{"report_id":"56ca8524-da97-4918-ac2d-d6eead0bbf38","version":6,"status":"done","tags":[],"date":"2026-04-22T18:26:36Z","url":{"schema":"http","addr":"gpt-oqs.com","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"gpt-oqs.com/","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"title":"GPT-OQS","dom":{"size":135769,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1044)","md5":"d9db8118561c6e42dedc89e30ccc6b0f","sha1":"b98f5b641863aaa39b93084de8766f8a11875963","sha256":"474cf07da58f2c17e2e101eef857a435497f3e34ed10d398288cfd49da2553fb","sha512":"f00e8882bc07495f28a1ddaefe2c3c33ec06e12b8b919792f8375a56cf5a0fde722b95d334ce99a988268d0031eb91d7bc00e612c5bbda99a64f991a44d2ae2e","ssdeep":"1536:eSd0nijuhV+DjOTZbP8CDn7ORxF7yP2yMBCRCmIkgOITBwN1jK0lHwhVH+jMygUp:z0n6uRRQh4+JisrweGN","tlshash":"4ad3f8a0a79c093b246750c7a7a567c676fa5437d61bc4083bbe47603f86c08e9336ed","dom_hash":"domhashbb600f7b82ff673aff2cc8ab24164b9c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"gpt-oqs.com","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-27T18:26:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"cdn.staticfile.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-04-19T22:35:51.253585Z","alert_count":0,"request_count":3,"received_data":331429,"sent_data":1526,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"gpt-oqs.com","ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-09","domain_rank":0,"first_seen":"2026-04-22T18:26:37.902545Z","last_seen":"2026-04-22T18:26:37.902545Z","alert_count":86,"request_count":43,"received_data":2722141,"sent_data":21592,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery:1.10.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Bootstrap:4.5.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"ThinkPHP","description":"ThinkPHP is an open-source PHP framework with MVC structure developed and maintained by Shanghai Topthink Company.","website":"https://www.thinkphp.cn","common_platform_enumeration":"cpe:2.3:a:thinkphp:thinkphp:*:*:*:*:*:*:*:*","icon":"ThinkPHP.png","categories":["Web frameworks"]}]},{"fqdn":"cdn.staticfile.org","ip":{"addr":"134.122.173.178","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2013-03-29","domain_rank":851278,"first_seen":"2013-08-23T08:51:19Z","last_seen":"2026-04-18T10:11:58.126269Z","alert_count":3,"request_count":3,"received_data":225129,"sent_data":1285,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"api.huobi.pro","ip":{"addr":"52.84.50.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-03-19","domain_rank":3114416,"first_seen":"2017-09-16T11:43:47Z","last_seen":"2026-04-19T16:00:38.013034Z","alert_count":0,"request_count":1,"received_data":476,"sent_data":550,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-19T22:20:23.925162Z","alert_count":0,"request_count":1,"received_data":6149,"sent_data":467,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"gpt-oqs.com/Public/Static/bootstrap5Slide/scripts.js","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"48477ea73f8709a6c29d7cde0cc83e55","sha1":"5dc30fab107725dd71ab343d70b9e6267ea68cf1","sha256":"fd67e1f083236a6c171d2275401174ea62a6f24fc81193d55653080a236a209a","sha512":"0932287b99d7c96929e7464b6684fe399dfcaaea787dcab28fa0879094b5eb4d92139260fecde4ffe430eca3986430f98a72fc523332c4e476bee9ea2226b1b3","ssdeep":"","tlshash":"1ee0cd91761d4f9d1ccc3257996092c576841524e401f06790374c6c0a9584225fb7fc","size":298,"data":"","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-04-22T18:27:50.052952Z","times_seen":6103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/Public/Home/static/js/jquery.SuperSlide.2.1.1.js","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b9bc63ab05e21e3830da5bbb4ccee67","sha1":"d162156bdaf14217d76d920e0e57b86d8feb1d97","sha256":"349e46b2c65028736d0bbff7b829c7fc6fbdebc1fb1e8b12365a0ca2e6e9e848","sha512":"bdfa220da1f08e29f05a9984c4999d7e742bea10ad86b7e497a0d112c7992cc52b7f1e9f5430b4286f14bb2336110f85cbdc3164a92121caaf5c91961f7e69c9","ssdeep":"192:j+K3bxH+nqfhD9VUVjIItpfg5uXG3+1tSCl+7flvSXwaHxImISLTNSfYXH7Le2HE:jNcnqflKFgEWulE8REcS3j/CkR1Xh3","tlshash":"9532c65fb66635ca4597b3f1107f940d222b5965fc8a8ca0b17082c0adb9a1c243bfed","size":11264,"data":"","first_seen":"2023-04-05T11:06:31Z","last_seen":"2026-04-22T20:40:29.730152Z","times_seen":13308,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"17fc2cce0cbc1a0b2c787b6ce37cfe4d","sha1":"ab36bfc5c589529aeba37d4de0db772d6606cd92","sha256":"feb6b103a0d6e2cd9f93941b6b3028366daf790069cd5f00fb43816fb1d6b50a","sha512":"604afa55ba446eb38bd1ffd995c74ffcf14be5752f3a2e3eca4ba68664a0bf5a957f7e9997af129fd7857a7d1d5be5caeea4f20ef61a00770f01382787ebb37f","ssdeep":"768:uH+ScrMygiZszrvJ8ZWrKBvKcj4XFGSkPfIs:uH+jMygUurvJiWrcZiAPfX","tlshash":"d3e251d2eb2c57371b96015f76de41e2e73a806d222ba51e395cc2292781d3c8b763f4","size":33443,"data":"","first_seen":"2026-04-22T18:26:41.863474Z","last_seen":"2026-04-22T18:27:06.511289Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"20523e78bae2cebbef388c9ef84ec2f9","sha1":"29093cf5f97a20d8297b3554d07f2926d8df98d2","sha256":"8a6cfe4c6857b79cfcf6f200c8d00b064aa443b7e529332cbf064cb183c938cc","sha512":"182e396a3aafaf2b5f18070a8ed0e76efc7e8f1cb8eb37865ac4b294f0a8c933c3e9a72531506bfc732fa9f5f3a4acaa7a1a21adbb0849c63870b3f2e934a2f6","ssdeep":"192:Z+9wKCCBm9wKCC1u9wKCCXO9wKCC9u9wKCCssxI9wKCC7O9wKCCeQi9wKCCTo9ww:Z+vm7uVOrur+JOAQihoTuhK5Mh8N","tlshash":"1822b46cf993286c789334258f6f005438e87547cb49d4193eada8c26f8850da5bbfde","size":10286,"data":"","first_seen":"2023-04-30T10:40:57Z","last_seen":"2026-04-22T18:27:36.858839Z","times_seen":2898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.staticfile.org/pako/1.0.10/pako.min.js","fqdn":"cdn.staticfile.org","domain":"staticfile.org","tld":"org"},"ip":{"addr":"134.122.173.178","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"64413eda72405dd1d28bbb64d900c778","sha1":"6086b751c4f4c90bbd0521b6bfe5279fd4eb55da","sha256":"29cfa0542b9864b6640cfdcc8f15b184db6431b532db2702a3ce97e5f2a7fc1c","sha512":"7ae59cfd0bfc2a9d026d35f533e43706f532a0e6aaf40bb9d134fbbf3dcc15fe6f7abdfdc9babacd5f919e00d8f1e37c0084058a0c63c18bfa8e1a0fe78eaf7d","ssdeep":"768:7feBUDB3FA8/nVPg0kKWslV7hF/PGjMhuAEIzg49n3cG:zeG/9hF/+jZAEI0O3cG","tlshash":"1a23f6a630f651a82be118d8909b2b96217051326c0519f9e378dde43cb4dcfe17fa7e","size":45988,"data":"","first_seen":"2023-03-07T12:10:43Z","last_seen":"2026-04-22T18:27:36.84854Z","times_seen":3755,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"02326bdc0b23782ad36d3a541baa9558","sha1":"652573baef35c4dae3c69ced8425bebd2b68d048","sha256":"42047357ac478459a2ed1becca638d6b0142e80b36ea232d22a22c34c7a4905e","sha512":"5e5a71ccf52e5f36ddd3c4a87472dbb4faeff1ed39b5ed340247dfd20fa1ef18e00c4c4d671fc03ca3076f9bc626fc2e757334880db81b4d5bada86f5d29cbe4","ssdeep":"","tlshash":"f05178026b6f28421db724be072b700134787117b44bc915bb9fa7c0afb59a96458edf","size":3117,"data":"","first_seen":"2026-04-22T18:26:41.866567Z","last_seen":"2026-04-22T18:27:06.513523Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fbbb012e519b910a02da83ac6d3112da","sha1":"a03af70ac8200203516bb605834e1e3a1a061948","sha256":"b3f004b5887b020f0abc7d1046d655e1b275a9eb354f05212175561521105a47","sha512":"5c76b4a0f8abfa543ae0c28835d8685715b0899a787e39f251d28a06484c9f51a0de7dc1fc258b4891080768550ee830e5b0594bbac8a8e61594d117ce751b80","ssdeep":"","tlshash":"6cf0c96e0a1ed7ff70a80235532aa2ef70cd4baa90076807fe87021716ac118bc01ea1","size":527,"data":"","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-04-22T18:28:09.644739Z","times_seen":6968,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/Public/Home/static/js/layer/layer.js","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"666f4437565d197e9459e19a29f58315","sha1":"afc5c0a1369137e52b37ad5fb63f48202ce31368","sha256":"4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100","sha512":"1e659ff6c47458dbbaf7e7561402c12441286c255ddec048bf654388e8666a9ceca344e166657c29fce4a08b46470b44c47e8f1c6f577adc2a4e4f4f0e7e1e90","ssdeep":"384:DQ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:DQtu8CfS793QODbcI","tlshash":"5f92c85ab5503593216390a9911fa90f30f24d22eb078958f16bf1fd1ebcda562b3f0b","size":19831,"data":"","first_seen":"2023-04-11T09:52:52Z","last_seen":"2026-04-22T18:28:09.608149Z","times_seen":13302,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.staticfile.org/jquery/1.10.2/jquery.min.js","fqdn":"cdn.staticfile.org","domain":"staticfile.org","tld":"org"},"ip":{"addr":"134.122.173.178","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0e0559014b222245deb26b6ae8bd940","sha1":"e2f3603e23711f6446f278a411d905623d65201e","sha256":"89a15e9c40bc6b14809f236ee8cd3ed1ea42393c1f6ca55c7855cd779b3f922e","sha512":"60740da8f871b8263675db2421b0e565fc18e95c772f7c3d5916f224263cd71a6a2e6acceab2f6f8ba1c0607951f0198f525d87d0589fa57045b1d5f292dacf0","ssdeep":"1536:q4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RlfDknv+p0WzH/IoSZ7qABZnu0sFv:qGsKXlI2p0WPSbDrstfam","tlshash":"ba93f8ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","size":93100,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-04-22T22:21:19.915341Z","times_seen":18938,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/Public/Static/bootstrap5Slide/bootstrap.bundle.min.js","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8831aa095cdec88f66c2e46c339cf352","sha1":"5db4c40dbc6bd3d9623ee98a2061dd265885cf2e","sha256":"79d443b15f542c8a8acca8e937f2a3c90ecba78bd49fdbac6c9b878c7f1293e9","sha512":"b07f093e128951e03d3d693778e70e97c53e95f65382d0570f8d6ae9c3bfb25c311870b129c5b8e4ae283c25211c6ecd301e266ca11d75598fb935eda5b09b14","ssdeep":"1536:GaPTJR2t4PqiiyuL5FehgTr1voCBZx6wVlLBkS:4OANBZVV5","tlshash":"0f73c5493254b87309ee15a68037460bf7256d94b14b802cb5bdacde2b3dc8672b7f78","size":78748,"data":"","first_seen":"2023-03-07T01:34:42Z","last_seen":"2026-04-22T18:27:50.069436Z","times_seen":7517,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b0331a69761c93d89c26b56bc8fc2788","sha1":"9931f02bb115b5405dd8d7bda216aad3f539dab4","sha256":"6c0090b5fd60335a9702024461b801a405722341a06de174841d1b3a80030232","sha512":"8b8cb774766e11d89d6b2808af50a252f67dcad84ad1e45ae71d21538babd580388842a6b9d22f75fc43ddba24515998a6b3441a6b20108911497e89f1192fad","ssdeep":"","tlshash":"cf51a8c8c71c017ce88213ad3e2e918c163c39b93c125c6c7d6d8d28bb94fad8a5d979","size":2772,"data":"","first_seen":"2026-04-22T18:26:41.868541Z","last_seen":"2026-04-22T18:27:06.515523Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.staticfile.org/jquery/2.1.1/jquery.min.js","fqdn":"cdn.staticfile.org","domain":"staticfile.org","tld":"org"},"ip":{"addr":"134.122.173.178","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"d021c983bd6e7291b43a5cc1fb2ebe99","sha1":"ffe47a16e4b1550ddfba3577cc9cc9fdc8643aff","sha256":"c0d4098bc8b34c6f87a3d7723988ae81214a53a0bb4a1d4d36a67640f98ed079","sha512":"0b01d408ae79a4e3630f1bcf6507aec0aa71a2cf263f212ff601ae582f15af4df9ec9dae5e0d4fc9c1833cd0fd1207689121531ba920480a680e3f4e336da4b3","ssdeep":"1536:kPEkjP+iADIOr/NEe876nmBu3HvF38Nd+uJO1z6/A4TqAub0i4ULvguEhjzXpa9G:7NMnJiz6oAQKP5a98HrB","tlshash":"5983d6d9b6c27062977734b850bf410bb17a98dab80c8c60f0a4d5e47eb4a8d517bf2d","size":84280,"data":"","first_seen":"2023-03-07T12:01:55Z","last_seen":"2026-04-22T18:28:09.598179Z","times_seen":9905,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3141c18a9605b1422295c9e48d668c9d","sha1":"0e035fdbc893334e85d674527229f5d2fd9c8036","sha256":"1c439327512b5147799af88283ca39d0f13d331bea70d2ec3e479177c6c595c9","sha512":"9de6cc7247eb894a1a5a05a3cad42883bb7478bd38bb37e22c7ac97ae476b6a843adb97e0ed0c1ba44db35687a637a8ada2d6197fdf51b66ac1e46fb0d0863d0","ssdeep":"","tlshash":"05d05ec3ab4d2058587f319784eb15cc005c467288920d89bc3d91908ca01ec5371f2d","size":255,"data":"","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-04-22T18:27:50.138877Z","times_seen":5207,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f4e53aa779911536ce31c89dba54e026","sha1":"f9f2a111f5389f56b5e80ad2b3db812dce36178d","sha256":"4199b7181ec9fb1caaaa8df1dcd5ad039b3c9f6e0015b4364bdd220ce6e797c2","sha512":"ed0b872c2d150bad0971e5943dfd13a4a4df323ce7175b5266786695a213b8124596edc5cdcbbc03bebf50fd9d81dec4b78b004c5f8788724b371fa8bd92105e","ssdeep":"192:ffc7AFwMuAEQYLQY/1M8rdQYRg7QY8QY6QYgkLL8:ffcsB01M8rXgv38","tlshash":"bb32bd487eab913b1c7b29e14bfb674672896003c3cddc0d765e0b843f0561ab8957a7","size":11774,"data":"","first_seen":"2026-04-22T18:26:41.870417Z","last_seen":"2026-04-22T18:27:06.518637Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/Public/Home/static/js/layer/layer.js","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"666f4437565d197e9459e19a29f58315","sha1":"afc5c0a1369137e52b37ad5fb63f48202ce31368","sha256":"4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100","sha512":"1e659ff6c47458dbbaf7e7561402c12441286c255ddec048bf654388e8666a9ceca344e166657c29fce4a08b46470b44c47e8f1c6f577adc2a4e4f4f0e7e1e90","ssdeep":"384:DQ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:DQtu8CfS793QODbcI","tlshash":"5f92c85ab5503593216390a9911fa90f30f24d22eb078958f16bf1fd1ebcda562b3f0b","size":19831,"data":"","first_seen":"2023-04-11T09:52:52Z","last_seen":"2026-04-22T18:28:09.608149Z","times_seen":13302,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@4.5.0/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:15.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/bootstrap@4.5.0/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gpt-oqs.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 18:26:15 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 24869\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 4.5.0\r\nx-jsd-version-type: version\r\netag: W/\"27293-TxSgmmBsmaEfj9oVVk72b3BAKCY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220176-FRA, cache-bma-essb1270026-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 5941789\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g9iErW8d22RtMI%2FdtVSumK8aoGI1aeZvOeBKPoqiCfTUW7WIUXQWiCEgAvaQ%2FMo%2BdtwvFXcS0WhxF4Eeli5LqWlkVXsHqnIE4UsklWC8YujLQdgFFoIQuPauazQ0K%2BedAAY%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9f06acffbb215695-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":160403,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65324)","md5":"3afe15e976734d9daac26310110c4594","sha1":"4f14a09a606c99a11f8fda15564ef66f70402826","sha256":"680af6669abc319f9803f0fa26d443df1b6bc29133d88a8e4bea560ffed7288c","sha512":"aced925c428148809afc07f28442b966a58508ea24d6b7203d87c63aab57df93b28ab68183a5dae0d9c12705e0a484685de5a370099c42788c869db686d0dcea","ssdeep":"1536:2THqIJOT7SyEIA1pDEBi8yNcuSEeA1/uypq3SYiLENM6HN26H:YH9vGGq3SYiLENM6HN26H","tlshash":"03f353a6f5a0312de4a7c61964d0bafd152f8245d7224bfbf8273b6447892c70a73e4c","first_seen":"2023-04-05T04:00:44Z","last_seen":"2026-04-22T20:22:41.751523Z","times_seen":22669,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":2,"dns":1,"connect":1,"send":0,"wait":6,"receive":2,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/Public/Home/static/imgs/hot-2.svg","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:15.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gpt-oqs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 16:20:45 GMT","end":"Thu, 09 Jul 2026 16:20:44 GMT"},"fingerprint":{"sha1":"07:0F:71:8E:9B:03:DD:32:D1:B9:C2:15:44:26:6E:18:F1:3A:D0:52","sha256":"6B:26:21:24:93:5C:9A:61:CF:22:B3:0D:8E:9B:37:8C:A2:DB:94:DE:EA:73:A3:27:4D:98:AD:1B:7E:8E:3C:CD"}}},"request":{"raw":"GET /Public/Home/static/imgs/hot-2.svg HTTP/1.1\r\nHost: gpt-oqs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/\r\nCookie: PHPSESSID=sd7hqaugnmghbfpcdj65qe0hd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:26:16 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 29 Nov 2022 11:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6385e7cc-1ade\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qG%2BSmGyf%2BlD%2FI3aJFB6%2F8aMucH4gSedJjQPNkCh1IxbhnN8ajdQGFGtjt2XJ%2BhyWa8IGEcPO2M8dhcEi0uC43Jd7MpI7piq0jcq75I8LG9xiV%2Fje9QqVbij1pFH4ug%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06acff9cb01a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6878,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dd9279cfb541640afabd1d33527f1df4","sha1":"6d828472cfaa863044b92e5c884ea8d658df4d36","sha256":"6466ed8936ba729058d7e2ae3bc93a7d8f3fb8ec385d7e3c29f21968cbd5aaef","sha512":"53a3ddf98f9ea97b18e73e5ca308a452a16142e672dcf3d1c86e61cc83e94729651eb41301bc902cc2510178e0c708fb5b66f3bf1e4ccde0fcf5f61aff77fcf5","ssdeep":"96:QRslJ3A7/H2wd9Qci3A7/H2wd9Qccra97a9tx+duKNBBbNwKDNlUs7vkSqD:QWS/Zd9z/Zd9ia97a9tKblLs","tlshash":"96e197f7e1b8b993d246c771ed52485528aa84fbeb810391c2e8ff9a6135cc04c4edd4","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-22T18:27:50.076028Z","times_seen":5036,"resource_available":false,"data":null}},"time_used":869,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":869,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/Upload/public/6907a790442c3.png","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:15.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gpt-oqs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 16:20:45 GMT","end":"Thu, 09 Jul 2026 16:20:44 GMT"},"fingerprint":{"sha1":"07:0F:71:8E:9B:03:DD:32:D1:B9:C2:15:44:26:6E:18:F1:3A:D0:52","sha256":"6B:26:21:24:93:5C:9A:61:CF:22:B3:0D:8E:9B:37:8C:A2:DB:94:DE:EA:73:A3:27:4D:98:AD:1B:7E:8E:3C:CD"}}},"request":{"raw":"GET /Upload/public/6907a790442c3.png HTTP/1.1\r\nHost: gpt-oqs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/\r\nCookie: PHPSESSID=sd7hqaugnmghbfpcdj65qe0hd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:26:16 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 02 Nov 2025 18:48:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6907a790-68eea\"\r\nexpires: Fri, 22 May 2026 18:25:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zUay2ZYI9vu5qLTYa0LhlFP46U%2F5yeni0gL8pW1HomXC9nuj5WX3F5B%2Bxy6C01tEjRi8grtBtdES2cXk3cRMOpGr73QM9RZhb7L7SECXBZnYJgyDeRY%2BccY17O9edw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06acffacb71a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":429802,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1140 x 465, 8-bit/color RGBA, non-interlaced","md5":"225ca6bb404d12e23b7b386fad845b9d","sha1":"5867c40e357d614354b83402482c4587ec910544","sha256":"670d66f9a6d3a2428280c04d570de82d99bd3c254888abafb92882cfae08ed44","sha512":"91cc1f7d6e940496ccd1d6285188e9b0c8150c39a24e724152ad53401be977259b6a8f66fc0d3e5cf17b19c31dad8370fb4d81d20f8b7b591da332aeff0790b8","ssdeep":"12288:JuQM20o9QXiA45lDD1mpVl09MrFrJVh+y5:t9lDJmnr5vhV","tlshash":"4d942395c5c6bc3391c6d10c9ab712b1b2239a7998af5bd506997e8c144cccac3fe24f","first_seen":"2023-05-21T16:18:43Z","last_seen":"2026-04-22T18:27:36.831076Z","times_seen":4428,"resource_available":false,"data":null}},"time_used":2118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1191,"receive":927,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/Upload/public/69e11c4fe39ff.jpg","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:15.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gpt-oqs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 16:20:45 GMT","end":"Thu, 09 Jul 2026 16:20:44 GMT"},"fingerprint":{"sha1":"07:0F:71:8E:9B:03:DD:32:D1:B9:C2:15:44:26:6E:18:F1:3A:D0:52","sha256":"6B:26:21:24:93:5C:9A:61:CF:22:B3:0D:8E:9B:37:8C:A2:DB:94:DE:EA:73:A3:27:4D:98:AD:1B:7E:8E:3C:CD"}}},"request":{"raw":"GET /Upload/public/69e11c4fe39ff.jpg HTTP/1.1\r\nHost: gpt-oqs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/\r\nCookie: PHPSESSID=sd7hqaugnmghbfpcdj65qe0hd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:26:16 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 16 Apr 2026 17:28:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69e11c4f-267d\"\r\nexpires: Fri, 22 May 2026 18:25:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zYIMPsW0JcVNT77t4YjFe8wQpcNVxrkcS9Tr5%2BU8h%2BnF4qNdszbpPxAHHbLWm88RyeZbROWdARK5udwbDndB8wfNmvK2eagYSyU7kMai0qyoeZIw%2FLE6dg5Zwpa9lA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06acffacc11a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9853,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"9f8a5a5e4939d90026ec4f8cd90da22a","sha1":"49f8b232a8e6e1073a5535de0a41a31e5f9bcf41","sha256":"06a29964a6749199463891da298075d61b0a5b47abd83b00c77ea7e83632dcb4","sha512":"8dde5ffc939dd2c7342f224fd389b567dfdaab83258e5c295476bd6ba5b0a1500768e870c9b338abd3a8aecff69df3e5f4e0f6caab82337b8df6638c27119b7c","ssdeep":"192:Yb9hcFX2tGyywfAlpqiZZXXCIFSLb9a3LAU7r3Tp0EqiLiLF6bKvDVPYyK9b:Iho2tG1FXXCIUE3x3dQF6bQVPYHb","tlshash":"1712ae0675a4d7aef4ec47a616c20b83b24fd2ab35a7b4961803100a34df16c9ddf6b8","first_seen":"2026-04-22T18:26:41.796057Z","last_seen":"2026-04-22T18:27:06.498293Z","times_seen":2,"resource_available":false,"data":null}},"time_used":893,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":892,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/Upload/public/69e11db7b7c4e.jpg","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:15.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gpt-oqs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 16:20:45 GMT","end":"Thu, 09 Jul 2026 16:20:44 GMT"},"fingerprint":{"sha1":"07:0F:71:8E:9B:03:DD:32:D1:B9:C2:15:44:26:6E:18:F1:3A:D0:52","sha256":"6B:26:21:24:93:5C:9A:61:CF:22:B3:0D:8E:9B:37:8C:A2:DB:94:DE:EA:73:A3:27:4D:98:AD:1B:7E:8E:3C:CD"}}},"request":{"raw":"GET /Upload/public/69e11db7b7c4e.jpg HTTP/1.1\r\nHost: gpt-oqs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/\r\nCookie: PHPSESSID=sd7hqaugnmghbfpcdj65qe0hd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:26:16 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 16 Apr 2026 17:34:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69e11db7-1673\"\r\nexpires: Fri, 22 May 2026 18:25:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ONYXu%2FK8JYcxMpxIzrbSJNST5RC6z2aWdwxKKjcdqypKqnAH9CjEPuh78uOG3b5Hyo7EPSVFEe6s7BMeyrZ2svMtZagveA7RRhQ22lUgZb7jwab9Sw2EuR2f72EP6A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06acffacc51a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5747,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"8d14e26bed19e8d2ac832f1139686cf4","sha1":"1c94ebe68bdbfbe66640f079d5f1187c408c14a4","sha256":"5373312ef8550f88f0dd9b8fce93859c33775265fe508a2e4f7199c5b18282be","sha512":"18e98f7a9c9451f20dd3961dd83831f9cf5d63fd2a22219743da99e61377397ac5db599cd8582f34ba706ecfc8b21163a0972373c7254d0accf5af6e934c7b2c","ssdeep":"96:q+bbbbbbbbbGPNsSVb8cHjlhuDTWUOhTqovsyDA798tKxr1YB/rGUaEr9pbnZoM/:VbbbbbbbbbINVb8cDlhuHWUcg97+Ir1E","tlshash":"bfc16d73690dadabe873187568182468fd4380386a63d6d771141c3fcd6c4be0df7aa1","first_seen":"2026-04-22T18:26:41.797225Z","last_seen":"2026-04-22T18:27:06.499835Z","times_seen":2,"resource_available":false,"data":null}},"time_used":912,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":912,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.staticfile.org/jquery/2.1.1/jquery.min.js","fqdn":"cdn.staticfile.org","domain":"staticfile.org","tld":"org"},"ip":{"addr":"134.122.173.178","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:15.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"staticfile.org","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 03 Apr 2026 00:00:00 GMT","end":"Thu, 02 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"58:76:03:0C:93:D1:CD:E1:B0:EC:46:C0:4E:0B:04:86:E4:80:3B:93","sha256":"20:3D:7B:D4:00:D1:45:86:5F:27:E9:99:0E:00:64:64:58:38:47:BE:A5:CE:E8:D4:04:AF:81:88:25:F2:0A:01"}}},"request":{"raw":"GET /jquery/2.1.1/jquery.min.js HTTP/1.1\r\nHost: cdn.staticfile.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With,token\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Wed, 22 Apr 2026 18:26:16 GMT\r\nexpires: 0\r\npragma: no-cache\r\nserver: nginx\r\nx-cache: BYPASS\r\nx-cdntype: readnode-008\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":84280,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32061)","md5":"d021c983bd6e7291b43a5cc1fb2ebe99","sha1":"ffe47a16e4b1550ddfba3577cc9cc9fdc8643aff","sha256":"c0d4098bc8b34c6f87a3d7723988ae81214a53a0bb4a1d4d36a67640f98ed079","sha512":"0b01d408ae79a4e3630f1bcf6507aec0aa71a2cf263f212ff601ae582f15af4df9ec9dae5e0d4fc9c1833cd0fd1207689121531ba920480a680e3f4e336da4b3","ssdeep":"1536:kPEkjP+iADIOr/NEe876nmBu3HvF38Nd+uJO1z6/A4TqAub0i4ULvguEhjzXpa9G:7NMnJiz6oAQKP5a98HrB","tlshash":"5983d6d9b6c27062977734b850bf410bb17a98dab80c8c60f0a4d5e47eb4a8d517bf2d","first_seen":"2023-03-07T12:01:55Z","last_seen":"2026-04-22T18:28:09.598179Z","times_seen":9905,"resource_available":true,"data":null}},"time_used":1668,"timings":{"blocked":555,"dns":1,"connect":275,"send":0,"wait":526,"receive":0,"ssl":308},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"cdn.staticfile.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/Public/Static/bootstrap5Slide/bootstrap.bundle.min.js","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:15.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gpt-oqs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 16:20:45 GMT","end":"Thu, 09 Jul 2026 16:20:44 GMT"},"fingerprint":{"sha1":"07:0F:71:8E:9B:03:DD:32:D1:B9:C2:15:44:26:6E:18:F1:3A:D0:52","sha256":"6B:26:21:24:93:5C:9A:61:CF:22:B3:0D:8E:9B:37:8C:A2:DB:94:DE:EA:73:A3:27:4D:98:AD:1B:7E:8E:3C:CD"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/bootstrap.bundle.min.js HTTP/1.1\r\nHost: gpt-oqs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/\r\nCookie: PHPSESSID=sd7hqaugnmghbfpcdj65qe0hd7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:26:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 29 Nov 2022 11:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6385e7cc-1339c\"\r\nexpires: Thu, 23 Apr 2026 06:25:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rzWw5KdvKuu%2BecCglJlMfUbBPZTTJvakV%2FxTzA8ZUPL%2BgIu9UW%2FFCmp1B5Y6be4DlzKKCMQGtd%2FPeoK3ozVhqBtogqGo1n8r7M4MAGRRT1%2BCxcIpCJvYBAYdoEx%2Fsg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06acffbccb1a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78748,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"8831aa095cdec88f66c2e46c339cf352","sha1":"5db4c40dbc6bd3d9623ee98a2061dd265885cf2e","sha256":"79d443b15f542c8a8acca8e937f2a3c90ecba78bd49fdbac6c9b878c7f1293e9","sha512":"b07f093e128951e03d3d693778e70e97c53e95f65382d0570f8d6ae9c3bfb25c311870b129c5b8e4ae283c25211c6ecd301e266ca11d75598fb935eda5b09b14","ssdeep":"1536:GaPTJR2t4PqiiyuL5FehgTr1voCBZx6wVlLBkS:4OANBZVV5","tlshash":"0f73c5493254b87309ee15a68037460bf7256d94b14b802cb5bdacde2b3dc8672b7f78","first_seen":"2023-03-07T01:34:42Z","last_seen":"2026-04-22T18:27:50.069436Z","times_seen":7517,"resource_available":true,"data":null}},"time_used":1222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1216,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/Public/Static/bootstrap5Slide/bootstrap.min.css","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:15.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gpt-oqs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 16:20:45 GMT","end":"Thu, 09 Jul 2026 16:20:44 GMT"},"fingerprint":{"sha1":"07:0F:71:8E:9B:03:DD:32:D1:B9:C2:15:44:26:6E:18:F1:3A:D0:52","sha256":"6B:26:21:24:93:5C:9A:61:CF:22:B3:0D:8E:9B:37:8C:A2:DB:94:DE:EA:73:A3:27:4D:98:AD:1B:7E:8E:3C:CD"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/bootstrap.min.css HTTP/1.1\r\nHost: gpt-oqs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/\r\nCookie: PHPSESSID=sd7hqaugnmghbfpcdj65qe0hd7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:26:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 29 Nov 2022 11:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6385e7cc-2f0fa\"\r\nexpires: Thu, 23 Apr 2026 06:25:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q2sMEaKlOlDX9CEZ4UNr%2BI93gxTfLC5HAHxFgifVXHspTYa%2B0VdeWf4jeNEYbM8tlZYgfGwIjY%2F%2BjouMsqdFhI65wOnxhxCBbR4ln%2BWFk4g13hJaOA3v6LVUb010hg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06acff8caa1a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":192762,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65184)","md5":"cb46b85888b78de64c1f51bc7797aacb","sha1":"e57147e69810b9ee63af657969ddfd6c456957e3","sha256":"652650f2c09a63e822932e07d79583c64a996e44ff680e2a9183c2a7c5b2531e","sha512":"cdf48d3e0b60cd162995316ce921e3285248d481378251f13403c39302baba3efe6332a537cccf255e2261b8c39d719ab1a9efd83e97111ed321e11dd0eefdb1","ssdeep":"1536:rQGFA+QbGwz48MIEtQ12c2Jsj+aeHYAVmJz600I40Yw:rQGqAVmJz600I40Yw","tlshash":"311492a7f581201ee493c10995d2bffe057f9586d3021baaf42737b44b452eb8a63e4c","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-04-22T18:27:50.066152Z","times_seen":3243,"resource_available":false,"data":null}},"time_used":1216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1209,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/Upload/public/69da1217ef5d3.jpg","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:15.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gpt-oqs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 16:20:45 GMT","end":"Thu, 09 Jul 2026 16:20:44 GMT"},"fingerprint":{"sha1":"07:0F:71:8E:9B:03:DD:32:D1:B9:C2:15:44:26:6E:18:F1:3A:D0:52","sha256":"6B:26:21:24:93:5C:9A:61:CF:22:B3:0D:8E:9B:37:8C:A2:DB:94:DE:EA:73:A3:27:4D:98:AD:1B:7E:8E:3C:CD"}}},"request":{"raw":"GET /Upload/public/69da1217ef5d3.jpg HTTP/1.1\r\nHost: gpt-oqs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/\r\nCookie: PHPSESSID=sd7hqaugnmghbfpcdj65qe0hd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:26:16 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 11 Apr 2026 09:19:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69da1217-3ce0\"\r\nexpires: Fri, 22 May 2026 18:25:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4qTFPWvlAG8ancsJ1DrGUu%2BMOUgBj%2Bb1TWJ9DvoIKrVbp0m3C%2Fa0L9UzCKD2sS9kmQNEJOl8UwHYMgKJeWIRdK%2BxC8jRBMxEmQ7LiK9ltTA9ejA4RLOL3sGTRQwSUQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06acffacba1a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15584,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, progressive, precision 8, 249x258, components 3","md5":"ce645009c4a7b75487550cdaa87fe390","sha1":"5db0803465273bdb91da24585324fe2496736f2c","sha256":"7f66921580eda5a64750f304ac4765dd4c2de784782ffac0b554f342ee4ebba0","sha512":"63adc617b4d2168c77171ff816becd4b94e713e24750d38078ad20eea4af5f8c357c3f789d889f5df746b711be8d86d3c134d779c9a05962ebad3e4ad9977c25","ssdeep":"384:fpENpvIRgOJ6kVnTFwZqBPvhAOlT9SqfTRSo2JNtLHyTC95+G:feNpvDO0inTFwZqn9lT9JfEoYPyC9MG","tlshash":"0a62cf8a4092cd1acda45bb5694c702a7acef70069509979fec97871b432fda0c9d31a","first_seen":"2026-04-22T18:26:41.800286Z","last_seen":"2026-04-22T18:27:06.507339Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/Upload/public/69e11bc7df77f.jpg","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:15.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gpt-oqs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 16:20:45 GMT","end":"Thu, 09 Jul 2026 16:20:44 GMT"},"fingerprint":{"sha1":"07:0F:71:8E:9B:03:DD:32:D1:B9:C2:15:44:26:6E:18:F1:3A:D0:52","sha256":"6B:26:21:24:93:5C:9A:61:CF:22:B3:0D:8E:9B:37:8C:A2:DB:94:DE:EA:73:A3:27:4D:98:AD:1B:7E:8E:3C:CD"}}},"request":{"raw":"GET /Upload/public/69e11bc7df77f.jpg HTTP/1.1\r\nHost: gpt-oqs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/\r\nCookie: PHPSESSID=sd7hqaugnmghbfpcdj65qe0hd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:26:16 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 16 Apr 2026 17:26:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69e11bc7-26a3\"\r\nexpires: Fri, 22 May 2026 18:25:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fFYm9AkupEfbZ1pwlpQ1vZPn7%2FNv0djOrGb3YoEp2W4%2BnVqO0%2FCFkT9o3FNZpBiTI6WHhg30WiFkf%2FXzgLdx00XUcJZrvKorD%2FPMvYXXFgxa4iQoe7%2FEBdcJIkaVbA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06acffacc01a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9891,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"eb852a9c659a690dc07994443fffb1fe","sha1":"ab398f8a694373d62596f5f718915a6bf43d3caa","sha256":"fe027bcd850c9853d7d264841b801fd0696e11a8276bea25465f19299bf22601","sha512":"63875b138e8e656ecb4875de3931fa7fd124fc41e4aeb21fc07fc254b863c581c752920347bed9393a21cc82eb03bc3fabfe8ef92663c1bcbac7b24b38ae63b7","ssdeep":"192:VIkd+XI1/P5gfwm4M0WFfbzBEaViI1NWoiDsIKtDn2Uep6WRI6lPz:VIkMXIpifyMREQ1iD7n7","tlshash":"3d129e528ca8ffcab6c43ba0d1e9935799995653b0c302459007ba4de4ef97cd06f13b","first_seen":"2026-04-22T18:26:41.80141Z","last_seen":"2026-04-22T18:27:06.496676Z","times_seen":2,"resource_available":false,"data":null}},"time_used":956,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":956,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/Public/Static/bootstrap5Slide/scripts.js","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:15.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gpt-oqs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 16:20:45 GMT","end":"Thu, 09 Jul 2026 16:20:44 GMT"},"fingerprint":{"sha1":"07:0F:71:8E:9B:03:DD:32:D1:B9:C2:15:44:26:6E:18:F1:3A:D0:52","sha256":"6B:26:21:24:93:5C:9A:61:CF:22:B3:0D:8E:9B:37:8C:A2:DB:94:DE:EA:73:A3:27:4D:98:AD:1B:7E:8E:3C:CD"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/scripts.js HTTP/1.1\r\nHost: gpt-oqs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/\r\nCookie: PHPSESSID=sd7hqaugnmghbfpcdj65qe0hd7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:26:16 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 29 Nov 2022 11:06:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 23 Apr 2026 06:25:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6385e7cc-12a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NmCgAQ6Wbh9kTzeI%2Bjm1Q8aaCb%2B404VLSh%2FXIyaxzdpHWqLb%2Fpn63fGdjtk3oa8BDcAEvZLInNAMIwBS5RPrh7V7Wzd6yi498xHoe2AxZ58CkTPfXTO8zduHcPhsdg%3D%3D\"}]}\r\ncf-ray: 9f06acffbccd1a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":298,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"48477ea73f8709a6c29d7cde0cc83e55","sha1":"5dc30fab107725dd71ab343d70b9e6267ea68cf1","sha256":"fd67e1f083236a6c171d2275401174ea62a6f24fc81193d55653080a236a209a","sha512":"0932287b99d7c96929e7464b6684fe399dfcaaea787dcab28fa0879094b5eb4d92139260fecde4ffe430eca3986430f98a72fc523332c4e476bee9ea2226b1b3","ssdeep":"","tlshash":"1ee0cd91761d4f9d1ccc3257996092c576841524e401f06790374c6c0a9584225fb7fc","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-04-22T18:27:50.052952Z","times_seen":6103,"resource_available":true,"data":null}},"time_used":895,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":895,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/Public/Home/static/imgs/home_head_bg.png","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:17.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gpt-oqs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 16:20:45 GMT","end":"Thu, 09 Jul 2026 16:20:44 GMT"},"fingerprint":{"sha1":"07:0F:71:8E:9B:03:DD:32:D1:B9:C2:15:44:26:6E:18:F1:3A:D0:52","sha256":"6B:26:21:24:93:5C:9A:61:CF:22:B3:0D:8E:9B:37:8C:A2:DB:94:DE:EA:73:A3:27:4D:98:AD:1B:7E:8E:3C:CD"}}},"request":{"raw":"GET /Public/Home/static/imgs/home_head_bg.png HTTP/1.1\r\nHost: gpt-oqs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/Public/Home/static/css/base.css\r\nCookie: PHPSESSID=sd7hqaugnmghbfpcdj65qe0hd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:26:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 29 Nov 2022 11:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6385e7cc-cf649\"\r\nexpires: Fri, 22 May 2026 18:25:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qejuwrbvP1aSmvfo8rRrOmgQZszCmbs706CXBfFNier1z7zYy%2FvoYVXhjV7Bv1kmTBksiw%2FEPsvLWf0ttg%2FRciM%2FsREbehBbCnIT1HdPy3VFFyLEV8NCkbWnTt0vgg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06ad087e131a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":849481,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 4336 x 1428, 8-bit/color RGBA, non-interlaced","md5":"1cbfba6198f4e4ff700eb43de61092ac","sha1":"ff03b54f67e1a0ae20c274c3d06ee52c3dd6ee50","sha256":"618a8249a51b933013f55571d8cdcb16e26863c921c82170e79fcbcb582eea95","sha512":"cb12167584983054c4911ee8604171dc08c8f89fef64c97ef3eb8dca7f424ce7d34b87924419f0e76e7a4b23f231371bef37231639bbb36c71950fdebbae40cd","ssdeep":"24576:2nw3WzrNqGPQiPxmnC+YarisIgK+Xy/6Nn/WMISk:2n+iQGhPxmrY651qGn2","tlshash":"7405224ca0eef889cc125b351ddbcf8d52a430b498ef6719bb63bd20895d9cd6877620","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-22T18:27:36.851878Z","times_seen":3637,"resource_available":false,"data":null}},"time_used":2424,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1205,"receive":1219,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/Public/Home/static/imgs/advantage_phone.511b5ee0.png","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:17.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gpt-oqs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 16:20:45 GMT","end":"Thu, 09 Jul 2026 16:20:44 GMT"},"fingerprint":{"sha1":"07:0F:71:8E:9B:03:DD:32:D1:B9:C2:15:44:26:6E:18:F1:3A:D0:52","sha256":"6B:26:21:24:93:5C:9A:61:CF:22:B3:0D:8E:9B:37:8C:A2:DB:94:DE:EA:73:A3:27:4D:98:AD:1B:7E:8E:3C:CD"}}},"request":{"raw":"GET /Public/Home/static/imgs/advantage_phone.511b5ee0.png HTTP/1.1\r\nHost: gpt-oqs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/Public/Home/static/css/base.css\r\nCookie: PHPSESSID=sd7hqaugnmghbfpcdj65qe0hd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:26:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 29 Nov 2022 11:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6385e7cc-4ddc\"\r\nexpires: Fri, 22 May 2026 18:25:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fOeNmlms2n8ei8hcJrT8LpN3vW6WueItpMQ8Rx9oKwWY9KCtdOmJwz3l8gHsbRxhrbGX3X2pvm%2FfwCU3yTSzMtZfsh0s7J3RrWdUUqpNrJUVInswdsTBqWgXvWrFfQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06ad088e191a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19932,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 1038, 8-bit colormap, non-interlaced","md5":"511b5ee00b739dea06dc9e55011afa57","sha1":"eb4ebfdfc46829471c2b86dc94b2e6bc83037fb3","sha256":"31b768d13aee263d4de7af1b5527bded34ad208284df0544dfe5fca9d00a41e0","sha512":"54e06fd802883d46f47e6f59f3d795d893ea797d8295c1cbb506b91a46d0d1efa79751a454049c3e6b2ac06dd5a312950658d96fa9f8c3cefd1d46f73e5ebda4","ssdeep":"384:/M6qoHUBFHYEFyqYA3ar7vWF6cCf9X+VFMsTB:vXHULHpFyRxc0X+Q0B","tlshash":"fc92d0c78eb6894efba7c47c81508bf2617a282190e61dd5fa61e3a3b432645db36071","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-22T18:27:36.833033Z","times_seen":5429,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":329,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/Public/Home/static/imgs/community_bg.png","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:17.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gpt-oqs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 16:20:45 GMT","end":"Thu, 09 Jul 2026 16:20:44 GMT"},"fingerprint":{"sha1":"07:0F:71:8E:9B:03:DD:32:D1:B9:C2:15:44:26:6E:18:F1:3A:D0:52","sha256":"6B:26:21:24:93:5C:9A:61:CF:22:B3:0D:8E:9B:37:8C:A2:DB:94:DE:EA:73:A3:27:4D:98:AD:1B:7E:8E:3C:CD"}}},"request":{"raw":"GET /Public/Home/static/imgs/community_bg.png HTTP/1.1\r\nHost: gpt-oqs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/Public/Home/static/css/base.css\r\nCookie: PHPSESSID=sd7hqaugnmghbfpcdj65qe0hd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:26:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 29 Nov 2022 11:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6385e7cc-3c99c\"\r\nexpires: Fri, 22 May 2026 18:25:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y5RXiyVG4rHLWWt9HCQBCdFRrNk%2F1GiVSJP7HcMdV849yegmmRuO65JMvmkn3mpW6lo8lFjKZVF%2FXrOAlU37IWJBM8rTMTqtoRQtSzEX28j9TD96FuVD3QVq2s0IFA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06ad088e1c1a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":248220,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2892 x 936, 8-bit/color RGBA, non-interlaced","md5":"3107a5d7de66ac526ba295a6ccb85e2f","sha1":"7ca2f1ffe3ed6dfd6260e8a47643d30d6223aeb9","sha256":"1021f5b23b901a121fcf0f78866fb66c978411d309aef421c54af4cb09ff1b6f","sha512":"262a6554428da7f2bffcc71915ee13f5e9a504a2e76af61499ba7ec68713fdbba8b2f52d9b6ff8a9b13ae649103c6aaeb2e89f0dcf5411ec636a7c6ca5c26f7d","ssdeep":"3072:2cI5zu8n4youkJkjKrt88rRhc0ZmoZ/UYO5+90yCOo9XHhNkHLfuZVrD0BMdJ2oo:2V5b4G0ks8ybkwT9vBo9R2iP30BPdb9","tlshash":"73341284fd1e6df6cdf40db008629f4c7935a6ad8835d713a3b6e15d9eb754008be680","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-22T18:27:36.857593Z","times_seen":5125,"resource_available":false,"data":null}},"time_used":2159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1240,"receive":919,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/Public/Home/static/js/layer/skin/layer.css","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:17.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gpt-oqs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 16:20:45 GMT","end":"Thu, 09 Jul 2026 16:20:44 GMT"},"fingerprint":{"sha1":"07:0F:71:8E:9B:03:DD:32:D1:B9:C2:15:44:26:6E:18:F1:3A:D0:52","sha256":"6B:26:21:24:93:5C:9A:61:CF:22:B3:0D:8E:9B:37:8C:A2:DB:94:DE:EA:73:A3:27:4D:98:AD:1B:7E:8E:3C:CD"}}},"request":{"raw":"GET /Public/Home/static/js/layer/skin/layer.css HTTP/1.1\r\nHost: gpt-oqs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/\r\nCookie: PHPSESSID=sd7hqaugnmghbfpcdj65qe0hd7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:26:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 29 Nov 2022 11:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6385e7cc-36e0\"\r\nexpires: Thu, 23 Apr 2026 06:25:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cnso1ltxIVIGrzq50eyEKahdLf9hHsAnA6T4v5ZlXvEDII7Gv8If4uibhrtW9Tc4s2VxLw18kwJNK1L8pXUgKSlYD6o6k%2FozPbmrFelu5%2FuKPH%2B06k8rd9trOBUK%2BA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06ad092e401a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14048,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (13967), with CRLF line terminators","md5":"1673a003559ea1607dd77e6467a4baed","sha1":"954f4afa17e3d1c057101e62950f6c9506245550","sha256":"9748f440829e0b76d70f344e9c989f6d2302eba81aeea03211d40ef5f29fe62a","sha512":"5f9b8254fe18cdc329ca87a4852b7cb5520dcf3c406c5b3d755e99d0e7ddd618cd5ca2b455868ae14d896431cea2252b60d79d5fdd9e404a1fb8685a05ceb955","ssdeep":"192:9OcW0PmLeWVNrzztBm0T9zBKgwBnsY5Cb+RX:9PW0ijV1JbTyGY5CGX","tlshash":"1c5202e144811299b0278611d6dcbeba32f88d53e5630dbef2573c1f874c6dba2b6247","first_seen":"2025-04-07T11:37:37.344268Z","last_seen":"2026-04-22T18:28:09.609875Z","times_seen":3191,"resource_available":false,"data":null}},"time_used":901,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":901,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/Upload/public/69da12face90b.jpg","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:15.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gpt-oqs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 16:20:45 GMT","end":"Thu, 09 Jul 2026 16:20:44 GMT"},"fingerprint":{"sha1":"07:0F:71:8E:9B:03:DD:32:D1:B9:C2:15:44:26:6E:18:F1:3A:D0:52","sha256":"6B:26:21:24:93:5C:9A:61:CF:22:B3:0D:8E:9B:37:8C:A2:DB:94:DE:EA:73:A3:27:4D:98:AD:1B:7E:8E:3C:CD"}}},"request":{"raw":"GET /Upload/public/69da12face90b.jpg HTTP/1.1\r\nHost: gpt-oqs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/\r\nCookie: PHPSESSID=sd7hqaugnmghbfpcdj65qe0hd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:26:16 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 11 Apr 2026 09:23:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69da12fa-3fc3\"\r\nexpires: Fri, 22 May 2026 18:25:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7vo1leMnrHtfb2J94BgDA5bs%2FBAs5UsHXC4AQKnrXIPWugfX32qSycNsRFxR458GJHdM2OtRG12kyjjiEBtaZ68n76r3c8FRDFu1qGcgt%2BQ8t4BHVgRsfvop3WTMBw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06acffacbb1a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16323,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, progressive, precision 8, 266x297, components 3","md5":"63a88a925b88ba97d946a1e324720f5e","sha1":"481191bf411502cc8528e0882a6d2f0606f8233c","sha256":"35630843ad80990d2c42471d2cde8e8857fea6cf3fa2e99e022ee8a4b2a30709","sha512":"bf36bf8d2a6e1f51f916e8e07c50dd7aef3b40d06fa1ccf87ea3742b7e0c69299ecd9e6dfc935f07b26f1c85cd7c7d4c9665a241b74d225b00234144ce7b42d8","ssdeep":"384:SXdcAfS+c8wZ2HGSH0z3uYAAXUVWOxXnc8mdB0aPtf646:SXVafQHGSHu+teUZraF646","tlshash":"2972c07f5aa45fccfc3e02365a23a5f3bf491e09f592c5824541b5a33d9ab1366a3102","first_seen":"2026-04-22T18:26:41.806296Z","last_seen":"2026-04-22T18:27:06.473906Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/Upload/public/69e11b663e9ed.png","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:15.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gpt-oqs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 16:20:45 GMT","end":"Thu, 09 Jul 2026 16:20:44 GMT"},"fingerprint":{"sha1":"07:0F:71:8E:9B:03:DD:32:D1:B9:C2:15:44:26:6E:18:F1:3A:D0:52","sha256":"6B:26:21:24:93:5C:9A:61:CF:22:B3:0D:8E:9B:37:8C:A2:DB:94:DE:EA:73:A3:27:4D:98:AD:1B:7E:8E:3C:CD"}}},"request":{"raw":"GET /Upload/public/69e11b663e9ed.png HTTP/1.1\r\nHost: gpt-oqs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/\r\nCookie: PHPSESSID=sd7hqaugnmghbfpcdj65qe0hd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:26:16 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 16 Apr 2026 17:24:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69e11b66-1557\"\r\nexpires: Fri, 22 May 2026 18:25:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0RP%2BO7qmbEVHmcs6C%2B5ZdsS8aJ1azAsvhttp0kJwbVxerZLilfw9nIy%2F6GKyFhQ33W8volKeeVXJpsLouU35QWOWsrNnFH6iMlPaxeETRkx1U8XH9vGxb1aSYsxEbw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06acffacbf1a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5463,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"a93c8d5e8bed4316fef3423563e15b7d","sha1":"7e3f2560a7d0b361b561e84ecf36f52bce0ff986","sha256":"0683da999eacbfadaf5b551939dc7bf23bb58454ee2829649360aeabce205820","sha512":"9706e0412f2ace6e40c8f67888c4cf676d8de55316bb7b331a6c5c7625801b8cae24fd9d3c74ae0973f5ff8788c3a5907388f8bc114d0e8ac5b9d2271ea46701","ssdeep":"96:gAyzi/AxTZnIRCn2PLZ9Pk7N8PY2ew+TOL09URHmGVfdoTuASjP51+Zhv2gH2bsT:gbi/0VIs2PUN8PY25+TU09Qd1A+f+Hvd","tlshash":"c0b1bee5576976d0979c08c36c3b0ad8791e3dc6e246d6a80630cb4a3c3f02eb91bce0","first_seen":"2026-04-22T18:26:41.812996Z","last_seen":"2026-04-22T18:27:06.482057Z","times_seen":2,"resource_available":false,"data":null}},"time_used":912,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":912,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/Upload/public/69e11c7e08fab.jpg","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:15.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gpt-oqs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 16:20:45 GMT","end":"Thu, 09 Jul 2026 16:20:44 GMT"},"fingerprint":{"sha1":"07:0F:71:8E:9B:03:DD:32:D1:B9:C2:15:44:26:6E:18:F1:3A:D0:52","sha256":"6B:26:21:24:93:5C:9A:61:CF:22:B3:0D:8E:9B:37:8C:A2:DB:94:DE:EA:73:A3:27:4D:98:AD:1B:7E:8E:3C:CD"}}},"request":{"raw":"GET /Upload/public/69e11c7e08fab.jpg HTTP/1.1\r\nHost: gpt-oqs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/\r\nCookie: PHPSESSID=sd7hqaugnmghbfpcdj65qe0hd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:26:16 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 16 Apr 2026 17:29:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69e11c7d-25d1\"\r\nexpires: Fri, 22 May 2026 18:25:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e%2F%2FHK5c3XdYxBIPD3PGshIHr%2FOhqLKIyzkA3pVWuD3xVTVVyZiUulrWgVX6LlQOIS63CVwwU0hwUXrjZrC5uNyNhu%2Bh5I23NeLHG9byv4rJzlH2JPhWFd0uVECLOog%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06acffacc21a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9681,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"7a2a0af962ff8b8f63b6b1d377822760","sha1":"cbeb158f4e431985d9faf866437f06968d5b6a6c","sha256":"00ac73a3495e97d5f9df7cfd1a23b7288ed953294b17a95643e3f174fcf28f54","sha512":"73e9f48ebbd0a6938a30608026bc0cacff09f3ca2261168de6be7f46daf706c6c2ef9b64af135334b50d8373d9dea10b0760068c7878819e202f0cfc705634b5","ssdeep":"192:PtJRZXelz6D1sPlSzAzON4tM/1hiqFh4ksdGoUeak7bXgKk6B8W6Wr:lRXeM/HT/izHwbEbQKk6f6Wr","tlshash":"30127c1d58acdfc674ca477669c76783f783e97368271634149a604a50f743d4a0b17c","first_seen":"2026-04-22T18:26:41.814412Z","last_seen":"2026-04-22T18:27:06.451643Z","times_seen":2,"resource_available":false,"data":null}},"time_used":924,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":923,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.staticfile.org/pako/1.0.10/pako.min.js","fqdn":"cdn.staticfile.org","domain":"staticfile.org","tld":"org"},"ip":{"addr":"134.122.173.178","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:15.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"staticfile.org","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 03 Apr 2026 00:00:00 GMT","end":"Thu, 02 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"58:76:03:0C:93:D1:CD:E1:B0:EC:46:C0:4E:0B:04:86:E4:80:3B:93","sha256":"20:3D:7B:D4:00:D1:45:86:5F:27:E9:99:0E:00:64:64:58:38:47:BE:A5:CE:E8:D4:04:AF:81:88:25:F2:0A:01"}}},"request":{"raw":"GET /pako/1.0.10/pako.min.js HTTP/1.1\r\nHost: cdn.staticfile.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With,token\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Wed, 22 Apr 2026 18:26:16 GMT\r\nexpires: 0\r\npragma: no-cache\r\nserver: nginx\r\nx-cache: BYPASS\r\nx-cdntype: readnode-012\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45988,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (45987)","md5":"64413eda72405dd1d28bbb64d900c778","sha1":"6086b751c4f4c90bbd0521b6bfe5279fd4eb55da","sha256":"29cfa0542b9864b6640cfdcc8f15b184db6431b532db2702a3ce97e5f2a7fc1c","sha512":"7ae59cfd0bfc2a9d026d35f533e43706f532a0e6aaf40bb9d134fbbf3dcc15fe6f7abdfdc9babacd5f919e00d8f1e37c0084058a0c63c18bfa8e1a0fe78eaf7d","ssdeep":"768:7feBUDB3FA8/nVPg0kKWslV7hF/PGjMhuAEIzg49n3cG:zeG/9hF/+jZAEI0O3cG","tlshash":"1a23f6a630f651a82be118d8909b2b96217051326c0519f9e378dde43cb4dcfe17fa7e","first_seen":"2023-03-07T12:10:43Z","last_seen":"2026-04-22T18:27:36.84854Z","times_seen":3755,"resource_available":true,"data":null}},"time_used":1384,"timings":{"blocked":533,"dns":1,"connect":268,"send":0,"wait":276,"receive":0,"ssl":303},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"cdn.staticfile.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/Public/Home/static/imgs/ios_down.e011cb37.svg","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:17.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gpt-oqs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 16:20:45 GMT","end":"Thu, 09 Jul 2026 16:20:44 GMT"},"fingerprint":{"sha1":"07:0F:71:8E:9B:03:DD:32:D1:B9:C2:15:44:26:6E:18:F1:3A:D0:52","sha256":"6B:26:21:24:93:5C:9A:61:CF:22:B3:0D:8E:9B:37:8C:A2:DB:94:DE:EA:73:A3:27:4D:98:AD:1B:7E:8E:3C:CD"}}},"request":{"raw":"GET /Public/Home/static/imgs/ios_down.e011cb37.svg HTTP/1.1\r\nHost: gpt-oqs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/Public/Home/static/css/base.css\r\nCookie: PHPSESSID=sd7hqaugnmghbfpcdj65qe0hd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:26:17 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 29 Nov 2022 11:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6385e7cc-2edd\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d3saD%2BiabjHB6hHxPPuVWW0ZPgLGPRDQWmeziuCCm8blWxVOrOK%2Fu9Rf%2F12uTcMlW9uTCuSi5UUv9MQooPKzM8Rj%2BQbUf6M1stzrf4xH1dhRJOlZsY0xRq4GDau3gw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06ad087e161a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11997,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e011cb37e1cdc749fa40e455f952c628","sha1":"c102a94a6beb0a26de83c2e21ab6ab409f265e88","sha256":"5b8c67057adbf739c8bbe363ef30d3e57638991690cd9930aa237e5b408849ac","sha512":"a92a160de1026815ca8078f6cc059fb8fba29284a5c792295a9755e8f6e3c10ae138c90b0cac9774f35cdf430106e4a7ccb5c88729e9750e867cf826479001fa","ssdeep":"192:sb39cIK/24cUfDfcFDOlozy6RWSmwQn0F3TRe3nclNXAJdlIPprWl:2mIK+OrcFKozy6RrIni+nKNXAXlI0l","tlshash":"9b3255f79354c0c4791e99e5cc3f1ae93a0ef0fb9a81a08832ade841e753ddd865ad44","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-22T18:27:36.843253Z","times_seen":4087,"resource_available":false,"data":null}},"time_used":938,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":938,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/Public/Home/static/imgs/advantage_bg.a5d6d444.png","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:17.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gpt-oqs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 16:20:45 GMT","end":"Thu, 09 Jul 2026 16:20:44 GMT"},"fingerprint":{"sha1":"07:0F:71:8E:9B:03:DD:32:D1:B9:C2:15:44:26:6E:18:F1:3A:D0:52","sha256":"6B:26:21:24:93:5C:9A:61:CF:22:B3:0D:8E:9B:37:8C:A2:DB:94:DE:EA:73:A3:27:4D:98:AD:1B:7E:8E:3C:CD"}}},"request":{"raw":"GET /Public/Home/static/imgs/advantage_bg.a5d6d444.png HTTP/1.1\r\nHost: gpt-oqs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/Public/Home/static/css/base.css\r\nCookie: PHPSESSID=sd7hqaugnmghbfpcdj65qe0hd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:26:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 29 Nov 2022 11:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6385e7cc-77e9\"\r\nexpires: Fri, 22 May 2026 18:25:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bUGHyYime1f1XsnMUJAvZghs%2FbfGqxbRhZ7vXCMP9mP6zBeFfpaE0IFEAZnhp1YFLP82c%2BRMgAuQ8SQ74WwUFSKtWF0KjbUfaWPXVde4g6U10OWxycgTUolmZvUneg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06ad088e181a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30697,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1392 x 1048, 8-bit colormap, non-interlaced","md5":"a5d6d444c8524a6d8e39fa1618582284","sha1":"4fda97683b94717d7597718b1e01c4a091f78ff2","sha256":"b2503b762cb8bf80f11571c1a10ac888258b78cc2a3a847780dfecef23dbb39b","sha512":"cfaf1fb56063ecbfc8d8a07ca56e6be8663b32188308ea349debd55b57e847c8005dbcbb1d72dfb8a7ca7873da81e44ed4b993345d673cf78bb3d3045f5cca11","ssdeep":"768:J1+dBPa7fkey90Yf5vWOjCuMg4+26RwDN1OvagerN6gA30Mh:3+dVa7fke7YlV14+d/vageR6gI","tlshash":"dad2e1dcf0f1d689567b11af43f47e48f5a5377e223344a05bade009a28095b3a7b41e","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-22T18:27:36.836752Z","times_seen":5405,"resource_available":false,"data":null}},"time_used":1139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1137,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/Upload/public/69da0e72c21bc.jpg","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:15.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gpt-oqs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 16:20:45 GMT","end":"Thu, 09 Jul 2026 16:20:44 GMT"},"fingerprint":{"sha1":"07:0F:71:8E:9B:03:DD:32:D1:B9:C2:15:44:26:6E:18:F1:3A:D0:52","sha256":"6B:26:21:24:93:5C:9A:61:CF:22:B3:0D:8E:9B:37:8C:A2:DB:94:DE:EA:73:A3:27:4D:98:AD:1B:7E:8E:3C:CD"}}},"request":{"raw":"GET /Upload/public/69da0e72c21bc.jpg HTTP/1.1\r\nHost: gpt-oqs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/\r\nCookie: PHPSESSID=sd7hqaugnmghbfpcdj65qe0hd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:26:16 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 11 Apr 2026 09:03:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69da0e72-32ef\"\r\nexpires: Fri, 22 May 2026 18:25:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Se2HOG4aj%2FE0sM5W4%2FRWXLqIwzjOOrZ7eTH6M19zMvtWjFwdYGylhu3qFz3sYO%2F9wZKYncFJMX3aBKOkswZ7WM%2FIDAR1PCjdl37BZhw09kkGNJrd7W40gkj8X7sMfg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06acffacbe1a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13039,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, progressive, precision 8, 265x269, components 3","md5":"ffc824909369eb648e3c7f4dc7b42834","sha1":"7bb7e7d4cbe9b4c0f129b0c3a3fd95eb6a8cba07","sha256":"3d64769b3e385044f5dda4da5435a581ba8d02d891c6279d530855692a2ccd66","sha512":"7110f7745f0a1afec104a7877dc380fdb7a1f44695a3e2393216c602bb6e3613f5fd8a62a240ba2383c680da8920aeec27ce51e6298ba17a394829af4a73b342","ssdeep":"192:p3Oade2n3UaSVewEhfFJ7iSwfsHiM5TqYvCxZzkSRzFOtUyQ+DshjN+H:pzTUaSVxSf7OSLtRqlkS5FOtUl+y0","tlshash":"8142bf41e7f9926ed99413318e36eb540aff1562630b0eabb2502601f95996eccd8b90","first_seen":"2026-04-22T18:26:41.828875Z","last_seen":"2026-04-22T18:27:06.491707Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/Public/Home/static/imgs/icon_contract.svg","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:15.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gpt-oqs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 16:20:45 GMT","end":"Thu, 09 Jul 2026 16:20:44 GMT"},"fingerprint":{"sha1":"07:0F:71:8E:9B:03:DD:32:D1:B9:C2:15:44:26:6E:18:F1:3A:D0:52","sha256":"6B:26:21:24:93:5C:9A:61:CF:22:B3:0D:8E:9B:37:8C:A2:DB:94:DE:EA:73:A3:27:4D:98:AD:1B:7E:8E:3C:CD"}}},"request":{"raw":"GET /Public/Home/static/imgs/icon_contract.svg HTTP/1.1\r\nHost: gpt-oqs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/\r\nCookie: PHPSESSID=sd7hqaugnmghbfpcdj65qe0hd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:26:16 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 29 Nov 2022 11:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6385e7cc-487\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EEnGCVMfOGTCFeAb%2BU3OEJfoWGE3QPqYAE2OgVaGq%2F58HCWosI51pMEOPKQlPRY0EYnAQL74IYdN2yO1ucqQbDZDalSa5DT2FM6WmlOCjdY%2BgMl3HnT%2BxydlExDVXw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06acffacc71a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1159,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8be2edf2728aa394553b4fd9a44471f0","sha1":"1afec38a2c761fbd902e1de55d280424335aeeca","sha256":"306f962a6980e05ac92e3e8d3b1818e864f5557237541ab81cf2a15c44a190aa","sha512":"cd25567c0782132f9dcf858b252b11d1343a57a747b1bdbb7094b31baa1074528bc86fafeb66ac71997b4f4ae50e20c56373774f0f79fbf4b2ed339be8000ed4","ssdeep":"","tlshash":"b421ce69623543b9f04a82b212c9f47f353e06d8f1cb44c9e5671e20206e82ebca96c3","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-22T18:27:36.855818Z","times_seen":2549,"resource_available":false,"data":null}},"time_used":889,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":889,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/Public/Home/static/imgs/icon_etf.svg","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:15.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gpt-oqs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 16:20:45 GMT","end":"Thu, 09 Jul 2026 16:20:44 GMT"},"fingerprint":{"sha1":"07:0F:71:8E:9B:03:DD:32:D1:B9:C2:15:44:26:6E:18:F1:3A:D0:52","sha256":"6B:26:21:24:93:5C:9A:61:CF:22:B3:0D:8E:9B:37:8C:A2:DB:94:DE:EA:73:A3:27:4D:98:AD:1B:7E:8E:3C:CD"}}},"request":{"raw":"GET /Public/Home/static/imgs/icon_etf.svg HTTP/1.1\r\nHost: gpt-oqs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/\r\nCookie: PHPSESSID=sd7hqaugnmghbfpcdj65qe0hd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:26:16 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 29 Nov 2022 11:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6385e7cc-55f\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U716OKOGYroVDa6QHjjNYdN3oM%2F2DGM%2BmuM2ifYV1kQDfV0X%2F9M0Mr%2B6qODNw8ek8dfg9lfKOT6z2zGz0jAmcVXgVtgxjfUj%2Frf%2F6dgNz0J%2F88lko6CZZhhJIxhX9g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06acffbcc81a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1375,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6e432564e65f8779c665055d5bf9f563","sha1":"dc529670e33c8baace696f7ed4c3ef3bbe9cad90","sha256":"2df7417ef0acff023bffea1bf0c6366884770c1dab4d191f24ec29c84d2b7031","sha512":"cec79f984f55609c45347e0a6b9e885fec23baadfb00fca179eeed2b2902e5a8659649b6e4d7c0711a40bff90b8acfb7b8823a89beb53f9e836211ef89f17c3e","ssdeep":"","tlshash":"cf21e9fd204aaa29b35dc352ab2961f4184610fe1f35e4c1dbf855143c1cbfe495a1db","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-22T18:27:36.838794Z","times_seen":2545,"resource_available":false,"data":null}},"time_used":949,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":949,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/Public/Home/static/imgs/advantage_phone_ui2.03eb46c4.png","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:17.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gpt-oqs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 16:20:45 GMT","end":"Thu, 09 Jul 2026 16:20:44 GMT"},"fingerprint":{"sha1":"07:0F:71:8E:9B:03:DD:32:D1:B9:C2:15:44:26:6E:18:F1:3A:D0:52","sha256":"6B:26:21:24:93:5C:9A:61:CF:22:B3:0D:8E:9B:37:8C:A2:DB:94:DE:EA:73:A3:27:4D:98:AD:1B:7E:8E:3C:CD"}}},"request":{"raw":"GET /Public/Home/static/imgs/advantage_phone_ui2.03eb46c4.png HTTP/1.1\r\nHost: gpt-oqs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/Public/Home/static/css/base.css\r\nCookie: PHPSESSID=sd7hqaugnmghbfpcdj65qe0hd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:26:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 29 Nov 2022 11:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6385e7cc-1fc3\"\r\nexpires: Fri, 22 May 2026 18:25:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u9a1%2FjQW1Et4bPd1dbFFIcdvSjV1tyIYTSZXHpJXP3omNPxQMriuXbjfVNoqteQTRsqbcUlZ3t0x6vQj92h71wx%2FdGKDqfGPu8gXPtIQunKSvvMec%2FSq3UzUr%2FZ8Vw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06ad088e1b1a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8131,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 620 x 414, 8-bit colormap, non-interlaced","md5":"03eb46c414ca4054d6aa8bcc6146e203","sha1":"1ad3fe2ee83e35506f404b3dc6110540539e32c6","sha256":"98f20bbbd1c55089292d663c5a641e6cb4d02e91149bd3b1dbfa3dc87168d1fd","sha512":"e59d6713424efe87e45984399aab1739b3b1ff7cde9fff91c83582110c669f9bf299ccb30a7286bec64c48243f887f701f27051f9e6e8b4445c9e927505db019","ssdeep":"192:vri1p22NLEFORfDwDmxiEVHkmrogfcftKLatznubkt:vriOMR8DmxiEVkafc4czuu","tlshash":"2ef1afc2d9d35ddf9d9c0b2b34cbf454844249d0eac68d05d74245a8f8be082abe3d9d","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-22T18:27:36.826903Z","times_seen":5472,"resource_available":false,"data":null}},"time_used":668,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":668,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"api.huobi.pro/ws","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:17.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /ws HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://gpt-oqs.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: cO1eZeD9C1VT/ZYLbuNzzA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nConnection: upgrade\r\nServer: openresty\r\nDate: Wed, 22 Apr 2026 18:26:17 GMT\r\nupgrade: websocket\r\nsec-websocket-accept: HPYSi8G8lV1mOqU8fdEgPicRH/4=\r\nRequest-ID: 428b084f56963caf6e47916d6ddb9e5a\r\nX-Request-ID: 56c1bb2b43b9d5536e3c65786b74b89d\r\nX-Cache: Miss from cloudfront\r\nVia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: OSL50-P3\r\nX-Amz-Cf-Id: f0nPnLYVD-GhM3M3UdpqPNvGNWxP6p8X4oERYyOCIU70OoCXu8EPWQ==\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T23:09:24.873355Z","times_seen":14078528,"resource_available":true,"data":null}},"time_used":749,"timings":{"blocked":0,"dns":10,"connect":10,"send":0,"wait":721,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/favicon.ico","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:18.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gpt-oqs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 16:20:45 GMT","end":"Thu, 09 Jul 2026 16:20:44 GMT"},"fingerprint":{"sha1":"07:0F:71:8E:9B:03:DD:32:D1:B9:C2:15:44:26:6E:18:F1:3A:D0:52","sha256":"6B:26:21:24:93:5C:9A:61:CF:22:B3:0D:8E:9B:37:8C:A2:DB:94:DE:EA:73:A3:27:4D:98:AD:1B:7E:8E:3C:CD"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: gpt-oqs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/\r\nCookie: PHPSESSID=sd7hqaugnmghbfpcdj65qe0hd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:26:18 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\nlast-modified: Wed, 11 Mar 2026 12:39:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69b16285-a892\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WxRKuHS8fCs6DZy2tInANk7D6hzXDomh%2FvlTKgS1sxc47nopfntVhBFOdW1woe83PShaxpBSx7s1U2TdSLrGkEXrLLXiR40nCyHrOFtYWsHWARKAtppDYyAczfsJjg%3D%3D\"}]}\r\ncf-ray: 9f06ad10ef791a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43154,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 1563 x 1563, 8-bit/color RGBA, non-interlaced","md5":"6921fe357f4b9f38a2beba8c221a0e9d","sha1":"defa4a67168ae3c5106363d41bfd355f412a8a79","sha256":"dda2d34ac9c33d040a42231c0fb4f53315aa7c2c686575700c41f6d25dddd002","sha512":"19eea5ebd97281203a602b1fc746086dc1d59f250ef7678fde551d28c688d1b690320941b6aa8b34163dbff87767f8a2ab6f34efc8bd7a10da4f239a66760d76","ssdeep":"768:bA6642FLEMg27QvObsCTCmJ+uo2iU9jQIabbbb2bbbbrojH/RpY8TmkieigPAD:b042RhggQWbZI2ignsfNFNig4D","tlshash":"9e138da022179de6ce9514b98c3a1ffc776e1bea375d935343e762590a33bc098b0718","first_seen":"2026-03-25T18:42:34.317226Z","last_seen":"2026-04-22T18:27:36.847905Z","times_seen":14,"resource_available":false,"data":null}},"time_used":585,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":299,"receive":286,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/Public/Static/bootstrap5Slide/style.css","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:15.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gpt-oqs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 16:20:45 GMT","end":"Thu, 09 Jul 2026 16:20:44 GMT"},"fingerprint":{"sha1":"07:0F:71:8E:9B:03:DD:32:D1:B9:C2:15:44:26:6E:18:F1:3A:D0:52","sha256":"6B:26:21:24:93:5C:9A:61:CF:22:B3:0D:8E:9B:37:8C:A2:DB:94:DE:EA:73:A3:27:4D:98:AD:1B:7E:8E:3C:CD"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/style.css HTTP/1.1\r\nHost: gpt-oqs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/\r\nCookie: PHPSESSID=sd7hqaugnmghbfpcdj65qe0hd7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:26:16 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 29 Nov 2022 11:06:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 23 Apr 2026 06:25:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6385e7cc-24d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qkkGNOpG%2FJEfclJnl13v3xWEeAGGSgt5SN5H8WScYF%2F9bZFUkBSTJW4fWDIuFkb4HWsjIiW85yc59NB%2BND%2BE84tumbjZgnXFE6QG5kx1iWUASPYT9Ky7VMLUI0cmTA%3D%3D\"}]}\r\ncf-ray: 9f06acff9cac1a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":589,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (589), with no line terminators","md5":"df62cb99d119a66bcd5f06547d96ecb7","sha1":"a6d0e097db0919f47977c33510359bc08ec88a9c","sha256":"afca52e1c0203f27bf8165e8fcf92b2674f084f6372f12cc1e7bb3edaee35f03","sha512":"59d599c3a25a64cfae94e1b2f1328abffb199a503c0e8904a3e4a574c101cb6b72d09e94a7b2afaa3f8cbd1a55b92cb2b2bdc33b528ee6c953d30fa3b622cf0f","ssdeep":"","tlshash":"a2f07f42b71a596e5d872300a9d213abf10c7f319709097992f3211d8f29a85237df4e","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-04-22T18:27:50.026033Z","times_seen":6089,"resource_available":false,"data":null}},"time_used":913,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":913,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/Upload/public/6907a78794d1b.jpeg","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:15.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gpt-oqs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 16:20:45 GMT","end":"Thu, 09 Jul 2026 16:20:44 GMT"},"fingerprint":{"sha1":"07:0F:71:8E:9B:03:DD:32:D1:B9:C2:15:44:26:6E:18:F1:3A:D0:52","sha256":"6B:26:21:24:93:5C:9A:61:CF:22:B3:0D:8E:9B:37:8C:A2:DB:94:DE:EA:73:A3:27:4D:98:AD:1B:7E:8E:3C:CD"}}},"request":{"raw":"GET /Upload/public/6907a78794d1b.jpeg HTTP/1.1\r\nHost: gpt-oqs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/\r\nCookie: PHPSESSID=sd7hqaugnmghbfpcdj65qe0hd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:26:16 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 02 Nov 2025 18:48:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6907a787-2044a\"\r\nexpires: Fri, 22 May 2026 18:25:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aGEb82I%2B55r1Oz7VI2N08sIiPlFYcgzr1yv%2B7gJk3GS0JXZecvyz42sn1ONCNjLlC19k6BAg%2BA161Wf%2F14tgCjpG4BPZSlEfbyqp0iiFsbRKt0f%2FFWHlWPhEQgq9ag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06acff9cb51a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":132170,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 750x300, components 3","md5":"dfde2097912178e1ade955a1479e4158","sha1":"2a46f5160255b5b99a32ffc7c0dbec89a2ff98dc","sha256":"09dce8313f5e10579c1f58032cc3397cb4b253cf9d4c8a0b858402cef5d397a0","sha512":"34b2608914c24f8754a8097b7cb752fa1960934c3be9270110cdc6d492ba99ddbf086d4c61c29789527849041d824979186f6e0af199f8efd181a22a11d2cb07","ssdeep":"3072:aJmM1CFqby70UZh28jBlZQZLoSMi60EL5+DuWXqT1mBkOZw0C1oPSnWnWnWnWGH:9MGw+FjBl6LoSMi/Ed+DuWXqTox5CSPb","tlshash":"8fd3f130ebcbdb061b9f446888fdac23076a19f811de90166f250df5f5cabb554424bd","first_seen":"2023-05-21T16:18:43Z","last_seen":"2026-04-22T18:27:36.844887Z","times_seen":4450,"resource_available":false,"data":null}},"time_used":1795,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1198,"receive":597,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/Upload/public/69e11d415e8ed.png","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:15.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gpt-oqs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 16:20:45 GMT","end":"Thu, 09 Jul 2026 16:20:44 GMT"},"fingerprint":{"sha1":"07:0F:71:8E:9B:03:DD:32:D1:B9:C2:15:44:26:6E:18:F1:3A:D0:52","sha256":"6B:26:21:24:93:5C:9A:61:CF:22:B3:0D:8E:9B:37:8C:A2:DB:94:DE:EA:73:A3:27:4D:98:AD:1B:7E:8E:3C:CD"}}},"request":{"raw":"GET /Upload/public/69e11d415e8ed.png HTTP/1.1\r\nHost: gpt-oqs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/\r\nCookie: PHPSESSID=sd7hqaugnmghbfpcdj65qe0hd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:26:16 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 16 Apr 2026 17:32:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69e11d41-1378\"\r\nexpires: Fri, 22 May 2026 18:25:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R8AGjpjKvAOZPz6CvR%2BQbeIY%2FQN7ykk0VrYNMuUyiriCxqE89ubnTB2ot3lg0mDsSFPwtf6e2gqHDQShYFPnHbvrRoQ9YmrcV5RYQghrbxxnSLuoZHAitf53pn6Kyw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06acffacc31a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4984,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 285 x 177, 8-bit colormap, non-interlaced","md5":"21af9b816169248610845690f9f6d933","sha1":"fcd56c8e0d68ede68b1deed93498202d27995f1d","sha256":"003a084a0ef9b584c31a7ec352be537bff88fe4546e234ebad93ba2659ec8785","sha512":"5a5208faf6ead00082c834ffb9a39cafc0ce82e81c8f4585fba43087ba1b27271d356af6395b4f5babfeb25e5a67d5493998d8114c75ba88d4b21d7b72e0929d","ssdeep":"96:zPHlz7g18PrcQYqZiJaKhVQ4XKpl6JlKVwrzY2znGhB48prp5:zJTmq8CXl6Pmwr8onI48J","tlshash":"e3a18d8bdf2d0e4e57750d70c6f6445eba6fff59a06200ad31451952c22be3dfc89512","first_seen":"2025-04-17T23:40:09.017951Z","last_seen":"2026-04-22T18:27:06.49337Z","times_seen":4,"resource_available":false,"data":null}},"time_used":894,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":894,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/Public/Home/static/imgs/icon_margin.svg","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:15.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gpt-oqs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 16:20:45 GMT","end":"Thu, 09 Jul 2026 16:20:44 GMT"},"fingerprint":{"sha1":"07:0F:71:8E:9B:03:DD:32:D1:B9:C2:15:44:26:6E:18:F1:3A:D0:52","sha256":"6B:26:21:24:93:5C:9A:61:CF:22:B3:0D:8E:9B:37:8C:A2:DB:94:DE:EA:73:A3:27:4D:98:AD:1B:7E:8E:3C:CD"}}},"request":{"raw":"GET /Public/Home/static/imgs/icon_margin.svg HTTP/1.1\r\nHost: gpt-oqs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/\r\nCookie: PHPSESSID=sd7hqaugnmghbfpcdj65qe0hd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:26:16 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 29 Nov 2022 11:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6385e7cc-654\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OZOw5fnUJI4YDktPkleLYWL3m2lLxxWIHUzTLm3%2BG6SdYfaRmgbIH1yTfQaJB8ZfbIEEN0836YUrQ88PgM92LA05JA20MmVSyieyRa%2FViuEjDtKs5%2FIVq5EB1oP1zQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06acffacc61a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1620,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"283d6ddfb29042011328571a509df448","sha1":"3e486c50cfe119efc43c68ffafa349670c9f919c","sha256":"e88581cf4375fb6f9e7d94b4f9df4a667677d0d96384227c9a9228b1329f3308","sha512":"78e85634891dbc1423281f54e43c362b9cf8c75c83a070c34b36676b72b7b71e7793b2224c6d820eb870a0f7d854b336334b8ba0bca9125854139aaf2a97bc91","ssdeep":"","tlshash":"4e3120883a7ac39ce500e7ad981bb5ac3e1e04e96684c5d9c3e22c1078d2a59dc98dd7","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-22T18:27:36.826422Z","times_seen":2529,"resource_available":false,"data":null}},"time_used":880,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":880,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Nunito:wght@400;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:16.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /css2?family=Nunito:wght@400;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 22 Apr 2026 18:26:16 GMT\r\ndate: Wed, 22 Apr 2026 18:26:16 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5463,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"721a040ea564a6f1097d3c9fc78e4478","sha1":"969b3a763c65bbea8dd653387efe6482fd53f614","sha256":"1eab5e802b5f0457aaad88e630b825da8ed3ba340a35a34b5f6901d9d84bdad1","sha512":"44cce6feb92211ced4be081e6a2c9c0c63b0fc22a7243396544d0d88b4736d6e6d62ee3cad5136dda1b21e3f4eac55d6b465a0b28922df3565bc5bef366db625","ssdeep":"96:BOEabTxOEa7FZOOOEaKOEaQJc+uaOEaENqOxMabTxOxMa7FZOOOxMaKOxMaQJc+m:OH+yptkUkH0yXLkeLHbywkkdH","tlshash":"5eb17891045bd400aa432cc667cf7f37ed4e62113464c57aebfd9898ecabd272264b1e","first_seen":"2025-09-17T11:57:27.939025Z","last_seen":"2026-04-22T18:27:50.084802Z","times_seen":1108,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":131,"dns":1,"connect":7,"send":0,"wait":18,"receive":0,"ssl":120},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/Public/Home/static/imgs/android_down.d99dd6cc.svg","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:17.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gpt-oqs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 16:20:45 GMT","end":"Thu, 09 Jul 2026 16:20:44 GMT"},"fingerprint":{"sha1":"07:0F:71:8E:9B:03:DD:32:D1:B9:C2:15:44:26:6E:18:F1:3A:D0:52","sha256":"6B:26:21:24:93:5C:9A:61:CF:22:B3:0D:8E:9B:37:8C:A2:DB:94:DE:EA:73:A3:27:4D:98:AD:1B:7E:8E:3C:CD"}}},"request":{"raw":"GET /Public/Home/static/imgs/android_down.d99dd6cc.svg HTTP/1.1\r\nHost: gpt-oqs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/Public/Home/static/css/base.css\r\nCookie: PHPSESSID=sd7hqaugnmghbfpcdj65qe0hd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:26:17 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 29 Nov 2022 11:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6385e7cc-2d6a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yKsFka9VTrc1BPkqUI3GG9%2BaQW9RzjZH%2FVACMAG%2FGKY4y0DAE0wpP2kB0jkTmKFpIavIFvxkplgnz3ymWmxChtQi5wLl4a9KRo9Zr66qCWTxAUwitxoaOQibtBq6qg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06ad088e171a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11626,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d99dd6cc9eeb67a17b5f64eee801202c","sha1":"6e11cb75b0529af92236763785b69749f62fee4d","sha256":"dc8a78d121b34f655fc063f43d4ef8cec3581d8539369f35f2ae0258a5735954","sha512":"fea5046497f492375a2bde60559ebfb91f67e52685d5b8055c2fd585809cfc98c3bf1a2bb0b20aa00e390c75533ba327d1b66194709fffe3c236fea363c0aed1","ssdeep":"192:Wt1zfau5v7dYMyr8R0tjFnR0tmWi2C/FNNW6xX8jVCZVzLQTsMH6IL:MzfhzS8+pn+mW4FNNFXZZJvw6IL","tlshash":"693255e793a4c0d0690fd5b5cd3b5ae43e1b70fbafc19058326dd944eb429d68b06e48","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-22T18:27:36.839895Z","times_seen":4105,"resource_available":false,"data":null}},"time_used":896,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":896,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/Public/Home/static/imgs/advantage_phone_ui1.7a062617.png","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:17.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gpt-oqs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 16:20:45 GMT","end":"Thu, 09 Jul 2026 16:20:44 GMT"},"fingerprint":{"sha1":"07:0F:71:8E:9B:03:DD:32:D1:B9:C2:15:44:26:6E:18:F1:3A:D0:52","sha256":"6B:26:21:24:93:5C:9A:61:CF:22:B3:0D:8E:9B:37:8C:A2:DB:94:DE:EA:73:A3:27:4D:98:AD:1B:7E:8E:3C:CD"}}},"request":{"raw":"GET /Public/Home/static/imgs/advantage_phone_ui1.7a062617.png HTTP/1.1\r\nHost: gpt-oqs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/Public/Home/static/css/base.css\r\nCookie: PHPSESSID=sd7hqaugnmghbfpcdj65qe0hd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:26:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 29 Nov 2022 11:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6385e7cc-1fde\"\r\nexpires: Fri, 22 May 2026 18:25:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eJ1HliQLLi39k7DlRoR4%2BWDkAVPn%2FetJ0z5TewDQGQscFyndF5BTwpaldTqhcsP8DJHRuLcU8re4wZOVgDDWcxFLC5tX11X%2Btk8Y40sbPyX2jp4D9R1%2FF%2Bws1xU8Ew%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06ad088e1a1a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8158,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 620 x 384, 8-bit colormap, non-interlaced","md5":"7a06261784d3908ab66f836816376de0","sha1":"3ea8a00b11b016e46703e0b873f005eb5e70adf3","sha256":"c6aa1f5b958419cbaa53682faf70d19d2737d2fc3ec58aeda3f83de3802ac4d0","sha512":"fd838b02e21d15d948d357fcea888bc7fe11bbe2d268d82f6b5f14341b2f253f5ffc6f8f34bac7beb7cead9c4780f6d4ee0b1e73db99ad3c681839965c886572","ssdeep":"192:RCD7357jDYAgAY0UKt/wetdU7BxeTKgPG2ZgwPhlTAAAAAI+GpYSTOFgWsh:RC3357ZXt67reegPG2ZvPDgGhCCWU","tlshash":"4df1ae00e21cefc3fdfce446b5a9916f24b44271323294ce50a39b65d8f459fa7966b0","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-22T18:27:36.847366Z","times_seen":5414,"resource_available":false,"data":null}},"time_used":912,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":912,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.3.0/font/fonts/bootstrap-icons.woff?4601c71fb26c9277391ec80789bfde9c","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:17.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.3.0/font/fonts/bootstrap-icons.woff?4601c71fb26c9277391ec80789bfde9c HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://gpt-oqs.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 18:26:17 GMT\r\ncontent-type: font/woff\r\ncontent-length: 106812\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.3.0\r\nx-jsd-version-type: version\r\netag: W/\"1a13c-GxDOCA4lYqi36DlQRNPKg9wRKZk\"\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230120-FRA, cache-bma-essb1270030-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 2988286\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AbH%2FJ%2BZt3tz9xj7uOdxXIevMBjLt02SWUCHaqGgYaY19PE9hh%2FxyCEJQXAullqxx3JqvPDvHMoMDu5TvrnXjovaCPFHN%2FBm2XIFglX2faL%2B3IJVjb8pXY7Bp3I25NzVlIsw%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9f06ad089e9c5695-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106812,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 106812, version 1.0","md5":"df7de9fe96a30f78c7f652f5b00ae016","sha1":"1b10ce080e2562a8b7e8395044d3ca83dc112999","sha256":"011ae1fe8e56c310d82ec3795cb8f86b9dea521dd0bc560a0ae0c2e87baedd4b","sha512":"d8cd580ed4119b0d31c9f3b7ea1b2002ccef31ba26cc6791114e5017e9ccffbfbf57b8611aafa52a8b3e76fc8f77b0d51d333dfcd5b293ddde61da3bbbbda47e","ssdeep":"1536:IEGBxy7wyLnYmvpdgacZtaiLBug50yslpdHfaKoGS3MUt7jCP/KgpL+HoEf7HhDt:0zy7pnYm/zcZta+UNoGS3gpL+Zwul","tlshash":"8fa302c0688d7e9ade37df31a226826373d3094a637c2d6f26997852c946e0f7637341","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-22T18:28:09.60369Z","times_seen":10291,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":7,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/Upload/public/69e11d69d31e5.jpg","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:15.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gpt-oqs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 16:20:45 GMT","end":"Thu, 09 Jul 2026 16:20:44 GMT"},"fingerprint":{"sha1":"07:0F:71:8E:9B:03:DD:32:D1:B9:C2:15:44:26:6E:18:F1:3A:D0:52","sha256":"6B:26:21:24:93:5C:9A:61:CF:22:B3:0D:8E:9B:37:8C:A2:DB:94:DE:EA:73:A3:27:4D:98:AD:1B:7E:8E:3C:CD"}}},"request":{"raw":"GET /Upload/public/69e11d69d31e5.jpg HTTP/1.1\r\nHost: gpt-oqs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/\r\nCookie: PHPSESSID=sd7hqaugnmghbfpcdj65qe0hd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:26:16 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 16 Apr 2026 17:33:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69e11d69-1b7d\"\r\nexpires: Fri, 22 May 2026 18:25:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LGjsXuqgyWTr3qus8rOwx4Brr6nejEpXACZ442FIvYEd7mM4%2FMUXa7r5JoDbGvtdbIu98S0EEYEJ1r4cn2b3DzdSQxxxmbTFg1EQlLk48snagYRqcFdi%2BhHaacxHmA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06acffacc41a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7037,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"80a2f417727f1d26600c7b8bf9103196","sha1":"caf06e2148d245d21ab3b8fc52de4b68cc8a0566","sha256":"a5f55bd12762a67e3635c156d84107fbebee013108a545b02499c990c0bf09eb","sha512":"4bd3a718f148ec5b15f8e4303f5d85ac9909b7dd9f073915b502e0334a46368ad60598575bc9451129e462e6679ff78088f81d4353a8dac91706131335958315","ssdeep":"192:WNw5RHb7dV19Q+Agk0C5vDv/UmLDt39lDE:WNqRHndVjQ+fCl/Jp39lDE","tlshash":"c0e13a220606ffc9f8ed877436d24367b663e977208b83180437021809e767e81abe72","first_seen":"2026-04-22T18:26:41.842672Z","last_seen":"2026-04-22T18:27:06.483634Z","times_seen":2,"resource_available":false,"data":null}},"time_used":996,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":996,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/Public/Home/static/js/jquery.SuperSlide.2.1.1.js","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:15.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gpt-oqs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 16:20:45 GMT","end":"Thu, 09 Jul 2026 16:20:44 GMT"},"fingerprint":{"sha1":"07:0F:71:8E:9B:03:DD:32:D1:B9:C2:15:44:26:6E:18:F1:3A:D0:52","sha256":"6B:26:21:24:93:5C:9A:61:CF:22:B3:0D:8E:9B:37:8C:A2:DB:94:DE:EA:73:A3:27:4D:98:AD:1B:7E:8E:3C:CD"}}},"request":{"raw":"GET /Public/Home/static/js/jquery.SuperSlide.2.1.1.js HTTP/1.1\r\nHost: gpt-oqs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/\r\nCookie: PHPSESSID=sd7hqaugnmghbfpcdj65qe0hd7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:26:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 29 Nov 2022 11:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6385e7cc-2c9e\"\r\nexpires: Thu, 23 Apr 2026 06:25:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6v6rmU9CD41oW6G85zYT2oD0RczzUC6mN1G%2Bx2Rp4DLyjHllhJhfE0%2BmRGOAL7M3FerN6gHgMdQO%2FZBL4PqO4o6mQD6ublM8xsEHFou%2FKBOCySobB7rg%2FfPJKHDn5w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06acffbcca1a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11422,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10855), with CRLF line terminators","md5":"0b9bc63ab05e21e3830da5bbb4ccee67","sha1":"d162156bdaf14217d76d920e0e57b86d8feb1d97","sha256":"349e46b2c65028736d0bbff7b829c7fc6fbdebc1fb1e8b12365a0ca2e6e9e848","sha512":"bdfa220da1f08e29f05a9984c4999d7e742bea10ad86b7e497a0d112c7992cc52b7f1e9f5430b4286f14bb2336110f85cbdc3164a92121caaf5c91961f7e69c9","ssdeep":"192:j+K3bxH+nqfhD9VUVjIItpfg5uXG3+1tSCl+7flvSXwaHxImISLTNSfYXH7Le2HE:jNcnqflKFgEWulE8REcS3j/CkR1Xh3","tlshash":"9532c65fb66635ca4597b3f1107f940d222b5965fc8a8ca0b17082c0adb9a1c243bfed","first_seen":"2023-04-05T11:06:31Z","last_seen":"2026-04-22T20:40:29.730152Z","times_seen":13308,"resource_available":true,"data":null}},"time_used":893,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":893,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/Public/Home/static/css/base.css","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:15.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gpt-oqs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 16:20:45 GMT","end":"Thu, 09 Jul 2026 16:20:44 GMT"},"fingerprint":{"sha1":"07:0F:71:8E:9B:03:DD:32:D1:B9:C2:15:44:26:6E:18:F1:3A:D0:52","sha256":"6B:26:21:24:93:5C:9A:61:CF:22:B3:0D:8E:9B:37:8C:A2:DB:94:DE:EA:73:A3:27:4D:98:AD:1B:7E:8E:3C:CD"}}},"request":{"raw":"GET /Public/Home/static/css/base.css HTTP/1.1\r\nHost: gpt-oqs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/\r\nCookie: PHPSESSID=sd7hqaugnmghbfpcdj65qe0hd7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:26:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 29 Nov 2022 11:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6385e7cc-64a5\"\r\nexpires: Thu, 23 Apr 2026 06:25:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ePe5zqDckqznyocEwLM9obNeGxb89KtTSd3sbO6z6kcOU3R8O4pfUkVc8VDhoAIuzbnCGZeslGi3n3CR6HaIb%2F5KS3hd0i8Om6s3Ft4IqZSk%2FuJtj%2FaUwcjBvzyWbA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06acff8ca91a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25765,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (846)","md5":"8739b7f6cc1db5ea89afe0a14afacd7a","sha1":"f7dc32e9b67f5a0190cdb0d641f141294522fe46","sha256":"446377cfd8abce9140615cc2df1cfd3c2e8f908f179cbe1c7bc6209ef1bd2f3e","sha512":"8daa0f9ebd76dc9e94f4c5cf0acd3380b91abe7186648e41574d747c9cd0bfc2a6c28ba80c0e34ce2aba079782d9061d73bb37010cd77f7f59bc5879a19612a6","ssdeep":"384:BpFiOVTjRmNi2RoLy6IbRiWc2FDwFxYorvRnEkEZ58s8BXR8G8LrB888t7jL5ZBe:Y4cN39FDwFx9EZS9YzqtRB8TF3MDdu","tlshash":"12c295a7dfa30901b81bc5a41ff9ab55236c8017910bdebd7fc53648cf462d898a27c6","first_seen":"2023-06-09T02:38:16Z","last_seen":"2026-04-22T18:27:50.108332Z","times_seen":2231,"resource_available":false,"data":null}},"time_used":891,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":890,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/app/static/code.png","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:15.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gpt-oqs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 16:20:45 GMT","end":"Thu, 09 Jul 2026 16:20:44 GMT"},"fingerprint":{"sha1":"07:0F:71:8E:9B:03:DD:32:D1:B9:C2:15:44:26:6E:18:F1:3A:D0:52","sha256":"6B:26:21:24:93:5C:9A:61:CF:22:B3:0D:8E:9B:37:8C:A2:DB:94:DE:EA:73:A3:27:4D:98:AD:1B:7E:8E:3C:CD"}}},"request":{"raw":"GET /app/static/code.png HTTP/1.1\r\nHost: gpt-oqs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/\r\nCookie: PHPSESSID=sd7hqaugnmghbfpcdj65qe0hd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:26:16 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 29 Nov 2022 11:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6385e7cc-824\"\r\nexpires: Fri, 22 May 2026 18:25:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pit8UNz4cn9msfEvCHHcmJ%2Bo3Haf0wNj7%2Bw%2F3ThNam%2F%2F6V6%2FlbwdWwqU8Lat0aK7lDDVv%2F4XtjU8BWhlUoG9kohyjAbMx0dLCLcnfUoxrTkR9bTCOifjh8%2B8iZEMwA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06acff9caf1a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2084,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"e771e33040933912f595c33752841f1a","sha1":"21f3508cf8de50fd51a039bb4739359c3e3c449e","sha256":"e5e16fdded488d9d391073c321eb1e994fd8d15e4ad06026023d3b236e683a63","sha512":"277ba147c18260ce2ff637ddd47e04e0a3f293b5d5ebe940fdbb26e329571487507c946d9e8b39b68b15b434c671ca2ae0c36991190c655fb6e1bf68d65405a8","ssdeep":"","tlshash":"db414e64a1c129686331a9df9acb87bff96a40e2fc6c14f59101011c9ad087dfd8637e","first_seen":"2023-07-05T14:45:42Z","last_seen":"2026-04-22T18:27:36.849126Z","times_seen":984,"resource_available":false,"data":null}},"time_used":917,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":917,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/Upload/public/6907a783cbd83.jpeg","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:15.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gpt-oqs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 16:20:45 GMT","end":"Thu, 09 Jul 2026 16:20:44 GMT"},"fingerprint":{"sha1":"07:0F:71:8E:9B:03:DD:32:D1:B9:C2:15:44:26:6E:18:F1:3A:D0:52","sha256":"6B:26:21:24:93:5C:9A:61:CF:22:B3:0D:8E:9B:37:8C:A2:DB:94:DE:EA:73:A3:27:4D:98:AD:1B:7E:8E:3C:CD"}}},"request":{"raw":"GET /Upload/public/6907a783cbd83.jpeg HTTP/1.1\r\nHost: gpt-oqs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/\r\nCookie: PHPSESSID=sd7hqaugnmghbfpcdj65qe0hd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:26:16 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 02 Nov 2025 18:48:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6907a783-16932\"\r\nexpires: Fri, 22 May 2026 18:25:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RHwTmfqnNS79Y89Dd5CInohUpPfdbqbQ2w3vMLjSe5K17jSPzXBYV5g2pqnCNuh%2BJRQK%2FOBZs3Zd7ndGwVZvXKs8m5E5tM9jjTqOuX7HSU1%2BQxNRRPXdp8WoTGxkYQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06acff9cb41a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92466,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x300, components 3","md5":"d2ec614dd56337288a48c3504872d752","sha1":"1fa9772c7f2eb6e93fe1edeacef816b6850507fa","sha256":"d4ca7b176180c645d813c294b8174fe3c58a9cf83db951b5b8fb6f1ba9cb2cfd","sha512":"ffbee79889cffadad6106cf0535965fb5a5ce7e39b16a1998084d38aad60f4ecdb1ff0d2281fd34e999ccdd04c3d2cc25bd7aec119a58c18e5cd91b8174118a3","ssdeep":"1536:M9qKZoxlS00K5Xr6B7rdSKgWoCL8DyWKl7mfmxnyKqhvYPZmXxilegMMCdDIDG7:QZygKUFlgWnLV7ImxnV/P9C1r7","tlshash":"72931296b38a4919e7697732485ec1e073f29ea0be451fae51f3c478c8dd032b117a39","first_seen":"2023-05-21T16:18:43Z","last_seen":"2026-04-22T18:27:36.850909Z","times_seen":4423,"resource_available":false,"data":null}},"time_used":1503,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1173,"receive":330,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/Upload/public/6907a78be0e21.jpeg","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:15.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gpt-oqs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 16:20:45 GMT","end":"Thu, 09 Jul 2026 16:20:44 GMT"},"fingerprint":{"sha1":"07:0F:71:8E:9B:03:DD:32:D1:B9:C2:15:44:26:6E:18:F1:3A:D0:52","sha256":"6B:26:21:24:93:5C:9A:61:CF:22:B3:0D:8E:9B:37:8C:A2:DB:94:DE:EA:73:A3:27:4D:98:AD:1B:7E:8E:3C:CD"}}},"request":{"raw":"GET /Upload/public/6907a78be0e21.jpeg HTTP/1.1\r\nHost: gpt-oqs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/\r\nCookie: PHPSESSID=sd7hqaugnmghbfpcdj65qe0hd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:26:16 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 02 Nov 2025 18:48:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6907a78b-219f6\"\r\nexpires: Fri, 22 May 2026 18:25:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A4UuauRUMryZApZ%2BPSekbp2JmAlf%2FL5wrz0yreE6YUDTeL3tiucOXPp7er8YxS3OIndUTfTihpJXnFHm3Uw3t4qwtGt5CcmuUQXyAyIuO2thPThOPdIajEn%2BGzZozQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06acffacb61a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":137718,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 750x300, components 3","md5":"96abd4588e557e6a37f5d3c213f0dd52","sha1":"6647c6a4e45c0963d31ed26ffd3fbf47d8891dc1","sha256":"62fca4cd746244e0a048bec7fe7d714efd224221851c3a91ffe8d1daee2bb8b3","sha512":"a7a2e192d4e25de386ba726c28b53c5321687450227e70fd77ee4a25fa26e8d52e5e8bbc81c18e33e85095fb3cdef51c8a0fcd3ca3b553e18d8bea383546f267","ssdeep":"3072:lFn4afMToBiTo/Nk/AU9MfbHpEbxsUNuJdL0:l2wBikAAUzVuJh0","tlshash":"5cd3f1a2ebfbeb2b4b5b56bc826dfd3b535019c828d69663185b0d12f908f31564703c","first_seen":"2023-05-21T16:18:43Z","last_seen":"2026-04-22T18:27:36.822535Z","times_seen":4435,"resource_available":false,"data":null}},"time_used":1750,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1171,"receive":579,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/Upload/public/69da126395bd6.jpg","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:15.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gpt-oqs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 16:20:45 GMT","end":"Thu, 09 Jul 2026 16:20:44 GMT"},"fingerprint":{"sha1":"07:0F:71:8E:9B:03:DD:32:D1:B9:C2:15:44:26:6E:18:F1:3A:D0:52","sha256":"6B:26:21:24:93:5C:9A:61:CF:22:B3:0D:8E:9B:37:8C:A2:DB:94:DE:EA:73:A3:27:4D:98:AD:1B:7E:8E:3C:CD"}}},"request":{"raw":"GET /Upload/public/69da126395bd6.jpg HTTP/1.1\r\nHost: gpt-oqs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/\r\nCookie: PHPSESSID=sd7hqaugnmghbfpcdj65qe0hd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:26:16 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 11 Apr 2026 09:20:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69da1263-2932\"\r\nexpires: Fri, 22 May 2026 18:25:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cXXt1UbZhN9n3BVYOydwWooSw6W9liVBTeNUZPIn0sng6SbmG3E6SuENqX8YZfFqjvHtbNnC12vSB%2Bt5FQPsap3CFndCmCqJBx8nHTehe8o%2FIugjbrq%2Bx5mv4qdmug%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06acffacb91a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10546,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, progressive, precision 8, 259x270, components 3","md5":"081257d1ce63f5074aa453bcb1a69e1f","sha1":"f657f8e72c9009c64bc9bcdf0af804c201b08f50","sha256":"84559180ade85565b5bfaa7282dca9827c7ccedada594b37204006e500bc1886","sha512":"18c69d34a706d47ef02f8cc77cdc1bf93a6d8be4caa80e56840245b6d1a6cdb1227e705046bc17353bb0f563b6adf9fc3aee97846ce066b4a5a2eb352a28fdf4","ssdeep":"192:stHs7Tm8flo3JrT1xcNsQ+Aom5OvS1VuT84oVdF2t9ST2kZpQq:5Fi397cN/7Q6114cF27xkZpQq","tlshash":"08229e2f5b5f190dee5b37f57aac8d63db2246290d03929de9aa3316f0710ce49805d3","first_seen":"2026-04-22T18:26:41.848228Z","last_seen":"2026-04-22T18:27:06.48048Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/Upload/public/69da1333a2dfa.jpg","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:15.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gpt-oqs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 16:20:45 GMT","end":"Thu, 09 Jul 2026 16:20:44 GMT"},"fingerprint":{"sha1":"07:0F:71:8E:9B:03:DD:32:D1:B9:C2:15:44:26:6E:18:F1:3A:D0:52","sha256":"6B:26:21:24:93:5C:9A:61:CF:22:B3:0D:8E:9B:37:8C:A2:DB:94:DE:EA:73:A3:27:4D:98:AD:1B:7E:8E:3C:CD"}}},"request":{"raw":"GET /Upload/public/69da1333a2dfa.jpg HTTP/1.1\r\nHost: gpt-oqs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/\r\nCookie: PHPSESSID=sd7hqaugnmghbfpcdj65qe0hd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:26:16 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 11 Apr 2026 09:24:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69da1333-3aef\"\r\nexpires: Fri, 22 May 2026 18:25:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O31FabE14FhcaVsAoPWHb0GOTB4R0fLceqV6CxuxplPUk%2BuROHpT23HG3Gy87lZck1irh3R4Qpau1FuKdNf6k4ZjmzZOhG%2BtEmR%2Bgf1Q9uDamKqYgsqThS32%2BPHJag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06acffacbd1a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15087,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, progressive, precision 8, 255x269, components 3","md5":"abc9b09d70f6cb2adf3d6146c05c6724","sha1":"bcc2991aae955eec6be02263f3c3b1e183a57173","sha256":"07388c085a9d0925a5f010a7544b73efd104bc3ef9cb640ef510b96ccdf46e26","sha512":"878ca88536f5993b2d43468a4bcc86dad73e85725f3c4a5cc8226aeb64d4d873e561201d25d0bc565cd46d572a4dda52d8ef8b544df31b6d887889f2e3440eaf","ssdeep":"384:ur9fqUwv04HcRyLm10Ju3zO4fdzL0TcU482lWrpfUVqgI:ur9f5OXLemuDO4f1L0T1482IZ7H","tlshash":"2662c0d6bf6ef500d41bcd3a6a926e781e560ed53d5c8e562ac424f43d7723046703a2","first_seen":"2026-04-22T18:26:41.850979Z","last_seen":"2026-04-22T18:27:06.5089Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1158,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/Upload/public/69da1369457e5.jpg","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:15.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gpt-oqs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 16:20:45 GMT","end":"Thu, 09 Jul 2026 16:20:44 GMT"},"fingerprint":{"sha1":"07:0F:71:8E:9B:03:DD:32:D1:B9:C2:15:44:26:6E:18:F1:3A:D0:52","sha256":"6B:26:21:24:93:5C:9A:61:CF:22:B3:0D:8E:9B:37:8C:A2:DB:94:DE:EA:73:A3:27:4D:98:AD:1B:7E:8E:3C:CD"}}},"request":{"raw":"GET /Upload/public/69da1369457e5.jpg HTTP/1.1\r\nHost: gpt-oqs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/\r\nCookie: PHPSESSID=sd7hqaugnmghbfpcdj65qe0hd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:26:16 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 11 Apr 2026 09:24:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69da1369-2f40\"\r\nexpires: Fri, 22 May 2026 18:25:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cCctLg1Ii3qMfgIxAfoaPGE5Rd1suZgnXJJUxL8GFl9YjROL1dry8e%2FCwdkjp3lWwvKvJF3laxOq8%2BN5d4f2LEszl0ifQlEeIX%2F1EolZmVPqlfR5h2lLNq2BouaFZg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06acffacbc1a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12096,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, progressive, precision 8, 257x271, components 3","md5":"b0d54d12704cfd76a740c51e47f81ca5","sha1":"3c44182ece2bdccde8da0ae00158c9f2018f8cbc","sha256":"fb96057d17d50948aec4d5444af8d0c265ab85ed6b489a472d85f2aebc31fc8e","sha512":"79baa892fadfd40cf9a146c3d3cfbdbe267109e77cf28aafac188f9d232ca6b0b3e8f0a1c3402ae14a9f7e4e8877cddc771074cf47678c0eda1cd5692bde5477","ssdeep":"192:aN69cSVqrp8naf2D44AxTIbJlI5p/FYl4vlWsvAzeDQ71oWJj+7jB2ckL7K6X+H:Y69Xn9jAxTgI5dF1WiAeQJLj4jBkL7l+","tlshash":"5342af98431417dbe0e599ba47be8eb3c8d3093341b8d66397047a6c236a4fd5dbbe04","first_seen":"2026-04-22T18:26:41.854415Z","last_seen":"2026-04-22T18:27:06.470323Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.staticfile.org/jquery/1.10.2/jquery.min.js","fqdn":"cdn.staticfile.org","domain":"staticfile.org","tld":"org"},"ip":{"addr":"134.122.173.178","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:15.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"staticfile.org","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 03 Apr 2026 00:00:00 GMT","end":"Thu, 02 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"58:76:03:0C:93:D1:CD:E1:B0:EC:46:C0:4E:0B:04:86:E4:80:3B:93","sha256":"20:3D:7B:D4:00:D1:45:86:5F:27:E9:99:0E:00:64:64:58:38:47:BE:A5:CE:E8:D4:04:AF:81:88:25:F2:0A:01"}}},"request":{"raw":"GET /jquery/1.10.2/jquery.min.js HTTP/1.1\r\nHost: cdn.staticfile.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With,token\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Wed, 22 Apr 2026 18:26:16 GMT\r\nexpires: 0\r\npragma: no-cache\r\nserver: nginx\r\nx-cache: BYPASS\r\nx-cdntype: readnode-007\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93100,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32072)","md5":"e0e0559014b222245deb26b6ae8bd940","sha1":"e2f3603e23711f6446f278a411d905623d65201e","sha256":"89a15e9c40bc6b14809f236ee8cd3ed1ea42393c1f6ca55c7855cd779b3f922e","sha512":"60740da8f871b8263675db2421b0e565fc18e95c772f7c3d5916f224263cd71a6a2e6acceab2f6f8ba1c0607951f0198f525d87d0589fa57045b1d5f292dacf0","ssdeep":"1536:q4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RlfDknv+p0WzH/IoSZ7qABZnu0sFv:qGsKXlI2p0WPSbDrstfam","tlshash":"ba93f8ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-04-22T22:21:19.915341Z","times_seen":18938,"resource_available":true,"data":null}},"time_used":1678,"timings":{"blocked":561,"dns":2,"connect":276,"send":0,"wait":522,"receive":0,"ssl":315},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"cdn.staticfile.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.3.0/font/bootstrap-icons.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:15.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.3.0/font/bootstrap-icons.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 18:26:15 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 8018\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.3.0\r\nx-jsd-version-type: version\r\netag: W/\"edbb-Du3MPQ7GnRobCfGvnAP4Uqb5QVI\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220103-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 3081085\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=huRhdZ3XwIDO7U0bREFjzBZ%2By7BDX9CMKRG8JBsnS1Eh69%2F2F8GedwsxkT1NTmkIxmgh9L4%2FrxzwefedUhvpQolGtg6x%2B4ZJVjBxo6RSazg%2F3i5q%2Bo8Z%2BEbBZOzBW%2F3W718%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9f06acffb9ca56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60859,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"dbf1248779dc682a91ba529b5efe0ffc","sha1":"0eedcc3d0ec69d1a1b09f1af9c03f852a6f94152","sha256":"32cc4a47b370e278072a6440249872e681efa1d992600420c03a9631da885d70","sha512":"2e96320bb785273c91c136a4aba02268e2c9ebcc92998c24160331ec14f0f902132d21f4ac4cb130771dd20758bef407d589b1f8e3175796622edb162a517098","ssdeep":"384:vaqJVm8OAL1M+hQokEYm47U7yH2CYEjOnm4zH7fZ6aXoso1v/:Sqnm8OAL1Mzocm4KyH2CYEjOnm874soh","tlshash":"2c53cebad18f05f59341e4d92743674293a9ba7ce1817c7ad342399ee3c06188ad73ec","first_seen":"2023-04-05T06:29:21Z","last_seen":"2026-04-22T18:28:09.601426Z","times_seen":14838,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":3,"connect":1,"send":0,"wait":6,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/Upload/public/69d9399ac6c27.png","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:15.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gpt-oqs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 16:20:45 GMT","end":"Thu, 09 Jul 2026 16:20:44 GMT"},"fingerprint":{"sha1":"07:0F:71:8E:9B:03:DD:32:D1:B9:C2:15:44:26:6E:18:F1:3A:D0:52","sha256":"6B:26:21:24:93:5C:9A:61:CF:22:B3:0D:8E:9B:37:8C:A2:DB:94:DE:EA:73:A3:27:4D:98:AD:1B:7E:8E:3C:CD"}}},"request":{"raw":"GET /Upload/public/69d9399ac6c27.png HTTP/1.1\r\nHost: gpt-oqs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/\r\nCookie: PHPSESSID=sd7hqaugnmghbfpcdj65qe0hd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:26:16 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 10 Apr 2026 17:55:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d9399a-15c4\"\r\nexpires: Fri, 22 May 2026 18:25:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=enZdtmR3DVhYA%2B%2B0KtJWkU8wlyuGD1kStzFxIEj08kyYkHZFllTmAMFyk7%2FIVC%2F3PZ6QRMkWQW5Nr0YozlWc64Ho4rqMIAVVadwfrRHBoB6fe8hw2RIaR%2BsvtGNwbg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06acff9cad1a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5572,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 384 x 110, 8-bit/color RGBA, non-interlaced","md5":"9dd37c722f15fe5f297897280bf845ee","sha1":"e8be1a6f275edddc27f666334c6b5534b199a9f2","sha256":"04918f92255ca9a8c346e96e3dce031414bdec82a1b3d55400b6b8792a318dc0","sha512":"8e0c7e246ffd5f8b91beea59a47c3efc076df81212571c93abe65d9d99fec1caddddfbb4ef4e8b324ef9710022f9b411782d50ae3d10df24cd5eedbb970f922b","ssdeep":"96:QSeydkZOxv7TlbHbd6d92lDjNxqbsT7SW7M2mu5WR3jJcm223QvnmrsMiHYdqq2t:QSZdD9bHYiNKbchFnq3Jriy4","tlshash":"a1b16e0688b8e295e50c46fada75c1d9ac1d7b6b444f372c06018e605fcaeef1a445af","first_seen":"2026-04-22T18:26:41.857885Z","last_seen":"2026-04-22T18:27:06.467555Z","times_seen":2,"resource_available":false,"data":null}},"time_used":931,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":931,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/xm/mbn.png","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:15.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gpt-oqs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 16:20:45 GMT","end":"Thu, 09 Jul 2026 16:20:44 GMT"},"fingerprint":{"sha1":"07:0F:71:8E:9B:03:DD:32:D1:B9:C2:15:44:26:6E:18:F1:3A:D0:52","sha256":"6B:26:21:24:93:5C:9A:61:CF:22:B3:0D:8E:9B:37:8C:A2:DB:94:DE:EA:73:A3:27:4D:98:AD:1B:7E:8E:3C:CD"}}},"request":{"raw":"GET /xm/mbn.png HTTP/1.1\r\nHost: gpt-oqs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/\r\nCookie: PHPSESSID=sd7hqaugnmghbfpcdj65qe0hd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:26:16 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 06 Nov 2022 12:37:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6367aa76-4287\"\r\nexpires: Fri, 22 May 2026 18:25:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S4hTs2s8wPtKA7i4dncAbx2s6uQO%2BiQ%2BnmE3AKNYdWmKlKjpSj8ta0BWZe8x5Qax5zYuora4K9%2FaxFa771seZ3LKEkuIOuKJXzAA8ZWfbLawItOfbPUcSHm8td7Ixg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06acffacb81a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17031,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1181, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1181], progressive, precision 8, 200x200, components 3","md5":"0b20cefbeefbedd80e49d8a58d77cf46","sha1":"290ca4efba0fce95a331d716e4a56c93fe576949","sha256":"cfed7f3aa25627c440f85b40b142c87eee4e25eb898d1d3549e6c25b34d19e9b","sha512":"88133ce89aa9c0c334c4148e0f265a9b8a485e30e3c5d9aa677225954d2e4b76d292342101486053533bdaea79f84b61c9ac28ddca7bec2e257155b6bd015b49","ssdeep":"192:IH5o6A9mn+82b28y4lFqJH5o6A9mn+82U9kn91hc+1GMSCjr1LUilTgcQJ9eZ:O5OMjPic5OMxenBc+Idi9U8gcQJe","tlshash":"74722a353b0adea3e4e5453c1e54c645f332ae85956f636178cd28aabf32f920ce5306","first_seen":"2023-07-05T14:45:42Z","last_seen":"2026-04-22T18:27:36.846037Z","times_seen":1483,"resource_available":false,"data":null}},"time_used":891,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":890,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/Public/Home/static/js/layer/layer.js","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:15.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gpt-oqs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 16:20:45 GMT","end":"Thu, 09 Jul 2026 16:20:44 GMT"},"fingerprint":{"sha1":"07:0F:71:8E:9B:03:DD:32:D1:B9:C2:15:44:26:6E:18:F1:3A:D0:52","sha256":"6B:26:21:24:93:5C:9A:61:CF:22:B3:0D:8E:9B:37:8C:A2:DB:94:DE:EA:73:A3:27:4D:98:AD:1B:7E:8E:3C:CD"}}},"request":{"raw":"GET /Public/Home/static/js/layer/layer.js HTTP/1.1\r\nHost: gpt-oqs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/\r\nCookie: PHPSESSID=sd7hqaugnmghbfpcdj65qe0hd7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:26:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 29 Nov 2022 11:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6385e7cc-4d83\"\r\nexpires: Thu, 23 Apr 2026 06:25:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OCMrma3dVg4WlfDS9JdTPxnbPyEfKV9mZvcf5WDvIQtHDFiyFP5J3GZCjzPWE7qkItw8j7aqZtIeId1hYeNAzP1pIjUPG10qvrWGfbeK3bWjzY4kkTiQudxS1nnPvQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06acffbcc91a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19843,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19752)","md5":"666f4437565d197e9459e19a29f58315","sha1":"afc5c0a1369137e52b37ad5fb63f48202ce31368","sha256":"4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100","sha512":"1e659ff6c47458dbbaf7e7561402c12441286c255ddec048bf654388e8666a9ceca344e166657c29fce4a08b46470b44c47e8f1c6f577adc2a4e4f4f0e7e1e90","ssdeep":"384:DQ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:DQtu8CfS793QODbcI","tlshash":"5f92c85ab5503593216390a9911fa90f30f24d22eb078958f16bf1fd1ebcda562b3f0b","first_seen":"2023-04-11T09:52:52Z","last_seen":"2026-04-22T18:28:09.608149Z","times_seen":13302,"resource_available":true,"data":null}},"time_used":992,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":992,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/Public/Home/static/js/layer/layer.js","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gpt-oqs.com/","date":"2026-04-22T18:26:17.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gpt-oqs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 16:20:45 GMT","end":"Thu, 09 Jul 2026 16:20:44 GMT"},"fingerprint":{"sha1":"07:0F:71:8E:9B:03:DD:32:D1:B9:C2:15:44:26:6E:18:F1:3A:D0:52","sha256":"6B:26:21:24:93:5C:9A:61:CF:22:B3:0D:8E:9B:37:8C:A2:DB:94:DE:EA:73:A3:27:4D:98:AD:1B:7E:8E:3C:CD"}}},"request":{"raw":"GET /Public/Home/static/js/layer/layer.js HTTP/1.1\r\nHost: gpt-oqs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gpt-oqs.com/\r\nCookie: PHPSESSID=sd7hqaugnmghbfpcdj65qe0hd7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:26:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 29 Nov 2022 11:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6385e7cc-4d83\"\r\nexpires: Thu, 23 Apr 2026 06:25:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OMdpfXethn0sXuVcjYOiKdXjm7oIVIrwigp6gOU400t9ir0Lq7nUGknwL5XHj2BRBxSzqj%2FdOm0ZzwqSmV3x2bnlrNQs5hk8LIpn3fy7%2FzrWaTCJHiFby7%2FzLpp8Mw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06ad0a2e7d1a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19843,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19752)","md5":"666f4437565d197e9459e19a29f58315","sha1":"afc5c0a1369137e52b37ad5fb63f48202ce31368","sha256":"4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100","sha512":"1e659ff6c47458dbbaf7e7561402c12441286c255ddec048bf654388e8666a9ceca344e166657c29fce4a08b46470b44c47e8f1c6f577adc2a4e4f4f0e7e1e90","ssdeep":"384:DQ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:DQtu8CfS793QODbcI","tlshash":"5f92c85ab5503593216390a9911fa90f30f24d22eb078958f16bf1fd1ebcda562b3f0b","first_seen":"2023-04-11T09:52:52Z","last_seen":"2026-04-22T18:28:09.608149Z","times_seen":13302,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gpt-oqs.com/","fqdn":"gpt-oqs.com","domain":"gpt-oqs.com","tld":"com"},"ip":{"addr":"104.21.5.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-22T18:26:14.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gpt-oqs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 16:20:45 GMT","end":"Thu, 09 Jul 2026 16:20:44 GMT"},"fingerprint":{"sha1":"07:0F:71:8E:9B:03:DD:32:D1:B9:C2:15:44:26:6E:18:F1:3A:D0:52","sha256":"6B:26:21:24:93:5C:9A:61:CF:22:B3:0D:8E:9B:37:8C:A2:DB:94:DE:EA:73:A3:27:4D:98:AD:1B:7E:8E:3C:CD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: gpt-oqs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 18:26:15 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=sd7hqaugnmghbfpcdj65qe0hd7; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\ncache-control: private\r\nx-powered-by: ThinkPHP\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tupDf2uSzZiTJ0BS19vpLehrAWCY3jEGMpaFGg5qjwRlAKPZ1rXAZwKAzS7GiML7qXc%2BtU3fflB52d5wCUurqT9hMfruhLSJYGfIHh1KcDFStvhLrjyW0nrjeE3xeg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f06acf6b8e65ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:1.10.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Bootstrap:4.5.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"ThinkPHP","description":"ThinkPHP is an open-source PHP framework with MVC structure developed and maintained by Shanghai Topthink Company.","website":"https://www.thinkphp.cn","common_platform_enumeration":"cpe:2.3:a:thinkphp:thinkphp:*:*:*:*:*:*:*:*","icon":"ThinkPHP.png","categories":["Web frameworks"]}],"data":{"size":130768,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1268)","md5":"b69aa6e07a24cce669fd304e50e17b12","sha1":"7637f2beec25721f0f6dfa2799b884b35cadada1","sha256":"e1d26e5de1fe401ae41747d9eafaf19e4e21cd859ba22f2a15f034ca4bc7ff17","sha512":"9cdd05f2d4511d29df42637f397407a48c282e6f140d2f81b51cbc4e58613019db1741d83109865381bdc412ce8a623a3bed7a0de2e4b3d1c63e6fe97230f89d","ssdeep":"1536:hSd4rCuPN29BHwhVH+jMygUurvJiWrcZiAPf08Ge6fcw01M8rXgv8:o4Ou1eQh4+Jisrw1G8","tlshash":"38d30a50b79c093b216760c79ba5668576ba5433d61bc8083bbe4b603fc7c18e9336ed","first_seen":"2026-04-22T18:26:41.861469Z","last_seen":"2026-04-22T18:27:06.501266Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1236,"timings":{"blocked":17,"dns":0,"connect":1,"send":0,"wait":1202,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"gpt-oqs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}