEJeRxY78ulfLQ5OtbmrjTO3XW%2BgpqTOO4YZ6k%2BNOWDdeG9hB2yCVUbCJ046FnX668VLjrxssu7uOHb%2FRQAuQXCvL%2FfvDiIOjEGY0IM9k%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":177952,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1731x2412, components 3","md5":"25a6495c9fde4dd5c011124380cd8729","sha1":"ab297a5b58c0631d8029f759b715f27c58215b82","sha256":"35ac66c98156a5dc81a0d147dc4ce499f4179ba9ae2eb103139b473f237a252b","sha512":"ddcf343401158e6257a5ae68cfdba42eb1abeb70c1253543244a5720648a7f47fe3c840157a4d8877853c38b31417019fc6e627a22d8d2e621fa9847525a66f1","ssdeep":"3072:8+7OdwvntMCbwEzg4eTQWobn+sv4td0+eIHud+ec1TIL6cU:HOwvtMCbOlQWS+svc5e24cqL/U","tlshash":"54041267aa4ac02740715fe73bd286dd2b423f0e2955216f5206dfc33c783491e9a1b7","first_seen":"2025-08-26T12:15:55.793899Z","last_seen":"2026-02-13T07:46:07.900728Z","times_seen":130,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":17,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/static/img/6507dd601b9dd.gif","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:43.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qgbbzt.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 05:04:33 GMT","end":"Fri, 20 Mar 2026 06:02:08 GMT"},"fingerprint":{"sha1":"1D:0E:6E:FB:AB:08:90:F6:CF:EC:95:BC:C6:86:55:99:0E:AB:33:27","sha256":"E8:3B:D7:96:A2:8A:F9:12:38:87:06:AC:67:86:6F:F2:86:A1:B1:02:23:AF:C9:6B:76:57:13:26:85:D2:D5:5D"}}},"request":{"raw":"GET /static/img/6507dd601b9dd.gif HTTP/1.1\r\nHost: www.qgbbzt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qgbbzt.top/t1p20250515v25766.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 06:09:43 GMT\r\ncontent-type: image/gif\r\ncontent-length: 57485\r\ncf-ray: 9ca8f5b6b9f735a6-OSL\r\nlast-modified: Sat, 13 Dec 2025 05:54:54 GMT\r\netag: \"693cffae-e08d\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\nage: 270841\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=rzfSURsk4OAcTr8hkm8gNJMI5FXztilrSPewSXpfnBZ0CEsXoimgqP%2B7BAnQoQVMIMCtqnaoneucexXpWySL0TfZnSUk6sBw%2Bv1eR24r%2FC5mhNS8F1P6x4la7al7aYw2AQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57485,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 720 x 300","md5":"bf770e88499939ea4929893e8e2bed98","sha1":"f424e14d2832cd8a3e6dd5b2d9f7a2bb1d6a112e","sha256":"642abdfaf18dd24429a77a9e41ec058b0f2343188018e48932932b693aba0a21","sha512":"5de5180e51082f5d20e9a1ff3b1d9bc0bf66f49a56d65bf94f820fcd07241e92dc211aafdd0c5dd6e1895e1b626b65fcbc57365ae1e478c04a342e99d5d7e150","ssdeep":"1536:8bplow377DYmh0EIIJRHC6GfyikTgUrrCP69hwBdtm:8bvowF0ExJRHC6xik/adtm","tlshash":"5b4302cb8d3f0d1899f125c0d7b905c40f5a0be6a987394b59f0ef4a0e77a5183e9b89","first_seen":"2025-01-01T07:40:20.956218Z","last_seen":"2026-04-03T13:05:32.960452Z","times_seen":9385,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"www.qgbbzt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/template/default/static/picture/loading.gif","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:43.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qgbbzt.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 05:04:33 GMT","end":"Fri, 20 Mar 2026 06:02:08 GMT"},"fingerprint":{"sha1":"1D:0E:6E:FB:AB:08:90:F6:CF:EC:95:BC:C6:86:55:99:0E:AB:33:27","sha256":"E8:3B:D7:96:A2:8A:F9:12:38:87:06:AC:67:86:6F:F2:86:A1:B1:02:23:AF:C9:6B:76:57:13:26:85:D2:D5:5D"}}},"request":{"raw":"GET /template/default/static/picture/loading.gif HTTP/1.1\r\nHost: www.qgbbzt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qgbbzt.top/t1p20250515v25766.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 06:09:43 GMT\r\ncontent-type: image/gif\r\ncontent-length: 15873\r\ncf-ray: 9ca8f5b558bb35a6-OSL\r\nlast-modified: Mon, 19 Jan 2026 19:47:04 GMT\r\netag: \"696e8a38-3e01\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\nage: 270843\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=pwGHQocASiCWUZOQGovlj1WWKMusAUriZbJw%2FLUcasD4yse4MYOB55o%2FoxCwoo0NdC5jXWgJMcVLOqcCBVtBuao2mOqE97%2BY6%2F7ARANt2W2HuQU0AjHDIcWSrxy9PN1dpg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15873,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 800 x 600","md5":"7ed3da4fbf6941781ef05ad3b49abaec","sha1":"b3b65779da06d65f43167becec0f629a55cf44da","sha256":"7f30ca2bf5348a02a4555e5dcc2b2f4a465115f54e01fc677525310d309993c6","sha512":"369fac6687ffc83abba516b827f570dd7ef113bd1963a515a6eec89dfa6d8a3786d541cedf5df17a4789698fbde58a4700e279d25b4d573e08363e1bfbce2cc1","ssdeep":"192:cBbHTF2gTX3b/mHTNYm9clfX1VN7x6eXcnQCoMCE0+wgcW6qEqMgo8tWcUWacxoM:cBbHTF2saHxjG9V3XqoMcCIqeFJJp6","tlshash":"c362ae8eb3350cdda52930707f6fb6170ca485c888b2fdbb0698ba1ad3c546d04c9b95","first_seen":"2024-08-20T05:52:13.167156Z","last_seen":"2026-02-24T07:54:41.811016Z","times_seen":2399,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"www.qgbbzt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/t1p20250515v25766.html","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-08T06:09:42.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qgbbzt.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 05:04:33 GMT","end":"Fri, 20 Mar 2026 06:02:08 GMT"},"fingerprint":{"sha1":"1D:0E:6E:FB:AB:08:90:F6:CF:EC:95:BC:C6:86:55:99:0E:AB:33:27","sha256":"E8:3B:D7:96:A2:8A:F9:12:38:87:06:AC:67:86:6F:F2:86:A1:B1:02:23:AF:C9:6B:76:57:13:26:85:D2:D5:5D"}}},"request":{"raw":"GET /t1p20250515v25766.html HTTP/1.1\r\nHost: www.qgbbzt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Feb 2026 06:09:42 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sun, 08 Feb 2026 06:09:42 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=E%2Bcy9tKi%2BWsnc2MX%2FsRzp3rO6%2Fv30NCak37Tq7oyEhvolr3N61ox0rtByO9wW8eOMYhxScoFAI9sfuewswjvt3QyotVmn6uQ%2BQR%2FZYImAztWA7HJ17IWNMQo8YGG7hHY5A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9ca8f5b1098e56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":79283,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65412), with no line terminators","md5":"29930604b9e322ed9e32df332c6135ed","sha1":"bb821e6d1ece65337e4ebf5e3e055a97ebc34b79","sha256":"a6850f362af171e456160333130da893d87bf5825f43e1ffe6401ce1f0d9441d","sha512":"10ba3a06965244aa5abfccc6f457e39c8c45fc57962401cd256f0ea9a3f232380ea5eaa0c43921613a3118ce68225caaa09e84017f67a946d9ffac4edd09eeec","ssdeep":"1536:e2GKkDXeMfcAKfem0mnyQs+WqdQnwhtQ4aEkLRotgz:vaF","tlshash":"9e734023ab74859b422da2d7d9a067fcc113b3d8e634166bb4d18b66474afd30c406bf","first_seen":"2026-02-08T06:10:08.513672Z","last_seen":"2026-02-08T06:10:08.513672Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1011,"timings":{"blocked":290,"dns":272,"connect":1,"send":0,"wait":430,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"www.qgbbzt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.y-y-z-y-w-1.top/20250627/8v8Zba83/1.jpg","fqdn":"cdn.y-y-z-y-w-1.top","domain":"y-y-z-y-w-1.top","tld":"top"},"ip":{"addr":"104.26.9.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:43.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.y-y-z-y-w-1.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 03:40:32 GMT","end":"Thu, 26 Mar 2026 04:40:27 GMT"},"fingerprint":{"sha1":"D3:5B:82:4B:C5:97:A4:4F:58:40:A0:3A:C1:12:3C:72:D5:E0:51:FD","sha256":"5D:0E:B3:92:12:5A:70:69:79:AA:E4:80:D5:BF:8F:FA:1C:A0:F3:B8:29:46:C3:4B:11:CC:1C:B5:6C:43:26:1E"}}},"request":{"raw":"GET /20250627/8v8Zba83/1.jpg HTTP/1.1\r\nHost: cdn.y-y-z-y-w-1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qgbbzt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Feb 2026 06:09:43 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 214720\r\ncf-ray: 9ca8f5b829dd56a3-OSL\r\nlast-modified: Sun, 31 Aug 2025 20:20:25 GMT\r\ncontent-disposition: attachment; filename=\"1.jpg\"\r\netag: \"68b4ae89-346c0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccept-ranges: bytes\r\nage: 712371\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=27JT%2B90zhnFyeBJtOghESpe4DOFLjFQirNEQ7u0bZIALq92IHZMEf4qrG4zf9MGoCeww%2BsaYQBAWGewzpMn1Y9EjuGS1ESJtd269eJ%2BBSybEKSDlOSxGlY1MppeF3iZEpbK0mN8%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":214720,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1862x2595, components 3","md5":"0ea67850f0b939158a1711386f5e424d","sha1":"a992f4ebb0beb8465960a7d6a71e9fd638a275c0","sha256":"7bbfdf0b2bc59d174be5e468630db9abdde27b2c6137ff27d1b0128605b4505a","sha512":"e84896554d012974a798e112fea84c565d1028c275d80a956167d73311a180f4d6993d59605f8f599e26c6b002317aadd378385dfbf67d1d153ed7ec11ce71ea","ssdeep":"6144:8E7AN6dP9wfl1lDX03ZDxcSBptx0LK6fV/0:L0N6dP9aX03ZDxpB9ApfV/0","tlshash":"d9241293b8530b579572e7bafb0a80d78e760a8dd60338ef3507dba7943842441de297","first_seen":"2026-01-18T05:16:00.620182Z","last_seen":"2026-02-14T20:55:39.297976Z","times_seen":61,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandex.com/indexnow?url=https%3A%2F%2Fwww.qgbbzt.top%2Ft1p20250515v25766.html\u0026key=3dae21e1edb61632","fqdn":"yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"5.255.255.77","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:44.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yandex.tr","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 26 Aug 2025 08:03:35 GMT","end":"Mon, 23 Feb 2026 20:59:59 GMT"},"fingerprint":{"sha1":"7B:FF:02:81:48:EF:11:E9:F6:FD:BE:76:15:A5:57:2F:B5:AB:4D:B8","sha256":"CB:F2:F4:82:42:0E:5A:DA:F9:FA:58:F7:47:D8:16:57:DF:1D:5D:62:E0:76:47:38:38:20:65:93:68:B1:24:F8"}}},"request":{"raw":"GET /indexnow?url=https%3A%2F%2Fwww.qgbbzt.top%2Ft1p20250515v25766.html\u0026key=3dae21e1edb61632 HTTP/1.1\r\nHost: yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qgbbzt.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-yandex-req-id: 1770530984333686-17227324280526955965-balancer-l7leveler-kubr-yp-vla-28-BAL\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 100, \"endpoints\": [{\"url\": \"https://dr.yandex.net/nel\", \"priority\": 1}, {\"url\": \"https://dr2.yandex.net/nel\", \"priority\": 2}]}\r\ncontent-type: application/json; charset=utf-8\r\nset-cookie: is_gdpr=1; Path=/; Domain=.yandex.com; Expires=Tue, 08 Feb 2028 06:09:44 GMT; SameSite=None; Secure\nis_gdpr_b=CNOIDRD58gIYAQ==; Path=/; Domain=.yandex.com; Expires=Tue, 08 Feb 2028 06:09:44 GMT; SameSite=None; Secure\n_yasc=nyCRIIDhGmPZq/iRGdMTg6nPSByK5aHmiXbxHNEpwuQCm4FnvX2cvyQ6O7jD3Q==; domain=.yandex.com; path=/; expires=Wed, 06 Feb 2036 06:09:44 GMT; secure\ni=enBMOyossISLa71PG56X3qngrDNeFrOujtsopgket3bXUnBY8TczphYtEJh/KJVsBNXapvSUrapff1TMMiBbds8nDNw=; Expires=Tue, 08-Feb-2028 06:09:44 GMT; Domain=.yandex.com; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=8269559651770530984; Expires=Tue, 08-Feb-2028 06:09:44 GMT; Domain=.yandex.com; Path=/; Secure; SameSite=None\nyashr=7277278971770530984; Path=/; Domain=.yandex.com; Expires=Mon, 08 Feb 2027 06:09:44 GMT; SameSite=None; Secure; HttpOnly; Partitioned\nbh=YKjRoMwGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Mon, 15 Mar 2027 06:09:44 GMT; SameSite=None; Secure\r\naccept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Sec-CH-Viewport-Width, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT, Width, Sec-Ch-Viewport-Height\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 100, \"success_fraction\": 0.001, \"failure_fraction\": 0.1}\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'none'\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T21:31:01.969645Z","times_seen":13304312,"resource_available":true,"data":null}},"time_used":457,"timings":{"blocked":137,"dns":6,"connect":48,"send":0,"wait":175,"receive":0,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bing.com/indexnow?url=https%3A%2F%2Fwww.qgbbzt.top%2Ft1p20250515v25766.html\u0026key=3dae21e1edb61632","fqdn":"www.bing.com","domain":"bing.com","tld":"com"},"ip":{"addr":"23.36.79.144","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:44.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"r.bing.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft TLS G2 ECC CA OCSP 06","organization":"Microsoft Corporation"},"validity":{"start":"Mon, 02 Feb 2026 22:57:30 GMT","end":"Sat, 01 Aug 2026 22:57:30 GMT"},"fingerprint":{"sha1":"73:54:F3:41:47:4C:A7:71:12:D4:A2:35:8E:38:77:B3:9F:72:6E:21","sha256":"F3:55:F8:4F:4F:32:E0:04:0D:1B:EA:B7:78:F0:21:93:A9:C2:2C:67:C5:60:51:F6:EE:3D:76:C3:A7:B9:AD:E7"}}},"request":{"raw":"GET /indexnow?url=https%3A%2F%2Fwww.qgbbzt.top%2Ft1p20250515v25766.html\u0026key=3dae21e1edb61632 HTTP/1.1\r\nHost: www.bing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qgbbzt.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache\r\npragma: no-cache\r\nexpires: -1\r\nx-aspnet-version: 4.0.30319\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: E6DAA2EB39954995A2A36E52F9420CA4 Ref B: OSL231050212034 Ref C: 2026-02-08T06:09:44Z\r\ncontent-length: 0\r\ndate: Sun, 08 Feb 2026 06:09:44 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nx-cdn-traceid: 0.df4d2417.1770530984.291e1b1a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T21:31:01.969645Z","times_seen":13304312,"resource_available":true,"data":null}},"time_used":517,"timings":{"blocked":24,"dns":0,"connect":1,"send":0,"wait":465,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/ok/splb.script?v=2026020806","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:43.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qgbbzt.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 05:04:33 GMT","end":"Fri, 20 Mar 2026 06:02:08 GMT"},"fingerprint":{"sha1":"1D:0E:6E:FB:AB:08:90:F6:CF:EC:95:BC:C6:86:55:99:0E:AB:33:27","sha256":"E8:3B:D7:96:A2:8A:F9:12:38:87:06:AC:67:86:6F:F2:86:A1:B1:02:23:AF:C9:6B:76:57:13:26:85:D2:D5:5D"}}},"request":{"raw":"GET /ok/splb.script?v=2026020806 HTTP/1.1\r\nHost: www.qgbbzt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qgbbzt.top/t1p20250515v25766.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 06:09:43 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Sun, 08 Feb 2026 06:09:43 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=lQF%2FSAV%2B8k%2Fx3r7kBuhSp%2FqzUcwrWnx5p5rGFZtIoC673tgh3MwhPFVHuPFiygJnHkBbhH7wj%2BgV5zHfNVvgxLulTcSY48cZaowREHsCd9DXVPewaEGIHFGwfIr1bShVSQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9ca8f5b6a9e935a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1114,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (447)","md5":"4cd249d403cd26cf7cdabbc0c04ca7aa","sha1":"6db3b27dd3186231e8c7b7e06f4bf7beea89e33d","sha256":"b9a493eb932c71ee13bb2604e0f494ea8c62b464ffe4c9fb9cf0633ba732157e","sha512":"5c3fdd14bca100f2fdbb01b7dfa78a21ae1ea3d3476261f465e57c98f64b7f3c2010ae4ecbb13559dbb2ede12b61452561aa2d1086c1ebba7ca690feea5c3b76","ssdeep":"","tlshash":"3b2100486e91a424861704611977d7fcf6a47035385ad342ccadcd093f20f72ab7addc","first_seen":"2026-01-30T23:51:02.577704Z","last_seen":"2026-02-24T07:54:41.816049Z","times_seen":1212,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"www.qgbbzt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.y-y-z-y-w-101.top/20250629/VKumcbYD/1.jpg","fqdn":"cdn.y-y-z-y-w-101.top","domain":"y-y-z-y-w-101.top","tld":"top"},"ip":{"addr":"104.26.9.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:43.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.y-y-z-y-w-101.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 03:41:33 GMT","end":"Thu, 26 Mar 2026 04:41:31 GMT"},"fingerprint":{"sha1":"4C:1D:90:A8:31:19:D9:D6:45:3B:C9:76:90:A0:3F:D0:53:B8:56:4C","sha256":"3F:AA:47:32:38:7C:C6:24:C2:11:52:22:39:8D:6F:B0:42:DE:3C:12:F1:6E:83:96:2E:18:82:56:BB:71:CA:E3"}}},"request":{"raw":"GET /20250629/VKumcbYD/1.jpg HTTP/1.1\r\nHost: cdn.y-y-z-y-w-101.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qgbbzt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Feb 2026 06:09:43 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 291936\r\ncf-ray: 9ca8f5b7cd19b517-OSL\r\nlast-modified: Sun, 31 Aug 2025 20:37:55 GMT\r\ncontent-disposition: attachment; filename=\"1.jpg\"\r\netag: \"68b4b2a3-47460\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccept-ranges: bytes\r\nage: 730307\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=2JIz5v%2FWNV9968IyVDXhS6ZEyFaDWR18gWrP2ySsbT7lrJyAdIklWxNDQjTB257Si5x4AWqYkx8MohIL5ZdGH5JLp0Y1ZO%2FxncWX1tFJLdh93JRywzPXPdOFio4DfyDflqaPO2gZ6g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":291936,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1792x2496, components 3","md5":"3d33965a7e187e75e00900e203b8e1b9","sha1":"48a348a3cd28ceed655c86c551a4ba15dc295104","sha256":"bc0761bda84f3ce9c53d0557a7dc54814e0629834e97f7b0acd2f3fcf0690411","sha512":"90974f08659f8a534d79dd90100e9c2eb8a3ac460d6ab3b02672b2a54df142eb111b373a6b1293c186c20eec34bbee6e7efd24c8c1abfeb66b6b874d9743dd81","ssdeep":"6144:SN+aUWg1cisgBjzb/RolnI4lzSbJpEKzXMlaEwiaW9UU2zhgAdJp53ghF7V:ktgeixjzjelIuzOpE0AwPEUhN5wH7V","tlshash":"1a5413230d02e45be169c7f83fa54c66ae243a7dfd573ee71d826ed1e450a106c8983b","first_seen":"2026-02-01T06:04:27.691325Z","last_seen":"2026-02-13T12:37:52.057182Z","times_seen":92,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":39,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.y-y-z-y-w-101.top/20250627/yR7by3Dj/1.jpg","fqdn":"cdn.y-y-z-y-w-101.top","domain":"y-y-z-y-w-101.top","tld":"top"},"ip":{"addr":"104.26.9.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:43.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.y-y-z-y-w-101.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 03:41:33 GMT","end":"Thu, 26 Mar 2026 04:41:31 GMT"},"fingerprint":{"sha1":"4C:1D:90:A8:31:19:D9:D6:45:3B:C9:76:90:A0:3F:D0:53:B8:56:4C","sha256":"3F:AA:47:32:38:7C:C6:24:C2:11:52:22:39:8D:6F:B0:42:DE:3C:12:F1:6E:83:96:2E:18:82:56:BB:71:CA:E3"}}},"request":{"raw":"GET /20250627/yR7by3Dj/1.jpg HTTP/1.1\r\nHost: cdn.y-y-z-y-w-101.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qgbbzt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Feb 2026 06:09:43 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 246496\r\ncf-ray: 9ca8f5b82d37b517-OSL\r\nlast-modified: Sun, 31 Aug 2025 20:20:41 GMT\r\ncontent-disposition: attachment; filename=\"1.jpg\"\r\netag: \"68b4ae99-3c2e0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccept-ranges: bytes\r\nage: 1378812\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=SSh%2F%2BXEz1mlGUJKR8aDTFj1z7tidfL6G0wlLQ40XeHSA%2FIMvnv0iTHBmAWMuRFmSPsrXJjeEpz8VUJoWSaq%2B7qDM5QsumnebJ4IiADLG88tGrN1VAA4U3sR%2FBjDDYZNrmPHB1T3TLw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":246496,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1844x2570, components 3","md5":"4f4ad4ba3060f2d5f4c1b85df2cb5b7a","sha1":"7056f538c7c0adb4482d67d0c3549e0d97e837bd","sha256":"ee0d20723ca3cc9157eb60f241f37b4fbf871bdf939662cb5404c7861f0a603a","sha512":"2144493667371c81f38260fe0a02cf27371985055a213f9f25bd36c8d183d9751b2bea2ae30a6b186c4d4dc7bec9d2d845b8e0f465a5023461b68d22bf167d4c","ssdeep":"6144:8c3mzd72IM92/Aa+I3aZ8u1CDzX/nHSPkWR0JhJ/SRIQ2p:8/z1jM9vaB3Du1CDz/HScW6blL","tlshash":"24341213eb420946c455c7d87e1bd6d9a351330e28a932ff81b1ff9b34156142dae3a9","first_seen":"2025-10-20T00:59:45.106156Z","last_seen":"2026-02-14T20:55:39.292617Z","times_seen":93,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":2,"connect":-1,"send":0,"wait":9,"receive":7,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/ok/splb.script?v=2026020806","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:43.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qgbbzt.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 05:04:33 GMT","end":"Fri, 20 Mar 2026 06:02:08 GMT"},"fingerprint":{"sha1":"1D:0E:6E:FB:AB:08:90:F6:CF:EC:95:BC:C6:86:55:99:0E:AB:33:27","sha256":"E8:3B:D7:96:A2:8A:F9:12:38:87:06:AC:67:86:6F:F2:86:A1:B1:02:23:AF:C9:6B:76:57:13:26:85:D2:D5:5D"}}},"request":{"raw":"GET /ok/splb.script?v=2026020806 HTTP/1.1\r\nHost: www.qgbbzt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qgbbzt.top/t1p20250515v25766.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 06:09:43 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Sun, 08 Feb 2026 06:09:43 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2Fh6KRjDd1w1X3oyPAViXh%2FU2xoR37c813%2BOYOuyvJWRl1SS%2BtdMHKjlWWjXE73YyJwxBKDyELpFz6uUpMiMIY4Vi%2BkLH9FuahBqOJGSmNEwpTsZxx0aqEoCP3C3gm9CT1g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9ca8f5b6b9f935a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1114,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (447)","md5":"4cd249d403cd26cf7cdabbc0c04ca7aa","sha1":"6db3b27dd3186231e8c7b7e06f4bf7beea89e33d","sha256":"b9a493eb932c71ee13bb2604e0f494ea8c62b464ffe4c9fb9cf0633ba732157e","sha512":"5c3fdd14bca100f2fdbb01b7dfa78a21ae1ea3d3476261f465e57c98f64b7f3c2010ae4ecbb13559dbb2ede12b61452561aa2d1086c1ebba7ca690feea5c3b76","ssdeep":"","tlshash":"3b2100486e91a424861704611977d7fcf6a47035385ad342ccadcd093f20f72ab7addc","first_seen":"2026-01-30T23:51:02.577704Z","last_seen":"2026-02-24T07:54:41.816049Z","times_seen":1212,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"www.qgbbzt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/template/default/static/css/swiper-4.2.2.min.css","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:43.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qgbbzt.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 05:04:33 GMT","end":"Fri, 20 Mar 2026 06:02:08 GMT"},"fingerprint":{"sha1":"1D:0E:6E:FB:AB:08:90:F6:CF:EC:95:BC:C6:86:55:99:0E:AB:33:27","sha256":"E8:3B:D7:96:A2:8A:F9:12:38:87:06:AC:67:86:6F:F2:86:A1:B1:02:23:AF:C9:6B:76:57:13:26:85:D2:D5:5D"}}},"request":{"raw":"GET /template/default/static/css/swiper-4.2.2.min.css HTTP/1.1\r\nHost: www.qgbbzt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qgbbzt.top/t1p20250515v25766.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 06:09:43 GMT\r\ncontent-type: text/css\r\ncontent-encoding: br\r\nlast-modified: Mon, 19 Jan 2026 19:47:04 GMT\r\netag: W/\"696e8a38-2c89\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\nage: 79074\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ncSJUVnvtZShN5fhJfDHpF%2BdMR02rBNIZj1vgRo4BPN%2FMp7J26R4HUqm7ovvi5EVvL5Nk4RXL88oGLc0fx%2B09JirjEBszr9EPtnKlv8AE9J9Q6Sl8ClaZcqC4eK16QBfhA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9ca8f5b4affe35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11401,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11144)","md5":"131683e6e4c8f03227031ee0d9f94f25","sha1":"35fb6182a6640505a307c1c8093811f3ce86a8ae","sha256":"0e93af03a3b34c386d7a52c8fa3f20a7d7c7b060e9d951575fd29db506a99260","sha512":"d1b27264b64829798a4edcdeaf35acbee9aa5b6b36526c1865e842e48a2d5106f08b99067f47ad5e38a3b96bd9b746d21d36e72608554e8a4347e7ad2315b18c","ssdeep":"192:tT7GOgx9BUSdPzX/M/XCj8Fif65W/1mXA8wBLJHpx:tT7Rgx9BU0A/XCcif65W/1mXA82FHpx","tlshash":"9232e15417403837f3b74f2e46a1e7b59b60cc838a934daeb2c0dd44d6fa8b9121eb95","first_seen":"2023-07-02T06:32:16Z","last_seen":"2026-02-24T07:54:41.82548Z","times_seen":11143,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"www.qgbbzt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/template/default/static/css/iconfont_1.css","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:43.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qgbbzt.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 05:04:33 GMT","end":"Fri, 20 Mar 2026 06:02:08 GMT"},"fingerprint":{"sha1":"1D:0E:6E:FB:AB:08:90:F6:CF:EC:95:BC:C6:86:55:99:0E:AB:33:27","sha256":"E8:3B:D7:96:A2:8A:F9:12:38:87:06:AC:67:86:6F:F2:86:A1:B1:02:23:AF:C9:6B:76:57:13:26:85:D2:D5:5D"}}},"request":{"raw":"GET /template/default/static/css/iconfont_1.css HTTP/1.1\r\nHost: www.qgbbzt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qgbbzt.top/t1p20250515v25766.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 06:09:43 GMT\r\ncontent-type: text/css\r\ncontent-encoding: br\r\nlast-modified: Mon, 19 Jan 2026 19:47:04 GMT\r\netag: W/\"696e8a38-2ac\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\nage: 79074\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=PUu6s9vlLNgg2%2FB2sImfo2cOTLGcN3xZBWvuujaPcz5HkqK5mu%2B3eCL17tsWOIasqO8oNJw9zjt9q%2FWM3rQC0a6Vgh5igwlzM2RAPx4%2BFWfWl08oLfJXuqmXsMUE5gxL3A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9ca8f5b4affd35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":684,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"435675a50d973e01178fc32fa25cf338","sha1":"b5d0314468bb01e5f160270d0e594126a85d1985","sha256":"878a28ff8ea826772349505f44ffd15484fdbbaa476eb0c280cecf32ad854d93","sha512":"546ae75a194eb71d85fc426717e79f032c519c641e9bf9585f3c694ea305728d0414ef6f90ccd33fc09aa51b7b009a77966c443893ab9e872a5d4d2815273b18","ssdeep":"","tlshash":"070144e4a8be0c602349a9c13202ba25ef59b6654d479c5be7a33c8c66f371591937cc","first_seen":"2025-01-01T07:40:20.938354Z","last_seen":"2026-02-24T07:54:41.824936Z","times_seen":11015,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"www.qgbbzt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/template/default/static/js/jquery.lazyload.js","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:43.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qgbbzt.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 05:04:33 GMT","end":"Fri, 20 Mar 2026 06:02:08 GMT"},"fingerprint":{"sha1":"1D:0E:6E:FB:AB:08:90:F6:CF:EC:95:BC:C6:86:55:99:0E:AB:33:27","sha256":"E8:3B:D7:96:A2:8A:F9:12:38:87:06:AC:67:86:6F:F2:86:A1:B1:02:23:AF:C9:6B:76:57:13:26:85:D2:D5:5D"}}},"request":{"raw":"GET /template/default/static/js/jquery.lazyload.js HTTP/1.1\r\nHost: www.qgbbzt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qgbbzt.top/t1p20250515v25766.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 06:09:43 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nlast-modified: Mon, 19 Jan 2026 19:47:04 GMT\r\netag: W/\"696e8a38-8b8\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\nage: 270843\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ELW0i4U8uWUdZHTvSkFDpxCz6%2FKKX0utJiPzHjsMkXu9emBPhgxaNY8qyKYDoIHX3kaX0mfb7NCL0ZtYfo%2BAlFF2pPaDPu1FVg%2BWfMzr6vatsjphKhVJxpaIjMlKqRjxVg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9ca8f5b4b80635a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2232,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2230)","md5":"9dfc308833c7ae64a6e0e6bd33fb51d7","sha1":"527e4dbceb22c063ed1bc5bd2ec362d9a412892a","sha256":"f3a5e91219434ff92ae7b36b9582136a75f56b605ebeb54bac21efdfea4466d1","sha512":"383aec26af4153c8d03cf7ab898378d5be2d509fcc12e87daaccaf2a51f145ac57b08c3001db895ed95b24e807c5290d256e5570a519b2c478185b9472d27578","ssdeep":"","tlshash":"d641e5863f027534f179a9ad430f52096127d03b92d58dd1b089d8ecfcf86579a3698b","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-04-03T21:20:26.492317Z","times_seen":18854,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"www.qgbbzt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qgbbzt.top/ok/flwz.script?v=2026020806","fqdn":"www.qgbbzt.top","domain":"qgbbzt.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qgbbzt.top/t1p20250515v25766.html","date":"2026-02-08T06:09:43.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qgbbzt.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 05:04:33 GMT","end":"Fri, 20 Mar 2026 06:02:08 GMT"},"fingerprint":{"sha1":"1D:0E:6E:FB:AB:08:90:F6:CF:EC:95:BC:C6:86:55:99:0E:AB:33:27","sha256":"E8:3B:D7:96:A2:8A:F9:12:38:87:06:AC:67:86:6F:F2:86:A1:B1:02:23:AF:C9:6B:76:57:13:26:85:D2:D5:5D"}}},"request":{"raw":"GET /ok/flwz.script?v=2026020806 HTTP/1.1\r\nHost: www.qgbbzt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qgbbzt.top/t1p20250515v25766.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 06:09:43 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sun, 08 Feb 2026 06:09:43 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=yB1CAOUPWmBnrWaLFJOkuzsfAHMXAVCYk96EVuw6Nyzl78YLIoFJDr8pSIzfsZxBkeIUzDJkwmrDPdh66ZonxBlr8m2OMGlbQIc1YOm8OH0JzVV56Km8KzB18QbVC59AQQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9ca8f5b588e235a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1173,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (591)","md5":"5112ba66deee1ad99ec26adff2a0a430","sha1":"b8b5c9a0eb19bf49f17df968b7ac4f11e91301bc","sha256":"cfe641f102d09b5722c4a6909121dccbcb4d69de8bec9b769e400eec8748fbda","sha512":"01aeef2c8a6f68c09d10f3f4517f9c1b7e68826afd1d0a1c536983d367f1d687f0130caa1347071bf3ab2bd7f761ce794fb6e0535669591e9d07dc570091186e","ssdeep":"","tlshash":"e721f48c694064278f170924297bd6fda3a030b52c8ae7829c65cc043f607516f35ddd","first_seen":"2026-01-30T23:51:02.645897Z","last_seen":"2026-02-24T07:54:41.824415Z","times_seen":1210,"resource_available":true,"data":null}},"time_used":418,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":418,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"www.qgbbzt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}