{"report_id":"5b9792b7-3b90-4be1-863c-81ab35d02174","version":0,"status":"done","tags":[],"date":"2026-08-13T09:16:53Z","url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":0,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"final":{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"title":"Verifying your browser | DiamWall","dom":{"size":1094,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"16d6d3c2388764160c592daf34f88aa6","sha1":"efe92042dbb373ae18905cb0756100d72212c7e4","sha256":"0182271da7ecfcdf303671194969208db787a79037066b4140ddc5d244a92f43","sha512":"ced12bb42da33e38f686206cccba1e231c8cd99995cbeca4742ab37b71d7b5e46092e9b2b71c0c31bc07aac60d0a61d0d1b24ed24a37e41bad439a1bb5a420d1","ssdeep":"","tlshash":"991120b38d41cc3ac1618316bedbea4c9663a49a93d1a800a4e57457a32cf174a37e9c","dom_hash":"domhash48f52ae7681f0d333db349f3df9c4092","first_seen":"2026-08-13T09:16:57.993098Z","last_seen":"2026-08-13T09:16:57.993098Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":0,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-17T09:16:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"candystress.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.diamwall.com","ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"domain_registered":"2021-09-07","domain_rank":0,"first_seen":"2021-11-17T22:14:12Z","last_seen":"2026-08-11T10:17:26.650063Z","alert_count":0,"request_count":2,"received_data":25926,"sent_data":1130,"comment":"","tags":null,"fingerprints":null},{"fqdn":"candystress.st","ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"domain_registered":"2026-04-27","domain_rank":0,"first_seen":"2026-05-03T01:58:10.488383Z","last_seen":"2026-05-03T01:58:10.488383Z","alert_count":16,"request_count":16,"received_data":2504689,"sent_data":10418,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"67c9a634deac6d963695c8ce3eff8d7a","sha1":"e0ce00dbd65ce61369d65cca23d6772b8f4a929a","sha256":"f08ded7b3ee5754074a01cb25630f5bbf2f6f80160b5ef58903dec76ae307473","sha512":"f19c3b15d99995b1158f7b40254240a00898dc879ad478d9488b76c50bb2805d004cef83484f658cb73cb4c33717b53119fb0635231b50cfafc1ed37b03edc1e","ssdeep":"","tlshash":"8180044c30d710410111507d1077c0041434033040c5c7d03c1f4140dfd017473014cc","size":38,"data":"","first_seen":"2026-07-05T06:42:05.181589Z","last_seen":"2026-08-13T09:16:58.009372Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"f1e6c01d6af8cacd31fcd91315b9dc1e","sha1":"f0b134eebeefab7cbc9557dfd2f8c21a01229edd","sha256":"48606d26e2519763b908e1386913b64295a5809cccc3992f262b04fa7d20583f","sha512":"252352ec7ac0588a40bbde246a95b9d7af965913491d52cfce7c508f197f6488c13cd0d9db975c807a0375a8ab8f674c8a83961358b15a27161c5d2b5ab95914","ssdeep":"","tlshash":"b3e0df493ede6059655e30b8170fb001a61645061a8efd10bd5db2213f5082582fcee8","size":330,"data":"","first_seen":"2026-07-05T06:42:05.193271Z","last_seen":"2026-08-13T09:17:47.819725Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"af73b70d12e36024d45673de0ce42a98","sha1":"84aaa0860cabbfd5fba30aacc355644a59723dd0","sha256":"5c78052857e07cc0ae3c29b891ea675daf383d8b488927309f7427627103b310","sha512":"5e4df08b216e61f866d650700cf8e2269ba6fb37c7e1d693cadadb89bafe9b4014f9c2366515a130019acb92ddc62892a1825b27e63ad67eb00a261a69432d03","ssdeep":"","tlshash":"7ff0620e68f12025a633bd2dddbfa104511251471809ea987ddea9701f473386692af4","size":606,"data":"","first_seen":"2026-07-24T22:59:45.965778Z","last_seen":"2026-08-13T09:17:47.770621Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"7153a4f50a9f382c38885b3e025be32e","sha1":"aa086f2c555b92c0067d25b30d3c6277b3d3220f","sha256":"2644304114abcd1f064fd6a855db31e006a5a1e9f6f001dd361370862c060913","sha512":"1503e4dfb108f7a7e5c565900d1de9b6a98b451675b2e434a7d8ca9b35dd8290cf247ea74ce965163bf3fb7ba99ad81f651c674a74ef9d15020c8cade4dac9ec","ssdeep":"","tlshash":"47f0229849f353a90856a15b133e903bf7ece113140df949b84eb3212fa8b25af317e1","size":607,"data":"","first_seen":"2026-07-05T06:42:05.172188Z","last_seen":"2026-08-13T09:17:47.772131Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"6ffec311f00632a6c71d21a1c8a1177b","sha1":"71050a81029d4e0e7c34c95162aa669e4d672a92","sha256":"84b568fb14efa985d49edbcc584c4b0472c75ddd5426c5df08a1224f4376d5fc","sha512":"91628c5b132e71c65c1586b8b824ad501a31337b61f9c37cbfd94432164848f3c57f19ccb2ba0a3f76845db39d92ce4bd72501c27df2c82216e5a0753e9054bc","ssdeep":"12288:w4hYTEsDHPuF+7mgrrRdw59dKWRzg5bat:sTXHPuA7/dg9hREbat","tlshash":"33c409e4de4e055fe64c20fe068fc4c20cb78a3b1d96cdc6b7617a056bd08b98587d6a","size":584170,"data":"","first_seen":"2026-08-13T09:16:58.002137Z","last_seen":"2026-08-13T09:16:58.002137Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"b156ee43b09feb05f0566c2f4dfab40a","sha1":"4d68d38faa20b2d33bf7a87f5b7c49972abb59de","sha256":"077254b5c2c78a6b597bce1380080b024e7e77e3823d53b273e3817898339b12","sha512":"357b85768c3d2361d7d09ba8baa6dd074bea0c3d1cd57f6a926715994db54fe71d1b00faaf7f9b388357451bb10eae9a505a45cf54ec898c0c886b7bbacf2698","ssdeep":"","tlshash":"d4c04c8db5e6f540461b6594541b5148b17c861164dc1a50dc915a74af3406c8232a1c","size":136,"data":"","first_seen":"2026-07-05T06:42:05.244538Z","last_seen":"2026-08-13T09:17:47.820595Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"00cca122acc32125512a998f00e1793e","sha1":"f73d8ca58ddf7c9ca17871963605abf5af31b7de","sha256":"96c4e6f0c3b456b7ca039273505afa0523b3513ae513478fbcd0d54e456de18a","sha512":"2d3c4503386310088fb4a674bc39bfac0543959eb4710562f42de5ec7278324725619fe0c491ec1f7a078e4c2f463b4f75e6ffe7ce7da36dbac8a3954b236d7a","ssdeep":"","tlshash":"b3113a0e58f32019267bb8786f2f5004551166174859ee893ecea6705f4336923f0fa4","size":1002,"data":"","first_seen":"2026-07-24T22:59:45.819958Z","last_seen":"2026-08-13T09:17:47.753348Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"f5c878d66c85eed066ad4f794372e46e","sha1":"650142e8653080bffb34899e54d6056c2e444d03","sha256":"7bb873cd57a47f87ad3b76783ae840406fdeb2efb7df3dfe1f9d591e4d952007","sha512":"cec20222e67d57ceff58ecb48bbf77f93d5c055d4e501b87698b99c4eff94a79f73595960022d3620cc908ec7957695421e9d17b9c0ef966252b4310dbc94449","ssdeep":"","tlshash":"c521ee8d9fe00a77e6222029677f8505713598078419ec0cb65cfa908fddc3826fd9f0","size":1181,"data":"","first_seen":"2026-07-05T06:42:05.152175Z","last_seen":"2026-08-13T09:16:58.013005Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"18f9f0c0578a5fc106df6a96f8f99c8f","sha1":"d7e344755b17d990ec6af84cffe34bc4081205da","sha256":"0e5e9001dc343778a66afb7345888e09c4f4eafcbd90692dbc1397673bb540e4","sha512":"f7f5d2d9a473e4dedbf6ff7786c72257ae83999ee550f0a263b7dd20ab2ea6c0788ed511791b677bf1237697d0e04a58faf938fc7527047a760b19d6ea27f471","ssdeep":"","tlshash":"c721aa9fadf6103082b2303d06af5541f72bc8a3006aecd1fdac6331df55a638a847a5","size":1116,"data":"","first_seen":"2026-07-05T06:42:05.184218Z","last_seen":"2026-08-13T09:16:58.013636Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"c6d63cd15c75f7d2073dffe41dced4b5","sha1":"60534a6821174cc89f2a33f93536bd384b8df143","sha256":"7220e94ffac0aad2a0e7be6b6afd693fc2146168f6e01b9182167bf9c1a95a28","sha512":"4265e7d01f68315418b50f5fca419133a812b48015382b7d83a49874ba5f12fb503a07cb0f431277218454642620a0131495b22fab669275e8fb82d56a651426","ssdeep":"","tlshash":"17119c1dfcf361aa225f641a273f94195369b11701ced86abdee46049f2021c5ba8be8","size":959,"data":"","first_seen":"2026-07-24T22:59:45.834294Z","last_seen":"2026-08-13T09:16:58.014419Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"5f1469e67277af9db3da1e673adb5a54","sha1":"4326cc6c1fd0f1f2454fb22299875624093bfe40","sha256":"08e902a7d3d27dc2ad3276d83b73075677797ff3221931b2db9cf06db0da036f","sha512":"70c68833d81a64b206e176b47c1bc87e5327606dfed78ab9505e730dea4d105c732a0e04196da67e2725aeb578f7c3e7d49171ead0cdaaa8c900a75080fd1717","ssdeep":"","tlshash":"00d0229a79e1e0312206602c0b0e1d01ba1ec94368cdde90b48c8b61ff23c3b62a83c5","size":200,"data":"","first_seen":"2026-07-05T06:42:05.153264Z","last_seen":"2026-08-13T09:17:47.804962Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"523654855ca3c3f89ad4be6e3d4aa28c","sha1":"691411f6967c9607111f29281afd2f2c2a11313e","sha256":"a46e95fc0c4d9224e6b9c6da6c61eca35dfd6eceeb71f1b39e09126625c9e5e0","sha512":"9d6c5334f6951067d488df4725405d5ebb8e4f6e6be2a50df2ba4522d167beefebb1f25f47c52b4b1753fa6de8eb148fc2db14a6148e1e3b697d6ab23eca2301","ssdeep":"","tlshash":"faf027175cfe76f4193ea518039f28236a24846f978adf4c7ec8d2249f28320d2db094","size":492,"data":"","first_seen":"2026-07-24T22:59:45.855432Z","last_seen":"2026-08-13T09:17:47.825102Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"e40b7ac84c2a276020064d91edce0c2e","sha1":"413b236a3e3dedac229fde06a88b234dce963514","sha256":"11b0aa434522a643d22a08aea44728c3e3ba825ffd6cd5e8dbe00848f57b947e","sha512":"1b05e9438e7cf6f3500caeae07a4faac21a69c24241b9f4ea9eedaec59781099bfba05bce6d75301b46939ebce8d957aa77c695db23261f7f664735984a65c39","ssdeep":"","tlshash":"4bf04c44bab605182d27457e437f41087254a02b1a1efc1ebc4cb600af5a83878f5ff6","size":620,"data":"","first_seen":"2026-07-24T22:59:45.942947Z","last_seen":"2026-08-13T09:17:47.82286Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"daf731dee159555066705f083276738b","sha1":"1a5f1df115158e483d905ed892e83087826fce32","sha256":"105e0c459cd589bd31d75db65f7a28597bc1e1168be41e2f0a47254e05f7cdb1","sha512":"99a9ffb781a96b7bedb8651da8dc83761b8b06b99dfe52e7c6f1ca66684cba890b1437928d54b4d399b8491608eb42c09d92b0e34eaedf73762603bee534af2d","ssdeep":"","tlshash":"f801491facf73095522bf87c676f214450225007054dea44bceec7a00f122b82f16b9c","size":725,"data":"","first_seen":"2026-07-24T22:59:45.829022Z","last_seen":"2026-08-13T09:17:47.802292Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"b18d4282ca7c36082a561f2c56391a42","sha1":"51027765104c04a1f20a4b5f17d92fd9dea72360","sha256":"7e2dec4c590cec1dbec5cc96dba0864db9e10c9fc7913328ed520fb1caa2777e","sha512":"957eac3e5063bf63153f3c7679ba7df923c45cfdd82549b8e3ac0144bce10bbbaff824c3ad38e82504de17913fcb9eaa80b2323ffe5bd8a536a1b5da51c77583","ssdeep":"","tlshash":"ee90044c30f110c3011550751077c004153c0314000445d03c5fc1c45fd01747135f4c","size":42,"data":"","first_seen":"2026-07-05T06:42:05.146594Z","last_seen":"2026-08-13T09:16:58.018016Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"132a7a8e4e21e34da2c3958738cfc0f0","sha1":"ab25bec2ef4c0d4d88be8aff56059dd3cd89e989","sha256":"e2419bb01aa150a36691888547c0bc676aff98a5cb7305bac8e2d76b1ab139f6","sha512":"42abe927261255cacd22c2d3adcc32d200b15c4af109de203bd1babc94be868c0b3f122a1af17ca3b497c91fbc692e86f5a0ea2656b0328ac7499fc7b07bf321","ssdeep":"","tlshash":"a601f7194dfe04611643353d072fa144b37684ab185deaf87c8cc2159f85d2e256eef4","size":687,"data":"","first_seen":"2026-07-24T22:59:45.963611Z","last_seen":"2026-08-13T09:17:47.783615Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"12d39a6b845d5179e7df3b6a25e7b2e1","sha1":"1430074420f541b0a797937544e53e6fdf49dd45","sha256":"93616cfb73b6a401b8df60b7e21b907766e920c5445d485f28f355fc1622cd4c","sha512":"6680883e85a05481536f7a555b1894276fb60772f1a395de66eb29a8443c2f53afe4e040f2bbffb664483ceab7a80696ae7c4e25cc6b8d0368c44a65177fd402","ssdeep":"","tlshash":"4b411217de8b20981933e80f877b054e124d846b7d4fc421748da03adfaa93aa67e5d4","size":2125,"data":"","first_seen":"2026-07-24T22:59:45.869746Z","last_seen":"2026-08-13T09:17:47.801432Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"671167404ef561d8954f85f765f42b69","sha1":"1ec24957ee3b410d839bb9444c7489271cbb7e35","sha256":"39bef79c01c2f6bc974c580935736d3f2ae4fa71c9effe7115956cb7b9411887","sha512":"90f68602d955c4cf0d12fa9556c2a9258fd25ee3abc0c2abaae529c47bc151f226d22a88d77556eb46e2203bef8edb9adac6eca80ca504d6eb76d0f7a45aa087","ssdeep":"","tlshash":"8bf0a4af1ef3a522913c203f4a4db0007326c4b3839e8ee0f6855e759f9007b03aae44","size":554,"data":"","first_seen":"2026-07-05T06:42:05.169402Z","last_seen":"2026-08-13T09:17:47.7895Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"7c530f261b7d5ef43b136c8b0499305f","sha1":"7e5009e587fb375916a5e1e36c6b7f471af49e9c","sha256":"f0cb66826d4a66125a68d733752a1a02a035fb2de53a8245455205e2590496f3","sha512":"ef97eab4b7238fc0854d0a926eb335e19126348567bb7c52993e9e22233739acc7cec0ee130c86796afd48be855e61bb920aa6bf9e452b7ddca91be3a7d5d441","ssdeep":"","tlshash":"34119b5d4eba12388323b16d2b6fe36225330443480aceb4bf9ccb546f647685169e88","size":960,"data":"","first_seen":"2026-07-24T22:59:45.830049Z","last_seen":"2026-08-13T09:17:47.771414Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"e106a02f027581331aa5675974128423","sha1":"92ea2ea203033440ebad5ef26e92d4d6f86f2a10","sha256":"6af5e2326173f9efd456cc7369cef48f336a39ff6f85c1ca62d5c274fd82b0ad","sha512":"23f5a8337596fdb0384d7000112407e6240c2abb360c88aae8de66e8f112638488aafe41cb44a9ce1cd590a22a54b0fe3abd2914254f5d8aee480dbda241a054","ssdeep":"","tlshash":"88d05bdd7cf761000108715915194110e8fbce179559d6dde07946612f51c24a3af558","size":270,"data":"","first_seen":"2026-08-10T14:24:55.942785Z","last_seen":"2026-08-13T09:16:58.021202Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"00bb3fe29398d84c2bffa445182564c9","sha1":"c3f83a29e6337704215e7877170c75cde4f75cec","sha256":"4b63243476d324ddb349ae3320389fc23894d9f7a7e0d77451f307af8be42871","sha512":"d70b1639d194b4f6e4a73e6c944d5679dc0970bc6f2099da8f159c8353ee90ec3e957f28337432855518c5313aad4645ab6ce1e2e48ca3a8cedc0d9aaa2b17aa","ssdeep":"","tlshash":"681144ca4d9ca0104b0542d4804aec74bc2a9d3663dfca92f069c3701f122e6818fc6b","size":923,"data":"","first_seen":"2026-07-24T22:59:45.915692Z","last_seen":"2026-08-13T09:17:47.805791Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"36fac6e9ac14781fcc7df306cfe1888f","sha1":"efc712f9fda261712366e49dac7ce247f4a0fe39","sha256":"d142cd23b9aef360b3795bf16ac3525cebfe43627033392cc182b5902239b7d7","sha512":"def9b084f4d13c6315c1323166b883c6942bf6d5b96a6189b079f4c43e3a88735794f800c65d7b8d8251bba516505cadc49f74e8a1c7d88a796fa36b0fd79b8b","ssdeep":"","tlshash":"fed0a71de3f4192c04063310665e83647615f022a8dc5045f6bce2704fd085dd82076e","size":219,"data":"","first_seen":"2026-07-24T22:59:45.868347Z","last_seen":"2026-08-13T09:17:47.758923Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"b227a58774d745ec6bec75f403602539","sha1":"3a67407f6cc10020ee9a6a5118f3b0c000f3b92d","sha256":"b8f2a70194b4ee7d58e69a0cbf24c411a4b33fc58811bc2308717ff717b14c10","sha512":"4dcc7fcc43f1b2d3456c67b8a4f22154e173e07ec6833163aa45a7ebcebefb1ef073895c5edb88557e154006cb556e2604a3a1bc47e7258f3354544f41d5840b","ssdeep":"","tlshash":"3f21ee385db3021a753b65be07ef464972a0e1231e0ffc2eb40dd2006f56871a5b6ac5","size":1224,"data":"","first_seen":"2026-07-24T22:59:45.959472Z","last_seen":"2026-08-13T09:17:47.765195Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"4738f1a677c98e7ac25c58b22753f243","sha1":"e033327230bc7355eca0cd3cb028541049f3a18b","sha256":"e71316367949c3eb42f01f07f6cad425db7781afc8fb9d37c84ce4713b454945","sha512":"09d380fabe88ea408a9470d96d3a8ba1d9050e42b7fb303dad4223cee93bfc5c542704ab0871d8b1d99efff2adf5f2607fa54aeee226cd018a2420912e99caf4","ssdeep":"","tlshash":"3ef078937e9b7048b13b30ad032f23005ad5528f3688cc50f54db6249fe040a89bc5d4","size":642,"data":"","first_seen":"2026-08-13T09:16:58.024728Z","last_seen":"2026-08-13T09:16:58.024728Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/.well-known/diamwall/load/html/5s.html","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"scriptElement","is_inline":true,"md5":"43f2f4bf22f29f7ac8b8a1179ea5828d","sha1":"a84bbf49a9cecd8bf33e60e473785b5b6db87c59","sha256":"01546af97c00c3d1fdba2cc23660fc29f5dfc55962a71800a09cc3e61e02584e","sha512":"c8529e4568ad17a869b10e71d7bc7a3a107b9f1f3e7c69f81e97cf29a03e04984afb48bea3b6f6cc5e662a35a1e2987132e7e6d91db826bcc3b12157f6f4b1b1","ssdeep":"","tlshash":"f5a0241440300fd443d000ddc7d35f11c03d0130070d51511df0450034c014f4d307f1","size":80,"data":"","first_seen":"2026-08-03T21:52:27.844159Z","last_seen":"2026-08-13T09:17:47.755195Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/.well-known/diamwall/load/html/5s.html","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"scriptElement","is_inline":true,"md5":"d2fff389097b897172f06ae4a9e66c43","sha1":"614f972036d091ea2c889630fdf4231ed9837036","sha256":"5e1eb14f73424ff346bbd2d115b66ff20cb95dff6a6b4f78cf915732c91c5bc1","sha512":"6c9bdace89a4ad7cd1b9532479d84e5ab02442ce67da51da387b078e50a7e82238f89bd66219e455411f16377eeaf09f9d50de8e5094f02165c1e92058b1633b","ssdeep":"","tlshash":"8801fd98b160643a6fe718cc1a4bf7b2b03b570aa4bbd31a7619c541395468bf0338c4","size":804,"data":"","first_seen":"2026-08-03T21:52:27.845847Z","last_seen":"2026-08-13T09:17:47.755876Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/.well-known/diamwall/load/html/5s.html","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"scriptElement","is_inline":true,"md5":"29304903182d15d40252c9516ae8486e","sha1":"cb904f6bdfc7e6500beed955a628f6e575c8c803","sha256":"6422f7418136be48517293256bc6a0621bfc82037c96ec8a7386ade45930354d","sha512":"631bce3b8f4f7b442cd3441bcb08176a7ad854f01c7f5b1afed7c1f7db2295bdded650f985474db9dede2824858d8adc395f1e92bd4c7195f9d73e2057436c5b","ssdeep":"","tlshash":"2161866f7651387546d739b776ffea88b93172147843e026586d88c89a70f4be123ec0","size":3331,"data":"","first_seen":"2026-08-03T21:52:27.847684Z","last_seen":"2026-08-13T09:17:47.756542Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"f95ebb00f93e4331d112777069f16bb1","sha1":"f6e3850b64e12d253103eee830959980e550a852","sha256":"7ae9f61d16ce6708dd8176db8b6d1bafbcf91a84db9f93581ae90291464ccd60","sha512":"66bd4d776dc01694efed3aad4df02cb93fd9dec567427625f2c9f4e52f941e2928b49acc23893c8a4231e337b1a76cee7235df4004d8f3d7beae92ae45070eb5","ssdeep":"","tlshash":"20f0654ba6f25951053b70b0010f9414e358b423055d9d5efd6c5a94ef7012e89ddf9c","size":448,"data":"","first_seen":"2026-07-05T06:42:05.159682Z","last_seen":"2026-08-13T09:17:47.757231Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"194caf08a58f1bbf0b8bf0fab4e44845","sha1":"38a374718b4330aec369eb55412cb2eec4668077","sha256":"b917cdbf206ee16f6b29ee9109ea5e435228e59b536772b1c9b2c7782d268a17","sha512":"c8c8fb2751803e7316323763e5bc427d5ad2c92aa90f39fec979b8a6a423891280abf6232027ed1ab7f4d8cbcf24bcc3b38c0505e5dba3c685423b1253491fb1","ssdeep":"","tlshash":"d8d012902da26500021a734c142f65456565d423fcafb8897dd5c710bf1847d7b7e97d","size":196,"data":"","first_seen":"2026-07-24T22:59:45.887429Z","last_seen":"2026-08-13T09:17:47.807473Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"bd4631b8333365b7794db5c99c047127","sha1":"b44e8f4fa9ff196a1f31f9d3d967f035b317aa39","sha256":"2f59f362994b954d6ef56d33af11c3f73e1d238fdf36c6d60b29fca88720fbf3","sha512":"ebe7e61e71dba3782b8c55cf57de4a58fed1ef5327ec4727fe74afbdf0096309234e892cb4ed7c985c6deaacf2f2a96471470a88e84d79673d22a0675b8259e0","ssdeep":"","tlshash":"0d400000000000c0c0000003000000000000000000000c0000f0c000000c00c0330000","size":7,"data":"","first_seen":"2026-07-05T06:42:05.200896Z","last_seen":"2026-08-13T09:16:58.029865Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"b2e54d88929ae46e419930773fe5c8bf","sha1":"5663021f202777247fc5ed6401daee2e86278366","sha256":"11eaaa4a9de2770d24659d0efcd442a00d6c9b3f5bbcdfade75f5efd2b42654f","sha512":"a76190cec537b3f67fed9d14b440a04717f570fb9665cf02e240f08b5bc324a5e8dd991bd4d260b4d56b4874b6ba520a199981fccddde935b07a5273c6d296b1","ssdeep":"","tlshash":"10116b488efb06adb9772238173f9044b2e59403951afc0978dcb2501fd5d2815fcbe8","size":870,"data":"","first_seen":"2026-07-05T06:42:05.156216Z","last_seen":"2026-08-13T09:16:58.030594Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"d11bf93485abd8d3f96e4d8bda0a8d40","sha1":"099cbfc74f8aac8b187e476a23466bf1445b2b33","sha256":"cb458b70b3623be63c9496524fbc9ca355f5eeace580471e3de10ff08d61b039","sha512":"1f37b372caeea58041297b19b525de77c1f606c79949a72442e0802557294b170f1f6ce5266a31669acc2899ec0302f7dfecc7884ed32bf04ea0570346653b5e","ssdeep":"","tlshash":"c30168862a9b205df39b2078024f300191169d1b5d4ffa10f80c56226f515a951bcecd","size":725,"data":"","first_seen":"2026-07-05T06:42:05.142911Z","last_seen":"2026-08-13T09:17:47.799618Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"c246e77a3b1b934d4a565a1712f811b7","sha1":"3da46a817798efaef85cc2cae924bc6485a0573b","sha256":"7c7f6f7b57f7598005dc7e5c23fee36ec36b128ec71005ec9799ee3740f94b27","sha512":"41652fd3ce0d7e3f5f639c81a34313f5a5fa2ba15fd0ad5fe026e6165c8e6fa9eb78d217ef60d18d23c87db3cd977f5b8a3c24fd01fba1c2d9bfcfd7a15c24cb","ssdeep":"","tlshash":"28f07d251ae705582d1fa4dd07bf0846b794ad03021dd90c778cbe15af94d28a5b84da","size":630,"data":"","first_seen":"2026-08-13T09:16:58.033086Z","last_seen":"2026-08-13T09:16:58.033086Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"03ee82efca9d519b240f77c17f1fc78a","sha1":"532fbc76cda8a37b01fc6e31347c4a8301c3f92a","sha256":"d21e176c54dc899084b51affa92f51766bd5dbc443843c60bfebfcb83155490b","sha512":"49f81d31f16bee6582e52989a88b0bd9b736c02a8a188db0f3aa88a1a7d56c5e056ecbb9232f187e45ad9cb8266cdfc1c8eb80f531d6cc0d1f1f3d477d134681","ssdeep":"","tlshash":"f831c2fb9df71061512770281b3f6b08f6a06013646cd861befca1187fe0a593659fad","size":1662,"data":"","first_seen":"2026-07-24T22:59:45.946622Z","last_seen":"2026-08-13T09:17:47.82212Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"ca9510c27532834d74765cd309717973","sha1":"2d13e934936ba9a5bd293acc642c33596b3e5ef8","sha256":"7997870646498b4e076305f7720da8397745fbbbece0dd69b8e4c793e7324253","sha512":"bcc55b0e615f0d062577c898fb2de27874cd354b00b736a50ab5fe8aaac319b6a9cd464e5dbb7df1bbb2de2811f8c4d29417c449a7894eb2534ab07904e1fc53","ssdeep":"","tlshash":"6af028b995e2605d402b542a062fc85c71bc911307edd925fd6ce2081fe0828227afc9","size":600,"data":"","first_seen":"2026-07-24T22:59:45.856435Z","last_seen":"2026-08-13T09:17:47.800562Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"3ce090cb068a45f4e8238fcd50b25154","sha1":"19f65381331145766c654641a548f4ba5b748f6e","sha256":"e4ca8c2455ce000a33d7bb39f928b5b7d3f79da290f015fce3dba1e901a30171","sha512":"3452d6d149401ff34157c4472c558fcb179606e2b82eccf95c4af7a5a624c2ea36c7bc110faa69510e6341c1d261298189f5224b4d6fa6c4103f16eda52b853c","ssdeep":"","tlshash":"32e030ad5cf22171013aa03d002e6310773ae833675eaab4bbdc26286f2017696a9f14","size":432,"data":"","first_seen":"2026-07-24T22:59:45.832134Z","last_seen":"2026-08-13T09:17:47.761228Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"e10a1acbc52e5ef9d6482b3b4345a3db","sha1":"f2ac324c21000e26cf9eedf6687c18ffa1e6caa3","sha256":"b3291663e792cb927394dc9ae12d0ce5a447c3d5fbecac56adc2661cf2cf83bc","sha512":"2f45c80f824050544cb580fd99ca0193a778df1b425575a25301c68c409d0a4ad661804c6a3f902668f7dff62058a4297fa727ee620957a2242042d361343607","ssdeep":"","tlshash":"26f078936e9b304cb13f30ad032f330069a652cb2688cd51f50db6246fd044e89bd5d4","size":645,"data":"","first_seen":"2026-08-13T09:16:58.036229Z","last_seen":"2026-08-13T09:16:58.036229Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"ea638aa1a8a95af36306ce60a0d19c3e","sha1":"1f003188c00fa1c41550ccc1203faedbd05cd84e","sha256":"03ff05809e3b5fd1a7d59f217c755e857d709af2dc8b2f177f44343d3043df49","sha512":"27e072169912a33a54c435b87b6b1380937bd353e8f2898a79f3130779567dfa2c59a95feb15d181191cee827700a32b25aff65c3f9662d252854a9ec897e6fd","ssdeep":"","tlshash":"0ce065999cdb6061251925342d6fc0057768ac07105dc945fe685550bfc105cc274bb9","size":399,"data":"","first_seen":"2026-07-24T22:59:45.927521Z","last_seen":"2026-08-13T09:17:47.798674Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"0b6ab4a2f5f6a7f384b002c7f200aeec","sha1":"2bef437954fafdff0a51a263b6df71352e3b6843","sha256":"162a47a48591cbaa78ae001e6cdd42196eda96c67e4b711b05663da51ab5f59e","sha512":"d738f2d0cf61e18866fa5d0b38f2de915fce3497db0cbd8374d907f387a75d4ec01e28db96075d6c471aa358980a784778a4cf82e813a5b3f2428d003671a9a7","ssdeep":"","tlshash":"43e092e7f097012ee01d122d1dab8024fb34e716205d8715bafd16d5ef6212c8b5870a","size":380,"data":"","first_seen":"2026-07-05T06:42:05.175894Z","last_seen":"2026-08-13T09:17:47.810155Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"24f2cb986a54d1553a31e5cda711693c","sha1":"1a997938e69e002cac3dbcac09e223e65ff928a5","sha256":"85a4e7dd00fcb0b61fe3d907177eafd2343c065349f3f163925ea5d175fdf2bd","sha512":"586e99d4a76abb60df57eb368467ebe3f3470bc9a5eb9b87eaab4547750f512bf0408692d02c1cc25be2e220cac933f335d242bdcda1c17fbd15d32f49f65f61","ssdeep":"","tlshash":"8401819b9df79261902d91354b0fb140b214c97b074c9d58bb8cde765f5042f06ebb48","size":668,"data":"","first_seen":"2026-07-24T22:59:45.958465Z","last_seen":"2026-08-13T09:16:58.038449Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"07928d18511ba03c380374e66acadc90","sha1":"e32551df2e68552b92de2f774cd17b99b1e36aca","sha256":"ea4a83ff213dbd6cf72e9148d86f4c56ad0bf3423fbcce025b1cd138d4ace351","sha512":"f0c36d35f11442e08dd17d735552f0fdb8aabdc1236416bc2a6974ab2db3fd1bac69acc8e533c505aaf8ffa9b7f2a32652d7ca0f8465b8b0ad294661ffb99b19","ssdeep":"","tlshash":"6f018b1f6df670615533f83a8e1f510422135007488bedb4bddf6a608f5637a22a57a4","size":707,"data":"","first_seen":"2026-07-24T22:59:45.841152Z","last_seen":"2026-08-13T09:17:47.803214Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"a7ff6d789a9cfaf4919a98d730f8ed8c","sha1":"d20c81eec393450b90c7a8ec9dee01a26831c3bf","sha256":"28ef816ab9ab3c76469d5fadefb1ef9205e07eab4a89f43d891284a0a388ba6f","sha512":"8679677b44872816f6c76de33aeabcd6f74b96a4cad8908e7f3074437a1c2f4d0c8a83724abc24a324eb0c006ee6c53da9a8014703b5a36d1651b17e5f6f13d3","ssdeep":"","tlshash":"b1117b3c7464041a352759bc996f4090a2694c27c89abc52f91cb60cdf52d7c0298ba0","size":974,"data":"","first_seen":"2026-07-24T22:59:45.885236Z","last_seen":"2026-08-13T09:17:47.772886Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/e1078e58-d184-4ad7-92ad-d7e32d6d6487","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"","is_inline":false,"md5":"86666b6e3fb49a7b87a846ecf06af02f","sha1":"29a78a0a5ddd2df704dcad6409aff31a123321c9","sha256":"26221b2d703e8ead33a4609f2733601cb37e25df404c6a1358f2fb0d0423b94f","sha512":"44a539ea44dcc5391cd01307fd9dc614436fa67acdc17daadcdfeb5c753ee3a627bb08edec897ad1375622868c9f7bd9bbc92aa16460601f0c87103aeeb606cb","ssdeep":"","tlshash":"2d51fe04afbb10d8b657322497bf620651b6e6031d8eea11b50cfd013f98a16489eaf8","size":2483,"data":"","first_seen":"2026-08-13T09:16:58.040672Z","last_seen":"2026-08-13T09:16:58.040672Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/.well-known/diamwall/load/html/5s.html","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eventHandler","is_inline":false,"md5":"92ee952ffb2792d6d99a563bfeece2a1","sha1":"a31e8904cd52556769c699df4cc2f42f4b4812e8","sha256":"0ccd034a254309eec7e9aa9144e43dd7fe66506801a66e5138d5794952583344","sha512":"a3759bcfbf0ecff0c68ee1d244e2afce1cbecc2eb9b1c514d254f9f0a115b7640697fbd8c540595116ae973ea34e4e688a58368e44b629f761323fd0da2fa5ea","ssdeep":"","tlshash":"15c080543d2c417d0aa1577766f5d787f66121557086c0164c44dc6d3cd4bc70555474","size":180,"data":"","first_seen":"2026-08-03T21:52:27.860944Z","last_seen":"2026-08-13T09:17:47.804079Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"02546f7f5fb2e7917eab04d2fa9ef182","sha1":"a96e27a7916fb2ad7d54037b5575a81dfdeacfe4","sha256":"83823f6b4290e98068d4da007431ea5e96b72969d87cb8649e695f83cc5d88b0","sha512":"be9b10baf4419bbf131cd379713a44d61b26ec799018301bbc09553e34a4fb161b93e81597bce82277df5fa7fb8e96b5b8f0ec0c5ac1ad9efff1d206ce1848c7","ssdeep":"","tlshash":"6fa0025d24f52052566b517a156f810424355121509aca643d9e51c5df5017853425dc","size":84,"data":"","first_seen":"2026-07-05T06:42:05.187432Z","last_seen":"2026-08-13T09:17:47.795112Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"156168219284a7fa45b1c721c9eae5a2","sha1":"366eb42df0cb2251ae42653a2d114f7f199a28e5","sha256":"af204b2dd148b6a2e5107f5111f5025cbc9e495292fea288e05f04c36d65ce2d","sha512":"c3a00f30fd3b5a68cee8f572f05875a1dad4a5e35ae76db3d92c24d2b402c62763888c8da4a90a68532a871e68e6a3dc1434da5f9cc7de422c949b159f3c5e30","ssdeep":"","tlshash":"c6f09e223efb9428396fa4af571f9005b96c4503158ef910f88cf610af904246abc5d9","size":516,"data":"","first_seen":"2026-08-13T09:16:58.043024Z","last_seen":"2026-08-13T09:16:58.043024Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"85190737cc7b75b98d6a9ca71b194548","sha1":"1a8ebf27d704dada047d19d933d11a70e6e1d486","sha256":"f05525993a4143be2b728a8f00878091c5b1e4a51f82962154889249b28eddbc","sha512":"3171cfc0dca446e57424d02c641b4099ef686344fa31e2524208ac59ccddf8f39dc759f6b92a9ceff6bf0358a57cf889e9c6ec889d54e87eafb8d55a0f3a2d6b","ssdeep":"","tlshash":"7bd0a9cbf0c7200ae50d13692c0b8078f724a625608c834098b85381ff9206c4b60b1e","size":210,"data":"","first_seen":"2026-07-05T06:42:05.238595Z","last_seen":"2026-08-13T09:17:47.779157Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"f99b4de0d3a6ba04b21ec6a61308d921","sha1":"ac376ad3b80f2e76771150d8d69836d5685f6806","sha256":"3a3dc40819b64a689388925fd59a3dcb74e4f24ada6f1d7c06a0c3141fb8f67a","sha512":"acb6cf5b95f6556e3f1fc1b17c1798774666b71ee9830dfdf0b26b78eccb4e8b9146850c45dc1096f8a545db10938d7ee9181695272f62a94efdf9547da631bc","ssdeep":"","tlshash":"5df02b78bce7102c712f245d436f9084e29d48132498e9957bce33ae0f50d2499e9e58","size":545,"data":"","first_seen":"2026-08-10T14:24:56.030103Z","last_seen":"2026-08-13T09:16:58.04464Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"ab5d03edd646006bd0687edf8c1b8147","sha1":"ce1851bfb34b6b8ef7b7f17781a3b92839ac756b","sha256":"c0bc27d6a3f864154de36324816fe6e4b059e1aeeccca147632b7ae1f6fa856a","sha512":"316a923654d3b39a68cdcb51af07124a5a0898458bae42e5c7b9306c399f9698e93ca9378930a3a814f7ffeaf84512da00751f4472a31c749af0873316b32fbe","ssdeep":"","tlshash":"ce014e0a6767186d7517727a2b9fd35423293013049ece047ecd8e489f94c3a2d9af49","size":697,"data":"","first_seen":"2026-07-05T06:42:05.173032Z","last_seen":"2026-08-13T09:16:58.045222Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"0d787a00a41e289562d73308d7e2c09c","sha1":"1883440992744f7358923caf592617e7f4686338","sha256":"e45e8ef1da62d2e434a5674d4dcf634a9816c2784b58f189f8ab3757cc8fdd30","sha512":"7a2d32fd296d10385b63e09e8737c193448231a27f09caa4ca07c8e5e33f00761421fd6efb38c51540da6fb5fccacc762868f6dba018df505e27111f45b317fe","ssdeep":"","tlshash":"89213c5e09fa10256363647c06dfb001662669031a19db557defe660bf2233c63d9fbc","size":1417,"data":"","first_seen":"2026-07-24T22:59:45.877916Z","last_seen":"2026-08-13T09:17:47.793462Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"3ed7e935f91e3ac8d66e19d91e58e5be","sha1":"3e9d89ad0365887b33ae85f8d566bea5da00895e","sha256":"212561a5dc004f945a34ff5a64707d9ee9fa8f517dda8318a4e19557f20e4e13","sha512":"86cecd79c8ee6439d3ccad38126504373805accf0f292d6a314b292f8f13e98f5b58465d946aedcd51e64ad0164df2f6666ca5bc33637e4e900b50dafdff8393","ssdeep":"","tlshash":"47c04c9c7dd7b100950a7169820f5044f66c4402248e5a04fa6c8794af2013c857674d","size":132,"data":"","first_seen":"2026-07-05T06:42:05.151158Z","last_seen":"2026-08-13T09:17:47.824327Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"3ed302b52a2a16226c2ca363717767d4","sha1":"d3d579be5471703e270190b8237130d621dd2c89","sha256":"29c49244ecb5a870390c3cb23d7898d58cb2ccd4c6de00c1ba8675051fe6face","sha512":"2e12e433893f06e9ce754b0adc582aa415e34f2266626dc4de6ea4132ae2cae8cecfecfa95e6757ed2f814289b23ecd8b75efe8ebd1c6384f8b6ca50d34a5721","ssdeep":"","tlshash":"cc90045c30d5703405f175513507c1447c3c0703c45d05c15d0571c0d7750f44175d5c","size":44,"data":"","first_seen":"2026-07-05T06:42:05.19981Z","last_seen":"2026-08-13T09:17:47.77773Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"7f3dd0d4e58d1edbe8eef7a6d35479aa","sha1":"e8202488f12a12e04d7d0372b998d0c9707cc5be","sha256":"15883ec9ca014a9808101ec931efb6adb1b99de932e71cdff3f59541ba385fa7","sha512":"67358678134ce83e8d86a6c122cedcbcd4b5420d2d2b3becd6d34736883d9599bfcc450fe4bf45525291c60cdb666714a317710e12f7eeeddd38175a1f2701c4","ssdeep":"","tlshash":"88f0f9af78a7a5008319660e112fc0c0ea5aad53059d9df3f99fca246f3051895fa7d0","size":633,"data":"","first_seen":"2026-07-05T06:42:05.241641Z","last_seen":"2026-08-13T09:16:58.048837Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"328533fcf99b24ea5fc5b5fa7f075923","sha1":"45fbb9da3730a78cfb1985f7e3636db1ec63d85c","sha256":"85e59efff6f73f20b16c244df294a62abb7be32b67fa51350d69045447bdd9aa","sha512":"67dcb618e7b198abc97ed4928ac4e1cd112e311de679d39366873d0b3bf21037792f5b22f7806043982ada951bf7851c8796a580009676e3b1068aeb3eca8f0e","ssdeep":"","tlshash":"8841f1aa5cbb2021b327317cc75f05402133d653020eed54fb5d6a65af52274a26fbd4","size":2251,"data":"","first_seen":"2026-07-24T22:59:45.875596Z","last_seen":"2026-08-13T09:17:47.765929Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"9228ec780e98dbcb6a7c861485ff7b0c","sha1":"3d05afebb8b09098563ce04fd604fe9b76906093","sha256":"40ebc4e9ffe53e272c93be98a8c91139ca53f4902fe14e8adb4d7619c5bab93f","sha512":"e0be740176fcc9af9526b3d8ce3211db300e5f0585893e1db9d1d18eb38cb56f7b99985f36b557334a11d84c7e7eaee4bf3c09d9aa3cabec169eb1e389bacc6e","ssdeep":"","tlshash":"f8b0129c7cd7b100c50d6159810f4044f76c0401348f5a04fab88788bf3023c853674d","size":98,"data":"","first_seen":"2026-07-05T06:42:05.247364Z","last_seen":"2026-08-13T09:17:47.774382Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"a5c853ada1361cc36e753c7639d6d5d9","sha1":"60524cfe6169859a741d3000e4d2c12fccfaf47e","sha256":"0f5d0a4a43bdcc4464569cf99262f8fda967e6e4140da3a19c06ae9dfa43a0cb","sha512":"42d37496bc7d023c7c911f03f4b290906f718ed02ea1a3027e74be8f6bad93f2405071c76c3530fa18b41c84a48799dbfcb6c3f3f88d1ae58649996021a556db","ssdeep":"","tlshash":"42415eb5ba971518980f2235177f4004f32ce713980edf257a6eb6804fa191cd9beb9b","size":1988,"data":"","first_seen":"2026-07-05T06:42:05.204134Z","last_seen":"2026-08-13T09:16:58.051707Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"92436bd209553a02c4e057aac1f6aa27","sha1":"96478671025676e5268ae6371c245a189e934e15","sha256":"99ab9faaa5e314197ab468321d767009b4f21712dbdcd6ca366c976b31953810","sha512":"6cd9b1b6ebd854bf79dbde1e091a831842e0897da9d54d7c372bfd200a768118bec54e14b99bd4731b30eef6cbf3ca67ccaf2f3feaf47870a5aef82cf422059a","ssdeep":"","tlshash":"8121894caeeb2210035770f8036b5446f254a10b6b8dce90fe5c76415f85b70ba767e2","size":1173,"data":"","first_seen":"2026-07-24T22:59:45.845173Z","last_seen":"2026-08-13T09:17:47.790921Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"2423305e983d0a4db698aac1ae936dcc","sha1":"da1d4a8486ee9cbede684968ae62d0c72381cb2c","sha256":"1867e7a7acf5e07045644cddd2be637dfd23928fefd0c956d114160606c3225f","sha512":"3a1dd068c03d9f3d33d3f4075ab23275bd7994b1752d2666444ba1c2bfe8ee47b182386c3d5f930d440810c0ccf2b18472b6cc8461173bb1a65cb24ae40a41de","ssdeep":"","tlshash":"4ad0a9cbf0c7200ae50e13692c0b8078f724a624608c834098b85381ff9306c5b60b1e","size":210,"data":"","first_seen":"2026-07-05T06:42:05.149655Z","last_seen":"2026-08-13T09:17:47.823571Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"69dd7cf100657899bb79e52cb5f63f1f","sha1":"0d1242ff87ca0e52d901e7e12ce9a007937e4019","sha256":"5f5c13cf01afd3d3c5fa2350b2f83fe07890af8ca50439659d16ec7efb8c80ce","sha512":"a750500a06fd3656a79242131cc81ed7e9127191959c72735dbe0f4c5370562ea2cd8ebf587887877438c182da2c03b88b4cbaaf3feb31180084213ecad7e1f8","ssdeep":"","tlshash":"f4f0d13fad490001582510ca3958302059e3adb73bac0510f2dcd6a03f659ba85b75e9","size":656,"data":"","first_seen":"2026-07-05T06:42:05.182944Z","last_seen":"2026-08-13T09:16:58.05356Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/cdn-cgi/chl/v2/captcha/assets/cpt.lib?mclrdw=0c4a56\u0026sclrdw=2ea8c1","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"scriptElement","is_inline":false,"md5":"4dea308572524bb8936636f7da6f1937","sha1":"8089007502bfa95b0d209d6a93bc2443431b3678","sha256":"256b23b0755185f310f6b86960e0fac37872be74cc3e30273f557158973bbcff","sha512":"18feeade4d6026bbb1702da8dd670969c7b6f7df85eea7b5f0f001d707fcdeb3d55925fedddac51f99c0ec87b6fc8552b4a6cbcd1b0d7c39b348fdadf4291a98","ssdeep":"12288:5LhM2SndLLmWu9IA4jOAfR73Lue+MNp/k5cB:5L/Epui1jOAlUM7k5cB","tlshash":"74f4b648a09b9a5f25d6cb3045e97fcf2c735f7c1a0f72201a96bffaa45be14ca08115","size":784505,"data":"","first_seen":"2026-08-13T09:16:57.996721Z","last_seen":"2026-08-13T09:16:57.996721Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"befcac03d26f726f3299cee2aa00ef0e","sha1":"102fbacd8f8ce574c96c5cd8661a3e591f67b70d","sha256":"f5ef295f9a2b878453e55c9d8d19596ac893507aa2127f64a074132842a8b609","sha512":"7ec018d299a6c9614395256fb542db4e0e87d7ac9b4eb0fe99a8ad905963ef85efeed8401a5ed409b425f3924bef26cb82610f34f60aa3ea47392ee888ec3d8b","ssdeep":"","tlshash":"13118ced6ce7a018e037307a073f9960b3be4553069ded25fe1cd209df60a284795ac5","size":955,"data":"","first_seen":"2026-07-24T22:59:45.880063Z","last_seen":"2026-08-13T09:17:47.759614Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"29d9ae7a77633964619c46996b2fe058","sha1":"9fe75d4310c325729c58d774b9dbd3467099cbc5","sha256":"82bc782e22a1206a760b98e7e8203f2d1286b3db387f3b226953ac22ef328d3f","sha512":"37a7b40145a4d63a28bf4509be1708440a2d7216594059c974b62eaa226fe336864a9eb38d2d6440423b8af57bebdd842cd9dcad4480cce71ca01eb20e3dfe9a","ssdeep":"","tlshash":"afe092e9d8e561b82511d024c9bdd358a9eac5e3034dcdb0f1d86250af5287233b90d8","size":372,"data":"","first_seen":"2026-07-24T22:59:45.828014Z","last_seen":"2026-08-13T09:17:47.760335Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"8e0b88edd9680042f9a2910ce1fa8339","sha1":"75ea16c09125f4ef2b11b5ad20b116466a3b0275","sha256":"a8a3a9db15a68634a52e66ae64f351306f1b76e26d595ba7dda563cb53670174","sha512":"a7cf89f41919d74d7245586e59c5655678c546a36996573b393bd4eed0f218be1e5b7fdcffd5630737b4f1cdb047a41346c4f3889c26364a820b58dfc8b66052","ssdeep":"96:Zc+chsZSYThksH7cYpsuw0ucMJHwFLax1T5l0:ZCASk7RpOkIx1H0","tlshash":"09f1900eceaf3c501b6ab94a17df18c2651db39b1c91c44db89ee7c05f4413a16d879c","size":7927,"data":"","first_seen":"2026-07-24T22:59:45.975248Z","last_seen":"2026-08-13T09:17:47.773614Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"e4cd679bbc1152d3bfe720b013d74042","sha1":"859b6b15b024abdcb5b2b224273569c6471fceb7","sha256":"5fad38e77f4525b71f28b38b0971c88232231e7ba6097dfc162d0ab077ec5264","sha512":"ca50892d1b398651754177c00bc189f9b5610df4a5197e662c6bffeaa9a5ed185e95672bbe5189ed5308b3d58698b82304bb5d0028ec60189087e850746d4a24","ssdeep":"48:8bDJbxPTTei/b3I/SY4bpHQK/UqUjdoTxRP1sA9k8x1QvBMZcsqREYKFNG6TeEEe:ixnH/8KYmpHQK/UqUjdfwkFnQ/NeP5r0","tlshash":"7591648bcdef3c008ba7644a07ef15c1142da7872d99d19eb99de5d40f4202e0ad8b9d","size":4437,"data":"","first_seen":"2026-08-13T09:16:58.056876Z","last_seen":"2026-08-13T09:16:58.056876Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"Function","is_inline":false,"md5":"881ddb1355b199eafea40b5d601bc3e7","sha1":"f5694ea1e967e6a5801d5d9a158d5ed8c92bf832","sha256":"e8eb0b26f3278876fb3d28a0728f313cee2ed8cd8ba7f40045f6931469caf3fb","sha512":"d13653a986ebed78a038610a05ccd1858ba5164ffcf00e83f25b5184878b78c152760376776b8c7c0d047a58fcb5d17418e958476dfc6b478d3e61fe3283f98c","ssdeep":"192:/vEjfTXiaJf7Piuxmy1+NfjXi9fvbdiSfyXiffalipfQXivk4mDwgEJpOd176Woa:/M7fJj3j1gLM756SC24cJSYWpSCf","tlshash":"cf7231491df7106095eba23893bf89446435a517632ceaae7e4deb704f4722881f37ec","size":16822,"data":"","first_seen":"2026-08-13T09:16:58.058423Z","last_seen":"2026-08-13T09:16:58.058423Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"f43cc5335ac5de4ab9c2575d2995d692","sha1":"39c5cb189afd532abb2d580cca4cd3d9e710c324","sha256":"c12fd53d0569f08f8bccc56081736fd9f217d319e44b7b66a6748084de9693fb","sha512":"73185cb44c8aabf55e7cd095919f1308d5bdb4df1cb3069e66b7b968c04406494b0adc83a5cec370cec1d4e28b1bf981c78eb5148d370a956dae57400be7341f","ssdeep":"","tlshash":"dbd023111e85e5bcd3730042d18f7184785d452011d0d51cc40efc401d509b943e40d5","size":216,"data":"","first_seen":"2026-07-05T06:42:05.251529Z","last_seen":"2026-08-13T09:16:58.0598Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"b2a5adfacb4d610ee10aa67631d9272c","sha1":"db7bbddd3dec71822e9f63ed2306fbecc15bed9a","sha256":"4a1d5e82681ab8762a2c04ce09bd815bf744142df7ef5c44d66b317adea5d1a6","sha512":"e7cb92d9d38a1f26569ca48567708bd49ffb83306d842bd1ba9b471b69a430221814b667248c476e8cab9982273292adf985b7297153c4a9a65c01c2b75ea799","ssdeep":"","tlshash":"cef0ae4a78f1212013176018459fd305b7394c331a4d5924bdada664ff24358d6b2bdb","size":506,"data":"","first_seen":"2026-07-24T22:59:45.964739Z","last_seen":"2026-08-13T09:17:47.826837Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"ce75f12a3381b6bcca29f4805fb2c53e","sha1":"712f9915b8cc2652fc70dc61875a7fa175db9947","sha256":"a7e11c77a2d4c5e59131a43e3dc2a5d71dcea670c9cd96c54791dc2683c64dd6","sha512":"56d7c0100a046fed0ca519f63eef73773e5f93b1244a11c094b7974185d6ce453738a3099c90b264e36a626ab3f68d44ea6aead2cdb0c0466136c9f4503b655f","ssdeep":"","tlshash":"82a0029db9e57100914e75f4501f4458f72c955124dd5b09eca897c4df3103c8622b1d","size":68,"data":"","first_seen":"2026-07-05T06:42:05.155296Z","last_seen":"2026-08-13T09:17:47.811156Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"42e82a781007326c2c5a2e4f361ea029","sha1":"4552ab48d3f78a9bdeedaee983383e1801203d0a","sha256":"0b95ebbfe9144c84abece126caad21a5bd811768b6dbcdb2221b8811bcc2fa67","sha512":"b523de13fcac0e674436527cf33c16d7bc11c80ae0bfee401502aa781e39161b822f7456d61162bad6326bda2dd21e26f9fa615cee65cc609669082016fe7723","ssdeep":"","tlshash":"e331bc4e18bb649a6bb7b47d9b3b60042263c8170e09dd90bfce92902fa2434172ef54","size":1811,"data":"","first_seen":"2026-07-05T06:42:05.163058Z","last_seen":"2026-08-13T09:16:58.062266Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"2bcf64b9e9445bf7cd4fffe43b599ae2","sha1":"191a96583451ab2383f0054998c2bdd53cd00a16","sha256":"a885b43a5b8700bf781d9207402b8d89fb1c1e2ab89d43e41481b8310cd48340","sha512":"d1141b388bad9fd1c767aa344ffcbd5ac1463e5617f386375e19547e8b03a953bf669e58b00eb3c5b4e56b805085d44cdadfa75d72b83857cef310266c2a7a21","ssdeep":"","tlshash":"d731239faef700786452702e831f5100b6b6c9934a4feea1796ca3354f019289a98ad5","size":1465,"data":"","first_seen":"2026-07-05T06:42:05.201943Z","last_seen":"2026-08-13T09:16:58.063179Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"cb7de10071d7e6465a2ca600e12d35bd","sha1":"c51ca4852338f4942d3d2c875437eedd310ab11f","sha256":"369e88583dff55889ca170042804de53cbc6623a0d5b96f0107609e9b879a42b","sha512":"e66593bd561229fa6318fc0807a0137e0ec8fbae94c33eb08b83a71d168072529d30af2189737a8f5032361d3710cfec2fcf22139e4bc72eec34746b68024e50","ssdeep":"","tlshash":"99019cacf8e6303454772034166fc845e32e428b483cfdf0fa9c92a48f601648760bd8","size":750,"data":"","first_seen":"2026-07-24T22:59:45.861364Z","last_seen":"2026-08-13T09:17:47.797711Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"afdbeae36a276579444c8881f96e31c7","sha1":"be9ae0c182d71c20084478cfd226b042352025cc","sha256":"1894083a03a8fc98d5c38c5c3d6002d9115526e027e51c59fb89ea91359d0d06","sha512":"11691f8ffeb4b451ef226bdfcbffff28f90b7f9972c61c3faacba3dc5893b8220c9518e51f49f30701d3edc7f55f7a826b894765d2728d69723dedd0527d0369","ssdeep":"","tlshash":"8401ce054e9e6059286b24fc5f3fa04516794a17350dd960be8ca2269fc2d2611fded0","size":835,"data":"","first_seen":"2026-07-05T06:42:05.177662Z","last_seen":"2026-08-13T09:17:47.763309Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"0623c9572c4b8f43ea231655fd425472","sha1":"186ac8c412f30efead17c8a30554c401b9ce70df","sha256":"e4e5d47bbe0cbe691930fe5c4fcf85a9818a1116680b6f667c3478c7073bf055","sha512":"7c64a3e9e18f67a068a645a22aea88fd6bcf8ee4ca4d1af313b162c26ab99046b772ac120c9e0c8a3aa3ac75198e7f8491ad406f05c4ccde35ee93e6e3f5acb7","ssdeep":"","tlshash":"a0f04978ec81e01ce0df50b6833b8474b9bc5627062de662ba2eb20d0fb072c0154f88","size":635,"data":"","first_seen":"2026-07-24T22:59:45.807606Z","last_seen":"2026-08-13T09:17:47.78273Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"ce521b72da698dde5021db0ac9ab2e3f","sha1":"b570b7ae83d69a829d0f13d789f237bc86ce522c","sha256":"c45ca9b00a609e421ef3fdeea2c3787338b2e33fce9a1cf02f02d7f548875e92","sha512":"4ccb9a50348e76ab4a72be9e9f021a85bbe201fe03cace5b8de8276701626d803467c7bd4987b33390f638cf3f16c682c2a000a1d2b48abf1d03aeb24ce0d3b5","ssdeep":"","tlshash":"64f07d1f89e4123d62332028156e2502633986135e1bff147b5c72206fa661824f8fb8","size":642,"data":"","first_seen":"2026-07-24T22:59:45.945065Z","last_seen":"2026-08-13T09:17:47.786711Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"0d4df3e25598ee3f62835c793128599d","sha1":"938f7b37817cac25b88f7e3105d856213b800381","sha256":"09aceb8a30826d71edcdae0c1f7ecfdd46bd6e6d61020a8208d14cb99365eae4","sha512":"ee54a556f091531282ecbbdc8ebba30c1dc40c4039a8204d99dd682bd3d1c500593f64b3b42668c4972987eaebd0a7f81822506030b9f86de1350eaa8c64b289","ssdeep":"","tlshash":"b4e0d8ce94f321952187a07d216f2114636f8003894cc7a0b54e16002f1a62547649e5","size":328,"data":"","first_seen":"2026-07-05T06:42:05.245501Z","last_seen":"2026-08-13T09:16:58.066991Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"d85fe6e40551a82025650017138e5429","sha1":"5fe4735ae1a71c5584ef379afc52c8a0ae941d99","sha256":"08c5bacbd88ca637d95a52d08c968eb84996526c17e28d37f00f59631191be4e","sha512":"0005c3d240fbb429c7741187533600fc5948341fc6bd399c1f003b3ab841ddb7944f0b44293d434c6a6ade8b9286f80893a4987a371f2535139b92e9e0437fb7","ssdeep":"","tlshash":"360145acadd7612a11a3213e0b7fd104b3b64063405ddc417f4c62286f9592607e9be9","size":837,"data":"","first_seen":"2026-07-05T06:42:05.160657Z","last_seen":"2026-08-13T09:16:58.067945Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"4dd4b5dbf6fd88f7bbc83364609258d0","sha1":"1b6a0bdd67e6aa5d300789b726a01058ace6a3f1","sha256":"99c19296193cdb24ee16a09561c4d675354aa38d9775e89275bf871fc9089bcb","sha512":"6a63d9ba00102d721dc2b47a24c93924844d256541fa655ba66571e4499a485d18027347f823b52dbbd546449a07e31eb4c4bd5c8e09392202831909d341f153","ssdeep":"","tlshash":"34e02214fce613a8321aa12d0b2f502ab3288803a40ecd11be1c7301bfd46340baa9d9","size":420,"data":"","first_seen":"2026-07-24T22:59:45.815549Z","last_seen":"2026-08-13T09:17:47.764415Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"658942aaf294073cd2da843f939e2049","sha1":"872fc97514f0be4fa821f2112580f603bfca3794","sha256":"d6088b40b040a72650d3cac424784571f2c17d8b909b48e265d8006326c671e7","sha512":"9f1c435afcd9bf6bb138436ca23f375f4027fef027ba176eda05c4390623fee64eb34b4d6e5886703533791107150991b1fcafacb2f0a08d0e52c48b3c696853","ssdeep":"","tlshash":"0de08c5838f2b0242653306e425fa202bb324873968ccd50be5d5370afb13e89a333e8","size":328,"data":"","first_seen":"2026-07-05T06:42:05.20519Z","last_seen":"2026-08-13T09:16:58.070045Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/cdn-cgi/mitigation/v2/chl/chlb.lib?bdt=0\u0026b12=0\u0026brc=0","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b44afcbf2f9143f33e17013415a9381","sha1":"e5d18097c2c1c3f087acb1a1781ba3d7dee89b54","sha256":"6ae6f319efca257abee84f0f6f47d62dd08d9c9cb6bb0f7d86caf7b9657acccf","sha512":"332344ed92a0711cd3d835db1680c439cc4c0391cc36100a256386e30bd759fbb2140877323eee84a38313e95444a1f9efc6dea1773060bff60fc81953646353","ssdeep":"3072:/aoWfO/je1lxf4cd2kQejYJSM52pXHHNeJ0sNL7:/1+Oje1lxp7Qey52FHteJ027","tlshash":"af94558de1ab319b85070699efdd7c6a8e826bda9f850118e772b0c1317f4f68d0c9c5","size":433782,"data":"","first_seen":"2026-08-13T09:16:58.003486Z","last_seen":"2026-08-13T09:16:58.003486Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"84d660bf4841273bad697210ab8faf9c","sha1":"fdf4785ef5a5dbecf9a7b1d4cbc7171e0b870c78","sha256":"b375284853a8da536e94d461de162842496c4fcc52aaa14b9eb91e2e6f124757","sha512":"f704f69ee497facdcedd285a97cbce2c3c28e884da2386343e9d0e53ff7101946145995a40c272481565998761b6302bd62f4af5def3b093d1d77b9aa9d07f21","ssdeep":"","tlshash":"7911d68966ff2025662770ba1a6fe5047236150345dcdde07d9c5700bf1493975e778c","size":907,"data":"","first_seen":"2026-07-05T06:42:05.186448Z","last_seen":"2026-08-13T09:16:58.07099Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"c1e4b33fceb4fc27bd8fd9299da4bafe","sha1":"d55bd668a5723e4f2ca3c6a1a1f0c59ddba4fb3a","sha256":"1b111cee05d13a5edb6b82d946e6417c33b2d1d1a297710809edd2804870c01f","sha512":"62b674cff75d36d39bf295dfd145af6ef865763d77de344c90a396d41568bb359f3e7c9f12ed01aa3b07413aaafd4df7353117f9b8c76cfa3a91f756e6aefcf6","ssdeep":"","tlshash":"08d012159ad50f1045d752ba658a2028a377c083714d8fe6392f6350bf59b7c07b2e9e","size":197,"data":"","first_seen":"2026-07-24T22:59:45.994406Z","last_seen":"2026-08-13T09:16:58.072007Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"b352d86989770ae227d1324e55e3a4ea","sha1":"4d142c7b92821ec3fe0dd3fe2580366e1b4ad277","sha256":"f3259a4c8ed48d854ba80090bede5c6c9a14386b2f9f6e7ce32bc5e85308b042","sha512":"e50ec5cf6b2eed41d75cdcdf1a703dc1d31ce92de248dbb09693a24c1a5b7e2f38f339d3e205bedfe8b9fbc64665720fe9e8d2a95983058d3e0a948659502810","ssdeep":"","tlshash":"ebf050daeaf65845664ea274522dd0d53bdca02311ac9d04fc8c53445f885240291fdd","size":519,"data":"","first_seen":"2026-07-24T22:59:45.826943Z","last_seen":"2026-08-13T09:17:47.821367Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"1b74269b6a7b93bf0185a0ec17881d79","sha1":"1a2aebe60a79371d5bc1f4281e40f36608c1a536","sha256":"9d7f238159644eb0b832314c02b85c5da10b26124b8e5555f456481a96b62198","sha512":"888b01f9ce8ace767671ef0d230b3a2ea3cddb14d3aaef02fb5cbd01240e042ae6e23ca4fac1afc8b008a749509fb6743ab0b765a57fd651c8e7a0ca92cffc91","ssdeep":"","tlshash":"faf078936eab3048b13f30ad036f23006995568b2688cd10f94db6649f9040e89bd5d4","size":640,"data":"","first_seen":"2026-08-13T09:16:58.073633Z","last_seen":"2026-08-13T09:16:58.073633Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"9dffc3bac180ad02c5b49d863b52ebcf","sha1":"5ab1a914d69f4d619d015c343f96c13ae3a1e01e","sha256":"1d65526e9af933232efb62863f12fd671c0dad92ac8f0e42471712644cf06c1a","sha512":"834d1e44581033476940acfa9910a7f11da7625394b13e49e71ea47acd4378df9beb8b76a88c84cec4657a9092e005a848fc60aad9c2f7bddfa0d042ef26f0ae","ssdeep":"","tlshash":"baf0ac4fc4cd003d545f1838296ad455a6fce10b084df9627eb0a608afe012c03f5fa1","size":588,"data":"","first_seen":"2026-07-24T22:59:45.936377Z","last_seen":"2026-08-13T09:17:47.796157Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"d361e4925df9fa675d8d0b9a03ab08e7","sha1":"32bbd2fcdfb73c4531dc75a022d883ad33f4ad42","sha256":"3a73e7de1eac3fb5bf59d53627d4a08f2c945d03ee25a9a5b25086cc60144031","sha512":"e9b9ca5e34cbb2fd1d5d93e453b68ceec0e8f5cd733a2d7af73fa1d2db526fdf0d773918e8d20c89c8d6bc0cfde17249c056bc03e2b610f47597effd572a3984","ssdeep":"","tlshash":"59f078132fe7956ca90be85e176f4c0ce198ed22026dd9097a4cfa01af90e28a1f8495","size":624,"data":"","first_seen":"2026-08-13T09:16:58.076338Z","last_seen":"2026-08-13T09:16:58.076338Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"b3fa3820f94d425fbe15804051d3fdcb","sha1":"6b92d10c32ca07d26de97966330a4dbff6e240e3","sha256":"c10c59f976754e030d527e88102758d72b44af199dcb445ee884a64fe5158a6a","sha512":"5d5c1ae8a753bff1ba5eb7c4828b0e5c80628832ee0021058789911da96de6704c01bf8c7481a056475bfb311a578bf3dbf7c1ba347eca6c1b6d328504669d4f","ssdeep":"","tlshash":"48e0cdef74c370f4150c4556145ed005fd7e7556155d8401f45495406ec4d6c92b9bf7","size":304,"data":"","first_seen":"2026-07-24T22:59:45.860438Z","last_seen":"2026-08-13T09:17:47.806619Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"5c8747447e8ae1ace808d19f7fc4b8f5","sha1":"8f5b7844d8762c676f1f8b86e62617bb5cea72b3","sha256":"a7347515751e4428782a28a549bf6508b57f012d09564bfe0c20336e9da57f85","sha512":"ee9a600b8e87df23e7342caa538ef6a877fefe452303d59b03d52e1a93af2a06cd7e9967f63e8f69a9096951b8306c94efd827333665577ff2775a398bc09bbb","ssdeep":"3072:jfx2RsHxKShqSJAGqRVSwX4BY59EMRZlaEP5Vvnile1+L1pG0t:jfx2qHcdSJdqRwwoBu/ZPv3MG0t","tlshash":"4d24faabf6c0f3d74786ea436249b51933eb7ea7c48515244b22d7030dbba8753392d2","size":213040,"data":"","first_seen":"2026-08-13T09:16:58.008257Z","last_seen":"2026-08-13T09:16:58.008257Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"eccf6abe39126b8050aea5fd1ed36eb5","sha1":"012addc5abe9fa77cf17c7aaec19123b7c6566f2","sha256":"d719c66e52926aa30dcca142925df4fc98c36f335e5ddb29f344c09b05bb444e","sha512":"28689fdb718eb5dfbe50ae520b0e54cbdeb14cf38922d9df908815d3832de9516cd961e1a36cbbca41ee4ea7edf8b4bc2e11e1d88d133179e55afca6fb0e1440","ssdeep":"","tlshash":"7ef04f6e1ea3513005ac20ff190e7411b733c477679d9b60b15389b5af9812e63a5b89","size":561,"data":"","first_seen":"2026-07-24T22:59:45.919473Z","last_seen":"2026-08-13T09:17:47.809153Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"bbb4314e2005aa84eed84425467df8ba","sha1":"347e4cf2243cd1ddccbe528f620ffb207c9d4b4e","sha256":"ecf554d0ee9ea5b4cbe5b2123ea5833d99da6d1a36c463a651cd916682f3a04f","sha512":"b29c1b3af17b7f7231aba3d5c8a155382cac8718344730dfadb2ded13785367f9146a9756b8e15ff856e17843173d7eaf48f2d86b7d9a2f2693daf9a3cb54db2","ssdeep":"","tlshash":"ddf059563bf31029382f991f131f814975a48803071ee808bf2cb710efa59287a78e96","size":548,"data":"","first_seen":"2026-08-13T09:16:58.078745Z","last_seen":"2026-08-13T09:16:58.078745Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"1559fc06089e9007d2c9ec2d1b3e5208","sha1":"27ed0b59193a9d6c5a3ae423f309315ca10d104c","sha256":"018696d5b560998a86f0c65dc5955aef3cbcb4e301c61fc8582240aae4781e8f","sha512":"10e8c03c839d10679ce99ff168f6dcd91d2c96eb13c0d408da5f2669d6c8732d9a8995c95635b968ccfef64e6d0c547cba3e6e5d3629d9ca80a96978907b25d8","ssdeep":"","tlshash":"dd117f9f3ea21564e227171f233be24c72a190376603e549749cd86cafc9c5972fd4d2","size":1021,"data":"","first_seen":"2026-07-05T06:42:05.189844Z","last_seen":"2026-08-13T09:16:58.079668Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"868970c70c8cca755e21e6cbbb2c5dad","sha1":"0f74893d0f558621ce0348f34bce4090fe409eb3","sha256":"8c83129aa181ced13a292b29f31730ab54e0d55e5b0dcfcd17e9e14e82e6bd46","sha512":"a05a454ab9a2afc51eaccfbf106cf776cb82c4e5b25244845c3a178f29ce227cceddc8eaa7969680c67372ec18ba2072d071067937c31b4608ba89aabf13e6e6","ssdeep":"","tlshash":"42f02745b8b7b1d0091ba0d4013ba44ae02d544e04dec952fe5c9e446f584ad5732e4c","size":445,"data":"","first_seen":"2026-07-05T06:42:05.233745Z","last_seen":"2026-08-13T09:16:58.080287Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"bd930cc4d1dc01cbffe993eb4c4d0162","sha1":"e78f769f1fe632eb8b0d981a506923ef604eb9c0","sha256":"a98704af9693999f4c602b7d5ac81f987144a9ec8cf395ac6123b7bc95f3f53e","sha512":"d2601944110c826a78d5c76a9b9c033b086265182dd89cb4256d1f8dca8d97ce4087b0bcb282469a79c61a43e8609aeb67a3d3659c69317f203ed5862812f674","ssdeep":"","tlshash":"32014c9b5deb6064091bb0e98b1f510221b2a1172e4dde373d8d16109f269ac85b47c8","size":715,"data":"","first_seen":"2026-07-24T22:59:45.931843Z","last_seen":"2026-08-13T09:17:47.792158Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"176e09549a690436a5d5c06ca6c9b198","sha1":"10f76735cf16cae0522fdfca394291bb766aaf84","sha256":"085e1206be3040963feb617e7de57f6d45aab1e0ca46c5be52260067fde7e9cb","sha512":"f7a364526b1adb094741c89bc3867d60868505f90a50a9066082e559bce950c05642f813ac74fbde1daa8624155fb161510f877a8725d22f23b2923b75504dcc","ssdeep":"","tlshash":"89a0118eb8e3b000028ab0a8020f8008fa2c0802208c8a08ece883c0af3023c8232a0c","size":82,"data":"","first_seen":"2026-07-05T06:42:05.180452Z","last_seen":"2026-08-13T09:17:47.754049Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"fdae8eef1c9ed89ba1fe784a33721dba","sha1":"5f10de300125e298f1ab123074fa90fba2251085","sha256":"07deede2dc77e94fc0e7222f6a337dbe5473c6d2c0da2ffbaa4b044527e0fdd4","sha512":"af649180c8c36c810743c5fc4b9fdeccb17591325a267ce31218a599d60d5d89b1a43037f2192728c9bd28f0fd02c5b5582abe4cefa2e8b10fdce593dc05f846","ssdeep":"","tlshash":"88b012863a8c740c24b39497c54f44c4ec5c4a097228f6a4de0de452d8e3d1e10fe9d9","size":118,"data":"","first_seen":"2026-08-13T09:16:58.082227Z","last_seen":"2026-08-13T09:16:58.082227Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"a287ed46865fa4b07779dd759ef01137","sha1":"eb916c85c52fcf6bc3d51ef4bd76dfc0779e13c3","sha256":"0206dab339cc45d86188d1a13c3c0ec011460f92dd521439d1d44dbc619fa55d","sha512":"e7b6457e4f97abf591270694e0b55d55eac8c8faea4eb503f08a1c0263deedf28455257769bb68b42e7754a2990ea6c9a27950f5dac9f212dacc6924ee2214d6","ssdeep":"","tlshash":"71d0226628e5a430122a71281b0f7a1a721b8537524dae007c8c4b10ff310b395a43c5","size":195,"data":"","first_seen":"2026-07-05T06:42:05.157973Z","last_seen":"2026-08-13T09:16:58.083146Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"5f172b37988434259394fb849394a96d","sha1":"3b437d1537ee25d86cfe39909ddba428d46e9845","sha256":"ee55acf64feff4a0c289dbbbd62e734bb10385bae6bd59dbc013233121e02bf5","sha512":"2517d90db26ad34d384d6fb4d34d31dd0ce82620ccdf97473efe741c8bf7b4b1c23bc669abdf72db295f2305b4c3a00ebb826765fd4ac7945b9452fedb44d938","ssdeep":"","tlshash":"7ba0025c24d16117266bb150135fa154fa5d28171e68d6048888b193a72446bf753468","size":60,"data":"","first_seen":"2026-07-24T22:59:45.8429Z","last_seen":"2026-08-13T09:17:47.825938Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"db1bf59aee78484e114e9100c0425943","sha1":"9d8f09f8ecb8e6c24f7735198b72be4b1624bfd1","sha256":"31fcacf0e8330814fd17bacd62a2dbbdd0d55f758bca585f8ff74de0e17c3141","sha512":"7bc69f580b634f54685ec29fb5c5a756f070133f5bc0ed5ffa30851e81180d06c837ac06e91157b2d05f7ce9b61ef0d674035678bb880a6e579cca76810ccb57","ssdeep":"","tlshash":"4bd0a79ee4c6113cc00d1568481b8439f334e91509cda208fda093c8af2502c5be4b09","size":209,"data":"","first_seen":"2026-07-05T06:42:05.144468Z","last_seen":"2026-08-13T09:17:47.766537Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"a14bc9ee75c657a764ce5bb51eeed6c9","sha1":"87f70813e48a25b136e2e4d5cd734f5c3346cefe","sha256":"b4f91d6a23bc80401c7d1156ce9811b3e7df60f4d76bd50de478950e0755cb92","sha512":"642405cfdd51aab88f83abda73ba3dbcdcaeb19598ce2c52551f80ba90da9819172136a03fe79e6fe7c4f50298be110751fd22f20f5dfcf75cf0a632dc488266","ssdeep":"","tlshash":"6590028d50f52026561a5661140a02042824511020598664191861d9971406407025dc","size":46,"data":"","first_seen":"2026-07-05T06:42:05.243573Z","last_seen":"2026-08-13T09:16:58.084928Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"c1462ec71924e370490b3d4b5e8bc4cc","sha1":"bee6a69107e496b47e592c89f3ffd2ec961cb46b","sha256":"5756aeb3744932f8572e440e6b3c55c202848708e48bc11938fe87f75b99aeff","sha512":"79486c09bf482a3db400fb9541e94fa811dea654adca6602ebfa4ad27355294a4748360962de5aab7a4ab53e6c00400a6e1c00f775ae68f7bc4f19a0a6c5b80f","ssdeep":"","tlshash":"12d02b8c7ae5d66d478920c038cac1236d78fc3517ef1c5ac141d460f57857577b0643","size":288,"data":"","first_seen":"2026-07-24T22:59:45.895313Z","last_seen":"2026-08-13T09:17:47.758218Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"0beda254adf4575e4c864d374801f75d","sha1":"fb21d3d8b4a9c3c10066a51635a2f8fe85719a81","sha256":"6a74b999723ed843e172d3575be34b47881161eb35238d2657241bbd3eab87d2","sha512":"58fe4b1221abbadfe8ede5d491ad18bd9a05a37095004fd8ad32b1fb45aa1dc0057db253a996e576488bbc56250e411460893e27287d3e14f37eb5182136a387","ssdeep":"","tlshash":"fa21606998fe9454505b60281aefc428b7fea293016cde91bc9d514dcf70638077af94","size":1162,"data":"","first_seen":"2026-07-24T22:59:45.971764Z","last_seen":"2026-08-13T09:17:47.808324Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"introduction_type":"eval","is_inline":false,"md5":"bfd48f04cb1559b7c82a0b9fc3c844e6","sha1":"677f9cbac741d9181663d1b7bda0dc3ec8da559d","sha256":"0b51828c0f83d4c85ab534289ee0bdd12f1be7424a6533707a1eb8aa388cfe5c","sha512":"5702c15a5f9f5912c435776c0d0eef02773bac131c9c8a9b39b62a6c6d6f8892316a054571272b3dfb78b6091bb4443af1aca5b7c5e137898aef91a79b2c60cb","ssdeep":"","tlshash":"a011eb9f28f3602184fb1067232f62027123c637176ce854fedc4b306fa196b12a16ac","size":884,"data":"","first_seen":"2026-07-05T06:42:05.168503Z","last_seen":"2026-08-13T09:16:58.086691Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"debug","text":"map[actor:server1.conn0.watcher14.process7//obj45 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[toString:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj46 class:Function displayName:toString extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:27177 line:1 url:https://candystress.st/cdn-cgi/mitigation/v2/chl/chlb.lib?bdt=0\u0026b12=0\u0026brc=0] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://candystress.st/cdn-cgi/mitigation/v2/chl/chlb.lib?bdt=0\u0026b12=0\u0026brc=0","line_number":1,"column_number":27314},{"level":"debug","text":"map[actor:server1.conn0.watcher14.process7//obj47 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0 ownSymbols:[] ownSymbolsLength:1] sealed:false type:object]","filename":"https://candystress.st/cdn-cgi/mitigation/v2/chl/chlb.lib?bdt=0\u0026b12=0\u0026brc=0","line_number":1,"column_number":29201},{"level":"debug","text":"","filename":"https://candystress.st/cdn-cgi/mitigation/v2/chl/chlb.lib?bdt=0\u0026b12=0\u0026brc=0","line_number":1,"column_number":29488},{"level":"debug","text":"map[actor:server1.conn0.watcher14.process7//obj52 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[toString:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj53 class:Function displayName:toString extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:27177 line:1 url:https://candystress.st/cdn-cgi/mitigation/v2/chl/chlb.lib?bdt=0\u0026b12=0\u0026brc=0] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://candystress.st/cdn-cgi/mitigation/v2/chl/chlb.lib?bdt=0\u0026b12=0\u0026brc=0","line_number":1,"column_number":27314},{"level":"debug","text":"map[actor:server1.conn0.watcher14.process7//obj54 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0 ownSymbols:[] ownSymbolsLength:1] sealed:false type:object]","filename":"https://candystress.st/cdn-cgi/mitigation/v2/chl/chlb.lib?bdt=0\u0026b12=0\u0026brc=0","line_number":1,"column_number":29201},{"level":"debug","text":"","filename":"https://candystress.st/cdn-cgi/mitigation/v2/chl/chlb.lib?bdt=0\u0026b12=0\u0026brc=0","line_number":1,"column_number":29488},{"level":"debug","text":"map[actor:server1.conn0.watcher14.process7//obj57 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[toString:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj58 class:Function displayName:toString extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:263532 line:1 url:https://candystress.st/cdn-cgi/chl/v2/captcha/assets/cpt.lib?mclrdw=0c4a56\u0026sclrdw=2ea8c1] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://candystress.st/cdn-cgi/chl/v2/captcha/assets/cpt.lib?mclrdw=0c4a56\u0026sclrdw=2ea8c1","line_number":1,"column_number":263849},{"level":"debug","text":"map[actor:server1.conn0.watcher14.process7//obj59 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0 ownSymbols:[] ownSymbolsLength:1] sealed:false type:object]","filename":"https://candystress.st/cdn-cgi/chl/v2/captcha/assets/cpt.lib?mclrdw=0c4a56\u0026sclrdw=2ea8c1","line_number":1,"column_number":265509},{"level":"debug","text":"","filename":"https://candystress.st/cdn-cgi/chl/v2/captcha/assets/cpt.lib?mclrdw=0c4a56\u0026sclrdw=2ea8c1","line_number":1,"column_number":265945},{"level":"debug","text":"map[actor:server1.conn0.watcher14.process7//obj64 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[toString:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj65 class:Function displayName:toString extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:341426 line:1 url:https://candystress.st/cdn-cgi/mitigation/v2/chl/chlb.lib?bdt=0\u0026b12=0\u0026brc=0] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://candystress.st/cdn-cgi/mitigation/v2/chl/chlb.lib?bdt=0\u0026b12=0\u0026brc=0 line 1 \u003e eval","line_number":1,"column_number":341562},{"level":"debug","text":"map[actor:server1.conn0.watcher14.process7//obj66 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0 ownSymbols:[] ownSymbolsLength:1] sealed:false type:object]","filename":"https://candystress.st/cdn-cgi/mitigation/v2/chl/chlb.lib?bdt=0\u0026b12=0\u0026brc=0 line 1 \u003e eval","line_number":1,"column_number":342256},{"level":"debug","text":"","filename":"https://candystress.st/cdn-cgi/mitigation/v2/chl/chlb.lib?bdt=0\u0026b12=0\u0026brc=0 line 1 \u003e eval","line_number":1,"column_number":342683},{"level":"debug","text":"map[actor:server1.conn0.watcher14.process7//obj95 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[toString:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj96 class:Function displayName:toString extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:263532 line:1 url:https://candystress.st/cdn-cgi/chl/v2/captcha/assets/cpt.lib?mclrdw=0c4a56\u0026sclrdw=2ea8c1] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://candystress.st/cdn-cgi/chl/v2/captcha/assets/cpt.lib?mclrdw=0c4a56\u0026sclrdw=2ea8c1","line_number":1,"column_number":263849},{"level":"debug","text":"map[actor:server1.conn0.watcher14.process7//obj97 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0 ownSymbols:[] ownSymbolsLength:1] sealed:false type:object]","filename":"https://candystress.st/cdn-cgi/chl/v2/captcha/assets/cpt.lib?mclrdw=0c4a56\u0026sclrdw=2ea8c1","line_number":1,"column_number":265509},{"level":"debug","text":"","filename":"https://candystress.st/cdn-cgi/chl/v2/captcha/assets/cpt.lib?mclrdw=0c4a56\u0026sclrdw=2ea8c1","line_number":1,"column_number":265945},{"level":"debug","text":"map[actor:server1.conn0.watcher14.process7//obj103 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[toString:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj104 class:Function displayName:toString extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:341426 line:1 url:https://candystress.st/cdn-cgi/mitigation/v2/chl/chlb.lib?bdt=0\u0026b12=0\u0026brc=0] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://candystress.st/cdn-cgi/mitigation/v2/chl/chlb.lib?bdt=0\u0026b12=0\u0026brc=0 line 1 \u003e eval","line_number":1,"column_number":341562},{"level":"debug","text":"map[actor:server1.conn0.watcher14.process7//obj105 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0 ownSymbols:[] ownSymbolsLength:1] sealed:false type:object]","filename":"https://candystress.st/cdn-cgi/mitigation/v2/chl/chlb.lib?bdt=0\u0026b12=0\u0026brc=0 line 1 \u003e eval","line_number":1,"column_number":342256},{"level":"debug","text":"","filename":"https://candystress.st/cdn-cgi/mitigation/v2/chl/chlb.lib?bdt=0\u0026b12=0\u0026brc=0 line 1 \u003e eval","line_number":1,"column_number":342683},{"level":"debug","text":"map[actor:server1.conn0.watcher14.process7//obj107 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[toString:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj108 class:Function displayName:toString extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:86802 line:1 url:https://candystress.st/cdn-cgi/mitigation/v2/chl/chlb.lib?bdt=0\u0026b12=0\u0026brc=0] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://candystress.st/cdn-cgi/mitigation/v2/chl/chlb.lib?bdt=0\u0026b12=0\u0026brc=0 line 1 \u003e eval line 1 \u003e eval","line_number":1,"column_number":86939},{"level":"debug","text":"map[actor:server1.conn0.watcher14.process7//obj109 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0 ownSymbols:[] ownSymbolsLength:1] sealed:false type:object]","filename":"https://candystress.st/cdn-cgi/mitigation/v2/chl/chlb.lib?bdt=0\u0026b12=0\u0026brc=0 line 1 \u003e eval line 1 \u003e eval","line_number":1,"column_number":87611},{"level":"debug","text":"","filename":"https://candystress.st/cdn-cgi/mitigation/v2/chl/chlb.lib?bdt=0\u0026b12=0\u0026brc=0 line 1 \u003e eval line 1 \u003e eval","line_number":1,"column_number":88053},{"level":"debug","text":"map[actor:server1.conn0.watcher14.process7//obj125 class:Proxy preview:map[kind:Object ownProperties:map[\u003chandler\u003e:map[value:map[actor:server1.conn0.watcher14.process7//obj127 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 sealed:false type:object]] \u003ctarget\u003e:map[value:map[actor:server1.conn0.watcher14.process7//obj126 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object]]] ownPropertiesLength:2] type:object]","filename":"https://candystress.st/cdn-cgi/mitigation/v2/chl/chlb.lib?bdt=0\u0026b12=0\u0026brc=0 line 1 \u003e eval line 1 \u003e eval line 1 \u003e eval","line_number":30,"column_number":15},{"level":"debug","text":"map[actor:server1.conn0.watcher14.process7//obj128 class:Proxy preview:map[kind:Object ownProperties:map[\u003chandler\u003e:map[value:map[actor:server1.conn0.watcher14.process7//obj130 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 sealed:false type:object]] \u003ctarget\u003e:map[value:map[actor:server1.conn0.watcher14.process7//obj129 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object]]] ownPropertiesLength:2] type:object]","filename":"https://candystress.st/cdn-cgi/mitigation/v2/chl/chlb.lib?bdt=0\u0026b12=0\u0026brc=0 line 1 \u003e eval line 1 \u003e eval line 1 \u003e eval","line_number":31,"column_number":15},{"level":"warn","text":"using deprecated parameters for the initialization function; pass a single object instead","filename":"blob:https://candystress.st/e1078e58-d184-4ad7-92ad-d7e32d6d6487 line 30 \u003e Function","line_number":435,"column_number":25},{"level":"warn","text":"using deprecated parameters for the initialization function; pass a single object instead","filename":"blob:https://candystress.st/d3559ddd-3b8d-4705-a0ca-decadcdc662a line 57 \u003e Function","line_number":435,"column_number":25},{"level":"debug","text":"map[actor:server1.conn0.watcher14.process7//obj171 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[toString:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj172 class:Function displayName:toString extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:86802 line:1 url:https://candystress.st/cdn-cgi/mitigation/v2/chl/chlb.lib?bdt=0\u0026b12=0\u0026brc=0] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://candystress.st/cdn-cgi/mitigation/v2/chl/chlb.lib?bdt=0\u0026b12=0\u0026brc=0 line 1 \u003e eval line 1 \u003e eval","line_number":1,"column_number":86939},{"level":"debug","text":"map[actor:server1.conn0.watcher14.process7//obj173 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0 ownSymbols:[] ownSymbolsLength:1] sealed:false type:object]","filename":"https://candystress.st/cdn-cgi/mitigation/v2/chl/chlb.lib?bdt=0\u0026b12=0\u0026brc=0 line 1 \u003e eval line 1 \u003e eval","line_number":1,"column_number":87611},{"level":"debug","text":"","filename":"https://candystress.st/cdn-cgi/mitigation/v2/chl/chlb.lib?bdt=0\u0026b12=0\u0026brc=0 line 1 \u003e eval line 1 \u003e eval","line_number":1,"column_number":88053},{"level":"debug","text":"map[actor:server1.conn0.watcher14.process7//obj175 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[toString:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj176 class:Function extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:18 line:2 url:https://candystress.st/cdn-cgi/mitigation/v2/chl/chlb.lib?bdt=0\u0026b12=0\u0026brc=0] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://candystress.st/cdn-cgi/mitigation/v2/chl/chlb.lib?bdt=0\u0026b12=0\u0026brc=0 line 1 \u003e eval","line_number":1,"column_number":477445},{"level":"debug","text":"map[actor:server1.conn0.watcher14.process7//obj178 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0 ownSymbols:[] ownSymbolsLength:1] sealed:false type:object]","filename":"https://candystress.st/cdn-cgi/mitigation/v2/chl/chlb.lib?bdt=0\u0026b12=0\u0026brc=0 line 1 \u003e eval","line_number":1,"column_number":452274},{"level":"log","text":"","filename":"https://candystress.st/cdn-cgi/mitigation/v2/chl/chlb.lib?bdt=0\u0026b12=0\u0026brc=0 line 1 \u003e eval","line_number":1,"column_number":477819},{"level":"warn","text":"using deprecated parameters for the initialization function; pass a single object instead","filename":"https://candystress.st/cdn-cgi/mitigation/v2/chl/chlb.lib?bdt=0\u0026b12=0\u0026brc=0 line 1 \u003e eval line 1 \u003e Function","line_number":435,"column_number":25}]},"http":[{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-13T09:16:22.951Z","timestamp":1786612582951,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candystress.st","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 10:42:46 GMT","end":"Tue, 29 Sep 2026 10:42:45 GMT"},"fingerprint":{"sha1":"0E:CB:49:5A:42:9F:9A:10:58:6F:B3:46:92:19:8F:D0:E9:6E:C9:96","sha256":"BC:1F:1D:2F:8B:32:DC:27:B8:29:28:14:3F:FF:3F:A8:96:62:78:27:78:BC:52:DB:06:4C:E5:BC:30:F3:3B:CF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: candystress.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __diamwall=0x873822896\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 513 \r\nserver: openresty\r\ndate: Thu, 13 Aug 2026 09:16:22 GMT\r\ncontent-type: text/html\r\ncontent-length: 1083\r\nset-cookie: __diamwall=0x873822896; Path=/; Expires=Thu, 13 Aug 2026 09:21:22 GMT; Domain=.candystress.st; Secure; SameSite=None\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"513","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1083,"size_decoded":1446,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"b5584654f8c7cbb308492ca0d07735ea","sha1":"cf2ba01ae9df0ede3117e4e1a630a8cc9216c7b0","sha256":"03ed7bd806335bf6a39081b6ca4de01af5b5973167aa3081d0ff0f28c3b2cb99","sha512":"95cbbb578011e0b1d2f57c6f872b3b516f4ef7733355fc0f1749a0e6bf1087b2294715342e7fe8167992fc16f99e88dde2b0f7b33de155b75fc3c42e8e6b84b4","ssdeep":"","tlshash":"ed1120b38d41cc3ac1608316bed7ea4c9663a4a993d19800a4d57057a26cf564a77a5c","first_seen":"2026-08-13T09:16:57.994343Z","last_seen":"2026-08-13T09:16:57.994343Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"candystress.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.diamwall.com/cdn-cgi/static/img/favicon/favicon.ico","fqdn":"cdn.diamwall.com","domain":"diamwall.com","tld":"com"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candystress.st/","date":"2026-08-13T09:16:24.071Z","timestamp":1786612584071,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"diamwall.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Jun 2026 21:31:47 GMT","end":"Tue, 08 Sep 2026 21:31:46 GMT"},"fingerprint":{"sha1":"8C:CE:56:A6:E5:6A:1C:36:24:87:DE:1E:74:C8:F1:E2:4D:8B:EB:F9","sha256":"93:78:57:6C:F1:81:2A:18:63:0B:12:0A:AF:E6:75:3E:DC:3D:DB:86:82:EB:B7:94:E8:1C:59:68:73:21:EB:A6"}}},"request":{"raw":"GET /cdn-cgi/static/img/favicon/favicon.ico HTTP/1.1\r\nHost: cdn.diamwall.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://candystress.st/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: DiamWall\r\nDate: Thu, 13 Aug 2026 09:16:24 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 15406\r\nLast-Modified: Mon, 27 Apr 2026 13:23:53 GMT\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: \"69ef6369-3c2e\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15406,"size_decoded":15701,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"38dfe099ebf0b5f01c9ab7f97971f417","sha1":"e3b7a470e853edf6eb71f816fe59619a93059c14","sha256":"55448d2fa1df25a26ec25a4d4b917b3f2705b02d407bb8aa754747f5e8789d32","sha512":"33344a9bd3b2c503b7e91bf2e24dd3f013994dba10f9b8efab5f78a047acb61287172e26c8a383088283e104b97188a1ba122717f90b58fd179212f96909bf59","ssdeep":"96:cJqB0pWjttK6HHHHHHHHHNvfHXv6gh1JDVncCgH8CY0hJM1x4e:9iWjtE6HHHHHHHHHNnXZhLDuhb","tlshash":"3762b70feb86a9dace5c1fb444aa2f013224b08bab579307531c64746d172f49a992dc","first_seen":"2024-08-20T10:09:24.764033Z","last_seen":"2026-08-13T09:17:47.731504Z","times_seen":19,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":101,"connect":8,"send":0,"wait":10,"receive":2,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/cdn-cgi/chl/v2/captcha/assets/cpt.lib?mclrdw=0c4a56\u0026sclrdw=2ea8c1","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://candystress.st/.well-known/diamwall/load/html/5s.html","date":"2026-08-13T09:16:24.524Z","timestamp":1786612584524,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candystress.st","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 10:42:46 GMT","end":"Tue, 29 Sep 2026 10:42:45 GMT"},"fingerprint":{"sha1":"0E:CB:49:5A:42:9F:9A:10:58:6F:B3:46:92:19:8F:D0:E9:6E:C9:96","sha256":"BC:1F:1D:2F:8B:32:DC:27:B8:29:28:14:3F:FF:3F:A8:96:62:78:27:78:BC:52:DB:06:4C:E5:BC:30:F3:3B:CF"}}},"request":{"raw":"GET /cdn-cgi/chl/v2/captcha/assets/cpt.lib?mclrdw=0c4a56\u0026sclrdw=2ea8c1 HTTP/1.1\r\nHost: candystress.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://candystress.st/.well-known/diamwall/load/html/5s.html\r\nCookie: __diamwall=0x873822896; dwid=5d55694fd6090d16b3e036214d3eb62a; _dwa=0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Thu, 13 Aug 2026 09:16:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: private, no-store\r\nx-dw-variant-spec-id: 7ae79c80a7cb\r\netag: W/\"bf879-gIkAdQK/qVsNIJ1qk7wkQ0MbNng\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: sameorigin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":784505,"size_decoded":280095,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"4dea308572524bb8936636f7da6f1937","sha1":"8089007502bfa95b0d209d6a93bc2443431b3678","sha256":"256b23b0755185f310f6b86960e0fac37872be74cc3e30273f557158973bbcff","sha512":"18feeade4d6026bbb1702da8dd670969c7b6f7df85eea7b5f0f001d707fcdeb3d55925fedddac51f99c0ec87b6fc8552b4a6cbcd1b0d7c39b348fdadf4291a98","ssdeep":"12288:5LhM2SndLLmWu9IA4jOAfR73Lue+MNp/k5cB:5L/Epui1jOAlUM7k5cB","tlshash":"74f4b648a09b9a5f25d6cb3045e97fcf2c735f7c1a0f72201a96bffaa45be14ca08115","first_seen":"2026-08-13T09:16:57.996721Z","last_seen":"2026-08-13T09:16:57.996721Z","times_seen":1,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"candystress.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/cdn-cgi/challenge/v2/api/init","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://candystress.st/","date":"2026-08-13T09:16:25.611Z","timestamp":1786612585611,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candystress.st","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 10:42:46 GMT","end":"Tue, 29 Sep 2026 10:42:45 GMT"},"fingerprint":{"sha1":"0E:CB:49:5A:42:9F:9A:10:58:6F:B3:46:92:19:8F:D0:E9:6E:C9:96","sha256":"BC:1F:1D:2F:8B:32:DC:27:B8:29:28:14:3F:FF:3F:A8:96:62:78:27:78:BC:52:DB:06:4C:E5:BC:30:F3:3B:CF"}}},"request":{"raw":"POST /cdn-cgi/challenge/v2/api/init HTTP/1.1\r\nHost: candystress.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://candystress.st/\r\nContent-Type: application/json\r\nContent-Length: 123\r\nOrigin: https://candystress.st\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __diamwall=0x873822896; dwid=5d55694fd6090d16b3e036214d3eb62a; _dwa=0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":123,"data":"{\"sv\":3,\"sp\":\"65ffe92e4c26\",\"k\":\"BCCSA8m01WcQPdTiCHOM6TIzgqi/k12JEcntnV89gD7hUONVdCSuA47arPIBsg4bMW1D/ynkCHPtBmfEHT9yZec=\"}"}},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Thu, 13 Aug 2026 09:16:25 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\netag: W/\"cc8-smagTdnqFHLhOO6dNIvK0F695Rw\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: sameorigin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":3272,"size_decoded":2908,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"84d0b641077dc2c22d9916f7268baa10","sha1":"b266a04dd9ea1472e138ee9d348bcad05ebde51c","sha256":"59ca63b2bc2636e1adfb2aca46428fb1806d8d02b2991dfa57b59a313910bee1","sha512":"8ca2ff9602a2d7f8a58d0a305d4e5c139ffa632630133ce7aeb5e9309c1b992e47b03420291a5088e1c5143ed099328f09ff78c353ea3da7ba6f28ccb912e5b6","ssdeep":"","tlshash":"f0612b229be5ab961e9948e74d37d13de380341b332a5edd3003099f242857578b719d","first_seen":"2026-08-13T09:16:57.998317Z","last_seen":"2026-08-13T09:16:57.998317Z","times_seen":1,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"candystress.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/cdn-cgi/chl/v2/r/a5af81ecadf4f2bc","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://candystress.st/","date":"2026-08-13T09:16:29.257Z","timestamp":1786612589257,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candystress.st","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 10:42:46 GMT","end":"Tue, 29 Sep 2026 10:42:45 GMT"},"fingerprint":{"sha1":"0E:CB:49:5A:42:9F:9A:10:58:6F:B3:46:92:19:8F:D0:E9:6E:C9:96","sha256":"BC:1F:1D:2F:8B:32:DC:27:B8:29:28:14:3F:FF:3F:A8:96:62:78:27:78:BC:52:DB:06:4C:E5:BC:30:F3:3B:CF"}}},"request":{"raw":"POST /cdn-cgi/chl/v2/r/a5af81ecadf4f2bc HTTP/1.1\r\nHost: candystress.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://candystress.st/\r\nContent-Type: application/json\r\nContent-Length: 35682\r\nOrigin: https://candystress.st\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __diamwall=0x873822896; dwid=5d55694fd6090d16b3e036214d3eb62a; _dwa=0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":35682,"data":"{\"sp\":\"65ffe92e4c26\",\"sm\":\"f22cac4153ded353070613b4580e50ff\",\"pr\":\"a1b1a2ff58e88fff7411a3ffa1b1a2ffa1b1a2ffa1b1a2ff99865cff99865cff99865cff\",\"mpt\":[2,3,3,4,5,6,7],\"mp\":\"ca508a15f052cc18fde166590fdd082a\",\"eh\":\"45749e73bb486899\",\"ct\":\"/0lRrIcBGZmyI2R+/8FeCCU2PKZMRDsbHFS/R5ghxTTqRq/rm1NRi1eWuLbYSZPDkwtuHMSCKHTSeWQgkwas00SsPf2ae1Mhz+PWNdCfRnf0TsGDJL7m6bC4jxEri4Tx+SjGpmNqAXeA7mOmseSrUGaOUDQhpQTxcYl4zKyUzWgTVOY5M2Qq5+2zfSWuX4BFAsMvvir6MoPcFXcu8paMBZTQ6nM/mYW9l96vRjm8tKpJPprJV07+KGByLChGzLJpuUAcNDDT2omar4qqKB+ZRmSnv/kni+0c4tuQ8xUTTdRsYxGOzkrWm8QmRA/SrI0Dn7XbX3/vE6aojzTjnxgM8+Xt5Jpw/6SMtyB7zJBKkaiQJ1pMdv8oLdiCbSCTBCnR/6UNp2gBszBI0JwaSujJyPqnLEJbhWV2RR/5nj9+g/k+L3Zh2yCVU6WGyh+uBpxcqPNEyuhiJJ7K8+4RGAExDlxrmBpKEQWDQd7xLXj/+u8vrCnVNYHLqzOSJJ5xoTaSp98VNY5Gsryesw+gs1vNs5HlAv/YWTtMILZRDP5ibxE2Opjt0rEtxx3Sd1heEgRyoZPceUDthedtPg1oYH59Fl30iiUx3O7gKwXR4YtN6vivYE6ka713Du5H9uelcZODUrRlRR4q/oiDx6+j6v26DtQRWZfQp7IviX0/nyy3QwZq9hMgs1B20OJx5W4bHwHJz/m+W+x+NBN6aXVOiboVdbZkxvdOqPrikIJM6Bcj1zaXmZLR8DWxq8IhhCS+W3BP5fyk4qSteMEZD8Iou967oV+WqYxuPmp7evpKzGG49XF/5VSmSzppeIN30GiS5Tjum64W+AR1rQDUqQ4I0vtsjE6NEdkXoPPYSJ8RjnGj7sqEWl/Nd515lVvFS3ycKwz2Dm6cI1CW5nOCFIf0V6OXdIF18vcYnCXqRXCA7VVTmuwZJL3JhG+EAwzFopglQkxloYM+2aQIcHf7IwpxzjoHrEFyO3aaqnwriagtibh02NHqrGiKW+0Dp04LlDFEq1x/BAq53Lx/GziblJI1h8jTpYsINM9GD+SMTlDK+WY10uVviD/pdDkXmE5G7IHkQS9hTZfrjxHJRzxTAQ6rDSOp+5Gaxm7DB9sXpy5Wf7Lv00H93lsbMNxKNH2aUNAZ96n4DdE/uxcbPDzZuu4Y45DCaDNIvXUwrL/dLYwKfVOi8KZ4VOH4FMgi/hNl6Kf8irjzebGmpal7HBagONS6JmLx8sCz8kjXNpRilt+Pf26WGx8imyiwhbyBbX8Cb3YsCJSGHevgiahmDUO7ZufCL/Un7D+FxBGoKJTKG63Lbh1ebEtir11JR6ISKrIRVwEdNwtPNqh9G0DrPpTJRNK5d/oepQJv1s9MjpmrTjcdMDNqeK3xLSxN2UIvY0tvVS8OYviwGBa8h7ufHc38WaNQ/WTZ6Nug9LJIznqicuszlN4CzwP0FV7dFGjHCQzmONFAuY6Gx5QAtIw3eKqZWdy1mt2kVAkwtqgCzIEEQfLJIVdG95ZzysrQ+HdOeIqRYk9A1CJbVieSlgdcxqG91NXs4hTvmT7/joMUFhcXBb7UNvXiDT+4bKj7TwHFZDHPTeU5uJhYBNZVvL8Ep6BWroIraOsbIzvZJ2XaLdXpn5xA45E8NtQZjMi7MywqHp1qGfLJDJogzzcGjsRirPKaE04IP3JkOOyrCgIt0bJgsXK70GywlLq1uRxz57LILwKQdZP1uEWg5TzP6sqRowAwMMzlc6Kz92/8GguyK4VHGRplXlk3oFFbJOmV18qeIzDfmx5BawHYjdbXOe4wLqRq90+uSZphimcGHS6TemyodgCyrBpnrt9tsywnHtngnK+m9adUMUzKQ3V6o47qRdb0w8PZgnDIEfwDzpdQ0+8NzF0ZIXguQ926PWPU33SJ5oBVuKtX7Xl1KDR53znV5XQqjuESM1xPY/Z7Q6tqPMTSbj29KLFOMuAQffawGquDHTXauQsJFZma7rh+fw7PeB24YM3N3ni8++5KNGJCFECAdkjF/zHWxyGTyiKBxgoUaCMiQflDS4J5LqQH2ROxSzXE1gWLrhmkf8RK+QJ8RvTw5/fy8BxdJT55f57Ox/1CNhBCy5vpiiuJlbGDeqKRpRyG6E9prKdkrExDvxP7NB6D7RMGAk/lC2h3+oN425pOtn/UJKZeVJAqaFBJnlbZptmVhqUfsDw37HkL19zj3UkwtFrZ9zrVwK1MdIaoAywfhGJgpYHID9MaRJBUR/aCQ3zOWKlpv6K8oxoE8yhCD5nF5ReR2X+UB5JTRnlw/vZL0+qPHGkUu3G5tzum/1X8ZsVEsI/tFmSwnZ2MCFY5B5n8JarQ2RR9MyG4JG0TEnubPsSrTxagK2JSW5lwmBQXWR9S26poyuFHhyE+e+I7QZhiJHcp6RMc1Z684pB5tpdLSNMuWh+RdaZLsI3wQZ9t/M/sCD9grjVJz0X67+yAK7lR9UqMVznM6vFHGCs0ObFRDZDCuISd+fRRTPWzZWCnmXF8pEJlWCL+IYkPWgShvuIJiN9Cg31zjRJyNU3EamuHfR6l2tuGY7gePfu1mGqCtCt3Xh0oubRcflPFs3wZdJwmcsFsDEAkuCfwAiTpYyFIEtAT1biehkp3o5TxpNRdongJC7A2UrXt7pHnwVWNQ1xP1CYTA09Z2SYLYwU6QfDVX6F/En+PtwgNojHJDHxYwZjeWwSdagv8Jq/wb0ewoLqYrq/YdNjBGmOWfm7AL7v+3KVfgl4gVSpwuF7Vlk+0//utmVZ8QzIWQiCYgO6a3Jouv5Gkh3vMZVFj8IngsEkXqwc1K+ixrB1syj0A/fHQedyxJouCblGoUvirwF0AQczQqEy5S64x9YD1FD7rLO0C81XDQZRzYzqaCqyV1KR2EbVNtLbT1Bo0vFzDBhEXKSJV+4Gu6bz+ziUS5e26yChUcwOwKAUNifjTfj91IZITyIsTrfsur03mKx5w2iQSg2znDCriGBtxcSIS/xrb2MznuoX648/Y0xxMPd8zlgJVBtvATrcT3sDhvOPNPxoAxMNDQhbV/F+jScuxy8G1VkgDS3SrnxIfiVndSwsx9XwBNMqsxkmqLCFHXLzzyuol7R2q6oEUjIS1E4U4HjJcyBndsNz7qSBJa52fIJy9VQ5mr3s3bCjKDCiUH46ETY6vNPlB+khlLf+et+ZbjoW84EweiNtPms/fJ1ys5Qs6o5CnoEevYA2d1FybpA+drCRAFg+mvsC9GtxqLIoyPS2QrHzz9u72Z97usQhAQWjj6Dz0l6lxBp4S1O2b1qN75RIImXFRkT5L1rmHlrtiP5PqQreRb/85nl7garj5ehr14y7hTuO65VIK000YCk5DJ8Vjxdu+ceLSIN3sTNooUPw1RcQrKRjT11vGumMfW6aX2lttcB3yVzLxye6uCmadmEWeJ4VAXAz8NQW8zDt/IUuLzBtHTTbWpyVYwLIcHfWpp4Nna8Ui6GZdngO8gXRhjlTMGHcppTXMlbhX7D8Bosqoi5deV4hLc0yIrJ7fQuDkUalbIT8ZFm1y75eHf+iUGpe1BR+j0YdwU6DyV0tfogSeMPtx+YrwAHf/57khEgLI/Iho/728NOE4fW60ASDL/8UBqF1NsEKZZDqukoKjf5r/SewKnwEI02753Mw8XZy5cGQB7iYXdqNTD6vvDxe/8H7MOQOPJFK/ppGlN/4mBxymKzZSwsmffqB/st2ppv8P46OpMajC3w8gvTImwoSdMmRxNzhLm09LL1vDBYlIMj+kQdQbV3fIKi5q+kX+8+AgqsORSQ4Joqcd843ZK8A9TxV5nsqDdzQzsIYD0UqDiE4QWah/IttsMOMWXdOSZysWJSHmonxaWBJ2Sl7X1B+8drjWOP/9koCG+DG+7kBHvRgNMINmsSFE0ZiFJwnDp9Km61Sf7YUUbMZAhdWAMO0yD02hKlsxm+UJZT9u/wvkqVuY3yG/VvoIPom67g2DgaGyvIs8Pcd/adG0Xhiw5TKnYN6kNoXGk1mvcspd8SJ/wkfEsyOm8r8+DAyz+ObKQQWafcsGXBvHyLq+ZiAgO0UdANqowGM2tiwHbMqVU0kDUuaHtoYBPMmjjOv11r6o2gb/dLwtTD1b/3YGA33yb0W3R9CpaUNb1JieQrlrf8WP1i7W7fMqIZ1Hu2nYSvdXIchGFxqpd0jod//n4hy8frzuEy6dxTAXw2Th9GRtltczlEUuMgRXBpNjRtpWFuEuIFG2uFPh1b/e2+r+opRk32+TmTe3lClagD1m8CmLeH/cHROy61gMGAPW5enNK9MXQvuPViI508FmRckcfYjDbphVegPGWzvux4E1No5Iff8c6IFEUaUqRuICp1K5ZfjAEdQvIk0sTKYRsCn6dpoeDrpIUn8Os1Esux9fdLWs4OXem2jxDXDJ33clEB09WmsKYdYB/VIVVsH0JQv4QXCOPHgycuSW2zvaUmgMpnx0MbcKF1nosBhYBkiZQ3XHjTNnEunUQS/EJuTxU9b3mN35Th+/9QW1wRgTilEg+Li5z4G7KSy7px5/devPzPOsOisZBvq5qAKRhrIP62fYrHFWenrCiOdrkaT19zNDGhisQeymFV+gRl12YRlKDM0LRiCVsAZRBYVism78Pmq4pFBQ5zoahG4CRAzHitqEtL/LTMBH1SU0MrfxCyD1qCRD6N/w1kiCHsiDGhRfL7NfdCku0nt2BKcfGr99UNr02y3cvwHbRF8T0giOXZwgnqWfQi3acncaK1v/5DuzpuAgFCuhEISa5jkl5Bkohvj6YQBeFQLoE22SH+5uLdI6xPk9jzjv2mvo4IFqhil9tkJdBVhZ2dfzYntQH5zdPFDPqMXXA9OgqH5H1w0+gXEVBBf6LNQnfLA1OnmLJ4gNud67OCJnF8rVHJoyiORJBQpAolO7NJHNf1W2wLd90wUZwkP4rHMjoaXV/tJuvWRME21Z0sw3IZt7CgnW08mGLaejjrZHmL9ykGnAvrmDzqDNu4YoFHIUd6inpIWm1T9MBI2qNeg7LmTcl5yhqrDwtex753PWjw5SMkDlggE509NwD5MiFno4+gZYlVkKHTuP+gloSMzudAzgvSFnKPX3o/7bp8KfIwKzwnywfYauebACGeZTbVafeL6Fbco6MBwyEDq7k/VoMymkzYfO+fIsTMp15t0JSvr+//JjFpespYh/IMnHoxbDp1GFzO5SK2pe2azNcliwuUqgS9v7dbUfZBwP40siGURV4p3ZgMgjlJBXtSs/NnLhYfkzjQo1cbYWEVk7BCYuA/3fzY6+DTGDCKMZBTFZzZ0DrGCjjjTOQUC2Dkx5TfBHfaHNVbR1fUxN+tMVyLbQmbJcNcRtOd+1PBLVU2n/SdisIRzWMqzfob/kg9rBa0Hms/+5Os6zX6Gv6EKAy0+q2IkEu2JL3xLmFabgv3v9mnJ3NhGNUtvoN/tmkS6H2CHrc/QM/EDnwEJHmycQWg3H6yBGDbFvK51XWWiGByQuWJHhI/UeykzjfGVxSM3jwPPfodN++nUoE4XOwLaG9QLYNOczZ+UN/4ZDfLpBYLDsT6J6upercSh0k1R80bH+jeSMl5rVjbek9kuAd2maWakc7HZJq+nugj8gUZs2mP4bAraVun6iZAyEaV/dYAkFhWVsL6AfPVtlPn6QWCO/WLVC/9dcSX6unvVH35nnwBgaB+mKjPkDddJ47fVVQhYGaDtf69bm2Oxzr/hh3zY3o+hu1P1V7JOm+fp0yT2/mB/GlHt9Zvg6+A9VSYJ8VYy1j7T1/LQN22y+QRnFuIhjpXjoVUPcpPJxd7naUQPrJmtZxagPyOTgDHeEIKZ3f2slCxu/gkw15HI/2eKo+iuEZHc45LE8+8dzuSdI1H4LN2PLqFEY4ORV0BDMw0oWS/geeOcoiSw0XVOe89TbPakccewlNqeXYmA/zUp/90pdgjgQVyZAH9O+CU4ijAl+tMOs7OLe/PXfjOu+HS1dmev+r3RVa6JNGpvsQJyWJrIMfJJhk0/qEmxDO8mnNHa7Qj3wqQvRBLUXXnooLTmvVmPn+s7vSluFioqyD7Zd+sqp8AZp3TVlNxHe9gmcDtnZ56Uivn9ukkdX8KSGVYlK4H8Z6pnJ+RLjqdvNlK9lDG8bHFkR1qkLhnNGQXU8jBzbeTUkAkHrHojkrS53te+6eJlDIA6KCEPldIY+4Idg3+aiQuLKSIzgTFHq7YGalsBYHdlmLCo3xcnPeRBQNdO0bazLNXjrj1XsghAujyln9WRsQ0w2a6Qye/LY1Pj91tpqbhDU/2dUcNpWo+M8wVQdPjJOCDjRUz/hIndqo0AKQHDR9g2zSbc57+DHA5mLr4Jf8gEnX40z8k8fLDD0lRi1BVcTdqplDnCPb9P8Xk4aK4MzSTpPTHzA1ULvJxqWc3VjkkUkBR6X0hjGUbGL3cJAuUOQ7sSUpz2DeWevmcQw39kw1MlTZh8feKCU8uHEEGbkMGBe7sh81RoJvpO15lMgCZg12Mcz6LC/3igq9pZR+DOj2s9POjPTn1iVqIXBeGTc2Ceg6PbhigkpvbrPLgMZEM9DjRF0XxfzVhlKq8l5oE8bghTXvoZwj/vGsiAusW8na5VNzEsAcGtyUPgZq0bkrLRdRaEob1vNOqoly+FT6iGgES0wmasB+POZ0VlAlUh7GrKemTXfUh1wMK8oQ/42OpFWKUNudjd+ZHRimKFXqsxmSqRoPLF9stcO9l2DIJNxydORhPBHiYj0ogh7pYrHmW+BkWUUaE3Ah0MMagKbHZBhVJS4jg8PqDf99+abr1+iVV8TRbMP+4WpEsuioTd+kNHCjVNGyMWweH9xv/89qqtuEvZ4MsIaFoCTFmM4HnZnT9BLbr9u51C3AT6EXj4vqClhVwzX+kqQ2wWe3fXhhpnz9YEPeXXKCtLR91vb5oGOhxqWQwLDlkssBLb9bJXutDO7XSOInqM74I44qbcUUvnqPtL2EH1yHsYRccRfjdLM1T5fMp2q/zTqrsm0IMGgH2aQLPEpB835G9MCsplkdFUTI9gAkzHCmuyuNkgMDwdaT0CetF/kYtogI8RMcQDNkbkoTEVRXyMpfPU3jtU5nPXg6/xVxUOY1df/fYpA4FX4lgZA0A4AP5zzl+OQB9ThEvfnkB5ruBJBnkZ3YRa+lryGNNmKTU1p72h7+YE277FO4k43R7OEftT5nJnEZs2d6DvvzPoDYeS2g8waflStThQVabUE+Wbdng5A819RhMabXsMBIOMzYlFWN2rXmdhJxYKIWp1rSGJxQ03azVgMC+e5f/8f1q9Pw16hpewXES6ksQ//jPoPN2t0R4DGriVrdAo2bYlKTKBnnok1L6Cspz3IekJ72BljZG5cfoT3ez+9CI6VPk9u5DWgnXxM1U698xqk9XGwAvLAyDlDy9u3zZ8HdADrYlY5Qd2hzrQrFG116AJjJUDkX3dauHZir3MJmnn/zx1Bq40lmKiEFI/RINA+E3ZyVQP5PVzpoeLhI9n5KnpVdICytdTH86BCShQy2z3hxW2gDeUY124laWC2vWBqEDImyiq2caEH+7R1VZD8jJ3Z/90VkB0TdI3k77V3rSrdexOQBiRtUsmiMrng3BqMdGustC9E6xBQ/rT08wgVpcbBxzN7GPBWmYvgKyMT2N7d8Z0+p2EEPVWTRQ+A6q1dlvXVPiL6kbjVvLXdrlPeF1fWO/0B7qIyn6kL+qQvljSsqyElKCduAMKqppBqbFxTwUYBvL1YCxS+De7s+g4ek3tphlL8ibjAlBmt7gPlvqv9lP5FyHcQUYc78FsudOc/49x34wf49HWw3RMjsDbFQVW3bJfh8QtXQCMJIGJUP3MGZ5TSxyjVBdA4ArGsTu/xzcwMvNDt6NPYToj9rx5Ad19R/FiB9Mt/l5p65DkVehiknCuHIw/xMT6rVxWhYIaf9Fq0iLfW3rncLkO9Py8khg1xRz5H8TQ+0EoalkCJ4nJR1E/voyBvxopNPPBL1/kcBqGwEezJSyyNLuV63r+8rfCD2jnqWchF1eUDvSN2EZpqPTOTGtObM1qyYZ1YDbGzu/n0wbmgipq59t24sJlOfHNT4OrenL+Yo7u8CZoBnTUJ4sgP/Cq9XA/jYCpAwn8bUG+XkPs0cs6YQPhf9p4iuW/BrIzFDWe5ow8KUf30DiPYuAxOmKwHiTTvNgYBeOLY0jXv9ekDu9wP/ziTcBwVWIA4Fj4i2mApDKqSkt36KJMEcLpepm2p3x0McEubY7eDXNZGpNbrUXLASCMKX7YkYC1+a/FHCRjmyU20FcugWKPv9D5J2/2b3riqx0Hh41/6E8bQE6qpB9mBk5+r+TePl7PxG33GAwne69NqH6HSt//PMEDK4jsftqnhCHVUGOrWt34OS7290sUfDk+9LptOMbsSQB2m7EhrrBwlVezLHffEkC8WW6Zo9/TTK2sVYwo7bvUBAoWeuh/QCPhwUxoaFs79lxKRance9te7Kh4T3WZ7gGzBfy77GEafHBZMGD0Xqg9qAS2IXC4MQ62Klbd4BT2Co+qhhYSJNXosE9EzmkTodmX3WM0RYn8HkVeftfTb9dDncEtEXqeTNaE7jNr3QdsqTc3DaUTL2KOIu8wW2S74J9xX3ndoE+43RWSwNdnYTFmFr+Q3XG1uaycwZxddLTvoUMzqJdFO1tpbB26cfu9j77leYFAh6hbLyg9I/dxCrzlZzhPWi+B6wFj0NXnVTkCj2DhIis31ZPjfoKCttDIjtJvbnwmtVflKur5Ww/yThi60yuCP9I6PIvtlVdxt7CI5S3IAHQ39tBeTHXFPzUXi+bQd686LV2L7YBoBGbhE7diXdywCwsVmPXZG2QzlGXCWC0PFpeTXFE83Gj2RwfC2vdrR59tdU4YSrxEe88y0N1PeWgEN96UyKlBWCAIZpERcrMxNBJi4WU+1nMJSVHcSRksOPlCgpgeqskIvsQc3LSaxoKumh8hLmCN5MKTi7T42coXijW5eICLjhGDlTybEh+l+EJeB8X6zoYlPbYtcoFt4sprFr86OvIouuhcaOqYB5yzulOVZrdtiB5u/ZXlm0vBdn3gS1wjGamDtIcUICLrXaKuz5hDZbkqtUoydkFFGOULGU97nMoXxeRJGLh11bo9U37y/LOC4CShSZJJIAjaiviD71X/tz9QVYSGNyLexZ6Evvc4Argav/Z3qhHhZNA/C6Pivz4MM5IbJO27pBuF1rDBSWJyXO83BRqrX4pUOqsG7w9fWkd/Ttqcl8GS9NeKqY75QAJsZonQk47OENypRVW9VruQ7QW8phj6AUmMzc5MkBZedzmTAyyaOqcKyA71JENdh9yyxueAF+03YNXYDvgtbb1mn1VEzANTvyy+LRkXqdDEYjWesU7vThmMpoXuxeh4qUu96IBvNysiQoHVL0FQLy/qxsVD0ymkaK0GootCYrw+CLE9kSf/D0KUB/da7GmD3VaUSo3ZNIsR7b6CGx1t74xKFPxIjoXFRufLvzAx+OkaTxeEgU07R95C5s38CU5IuJ4SaXOg53aeCcCq/gUKfnj/WpOsUBarwHukTktsUqqWv65q7RI3B8tNv5zwlYBcwICj7LBqBBURDQT0A3zW0VpATKDpORd9YKrBy50FxFq4k1aaWH7+QV/Mz4A9mX9SpiQtKXn2BUuroNgnVJFbqHtFxPg/hRj6QRjRLmYbpA9SzxsOu+x1StpG26gFDwtkqUxOmk0mWUvq+Lwcu+MuSe5Hsu4ZmoIWTLd0uRTVPDPnqN9wrYzHoPI79LdfEiOwfQJBlbG/4Lm+giOHETa/thN+Y5aXCk0bU6W0LLquH6CGwsDxtga5TQT7iZ7faJ3Orcj4yOEEQGYJ6J1OMJV19t8gf+FjftMxb10P4iSv0M3ev9vGqAXvRVh6xZZyGXGBHwRE0sqITXih3VXtNEaMvS7BNMLEmOM4ZrhKmp8K3LkOlfgzW67j3DdljfmhXJDncOji4l717BAcGCvXTT7oUz2zzIdc2poHV8cT3GBxx/tYgxQL6d33/z2FIZyfbG8ID2FuqXB96QSli2qR+AP2eEeUY5k8gHWx8xsiQKZYKhttDCJPBemB+Sp8lhh7vMFVCowN2uAY2oi426qHfZ8Xf8vUblA1yc5DoUYBfc8BENmDmUpII/kESe5GD5f8lH8ZqlcOoZAu23o3mBcSPXySkYl2zWiPBMS0d9l4baUhUMQbbzy8wP1jZPTXN7Yay2Dz4KR9kt5ZJmk/fj6low56GuxMdl47yfhGpTcZFuMHKHUQIC940WBiV+g3W82QB4Oo57cHBJBgIKOSf02qKAnGfgD9dVAKbFNVvQbDKrfj+SSLAZKUflkEPBIeQvmmtKnNOZqHpDwPph7797LW2YMA4b4LN1VEEfylWmIcgbhb0L1xs4eFfDGcZunZLfkf+Qlp4LTJPXIi55Dr4ZpzdcgtbnVfF/JSxqkqCbTVlBVBI+UL+yIii6UCx+XpxTpyyVxavpmIyc3D+wywcmkA2/0QmnzAbJmXYv8ThmPCWxNBUOivmjGJ7vjfzTMdr/9iuSq0co113VyAr8EFYmpsyWzcVIBDBSVNUkw6jJWCDvJd7p0H4xy3EykbX+aXjIqAyaZjn6KHQXt1VSTKZk1ofZ+bYc50AsGE5IijzJcRyPZp0AIFS1763MEiR8xUOMubYgoe2WEM0w7p0okbt2Lys0KlGWQKQcRqAfpDzV4Uv5Fyg8tk8tQRdcC/6hDaWXXSvqvT61kkN4slwGt+n3SGfLbKyIuaAxynhuQ07sy2WeGa/AKWh2za/k1YsaS86zJ4RPwTF5a4GrnDGz6r/w0hmwBCVnoe9xjSVuU9qovesWEDxSFbQwq3qvt+hUlMwSOacyOHxK+AV88+rGg+mCGIcxfrC/vOWMvZcmzQTu7Xw/wpKMY1siCF03fmgWwMbZaLo8jozReTSg52ORTBn9RiDshrwRbE/UxmqkzwkGS96UVUFIS4M2CWARa2Pr2FAetb9bJZZi5azjJI7tyjHBo+b2DrYtmAIArUzrugl1r+yecMgq/xb59Egf3k6HK3zOtJJ7C8sHvTAwDXrUDC4xBJxxsX051IHRXy1eEOuSx8hwU3J9w4kqo+/QPu9+Pu8XS7Lr9gnzDdnaqonGpriRm9iiTXiU07HYaS1SadcT5ejg6bvbbY2TdllOCy3beq1JzfU6n1MkG13phWOJ5zW+iCZQoa5kDGJLrwI7OyZiG+WgARUgZEVy3o1skf848ferYkje1/Ttq9ZHlEq6DfsG1A6PyRd8gEeDK/gvPT/ShTplR9zb83xGFMQ26J+5nrIaooSE6OVTpqACEp3KRGPkBq0JxvXc95x19SEIiYFJd/vriW8nbuNum+rRLYHqBVRMegUicVm0MJSqkZp1ZC090kOGaKdqx/PiW3E5otQjxH9TmCt6Z5aEdzBgNu0UJPt0Hy11Cca7NCIl4I/29Em76NgaGZt0tHZE+/bTg3tQFb5EuNekMeKrN0qM+N3zHdZl0ZLVGZRyrp31Kg8ATNyNL6T2+XzgeLtTiqDrAIJZO1wZpsQSb7q8r+QuE/uYfNhvNfq6j1bAlkkQCkaMHoYjGbra54PJrtomXolkkrGuMeIA/1UQC5vN06ypS1LWn4QG01n8dwS9KlcdqP9VqR6b2iv35MJ6vdV/Wu7BwdVlakF6DriAujtyM/Nb17KTfP6VdBXzP6l10auSuBQXwG8FaOvhUJwgpBzyEnuXmX3z7Oc/b00ZbYpxZxLnbzbm3u0TJ3ogSbwxvJZPQAWxrmtbXQaM/QQAxVOJJ5E36M3MUYhn2hnRswQ9sc5GTo01+weJ/PjwsrRPIoO+4BlGScGpOg/hyUub2+TijXf5SDr7sU0YfsfMNdgOBrA6qsWul+X6+zzV9qxpYzYRL+58Kw3i2lPRZd9gV0cZs1Rp4Z7kcEwqAHBIEgS6DIpXKiMnnmeYozzOsF4inD21YF+B+W/SsRFhe6Xxy7XqJ2J/O3kse9J6GbP7zMEzm9gIAP5bxjVO8eIYxkFa8YF/eTkdfJ7DkTpYF1nA1geYPRI+V18mowt+kY9ZrlahAb/gGulyerzUmGQmHnl9uM4XIfZpCrzxM/840d4irfz76lNkMrgKmoSUQO0wHyADx/KvP6DsTBJpdui8lUU12K0bu3+xD2atPUnXKprOFHR0/p8M+Bbj761W8gwYNuBOiTQCdUPH+NXpn9gyzAaUbAXAu6gM9R9BTQMnYWD/P9PK4vEh4P9tOHOfThUmDA/YH0Sgg78mYMQmMMqweONv9CPIz/zH2vhWzGk2LSI6h4tOIU+XfHGrNOYRDCYiI1SVplNZ3vdYoNWkIsRXKXIx8VDBndCVZWfHIGnXytyixg7rB0cACDhHe8KU+hJKFde8I3wai61iM89+Z8M/SnEQwPfGjTUkaHC//3jAHDX5TSshA8sStcF/urPcKzhBZo0oAy4Aes9NXhhN9z+Cy0hw0uvFkoq5ng1/7mOgsfBaxTYyv1j5OtyCnAt5TmVZ+tO17U/wCeMNfELqVrxbnnnDkEE5k2AkZJ4T5M7l1p0JywUYPDUOpth557FjYzaNgTATFbP1/sQ9fzYn7WhnepCz6eKPrqTZStIRl+v2BrXGdegW00UVppIk4W6hDBzahwRQIMsRn93FHthLZ+2Y/sjDI9YwIyY5mHVt/qiuxaYzcd266GVTvnJ7DAqC31OZj3mvX/v2Hff0BcHI11bLgKCX6H9/nx9/v/4RqpGvHpGLGP9YOsMtmVZeuDbfEcVc+UBDo8p18E+D5JF/FWEPzeF1c+mUa6ZrM94Rjyawrv9b5f56Yikg1mEOSCL+lLqJSQmt9++oF4TCN2j53zMjNcUFw4yhKcyv591Gwu6JiwMrGchfjKUJFrBNwWczz672dKmTMyL9hP7qcHSHxu+quBM+pBA+9Cfz3KnAoKyC8WCKy8KCjx3tAGepBFzdXXF3AKC5npvOHLrOQloITL4OjJyfLInWEZbFwipc707rqvqw0VIxoAkC9G61lR7mhzFkgVDqW/KVHIhkagAkti0DLzJRwYLzyZ4rYh0Ir72R9Oom/UGZ8+4lGdFKRTzCAfiGZdGS5P2RBaar+Z8czjEpmPMzpi+2qn4rG/gLpdFtlxl6jmYpJiwIQ7Eby/fmTG88vv7JOYBCDQjca+NoyQwOKL1ffeJYGzfXEVlzSrwe5Zxz0FIwDMTgOkVo3lAMCLE8YbDGjD8HhFNgoXm4V6jve+CT1hTu++HOFHuqWB4z0lj322lZqy1qtlFzIuzcofJjyGm6cs2mp+iWCtiOy2nsVU7RuQaNfT7bMp+MxB7m2z5JArCJ5J5MX1myEOD66JrnedVylAhaeygZ8BA+yWFkBZ8ohgJ7bxAPZo/GbpJ76NrBB3E1XlJoWU5MnW8sHxsLCyYM0tQKWALwmcwFUR1IMvfMp963iJ8/BIKlygWOdVEcLV5pN8xGPRc4ACEhydC5u9wqGX38PQ5EsUal8mwhuogM2qstbIo0NpVKH0gkxoxikKYXKGNSd5nrLyolUHqiMyQ/8tCSKDO1nt+gTGHrMTU586DYFzKQQg6x/Iy7ujIgH84KE8IpO23iDTiLmcWphvdhyZkFz51XKt9KycHZmVwatbe/9nXkEdvIaT2Sk5apPlVeRhw3oesOIpT+A8gNRh3HHJ5D9U6a2YCdZhVMaRlRnJ20jRo0NG8r6FUhq5+ilI7Jg5CreEA/H50ySQi3pHfvUT3F81/uo9TeaQBvPvJlPzVQX40Wja1Uuu9RRT2GAr2CJSGeg4iwYT2iw0U/1sZEckD57tG9wnKgDkFG18EigNqh2+wAEOov1tEHuVZQg9OMxILaPGvUIUjxYq2vneToqUec25KASo5TFxZcOu4ahOsqqiUI5OiRryLZ77yRwqQU4R2JpX0LOteceZjnAMox5ryPwBTopkapylWTh9Jzy68XzS8Og//FccF/yJqOOFfABYbRBEHCv6SFI13W1CWvHF3Wk7RWC5zO0EU6rX4tKCAREiOHPe/p08pfIKGjVcxWR3dYghbqrA0A9JiQ9f2odtvDkUcW/QbRGLzHG7bmfWiCwpnNEoeFqmIWhdHreFy/6iCKkvGNgZ+A7AumAwGMhc7afiqMHWJJleSqQPn+HunRP4PQGO0wQI66xb+6BMb1I08nshTpqZLWIR/T6ink0wYGI7BOfWTpAomp74LJSH+RdrPqA+q6wjr8wzGnzcuZ/Dy+O8n9Jc+K7T95H24cwgwWTfQpYQJ5tWIcRncN6sX9o1XdtVsHePlP5wk6tIQUbQKOPDmW3nkCflbGq6/GKr055EaKA9AM4CnW79DBW4Oh3V5vlXznxfyyuRb9eXtRx1u7G/jG9qlkksT9Zws/tnktmEbn3Zd7tp3RmR5CK/BigTr2mAP7ll5hUOjf5CRdWJQ9ruPcd0c8yJUJbt0xs9hv3xKJmHbMKAUt4Qq2wmKptAy/xsOSqNrrQJed9xEj0N0OiMa/Y1SpJxTPkd32DIUq+9ysanP3Vf+9xh4rcQHbCnwqjeKMcgDaq2Fm3kXumzUwBbVvGl7OOiv2wIdg5m1CWi7ga7YRptrjhMJmY5jBsRDlTGarP40DQ6lSBydlN4znGacPZ8yjJbmERN9CJMDdduc2dZgiDqUkXAn8C3KkVAyHhZpKYX0Tx0DQEz2q4wopczRZRHp5Xhz3696SlmhRqEFl7ghFRKPNukX3FJxfb5JsOGrC+ycq4zI91Rehi57qpzyBM2lXHaufyYLmd1K85DxEG3JvCexUCceS75XQ1PYSbr28POAWe0pP/VGxEV2nldDc7H5AXHNJArsoEuwUIdjSka4cCtK40N2gQe5v+xRDxF4UeWfe1fshi0BHdx6C1QVOlR2QmNp72xn9ZCECT6TsEkV6972qgaC93vc5vjKE3p/D/KgZ7cpeYXq9JY4J49Yo9Kx81dzzW1cKpK6+kYvhl3ZQhN92Rzk+W5XuNVxQzaocRUnqjcGKWkpgCYttpQKHYAQ+ufN/oUFPJ+QjyjXjuwvEHItX4ij+QVHpFTO+AXVt+usNxtZtbg+gwvTrV1UlbvY0UUB0qjK1W7kgJIUEDNBxe+cXJW4qWRyF0xZOqeLl2mb+xMR1Adp0ciLtfKUuUfa0I6G5u7SnHpb9qzxg/qYWq7G65Jz/i65zguMrAodz4jxM4TnIyf9tTRh1blIUjEJwUK3kemQIPgtzUfaiXKqQoz01mHtWdBR1/xwAR7qggj4ZAQxFGiB75q48iXW4mJ5UaeWW3zUt35vSlhx1G+pxWYltw8a0b1mnCanJo4f3NPCkKYq6CHd0X5ZOX59BVjWH6eUC68uIYLsp7riDAjDoNvB8GBLHV525j2ARHek5+PaeuBPFVWHgmSThgw9bKMaOGB114vh8/lu6YTvfSQmAxTHGT7FUpHTB4Paeb49LR0Z5jkhLF1zLeyTaQSNolQqBuzpynmbpa+UccDtomcjd8xixLYeDTqMtX+BHh9yvSntiZB+TnOXnZq6QZmpx0HA5Z6KtIxi8ZjUg0cLEoFSOcdYvcL+5PMgmHaMjQ+lCpI6CS/sG9DA1VDDQoouDX1m95lAAMiLY49p+TSdO8cf3P+ylmQBYil3iLeu+R6JfXY+CUhREz6KY9tAckZII7A3LD9sfROZsQ4xMrYE3p2ARLDBErOsHnejDjNvtF4VClkhWr/ANRUXNGN1N5OKtmUV3f+7rhGJhPmkEDXPd6AFA2SsLUB9+dKlBC0ayQAss3Dhk7GN0VvMh5pZcW7BWRB2KcRI4pLUSFZwy67zUo9B6rwpBwnNRK14pRG6M7bjGnSPm19Qrqj6pmSNVrZW3rSOWBVRneSHB45l8oVpZaDkk2yXqMmueXKMHLny3kyPmNyce63/sxtCjjHuZmEe8299cqcgNTTRk3cLs9GO1uFrcK4nW8Hto+l1QHvnAGmXuWJxw+y5CP7eGXNfcdokBYA7YlOZCRIXs79spdlD29DcR4Wd59Ts0bYYMpTDQYa0kEKKcK/I05wYFWZ4P++LmujG/kirW6OXYm8QllqY/OD3r2win9lSNlTzvahEwjvu7ZN1ZagdkTJQxPAwO/P+v8/1+XoXE+wa6Conw4M70lzhh5r+am+M4R0VQeYZkR6z37Bb/9xyVSv2qCJ/14pchchK1PutHPHFjERDzLWQ9cWKrTdt/+9dLdFke2PNLMf76xM31CO0JCZZ39He2i2xSFkLcswJkQB0+u1ncyFfTO9fW1iojFDjC7rAT8p79aeeNONWBs3mCcRjIdiVxOTdcrwsf4cZR8wiOewFtREmetOTB5CqEC4LSS5MByxcsz3SmEjr3tQ0g35HF1psyifnziq2pLf4u3O/wSNbXGLNlS2vejUigPlvPWTtvvixBUzIAc0rjG73nsAw7uZbp0SI8Xkks+nCMG2JUUwhhjKszrZ1oLvFP5KiIS6SMLdHogXS9+O2teCrFIkubqV+hSbBdHGE1wuQ4OE78WXsWb62HfjUY0j17i5BFfY6LOmxtyM3EieFZndV6PRnDR27t+eieIxmgXVpZj4gLsI/U1RGnxte4XTFQB+0toEqE8PZB1WtyxU2j32HJvW4UAwKVcNwxsGeVwI8GPVs0AaVgNCaqVrM+Q7QCplEIeDWDbgDD5r7A3nGpmBFcFJw87GjV6SBovVCJtGaqk2Yv6JTCexy15xFe3M19lW29cVPGAiCQiKJ0R7+sBOzIcM4wNNdlw70nKrO4JVdIgVJl/dJXj3M4g8TvUpPVPeH0dX6Asu/bMkaH4aSnnDD8o8hylvdJaCbcP6AXhVXmXXzap2K9vwz6yzXtSMxAyG6zd85lwzct7/odOwd2zjWeq8uKE+VXd+xjHaMXj9AZkAwk1pjYe4LeSqBwUXLJRkGJFe+3V91e2HwILqfY893gv13OM3NlIvFO04wCoshyQjxxHtcS26Dzic/4DCrwwjpZIFIuiaNItn2dGjCbLj5iSDsqTen/wcFxRdgYzIFlXJ9QEtIrxxbejvTVSGto67xqZhGvjPlC189v+SS2uuRHedtSyoI4qk/02R0fd3QCyWiz6gOq6KwQ7CvNHUoqnbzXAcMoN4fAk8zY4Ov4qvSdDw8lbWe0mxhs6X2/zmiBJd/wNpMjoYhnvNIB26ydM+s8vTg41cGFaxqf+IxLuFxgIMNi2N0Z+PHvI4dRJucwMxvHAmWBT7gV5s1X7f8vapST+jbapJRvRRqX8choChOhPVULqWcgs4B8DLVgUcmR3kDrOZ5p0bbGyjRqoINJEKTbfsYpb99ArqDQTBQjunjfo1orcQRWmHweGdJ4Pz2mmMvCUG9I8qZjqGUIgRV6MJNJrodHYsu7n2mABCASd7a02fWuu26gPXpZpUfNCikoAVLdjiSREquzbWPNCy3Kz6cYFTQKiX+/k4Ladq3gJpGMx7VKLKq2bcOKlnzxpSofwSBfYch8D0aN27I1AZMETZfN/3g97D/3IPUW6FfkkRfpor6nL441csMLkeeW8SHZ3wLbo/8P/iFzOAyGaZ3Jw4G+OQDQHJsXzf5H5mgOtOOLVhEj1tb/soWO45WDpRjFdmBgHdAWLEI/thu5ljjdhc0ITIxZPPDLR/njX3a61QNraN6pzcjhT6b7cyYyWa/xCV8VOkoviZXfeHopE31vwlW8Bcp9Rg4Z8FAYfEtQqzv8GwY7m7OEADVEUNrN6LZUvWnndJ1hjYYdqgUykVIEMK2d46RYIXugolVeIynacdtGUNJxnwAZBLOmFp0ftde8gUWiT2FgMiRXGIojdMOZLm32sezDLbvJOdweIuh9Sb4fA5RyzV6Y2fA1XncJ1lyOoFwhX0vVR5+fxYP1OKzP98hhjn81zSd8oz8d0jinQsdYwFBW4T6rnq5mycLOsY1ZGS3iHENA7kjnIJvHF9wgnI4G6GpB4/3RaobitK5lybiTW6DxhFPOrCBNpbDryaSOVPJyVhsVEVYosbqmOzuUO884ey05x1gVOzviSDLLoGMj+zlqgup181FjiT5TGIAOz5SpHTTdqj+aFeBGiJrDTMe952/NrrwGHqe3MJsyPoxxw59pisDJTG4JHoYQHwl3N5cYFA5sucSYKaLsfSgAqnRGJPV1qJFRtJVX2piL3bBs+oyKcPC72nZuqxXkWCotzZBvEtUEvlw/dKPvfJMZ/AiGvobNdrXUAZknY8ch+pgLJggTIklLa7MuFR06i1iKTnhYwYkpkga0g2Nj9CHlltB9POXXSGQein+hurkXx9z1W7XdI8m4JlCD4HRqZtceUw19yeyduLkbO2hH2PpE1SumlS2CVKJ0bXJ6neOftR0TxUCTEgt1oQRtQvIJ0gM4n08UmE5u7xH7T2OPMjXCtuvmLIT/yFG8816NyFqRqXqiYN74HC0Dg7fmx3+kTo4a+3AuKs0Z8JXJ1B16yOMjRFYo2X+4UTK8jQw0zU23y2vNUX6+uWPhWx2+F96MUf5ha5JiSse8uN9Yzjnzip9hTkMjHfW1j/rgiwpOPpH+Vb/OgTqwlM9boaE8J4b+PIxxAif3eXjUaY7J9xmKu1K/E/QiF3yoOjrJZYMuQynDXYItVlCXsTjqccWSnv5yv2Qn5tXXetNZ3tdLKR4aQXznVZX+OS8n49ENweMKM8ycGHI8LOlfLIX5Uk/Yfqhh3iCal0z6TOW6Qz0s/PavFtg+u/DgV2Tx3JOebIvMC/a+MsDLa8Nii41dNhBWsuHCmXvCKYdH7UBdHPrOQ1YunC/74l1Rpur/IXaxsRqE0kNdir+PpkT3/sFTeg1F0stwNToRAWA5AWnhFaKR3rsxNWCpdofvkcoXwSP9oW9o1yq1nqkWtXyBQlawaRIolDxyu1rm3U5TUOr0VrEjpCfVa+7QxeUrNl8te5XVZ8M9fLkS3Jj0onBcNTe+vXGeu3CLE2bLUdKdIo4GV/w4wtp8dGKuyn2bC1aHuKy//lOiZEGr632TTfP3PgpIlSmcr44+TZoQM75zEGuu6s3QBOcpcZDU+977IexITJR14TYhjO382SnLsmRtwvbxqUMCVJBCqpa9TqLKI5AAG+6oLuvTPKOdpK4iO/Z8Nx5cv/fULKEim9EHP2XVu2BDBNjIe0CPPJ8/zSkcTMCmI+XTmz9Wx+IqnkuzXw3S6ZiUt5wAIuVwMCrzUjVm0gJM5mCEC8i+YDStZ4gATdya0Waf4pifKqhFXM4KCFn5CC5GFqo4XwPOtgCW0RGw+WzMXNGl2xg3rnEHkjrWJ/ZKLHSNH2SRmuk5c/F5KMbLOzJnsUWrcnIKjlVwyHseJNfWv19LwVJ/VRmkjXCXLbb77KOS5XVsrI11PZfSHdXubae03I4o8XddgIczfLrdll4T9qCy8p/8g+zQO/hYIpT5pmj0Y6Xe9ua+FgtKmgr5ZPGgQqo/2tAIJpdb4MGguwi9LGlWVcvO0iy8Lc7oMBTZ2UEUG6ER3o/IEnCuJCSd9lWfUHmq2WEvkaSaOsHFnVKGjGlJipp4hBLFz2EF5L/Qrt7wY/FppBS6y1tu6DBItoOm+8YvDxb0l2Lbci1iyGrZlBjnK1fTtEgfpsDv6JhPF23+gYYECEAnYYAJFYSFH+yR5TDJryAUF3oYswelwVmrkP5p66EytW4IAlBgcnhnhw4qCmpPQHIZ2kw9aJRyWk6eRtuMzN4DvoqEjh3scl2fQ3Dn12dYgRxnF2j3nd8T/nCDs0suKbTGu0g0I4PmzdwousJ+enPnCDpq7Xm+vvaBsXoTQ2r5BoaOaxJsGXEIcTAdwOJDGvv/tRiypb94FhxDhhuoLNqrgJr2DX0sDJCiDCJ4AkZ7qQRUS3tsJ7lMEXdo+SDiValXCfPe1D2zBIMNk4L6bKB3YBcq7Yabmrp/xNH9436peE5OIL5yGWFEJkZUt5+sWO3ql5ph3OHnNhTziOnd8nWexCUvIAexB1kwDnT0cZz3VcZvE1xh57ZgusMrtrKA+y2x0rtPi5hliXdiGxFfuQsuobt1KCWJBZQ+5sFZ4ecEE12kKYOSxamcJbpTUY8ADnqkYjdYxSsQAzFSVJH057pRkL+iadVeZpNdouhBL/JYXMpDQyhXq9SguIrgrMpb0ymngymt3HkIm3nwjEFp9ZF5nAEV6P8jR9zUWQjZHYGW48IcwsxqjYL1ltcI5Sw6vo24JRRq6CnaV3g8/XWIW+qEAJAlXFrel5lfzGmlqzMSEtglAej8x+q+BhxDMLzd9AJ310wa97IDcdGf68fX4CHDA3Fb2KILlCQieVwQVwz2JiHvlF7xqPCjMmo0KH70Y1JcIwCX2N5EVlBFcIssY8SFCfI4tfaOSS9FJVdE8C7+Nf7TN5h74PD1uU4v5SkLSadolKRBOY1H4CBFYdAO95/GJg4WZLGFgYPvYWypwqR1GEd9Clp/QCXvEU46ykfOj2swLvZLDIGNIkBSYsavz+Xlk7ZbrPTCuUm/a+eQstKsEGIqZ0XjONqzoOCHWIGAkPtX0YKObeLebn6RlrPh7fw6vCwFUSbeyrL5CzVpcGJkUkapSi+7PfuBIPbn0D8wSRRQs28njhMzOdnx5pIkkiQxsFA20jlpq1EOu5/7jYR+F1SzP43dLQL8rTc2ekaq3BhSSE1pU9AynKB1dOwyDMeBFG9BH17anT9FpVhzI10hdHQlA1sIgvNXIzcY7W/J/EHCgpwOpKzgViUH+0immRLS1M+iU4MFwMalsxTEAEMjMiRVWH+JaqapDzUhfEwDhs0rrAJM26i3AKVZJzQItpldOhYGc4ewEjs5NpHus4CjHBs1CtvhOvrhfs1p335B5dconugIerccColfQf1zFqBr1onLCs3uGBwsQ8eAF74B0vrI97f/rcEVFnD8YWGrUEF6SpSBpuEo6PT2feXIEjHvZoLDjULiw0XCaXXEjpYFjPCv3FvB8THoI0MDzCOODkzWN1f+0DDYl5e/D13q9KWhEnEiuaFzeGAXGAtVIjVwc5FUnnzWQops/SJlWGq8Hscg3cZxlLYcw/6EPhStHfN0114YVz0hT69nOKG8ieeorbheW82U4/bB4jN3llxKahXr7ICfkjNCCE0ZtKnqUCZKV9UdqFdvJR4+WzSFYC5ZreEDAWnRBKR0Cs/GFM1OW1VHEdVeXC6K+hDcJJk4LXGzo2DADcTQaBiMWKDWxhNQsVw2piCKpWIMe6dSblgzk5nwHeSj2ZLiBxgTaREvbh7z7Y2GCt6YpMMBJZxcw82Z00OQDHLYbAW8Z8p8yDkG4gCdQndo+6ikfpgu9Yf2mgGQ8HN9/It/jTl5alhGDn9XVUWLfQXCIgwtbYvgj/G9K9YIc9lzPRTdamG4rPUk034svGRHYV+wGVQutUGNbFfBxSBU3hpmDE0FzCjuHuQ0XR/PLpAfXqYUpC9yEjsXQALBOoK29KzpbzpiClUwAcRrnatHp63PPAODRqyPpQJjPdFcstHtGIoxMeziNs+3LYG6NuIWIImdqjAWee9Pdluot4GG3czOSlyoWLrrhATkXme7+H4n+f3vsxZu1lhCq5nFLAP5s1THP03/stBQTLDaG/N2Y6hC/7ucDA9Yk7yE00exutqI/wT5/oOwSlIoHAKc2HGSBqGLFQxRYhMxxCtgKrQArdyOpT2nDjQTGScFrDW+aj8fdHLH0F2nWi4ctwNzmZJijhOIsLj9e8jBinTypM4w47xGuKCTMhAAAOanz10up7GnnaW5JrxPnbf2RHKX/tYsKCb9Xu7tEg52SmEj3x33876ME1BACJZ+uziRmXBO9h2Qy1uNBU6JY7qPqhKM5z00d0qvyNA4LtKcazvmmKng132uum4kBVP8I8RGUBRPWMqRKXgWdKYH/Va2kXtcxC2/cjzof9zvTE3UtbhbosYmRbBiFt5Kx9n7h5eX49XQ4cNKPKTHF3aT8bFfzws9ybZ9r0AwuajZ+po+24hOXQzTmHLksNDVWy6+BfzDjhG3qTEzaqQOP0C4vnvWz52bvUi3M6a6O7PZYzkW5RinL/+Wj0f+1XOUFZsViWfOd45+oqhA5uZ7BA9tujp/m+1UDWnVXL7jFLnCFIHIvj4qhm7PuAMuXO6IuDrCETl/F8YfsjUAQQVJINjVOE6oYGjQFVuKVP/+zVINuOG9hXi5aapwacmfxnLThrlYJHBVo26quDl1L2cudINMNaaghzXhaQbcE0fd+RZRGucO+yPOT+GuDJL7U5QyQW2KxNZTIfgqCD/ObWt/+6tLbQ4h/LSh1cZtefE3XCvj7Q8QIpYs9Im/DfVYZaAn5LTMU/crC/rXG7t6c8krjScSefKvZ2ivDi671K7D7r9lPq/1Afa+8362Bn+ZfIPsi8ysRyj7IQm8I0sm7E3/skpCYHrbHJ424EmrJlk26KnudTDIrvj62qWrn3lDQi4pmhWma9Q4diFj9WGs9RSrVLEFhHOCprpG2rzyMogSp2Mt09wH9SmuvUvXssTK6sdFboipbn82kQFrBY69H4kpNg531sZR0BFsj92zbMkFpYBfUbrFm+zTEQWMp6tChQEi5RrZ+O45qu1dUqSlA6wx3NFZy4TsZ7CiJR3wHs/WXuCrN12YfsecbNEq+JiVOxSM317HT02hMRRr3Rcxb7aHbBDJ9dgy2DbyZKX0XLN7gkPgseXtJ01xwxynxJyQlX+qDmVUu6fSOc6SLqf8bs7Tex2DKDMGrjJpxxfsiwI4y8FvxH4xgjQytOmInYJ9+Bxczi1Wwu4c9Ja21AV7Fs7+s3ZEgTxkefyeAjyXvI7MtfDHwjpCuyOtdNTnK8kwAuEp3MYopW8yHSQCzijE8rjcWonxE5m9Aq2nrN0nfpJzXjRDkEYNLuk5SJJytSxXYsCdwnxWj2Of8x8YX6KyHmenYWHEHns3C7b1PWc8wErUQMxntznOxyXK+/hOLfIJOKzYAcOFeBgyh/+clO1wrK62LVCkPSJwZf1bFzXSjVTW6BUOmfoam1wujs27e8jLDRw94VJMhESSpXriTm6umiOtZGiRy0wEUKt3ZxPYeFq6avndOV/4Y89e2fPXyWoVrzO+syU+7due4MAWDwyQkypECLmCSFDrqHkw7QXcyp/olz27eeOdcFLVQ7FVjHkahsvIR6hAogoObIH4bqnsUktLRsrnuP6yM2SiPZxupEEskUl1tXAAxEfdxGxhe+BiERC4iP3LcdtfbP4RSqsi+WWunAeRtr9LeX4VWJA7eKlozB6tJIhNKiQ6S00bKb9zfcjdBfLM5xEBd1HeBfBcEvX1dBt2pLbUSYqcfCwHcUfo1WneEAcCbd2q/SYmZ3zZZ4mJINH2BGgfoCt9Zw5hCS+IVjdqhuDxePxHEXgIxIUmn6xPLI19LIUmX0/MnQkSWFapNPVWLwDU0I+yIZ+PtrBvXPr5zjPfE8ZMK15ZasTDv/kDEub9Ke+ueOrEuSH/NdJ6FT4geLIprbSXgCvftLlf+XQ55QYXT8+Y2gP6WqR1lq3xOKVloC70FEMEdtPO7FW/kWGMNDR212JQR+uzfGfjL0T13tnc38gh/vkpwZKg7m5hRWGgIrnVLREl50KQHFPdVUZL1fpJmEMvFOwpmr9L5Xn1dR9xcb2uXt7IbNDNvmGl4UEOIgEaTWwCEF6gk2uBMjl70H9z60D/R7Ty0aDL0lTv25sIleKyJ0XW+nn8HQ/m1AltXhtTut9n+nE8QKVpYOCeFGNC6PitdbPJlkG0uopol+7axbJnvjgpcqP1dNjm0VUG117Or8htV7JBmnbX+BvvuwWZ4RdRGDMoaTYWNuVxi5JQeDjRZJB3WADG5BVmFvAu2wCVGbraPdMOTkUcYjXTCDN9wM2B5iKdS/mTtyxqc27Tm+9tKKmV8ZdympoVhcrGi+yZhDQrvP7FbdUSsD1V596sQ9uUIBtaM1RKQ2MMftKIC6wlSqS+9cD9ozZJTnph15/JAYcBZSb3VkLTS0oWuWemtdA97in/lcGsYbirSZqA/WioPIQP1Xa46bQViHJlqdqs5BSUJDDRIJHS6TgQOH0Narx1Jo4ujlxC8t6wlH81FngUxhMl/0a4OLoy/cENyaQmeGzsZBn4VaXy3HZij3iIworYUHBQGGB979kTrvxqC6HaCathUbqET/QnChWrB+DFxIYO7FTsquPj75kbcQoxc0epSaaSK/dUaKq/a8GO1fkoSX+T5TzYDCu290EgXkYYZUt0nnoJVFbDgd2dZUsZv/Nzt8HMEOZrCfkpGWF6skduejlleiU6DkB2lSd2QVms1aKS2kAgK0W8AGfK6Kn5X79/Cdj9g7GT04RI6pCG4VCPbWpWtH+b6adFbbo6qVKzVyJ8vDmm12u1rDVeyqj6/gHCFdRJMSeVa6ahHmqTSZmxa/cwK55739My53HqovPeEIBGwCMn5fHm2y2N1g7h8F7uKj9LiiN4o8CDMQ8mdhHLQh3YOlfdgKGPF4eF+yDAGvUrA7j04qfDyWSxx69GGGuk8IKpQ98ZSKcdTKvOn1/KsM4EI+n3+g9FO1j0l+d32S/C5ZzxCXWUipCVmiJcQdXC+DLAOCSmossVSCA9BG+IAip7H3cYIf0wI8axBWQDzvtig3tIKHHP8GMm29DV64aoBe+ntT+YDeUdYbHywkH+B3ANAOYVezwVWCq80Ob2dTCFV0U4hTkhFJYLejVrlu8VdQ/NO2L7qQE9p9+oMik3WUxyPoW1ATLH0IcmbKsLRwUmCBoeplzu/exueM+HAIQ9oqlKuHEW6z0w0XW7VDQB35zgXSv2LvKbP88D34bwXGCz9/M1x3BIVIXNz8qqkP0/oRW6BBQf5W595nVjQv4ZEbCZ/0ejnYeSsGHyLzCN9cQGkruwLjHIfSqfaDrH8N1Vp7a2dG7/e4VwO4XW9ICnNANHIUxWDJEw1tCggZ1jXeNulGpsk2W+MJYw4+C0zdeofv4k+sVftZbDbjxOgvYpylvWu6lBLyozKPNIXNmL5ML/OXZTDoSyVgt6f6HQ2BjUsdHzCiiBbDKknL+rKWze5GcdJmuS5SJ5AnWVdwbzufQqUj3Z1hX/Zdl9S6nuGwdFAk/qlT9mircAOE5dSnvTbIfc3psZxAugAmnsqGH0W+dV8wc2W8qebyuGlbu4/F8oQrJDYo0WXFG/1zCrU4I/rdYb2NuP0vOz4RUyhYwJMnzED10b1RRU29s24Na0VjfQJzIQInSmV/vVjLQ9iAlQ2svqKDTPmBXKxY8z+lyy75cBRIdUDWZVdbVM+8HAzL1Mb/uxqtwcHnv5MGm3z9UpmlcPJS7/+/tZhlSsl3Mf/YFcXUbqNqsE/hT1qGmi7FFrdi05/FKS0K5XAwmcC2glTit8wqbYEA3F5h+urdMEX/jeewlJ4ormzx8TUe6Y3qNgHh4Ja9Dd6lQlRPYuQZ6bw8VzJ5zENnGpPRxbxJz4ozITOiKrhCgI1yyI7PuLBQHxkKNUk4WVxGH4BLRKtmFCMydZOF1BzATRnTlctOCFZo/2YraKoujUJF0m1YH3vQ4BHEOm5blpA7AErH7So8WZTozHd2BBQg9usucy0AnUrt2uz1a9XvXoMFdlw78kaHgzvo2XMKlGI4pgKwQMmKpIdVROSjpE761eQN389hn7kTWEEX5FxH0anUMsCVMiV2VO6N/iYp8nZ6znfvtswO9z6cW8ptZpMMOW6IGqCh40CO6jSfKEjSAN4WhA0Ew8JQ8FCWbpDUk7rVHM4Vk0M12ivbLqj1I/QNWRw1kdQ9N6oFkmgm5KYCoZygWpsLQDz3d+sDaUw8sFTBgpZDFPxE4upJ5N9sbNBEtf0PBMP0JudilsJcPFknHAY5JkAES3FM3u6B+eUToTwlXv8p/L6da3I9xeMig9NKeOaek5jkIMxpdqqrx/ZWIzxGeCCtlNerknq5sqLNf9qWEhDCtGlC3ouxA/dqam9lC81SBgZjhLuVdGqsd5DflMHZBtDSPTGQH7DmuUJabMNyYFNkBFOpxPBCryPZlmkXgy7dpJOrHDsTpILctdZ3NiAuJx9S33xbImND0t94k1nBDS9/G3mabKMFKpiON91fj+mOSF/DSlz7SJhm4UWPBgyOW34AzJQr4p+x06A/WsEhwWD2m1Ax9hkRB81imO16t8/YxnWzkvLjxyXCUgXr/mbuTD/28GaneWn9NgztfhtfsFZsXmtdvoMeMvZ/fY/IYVUR3ewc1xZHkvlr9KeMCQfE0RlkdIoORsd1LZ+TX3cxigQKi7vL10eNp1rvt/NkQw/FcxydhUN4L8nX5JErRgsINVpoDiBFe3utmRVaOa+5HQtYpsfyOi2mrEkSJBK+DQLYIu0zdcOtz0gJ23FJp8pBodNZILcXc1hOgKYP8Ib0Vrp6nDdY8sxk3Y/XFdF3PHPqSZO2vIh7c6qUslH7k9LFsXJrEjUL52qnDLTkll69K0lIKg3i7KDcHiiE03mLvcpDteEBGJNlqbsdP5ixsQf7PijOf8G1VnbD8Y6tJFA1d6Ay0DjcB0WjhoqPe7dszgR84yiCnmoF0LyG3yEHrjJLwfx/7waFpVLRARFklsh3jTGrZAwlcUaYDJD6uEXq8F94Mqo58KDFR6DiZFfumvPLrx+VOrJXJrIlpxdwHQQ3hEJ+5B1/ZQDeFbYK9p+gZXRI5kgdv7G6XR0srikmqpwVDDWvNCso3lhaFic4cPncYwkYE8AquJmu/AFYRBOu1+X6sTiu9gpDM8i3rI92nPZ+UC9Qxm+4hsOgQVkQGYj7kqSFjPgU3IOLIHy/p1Wke0cYAnv4pKIR3bB+DPOyzk6xsjabEwHeC0ZCbq/4JIfnabJYh+RNf3l7KYI9RXe6MBBhrexEUrlP9b+eQh4rDqrS4WQU9oQj00gJyQ7lkIc0/VWJtUZdMhGeZb5Zq2r5zjyuoeJ31mUrEzDNW7bmPmvxiBINh71A7jLV2aZSGoaon5MJ9p4QtlgiyJ1NbqsHKMWzy1gufwo6PDBJQvXvasFBnQBtevkDhy1RLjURkNOnHn6HIyJqY8DTCgjxLDF08pj7EknpK/y73iiTpKALg68DWkD1UqVlAW/S6vnZvI2WYn1g/JkuxknJQOI34w2sMHN9DjjVATb7jNmqAZG9CkXCgL/3kq/AmhnwonN3NoLHDVNZKUCA9IF1N7ax1YVD1TekpQSJxNnv65e/2WaXp9HttaCTSKT2BDjYgpNv4d/4d4HDIPsGoLAk5Mwxs5AXe70K2F+ha10riyoh8yMxeY5NEQYc20pr7pOO8Jkr5b7AdL76y6tfB/BS4kaFm23g8wC3uQcml1MYIZPtqEtzborGLJ5bTQUzl4XI4rp3y8Uo5i1oHfPjVkgjX4jkVrpQPEeqPn1lN4xBZxk4QGu6y0c5CDJ8fVi7FEJEulvRU9VGG0fzOZtk4VpOqD/pjE5aYA2KFHiwvdu+9TibZixonznB7RXYlWzFX7gyakx4zBwvHJANSApOHoHNt8ybTVO7oiS4Q4CLPiDASuTk9RweSu7QtINEeILdWgKe1DYjRVfHpJp3/cZVVOAjYZ5syzrxawgmUA1wCzsqkblbdflZjicjoWvGNvw6z//+Z1Z+G5iPj7yYyCbMMkCcODOA7ucEud+MU6KktdoTMY5MsYOjGnxz0xeObPWwBYFS3dXNC2WffXnxJU8FM9OFGHhLJ93IC8ixJOYmFX8kAGuSsoC6GE0qn90vGnYtQYMo2ROHB89o1hAOoEAla+J9SbLzoqVSRe/GOZq4OyXN0c9cxosdfFBkConbASXq2NwLQlOZ7Y0uwhKpgAo/wp3kV2YCq8NUSMSTyC58B7XC4hbsAOowsVpMVuolsdMnymdSA2DOs/g+gWNcXTB51bTHeB1AxHVyE55QdrUYX+oQRnTP+pB9bTIFs/FKMcSIfMAkp+AJoeYqsvEFeX5bCUD1LOZuZkch+mxVw+RngVon3dk6JfJJdIceqa87CKMPC4tbQGM6Wu+CVZF8kC+S5W6FGajoCHOYm5uZOoZ6KdnPABlzhWni54okIp2jE+ZNjmv6rUkjnL8NfvndCyoTu8UaGu/O5/mWI3ORA2utuBhLFwjOdBGXNLmkspDdV84satRcmGm5lZhmNGOGw1YmG09aSZe50ZbvISzqpYd9Dh2DhZOsTnE5v9EQJJ9f3LqHwpeop0bXlJUseV9mrWewkDHYKWUUSjFe0MSf9gmzee8+bbBxLiaVoCZSpY+d6ESvPL5FmWeEXqDQ/y5RUYyuilv9ILbKrQ1Nr9Y2UAOHXsWTr1r9mklGAbjPY9G8q0kJ1Ew7ut2+di1QYSAAsJKWhYsPE6TQR4Hg444rlqZ4ke86o+9ylBTY/VqgCfgfgiEO9ifNoWbO4MGx9aZYuRLhjgdYaeNED0JIlGMHoAU863jMx/GrcFGCo9+IUjspF7pZGxD5v5iO2RqUiyPQRqNStsO9+qK7VVPh8qH0ytvU/bQf6av0rYHZUcAIEhnr5uENIM3/qtIw2k441zRK2mroE5npdgN+SPckty/WRqHvElO+5jS3U1g7xGNj4LqwhPTo28+19aaDaSmZWnVB41/BkCxh1ObBaMIW2WjBi+NOcNnuCInROtiJ552pXgx1nMRIm9BOXBJ1DS8t23lP7f9BCwm+fPQgT6L3cYKXw1vZNtHogu+3noFHLd+bJbMaGwNsolWPbuF8Hgxxe4M8zRKUS8x61CwGBQ7w4oCqrHjkAujkzzBlQNhpnu0t7HrvY6JFAJk0ZTEAQOLM3H/zBz2Zigo06vGfO/1W5VJZbajn1mDYimRnuzKQcNDPbYyeF7QXI5mzQjju5gvf5ji+ot53CmEGVgTeWjzvKti8qeR6CWa//fpY5R/yZKxp36p1p2iOeAWtvTR5ntwSBkZm18tpY8RghblhGP4pbVyB5ufCr5O2vc5Y2MFTCyfaI+r8lImIQlkV0K1K/tGPXty7tqXULON9hxI6Q1kkjz/wM683kbSIAKVNyQV6MA7riksa6KinSVkP+ctLXQKV0+E5jxR/wNSvbuIYVV5S85smfViirtrhxwvvd/toeImhugan86ur8OX1ffF2PgsWwhOq5bemNLH0zzGIRc2G5EBaMGUwY/Oi9B9DNYFHnfuPrDqM6E71yM18YJU+qwZNQFg+vGXNXh2fQNNns8R9GbDFAY07Gk1axceQuZ4UqhKFljFjWzKHEHHyvSnLupzLh0vh7FiYPGekJ77YyV+SSnJDkAmGhcEAnyT5uoQSnhb2AsOfOK5uup97LvZE7X0dE0OSqkZQz7kFuIVTXi5gFAiCcODEtY8SgdjQCOZJpSJzi8MQYNcOlRUmaD3tFTTnQUjawkx58838FnsRNdcQl35TdBET8v5HZYGFkzy53GrnCxlHSkXPluFnVsIHU6bsc1hS/NfN1Rsea4/x06L31j50GJrTeOqRQqfLD/uWEK9TPp+S6/i0Gu4OFJs5XidPso+0ljpu6h7PCs66qg3D2gKpl+B/eDoTKnG/F6t3P7KNpYi7ccqSfY2vff86ztbqZ8sxAMI40GjGvol1DurfytgNjOwFhzPvftFVc7e3Rj3oTYKhqUQLHQWwlG5PK2zbgY9gUWsc9gbOErqOKvt18SUVFh8IAu+kC6Ttj/fiQtrMJX6wwIU/f6q1bPNbxlz+ZkM46j6LWg8fm5SOCr/sfGefY/Vr6hPx1dLrggNFR2jquKabheLd6lZhmRr4YjfdBEtGk0jVPyFP0WS3l5tJGIdO6MmODFejKw3F7aitEPFLZCFUscFB/dYgUdGbFEt9CGADtvTyHjK1AiYIWE9zcuLQ+cMyJBZb/fjUAr/8UIKJjs32VNTMWhrYxYfDpNco0aXDrP2ZtysN0FLHwylm2GMdv091rGAPjlv4k6etMdE7RnDPc8WztOhlQ+dY18B2at/NTxGWHDYF0NYmGyOOF9TiMWQbEZ+ESBcKoclxm1lOJk5X2SHHSjUAJBPt3vp8i8wYJ0mIEoR4PaMzdWks8hhbA6DuJ9WKqpDFK1YRphqshTsT9wtlMoFeR1+7yxB0Q07FVq3bnJE5aomNmF7DAqfksHlxsUS2v2XDu3yAlKg7/5Js+QvXIe/p00zQeAWFe1kI8CPwpFxDfTUks/U6VdBO4iacZVnlPJOP3kIMN9du/T0qDkCd0L7uxKd0+GUv0ECQv43nPdtMI4pi6uIKNo/iPIcBLts6l/0hlwbPOWBtDbN69YHqUcF9BwTQ+eBQccnaBg9Q/0j4kaCKbSKrB00+UUMCdfMk38jd1HNES2kDUNfr4Re2VBmCqg1BNXE+Neacs5dS7mF4FlI5C+oP5nMa53ut1ZDrC6q64uBDTa07XCvuqj28Q4VJOzUuwtut4604PtLLeYCFZzE75Hy/wqZuQnC8Xir0bKaFpEBs1TS/HRKY6frtZOBE4gHDRwOox7yKP/hb+HBcd42TySQP9gP25SokoLb954TcykXg4kn6QZXN1d8EdyQKnmNLKVwzOJo7zmnBNMz75X7Gt/tOVcGNJMJKCeMOnXOsln1ue/eWDde8lvEMkoIFdxiXT3mknp4tOVVsNd19mrNHagBhlv1S01/V0+BYjRM36WWUbBdmwKFAYHz8tpqe1YcUSNS+9Cva9u0EWgQZmAzJjAAJOBLOpK002+kzw4KBnrJ/nj4HPkEnCHvimB4D++tZwLwcBjdVhSB0aluysP4ypqgzBevnVMV8n7JbGLLTHMtMlVRzl90RZXxdvosWE31JsU0iZNEpKfgMF5ShC51bLLJQ9pE9zL7YxaDpVav8Z/lf3ogn1gK0uDIAJ5qH3FJtBVNTCm6IRUDWxmzMx+AfQcQufhuLfB5cePrV4UM/ucoE2Gmg7fOZM7mx5H1iGK8eoqN/peXJsveRXWaetOcZHxDsAMcgUEA2Yj5gt4+ewcDxg4Wl8vYmnOiCltn5IcuwxT5aRf5yUeOA02zHbj1YklQTGLKL9J0m45nK369VS492wHHuc0u8Q1y5qP7xaScil8UMSsp8InXMjITyVN/hjEAfeAHpsXm00C8yvjm19ly/2st0mjowfRLhIyhlal1ZU2RDMldPxOF7Wq6YrgZQPqpT5VLIfDMbLmEKbua1IO4W9ou4XbUwJUPhwrTBDYVSH02zEtXA5rdpjpzCYVU4ypLuEDLYb8x79iT37pgJN34uvDsxNiB7O4uav1ADeUCd2I57mG4f0wAnEXyMwKKtgGjIepkxcyIeuN42h/3zxXLU1FAPn8XVwIBqZvZTlzJ/jZ2wEQ6sWyIzp4sNiNpGxjXDPuEFieq1xO6ekNyqhKPNWeSKTzJjUgoes4cnLqd2c+kMltAe8K/JR9KxRGp96d/kv86z5inZ/N27ofDe5B2ZMu6DhKoV3Dd2GHZmgDeAEIh3z2lM3+J+tMpoiWBiDyhgKK0RVVYPWeq9X/WvGywUY8SAseaVAwWxN6OzEScGiZtyoVWl80deytUD9/5ww/cgfKMeeMpFjZ1xI7Qq5yskcyntXuZXFQDa/obFWfipQ363O0l719Sc7O7Lfruw/ck09+p+NhKUXZlBcv5NJVqcDrqrofxqAKlxIHMOLQpOof6TNgB6SEmejbMxY8clCS+1cVjgLZs/Q4kE++74227JkmyDoloIJroGBoc+l+RoFlEocFGFkKq4RJesht2g3OjuwA2igt371FK11OoaaG3/6s5p3ovqCfYBTJ4gHOIHbNKtJ5XHdPow2PZmltxlTEik2ajCG7qaoAksCHdzBG9BBgsvjAHnxt1P/X7EtVdfp3gfeBoVq+8ZXdeGgP/anqcE23MXt4QtX2a+uIbw9Yxcr9So3/dqS3QzSsakhINZjrAedTcYOs7Hn6PCfOwcmjWQxptNdYYgFEYGr+cRrDMucmOwrTbQs66tBnzlxIIyVPcpogpX//qtydd/EcNA3r+VivMpE89iNKYwgGQn9xFaTqyGcUG+ELTftJlFkgIoLsCs/iWVzokdV9+zGHgPTyWHC/e5trir65Ew4pBh+c7xp+dBbu7t1jvXaNhzLvJqmwGdaq3H0Qnr9IrEF/vPnsZHf3ZukhtaPZ2xcxqSUZ7+dXx1LxB02b7rVAhxTRw3tFHB8QehdKTghgnx6o8dRiE+2/+Sia8GvhlcOOAKoAMzJlt99TPWq5UMAsz40CZFRKPESBijOdFxZwyu6d8L9vCsVWLwwCmavyYQUW90dgTyYum69g/MKnqsaJwIW7Zy1j26NLpwGvmduf/vPNBkR9AnqxfH1hLf/L/1d6kpJPzvESN5+jUsfQRF70sBWpOd38haEjYvm8sS8n9qOEhqta0LR35niK2xes2tTl5SFD6CtYn0rW0riDnMIWDyZD2HkB+rjUZ9u1qq/Om3mAkNe8+YKiIhSnF8oQzTS6bJntPaoDN7QuwnrbKUg4VX3VVBA2EA2ZirDhfgkrf8WZDkHhB7oq1EtBxWd47IScrFw9ufMc+SsrUpGUghqyLpKnMBGn7zZBr7K1zFB8HCOjugBa92E0GI4K9KCLQydM9CgfLUcZZIDk2bB2FbOPPy0nM1Bu4ovi9pdLhmfG6lrb3brfG+kS0UxZip/Y8WyUikZWbYoX/+sJaimFrHl3s/XaRCS47meUH/1eJysozrYBMCTrwmGTcBiWwT8z61Ora0SgL+0I1Ovg5YSe8T4dlHE1t1v9iTBXw7SBGvFBRZ0zDTWmLaYnvOx1I4Bi7k+U4FMJkS3YDlb9X4nqjDMxyuf7TOTNAS0e+FiraA4ckuL7miry8Rq62OeUKrThZU9qpa7SKOqlzQRqUK/RGSH5D+25o2RabSpclAzSFNk5/Zz4IuwUaFFKpGhFWKaMBYhQ0hvWUWA/Dt/BqFxrwd6Tq6u0EoXsH9r+GmlbWxKyI4O2daefi/qij6BqcvuAA0K4g+8rKIDRRZm0hmPer3iKbrUlIfylNAewEVhZhxdBxblvXIAQVSZmufksLx2LlMYB+qd7pmMBXWkXilc3EB4WKqrM3YwmCXYwV8hXV/Ej5ZRywtzXAt+cXWzPXYcIvkSDsxx/zEnTHotf3Gsiph1+lXFWU9MRb0dpVd4iMeZVmvBzIB9Ls14DQiAzNxThgM7kYb0DwpeM3QhGEI8v5XnGdSDZmGGdNdyHrn/wyGc/lwG1tMb2wRDKOgNh+7vhGxUxen/R8ETPZJAPB8bqJZwDmn4XtmbAeSCOSblI/d4pUBF2tg40ptCH5mX+iW1TS7itp1IzUes8N3ipFjCuHWUlTOHbT8DBx+y9AZag54x2/wxWrrPx0ZX8A/lKX/MdYA93MLQjyDCDzKZb9KM3d0laocdh7nruTgUrEqyMBtdQ4kxg+Z2iYy9h4+NeUApoJ6JxgoQl2qMmHOZc0hsqgWlo3lgAkPehlKFZ3IVNj1uyHGlSl5IJ9xCnH/pxsIya26frFY2LLp2xm+rsIKHKOnRvfZpATRrvavTNUFjKEF9lNPbw+t9dRIDd/Ngthe8yh5N5UmumEsu3IImullPNV/7Zk0Vru6caVnxRbkgJ/r/MTxQiq2HfsetC6+9TlYeeEipEkNe5VIJTm6UnJiSo6paTe3p2S0YHijihASc8lNI4m/wg/YM+YdfQIe54elDjkcph1eTU9r1aaXxN4UuXL/7soDDJhln91OhCLp9qgpKhYsa6m831hwxzs11xnQVKl4unpB/7i8wnlr/HRUYrAihu6JW901Q7e0cDlLaF1jfuWrP8NYMc9QekHAExdEodYH68YVCyTddyWd2lLb0cjl8Hbqn7T/jYOzoz8EyphoUQNBaVmPKsfVvMHgPXiDg2MKHyh8ecA7R5RAGPZbO8LwD6hrDi65Ye/jJkAdbnOAxFE/gJfXmWfEZ+Zj47nIuX7KrImyqnqzQ+ddzkroR1e06v2U2YcoRusx1njRWgqmm009KqYWMhsYkh6Q2vl813IK/cx4Gh10xsmBABbUw7dzIk/rgXrW2yOBseSOoUgXulf2hl9oxCP8Gh6okf6Lu54bKGWI8z+od4W6dYnHpX5aeVyCwXn5Z6mWxVZPOxJurvyblSt3/Q8tWgwrAmqGJ0PSHS1g3mU5UtG6Uv7EY8h5sUKResfjnyTJFhC2V9nEj1VwWNnuVKSWzb/r/U5OhioM+4/EBh5aLm4fqcvIPaYUX5UMZOHj+f0Fykgr+VzKdnWtlr4WGFiSq0Xu3ish6eS2NxBWN6TBqqOd8a3v8RIZIXlTffzJPj0tHuH2Wdt4Qsp6HcqkJdZ7O8RhFHgdttFV9nFBbxOowwji4vDdeHvZS4fNsTfObtZs5s0d3+DWUBBR0XVKTAi8q1JApIAa7ePi0oFjjn6t+/PT1vwGNNt2WsSBoOLRCERNUSeAqmfmO3RsRPtwUVVmd1KkcjHPCYQEZyRUQpW8CmqPhrUZhq39zh3P/JCgsc73uN34Lhgv8XhyXYLAJRvP5ViYGjcwGGLOLFst5TjJ7ie36oj66Tu15JSNzAJqD1LMRr5Dml7TpOTtO63Bb4aSo3KAjQs2spugRuzYJMFwGGdyK+xh2Gw3W7lu5ghXUgCfVDNqOg9zOBiwfEeU9AfIJYxNe6zsk+6Pulh0pahovA1FyA4CnAa9N0GnOWfIiGqGXlZ8PU+kJ5AEpoM1NwkRiLZbuwskVlz4DLNTUiN5wWVJy32CPigluZw+7698wlt3hiXATl4l7Ps1UWRLILcFnNAiilFXt8zFDj6HZAjaaxFP3CtQu43r0CJy1PrUwXnTV9RP/xBL+UwFl8J9nEBhcEyEXLN+4Xyv14dMdS3idLK5//NtQiOavXqaEGHih+oGg5i7I71l3mnshygUqtsJAahTFg6/ThNBlRoBjF9u0BARPe3fdudk2WoKZ9gol+S4ZskSahMxmVgrPye1hkr+eqkIZZbvM3eeN14Pe0tFA4ARPmgn7Uh2oEX4WD4IqV9Zoe0P4ie2Ocp39r3veXmBwJHwZUc8HwBfJrDhtMrOLusA60RWbv+WCCZLUOMnsBc6pULwZlATGcnp0xjC3cWO19e0r3m/gcI3Jo9F/nrG7ZrdhN8AUso8BFDtFcH5PtgbEG0LQwAwo1cakNFpeXbLOSCCOcouOOgXkMmcLJFQn02+TxXXgBtxdkODDCy6f7KfU5vLay7UUF1dPx1Uue/kn3g6+or6goNDgN15U03K9WaQirUVxfLYehg1nVgGADN6zQRf5ahvB6QjIyEPoQF8CugBp9vyXijD58rGqVtQtRoXDKVvJNGNN5G6R7uH8z9pai+2YjagEKeNrWbKWG41uiDesVp22ws3VufIJzuwcuhcma2K7born3pbcE5qPlS7qGxP2hK6jbZjvwubmwYxSs5p5JnBpDMYmbzvLcHYlBmzuK8ZLAlje9rZ2SosHP5CkwDw97U2tag5taDa9YHOpgLyk1crg1UxXNTlqnOdBeMNbfCJd2DO9+r7rPIj3I8xaX4KEDOz4Po8Lev8+xCcaNpBBIyTA34k=\",\"iv\":\"8tX71Ild/0k/+lR6\",\"td\":0,\"tv\":2,\"n\":39353,\"t\":\"1696e68b28c996b5a0ec42d54b1c4afe42456adb761f4a7a45cb61c0bb36dfc4\"}"}},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Thu, 13 Aug 2026 09:16:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\nset-cookie: _dwbi=1.1786612589508.5d5a42102d9bb86f8e4bbdf7108dcd73.231c204e1bcfba2f1a5d90a0fd49efdce0cfca35e99adbbf7c381fcdc7545950; Max-Age=7200; Domain=candystress.st; Path=/; Expires=Thu, 13 Aug 2026 11:16:29 GMT; HttpOnly; Secure; SameSite=Lax\n_dwcg=2.1786612589511.4e317edc6aa9f672645fc0af0f9b8804.3474781bcc6d628baa046afa348dac8aef6b99f903e303071275bf4421122ab6; Max-Age=300; Domain=candystress.st; Path=/; Expires=Thu, 13 Aug 2026 09:21:29 GMT; HttpOnly; Secure; SameSite=None\r\netag: W/\"584-8HlSBzzwA5p3mzR3N7P0/idzFlk\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: sameorigin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1412,"size_decoded":1995,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"546c75187023e460c1f7c3f4a3dd8823","sha1":"f07952073cf0039a779b347737b3f4fe27731659","sha256":"5e0651b9e7164d39077af3e70950d0444a0c1050fdca08f8e5353106fd9754c6","sha512":"51c8131600e7c83f402102d6ed882f73ac8df3b8423e82f4a2a73aab0e4ff10f9ce6801f9d9e19648f2476ba4ba95c266f1dceac9ecbc361f36426d0639396b9","ssdeep":"","tlshash":"9d2119c1ba9847de7099d003965ae6a094cbbc3d49f0824d01b883936cc037ece350b8","first_seen":"2026-08-13T09:16:57.999426Z","last_seen":"2026-08-13T09:16:57.999426Z","times_seen":1,"resource_available":false,"data":null}},"time_used":622,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":622,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"candystress.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/cdn-cgi/challenge/v2/api/error","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://candystress.st/","date":"2026-08-13T09:16:29.889Z","timestamp":1786612589889,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candystress.st","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 10:42:46 GMT","end":"Tue, 29 Sep 2026 10:42:45 GMT"},"fingerprint":{"sha1":"0E:CB:49:5A:42:9F:9A:10:58:6F:B3:46:92:19:8F:D0:E9:6E:C9:96","sha256":"BC:1F:1D:2F:8B:32:DC:27:B8:29:28:14:3F:FF:3F:A8:96:62:78:27:78:BC:52:DB:06:4C:E5:BC:30:F3:3B:CF"}}},"request":{"raw":"POST /cdn-cgi/challenge/v2/api/error HTTP/1.1\r\nHost: candystress.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 35\r\nOrigin: https://candystress.st\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://candystress.st/\r\nCookie: __diamwall=0x873822896; dwid=5d55694fd6090d16b3e036214d3eb62a; _dwa=0; _dwbi=1.1786612589508.5d5a42102d9bb86f8e4bbdf7108dcd73.231c204e1bcfba2f1a5d90a0fd49efdce0cfca35e99adbbf7c381fcdc7545950; _dwcg=2.1786612589511.4e317edc6aa9f672645fc0af0f9b8804.3474781bcc6d628baa046afa348dac8aef6b99f903e303071275bf4421122ab6\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":35,"data":"{\"err\":\"x0j\",\"src\":\"core_rejected\"}"}},"response":{"raw":"HTTP/2 204 \r\nserver: openresty\r\ndate: Thu, 13 Aug 2026 09:16:30 GMT\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: sameorigin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":1134,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T12:51:48.895884Z","times_seen":17871536,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"candystress.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/cdn-cgi/challenge/v2/api/error","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://candystress.st/","date":"2026-08-13T09:16:29.894Z","timestamp":1786612589894,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candystress.st","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 10:42:46 GMT","end":"Tue, 29 Sep 2026 10:42:45 GMT"},"fingerprint":{"sha1":"0E:CB:49:5A:42:9F:9A:10:58:6F:B3:46:92:19:8F:D0:E9:6E:C9:96","sha256":"BC:1F:1D:2F:8B:32:DC:27:B8:29:28:14:3F:FF:3F:A8:96:62:78:27:78:BC:52:DB:06:4C:E5:BC:30:F3:3B:CF"}}},"request":{"raw":"POST /cdn-cgi/challenge/v2/api/error HTTP/1.1\r\nHost: candystress.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 665\r\nOrigin: https://candystress.st\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://candystress.st/\r\nCookie: __diamwall=0x873822896; dwid=5d55694fd6090d16b3e036214d3eb62a; _dwa=0; _dwbi=1.1786612589508.5d5a42102d9bb86f8e4bbdf7108dcd73.231c204e1bcfba2f1a5d90a0fd49efdce0cfca35e99adbbf7c381fcdc7545950; _dwcg=2.1786612589511.4e317edc6aa9f672645fc0af0f9b8804.3474781bcc6d628baa046afa348dac8aef6b99f903e303071275bf4421122ab6\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":665,"data":"{\"stk\":\"bindAudit@https://candystress.st/cdn-cgi/mitigation/v2/chl/chlb.lib?bdt=0\u0026b12=0\u0026brc=0 line 1 \u003e eval:1:472985\\n_dwVmacfdfacdc0d07ee7c21adf862dec0c4df@https://candystress.st/cdn-cgi/mitigation/v2/chl/chlb.lib?bdt=0\u0026b12=0\u0026brc=0 line 1 \u003e eval:1:510231\\nasync*heapProxy@https://candystress.st/cdn-cgi/mitigation/v2/chl/chlb.lib?bdt=0\u0026b12=0\u0026brc=0 line 1 \u003e eval:1:525668\\n_L@https://candystress.st/cdn-cgi/mitigation/v2/chl/chlb.lib?bdt=0\u0026b12=0\u0026brc=0:1:341142\\n_dwVmaa2c4054d79b8e503ea2c950fe6be4701@https://can\",\"ch\":\"84b568fb14efa985d49edbcc584c4b0472c75ddd5426c5df08a1224f4376d5fc\",\"sp\":\"65ffe92e4c26\",\"ph\":\"verify_contract\",\"ec\":\"x0j\",\"err\":\"x0j\",\"src\":\"core\"}"}},"response":{"raw":"HTTP/2 204 \r\nserver: openresty\r\ndate: Thu, 13 Aug 2026 09:16:30 GMT\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: sameorigin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":1765,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T12:51:48.895884Z","times_seen":17871536,"resource_available":true,"data":null}},"time_used":467,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":467,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"candystress.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/cdn-cgi/chl/v2/captcha/gate-init","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://candystress.st/.well-known/diamwall/load/html/5s.html","date":"2026-08-13T09:16:29.934Z","timestamp":1786612589934,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candystress.st","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 10:42:46 GMT","end":"Tue, 29 Sep 2026 10:42:45 GMT"},"fingerprint":{"sha1":"0E:CB:49:5A:42:9F:9A:10:58:6F:B3:46:92:19:8F:D0:E9:6E:C9:96","sha256":"BC:1F:1D:2F:8B:32:DC:27:B8:29:28:14:3F:FF:3F:A8:96:62:78:27:78:BC:52:DB:06:4C:E5:BC:30:F3:3B:CF"}}},"request":{"raw":"POST /cdn-cgi/chl/v2/captcha/gate-init HTTP/1.1\r\nHost: candystress.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://candystress.st/.well-known/diamwall/load/html/5s.html\r\nContent-Type: application/json\r\nContent-Length: 266\r\nOrigin: https://candystress.st\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __diamwall=0x873822896; dwid=5d55694fd6090d16b3e036214d3eb62a; _dwa=0; _dwbi=1.1786612589508.5d5a42102d9bb86f8e4bbdf7108dcd73.231c204e1bcfba2f1a5d90a0fd49efdce0cfca35e99adbbf7c381fcdc7545950; _dwcg=2.1786612589511.4e317edc6aa9f672645fc0af0f9b8804.3474781bcc6d628baa046afa348dac8aef6b99f903e303071275bf4421122ab6\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":266,"data":"{\"k\":\"BHUnzi8NXpf5ssGgP0zAU/aTi/PYGirUILQ6xIvMg/cKSYXCl3Zr0a5KiuZuXG9/BBX2SK0BoTh8SFy6w/tESfM=\",\"cg\":\"2.1786612589511.4e317edc6aa9f672645fc0af0f9b8804.3474781bcc6d628baa046afa348dac8aef6b99f903e303071275bf4421122ab6\",\"cgv\":2,\"rid\":\"01443b455aead788e037026ff5392c8a\"}"}},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Thu, 13 Aug 2026 09:16:30 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\nset-cookie: dwek_fc61cb04d21a5f6b344503f15c24c731=4c90f0f770f5b95249cf2f1583591ca1; Max-Age=300; Domain=candystress.st; Path=/; Expires=Thu, 13 Aug 2026 09:21:30 GMT; HttpOnly; Secure; SameSite=None\ndwjid_fc61cb04d21a5f6b344503f15c24c731=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0aWQiOiI4OGNhYTRmMzk5YWQ4ZDBkZTgxMmFjN2UwZDE2NDQ2ZiIsImZpZCI6IjRlMzE3ZWRjNmFhOWY2NzI2NDVmYzBhZjBmOWI4ODA0IiwiaXAiOiIxOTUuNjQuMTE4LjE1MiIsInVhIjoiTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NDsgcnY6MTM0LjApIEdlY2tvLzIwMTAwMTAxIEZpcmVmb3gvMTM0LjAiLCJqYTQiOiJ0MTNkMTcxMmgyXzViNTc2MTRjMjJiMF84ODhiZjdkNDQ3OWIiLCJkb21haW4iOiJjYW5keXN0cmVzcy5zdCIsIm5vbmNlIjoiOWU1MzdhOTU2ZGJkOTUzNSIsInRzIjoxNzg2NjEyNTkwMDQyLCJleHAiOjE3ODY2MTI4OTAwNDJ9.lFK3UitvRZoZYognHymEtK-zOREsWwu0YpC_Qsqe4w8; Max-Age=300; Domain=candystress.st; Path=/; Expires=Thu, 13 Aug 2026 09:21:30 GMT; HttpOnly; Secure; SameSite=None\ndwek=4c90f0f770f5b95249cf2f1583591ca1; Max-Age=300; Domain=candystress.st; Path=/; Expires=Thu, 13 Aug 2026 09:21:30 GMT; HttpOnly; Secure; SameSite=None\ndwjid=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0aWQiOiI4OGNhYTRmMzk5YWQ4ZDBkZTgxMmFjN2UwZDE2NDQ2ZiIsImZpZCI6IjRlMzE3ZWRjNmFhOWY2NzI2NDVmYzBhZjBmOWI4ODA0IiwiaXAiOiIxOTUuNjQuMTE4LjE1MiIsInVhIjoiTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NDsgcnY6MTM0LjApIEdlY2tvLzIwMTAwMTAxIEZpcmVmb3gvMTM0LjAiLCJqYTQiOiJ0MTNkMTcxMmgyXzViNTc2MTRjMjJiMF84ODhiZjdkNDQ3OWIiLCJkb21haW4iOiJjYW5keXN0cmVzcy5zdCIsIm5vbmNlIjoiOWU1MzdhOTU2ZGJkOTUzNSIsInRzIjoxNzg2NjEyNTkwMDQyLCJleHAiOjE3ODY2MTI4OTAwNDJ9.lFK3UitvRZoZYognHymEtK-zOREsWwu0YpC_Qsqe4w8; Max-Age=300; Domain=candystress.st; Path=/; Expires=Thu, 13 Aug 2026 09:21:30 GMT; HttpOnly; Secure; SameSite=None\r\netag: W/\"dd-x6xXYHzEjRdFjJsSKcp5+fWuXJs\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: sameorigin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":221,"size_decoded":2272,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"81e6318b74ede2d5239762f766d2d30b","sha1":"c7ac57607cc48d17458c9b1229ca79f9f5ae5c9b","sha256":"44691a79a54ea1ddb853c12c80a77d690d939cdc5f3dc1529333f2e3aa0a2354","sha512":"385d35a7a24991076020d510bcfda72030848f5a9943c1a40f5c99b00a95122ffe6456569c29c4e1ecd030b8659dd2ac7e64b6338f21a82b6401a35f84857bf0","ssdeep":"","tlshash":"ccd0a768c1a4a492ac6f2a09458728551455725de448825d4d449f8239c54305685cab","first_seen":"2026-08-13T09:16:58.001103Z","last_seen":"2026-08-13T09:16:58.001103Z","times_seen":1,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"candystress.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/cdn-cgi/mitigation/v2/chl/lib/f3fb868d248a","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://candystress.st/","date":"2026-08-13T09:16:24.760Z","timestamp":1786612584760,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candystress.st","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 10:42:46 GMT","end":"Tue, 29 Sep 2026 10:42:45 GMT"},"fingerprint":{"sha1":"0E:CB:49:5A:42:9F:9A:10:58:6F:B3:46:92:19:8F:D0:E9:6E:C9:96","sha256":"BC:1F:1D:2F:8B:32:DC:27:B8:29:28:14:3F:FF:3F:A8:96:62:78:27:78:BC:52:DB:06:4C:E5:BC:30:F3:3B:CF"}}},"request":{"raw":"GET /cdn-cgi/mitigation/v2/chl/lib/f3fb868d248a HTTP/1.1\r\nHost: candystress.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://candystress.st/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __diamwall=0x873822896; dwid=5d55694fd6090d16b3e036214d3eb62a; _dwa=0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Thu, 13 Aug 2026 09:16:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: no-store, no-cache, must-revalidate\r\nx-dw-variant-spec-id: 65ffe92e4c26\r\nx-dw-core-hash: 84b568fb14efa985d49edbcc584c4b0472c75ddd5426c5df08a1224f4376d5fc\r\netag: W/\"8e9ea-cQUKgQKdTg58NMlRYqpmnk1nKpI\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: sameorigin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":584170,"size_decoded":308618,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"6ffec311f00632a6c71d21a1c8a1177b","sha1":"71050a81029d4e0e7c34c95162aa669e4d672a92","sha256":"84b568fb14efa985d49edbcc584c4b0472c75ddd5426c5df08a1224f4376d5fc","sha512":"91628c5b132e71c65c1586b8b824ad501a31337b61f9c37cbfd94432164848f3c57f19ccb2ba0a3f76845db39d92ce4bd72501c27df2c82216e5a0753e9054bc","ssdeep":"12288:w4hYTEsDHPuF+7mgrrRdw59dKWRzg5bat:sTXHPuA7/dg9hREbat","tlshash":"33c409e4de4e055fe64c20fe068fc4c20cb78a3b1d96cdc6b7617a056bd08b98587d6a","first_seen":"2026-08-13T09:16:58.002137Z","last_seen":"2026-08-13T09:16:58.002137Z","times_seen":1,"resource_available":true,"data":null}},"time_used":229,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"candystress.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/.well-known/diamwall/load/html/5s.html","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://candystress.st/","date":"2026-08-13T09:16:23.192Z","timestamp":1786612583192,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candystress.st","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 10:42:46 GMT","end":"Tue, 29 Sep 2026 10:42:45 GMT"},"fingerprint":{"sha1":"0E:CB:49:5A:42:9F:9A:10:58:6F:B3:46:92:19:8F:D0:E9:6E:C9:96","sha256":"BC:1F:1D:2F:8B:32:DC:27:B8:29:28:14:3F:FF:3F:A8:96:62:78:27:78:BC:52:DB:06:4C:E5:BC:30:F3:3B:CF"}}},"request":{"raw":"GET /.well-known/diamwall/load/html/5s.html HTTP/1.1\r\nHost: candystress.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://candystress.st/\r\nCookie: __diamwall=0x873822896; dwid=5d55694fd6090d16b3e036214d3eb62a; _dwa=0\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Thu, 13 Aug 2026 09:16:23 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 02 Aug 2026 18:48:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6f9115-43bc\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: sameorigin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17340,"size_decoded":9079,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (17340), with no line terminators","md5":"7f21fc605a1d55df8558305cc5b72d08","sha1":"a183e481181bf90520692972448578d6bf03e775","sha256":"2f2471f9076c3cb8e32c4b389be2efdb2177fe6c15a79bd713bd0b98f8683660","sha512":"e30af18ad517f1b7d82b8803ddcacc640d1ab52d2c3c1e2bf910458926345ea00e6405160a18499408efe9767ac2f90065a3d8144ce1d70ef05734d990d2abce","ssdeep":"384:r1FyNlKF4RAf/Rpf7qS7Qa6YiujVHoxLJHD876b7KRUx:r1FybKFDf/buWQ+iCohZqRUx","tlshash":"00726cf5bd74a03cc6cb87a631eef66d7539b103b81356b7a4ae01840ad47675133e44","first_seen":"2026-08-03T21:52:27.830452Z","last_seen":"2026-08-13T09:17:47.729714Z","times_seen":13,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"candystress.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/cdn-cgi/mitigation/v2/chl/chlb.lib?bdt=0\u0026b12=0\u0026brc=0","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://candystress.st/","date":"2026-08-13T09:16:23.194Z","timestamp":1786612583194,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candystress.st","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 10:42:46 GMT","end":"Tue, 29 Sep 2026 10:42:45 GMT"},"fingerprint":{"sha1":"0E:CB:49:5A:42:9F:9A:10:58:6F:B3:46:92:19:8F:D0:E9:6E:C9:96","sha256":"BC:1F:1D:2F:8B:32:DC:27:B8:29:28:14:3F:FF:3F:A8:96:62:78:27:78:BC:52:DB:06:4C:E5:BC:30:F3:3B:CF"}}},"request":{"raw":"GET /cdn-cgi/mitigation/v2/chl/chlb.lib?bdt=0\u0026b12=0\u0026brc=0 HTTP/1.1\r\nHost: candystress.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://candystress.st/\r\nCookie: __diamwall=0x873822896; dwid=5d55694fd6090d16b3e036214d3eb62a; _dwa=0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Thu, 13 Aug 2026 09:16:23 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: private, no-store\r\netag: W/\"69e76-5dGAl8LBw/CHrLGheBuj197om1Q\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: sameorigin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":433782,"size_decoded":95991,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2b44afcbf2f9143f33e17013415a9381","sha1":"e5d18097c2c1c3f087acb1a1781ba3d7dee89b54","sha256":"6ae6f319efca257abee84f0f6f47d62dd08d9c9cb6bb0f7d86caf7b9657acccf","sha512":"332344ed92a0711cd3d835db1680c439cc4c0391cc36100a256386e30bd759fbb2140877323eee84a38313e95444a1f9efc6dea1773060bff60fc81953646353","ssdeep":"3072:/aoWfO/je1lxf4cd2kQejYJSM52pXHHNeJ0sNL7:/1+Oje1lxp7Qey52FHteJ027","tlshash":"af94558de1ab319b85070699efdd7c6a8e826bda9f850118e772b0c1317f4f68d0c9c5","first_seen":"2026-08-13T09:16:58.003486Z","last_seen":"2026-08-13T09:16:58.003486Z","times_seen":1,"resource_available":true,"data":null}},"time_used":523,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":523,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"candystress.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/cdn-cgi/mitigation/v2/chl/chlb.lib?bdt=0\u0026b12=0\u0026brc=0","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://candystress.st/","date":"2026-08-13T09:16:24.073Z","timestamp":1786612584073,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candystress.st","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 10:42:46 GMT","end":"Tue, 29 Sep 2026 10:42:45 GMT"},"fingerprint":{"sha1":"0E:CB:49:5A:42:9F:9A:10:58:6F:B3:46:92:19:8F:D0:E9:6E:C9:96","sha256":"BC:1F:1D:2F:8B:32:DC:27:B8:29:28:14:3F:FF:3F:A8:96:62:78:27:78:BC:52:DB:06:4C:E5:BC:30:F3:3B:CF"}}},"request":{"raw":"GET /cdn-cgi/mitigation/v2/chl/chlb.lib?bdt=0\u0026b12=0\u0026brc=0 HTTP/1.1\r\nHost: candystress.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://candystress.st/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __diamwall=0x873822896; dwid=5d55694fd6090d16b3e036214d3eb62a; _dwa=0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Thu, 13 Aug 2026 09:16:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: private, no-store\r\netag: W/\"698cd-bksZ3nsU1FM1PViP/J5VtboI2JI\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: sameorigin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":432333,"size_decoded":96835,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9fc7ec5d7b11f3478408e31c28e2d7cd","sha1":"6e4b19de7b14d453353d588ffc9e55b5ba08d892","sha256":"32b281d51ae5ec9e481b573b2a508ec4049ad97b42bbabda697dce4da57f3b8e","sha512":"c7d047be83372e4bb2d15a1e25bdcc24625d8cc7a611ef4dd9c8dd318622d0612e2cdb1ceb281cc04e5d401952ce44a5be5ebd2271dd1ee0f484992a71570fe3","ssdeep":"1536:W5BbpAKLG3jhHoVt3qLXUT05DK2FKNHLjolxclv/501QvDweYHtRwwlFBsUJ74wK:yF0jaOAqclsQaiH9qbcDsuGhVizzMe","tlshash":"2094157fd1565e54afcaa2ac4cc5f231bdc095d6b90e1eec51b1c83d22b931c4caa1e2","first_seen":"2026-08-13T09:16:58.004656Z","last_seen":"2026-08-13T09:16:58.004656Z","times_seen":1,"resource_available":false,"data":null}},"time_used":460,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":460,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"candystress.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/cdn-cgi/chl/v2/captcha/assets/cpt.css","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://candystress.st/.well-known/diamwall/load/html/5s.html","date":"2026-08-13T09:16:25.220Z","timestamp":1786612585220,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candystress.st","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 10:42:46 GMT","end":"Tue, 29 Sep 2026 10:42:45 GMT"},"fingerprint":{"sha1":"0E:CB:49:5A:42:9F:9A:10:58:6F:B3:46:92:19:8F:D0:E9:6E:C9:96","sha256":"BC:1F:1D:2F:8B:32:DC:27:B8:29:28:14:3F:FF:3F:A8:96:62:78:27:78:BC:52:DB:06:4C:E5:BC:30:F3:3B:CF"}}},"request":{"raw":"GET /cdn-cgi/chl/v2/captcha/assets/cpt.css HTTP/1.1\r\nHost: candystress.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://candystress.st/.well-known/diamwall/load/html/5s.html\r\nCookie: __diamwall=0x873822896; dwid=5d55694fd6090d16b3e036214d3eb62a; _dwa=0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Thu, 13 Aug 2026 09:16:25 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: private, no-store, no-cache, must-revalidate\r\nlast-modified: Tue, 04 Aug 2026 13:49:43 GMT\r\netag: W/\"5e81-19fcd098cd8\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: sameorigin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":24193,"size_decoded":5549,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"11fa9ba2e8f7d0dc3a0282957bb8d18e","sha1":"fe416b7047693cc7c8709b3ae96b0e0ab0df7b75","sha256":"c59d2074f457e25fb43b5350bfe5ac08885789f9ba0504d9d90b694ff15cc2ea","sha512":"355d90df3b9f968d4c15ac87c3ebce2190c28715f6b128e868a4d9ab0668d3ba5ff1932c9c72397a621d4509236cb86a1753678a984927c349a213931c571e99","ssdeep":"384:gSNPiXOrrcLKTVuPKcFWNiTQIeBqbbKhOPJQX1pA5kan+YoSwB:gSJiXO0LKTVuPKcFWNiTQIegbbKhOPJC","tlshash":"ddb2227877fbc5287c2b85db25e35758633c6042b906fbac66a3a0696f593fc0172e40","first_seen":"2026-08-10T14:24:55.933621Z","last_seen":"2026-08-13T09:17:47.73786Z","times_seen":14,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"candystress.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-13T09:16:22.518Z","timestamp":1786612582518,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candystress.st","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 10:42:46 GMT","end":"Tue, 29 Sep 2026 10:42:45 GMT"},"fingerprint":{"sha1":"0E:CB:49:5A:42:9F:9A:10:58:6F:B3:46:92:19:8F:D0:E9:6E:C9:96","sha256":"BC:1F:1D:2F:8B:32:DC:27:B8:29:28:14:3F:FF:3F:A8:96:62:78:27:78:BC:52:DB:06:4C:E5:BC:30:F3:3B:CF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: candystress.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: openresty\r\ndate: Thu, 13 Aug 2026 09:16:22 GMT\r\ncontent-type: text/html\r\ncontent-length: 167\r\nlocation: https://candystress.st/\r\nset-cookie: __diamwall=0x873822896; Path=/; Expires=Thu, 13 Aug 2026 09:21:22 GMT; Domain=.candystress.st; Secure; SameSite=None\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nx-accel-expires: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T12:51:48.895884Z","times_seen":17871536,"resource_available":true,"data":null}},"time_used":690,"timings":{"blocked":-1,"dns":387,"connect":275,"send":0,"wait":8,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"candystress.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/cdn-cgi/challenge/translations","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://candystress.st/.well-known/diamwall/load/html/5s.html","date":"2026-08-13T09:16:23.232Z","timestamp":1786612583232,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candystress.st","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 10:42:46 GMT","end":"Tue, 29 Sep 2026 10:42:45 GMT"},"fingerprint":{"sha1":"0E:CB:49:5A:42:9F:9A:10:58:6F:B3:46:92:19:8F:D0:E9:6E:C9:96","sha256":"BC:1F:1D:2F:8B:32:DC:27:B8:29:28:14:3F:FF:3F:A8:96:62:78:27:78:BC:52:DB:06:4C:E5:BC:30:F3:3B:CF"}}},"request":{"raw":"GET /cdn-cgi/challenge/translations HTTP/1.1\r\nHost: candystress.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://candystress.st/.well-known/diamwall/load/html/5s.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __diamwall=0x873822896; dwid=5d55694fd6090d16b3e036214d3eb62a; _dwa=0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Thu, 13 Aug 2026 09:16:23 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\netag: W/\"1e8-e43RvgaRlVMMe6jHL/aCR9wZ/QQ\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: sameorigin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":488,"size_decoded":720,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bd55a012febf2d42b5b2f0a980110844","sha1":"7b8dd1be069195530c7ba8c72ff68247dc19fd04","sha256":"acbaca1a82463eb6a9f0e113b1d7a8a4adb18fff6788f4fbe2ef62dc111ff5dd","sha512":"e2ce078e291d84f80fcead069c4a1625823026839d1beba8cd3b12ec9736e8a6400bb7af5445fcec87d79cfca8751ec9687f3b25e69b19f1d18bf9d6ae69184c","ssdeep":"","tlshash":"a3f00e57c08c91740ba28442788b2791d740906833e4657758ab11ec0262390e2b3bc7","first_seen":"2026-07-05T06:42:05.123609Z","last_seen":"2026-08-13T09:17:47.742744Z","times_seen":17,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"candystress.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.diamwall.com/cdn-cgi/static/img/logo_no_shadow.png","fqdn":"cdn.diamwall.com","domain":"diamwall.com","tld":"com"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candystress.st/.well-known/diamwall/load/html/5s.html","date":"2026-08-13T09:16:25.613Z","timestamp":1786612585613,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"diamwall.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Jun 2026 21:31:47 GMT","end":"Tue, 08 Sep 2026 21:31:46 GMT"},"fingerprint":{"sha1":"8C:CE:56:A6:E5:6A:1C:36:24:87:DE:1E:74:C8:F1:E2:4D:8B:EB:F9","sha256":"93:78:57:6C:F1:81:2A:18:63:0B:12:0A:AF:E6:75:3E:DC:3D:DB:86:82:EB:B7:94:E8:1C:59:68:73:21:EB:A6"}}},"request":{"raw":"GET /cdn-cgi/static/img/logo_no_shadow.png HTTP/1.1\r\nHost: cdn.diamwall.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://candystress.st/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: DiamWall\r\nDate: Thu, 13 Aug 2026 09:16:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 9934\r\nLast-Modified: Mon, 27 Apr 2026 13:23:54 GMT\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: \"69ef636a-26ce\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9934,"size_decoded":10225,"mime_type":"image/png","magic":"PNG image data, 276 x 180, 8-bit/color RGBA, non-interlaced","md5":"59b5aa200dcd1b8cd8232c0e9a75df7c","sha1":"0ba8c38cad98d42ae2169e7d3dff5020f3b67016","sha256":"d3d3f1cb8343debac5df6aefbab6481c6d70d3e203a706e74fd1ae87e8418b07","sha512":"25d8088a6074081848c2f99bf5683ace59294a64c6616f091ac7004cf8b2ec672b0b2e065636431916b080d99854d84ff305f9a65ef8542d02346e14d88470dd","ssdeep":"192:2SsknWWbq7GzhnS2P/nC2TExMfB4mJl4CZuxQX9:Z/nW4qqhnS2nbTExXmz4AO49","tlshash":"53229e08fc02bd80688da1056aead09155bb4fd05ea4e001bedd8d6ebae443cdc5e3d6","first_seen":"2024-08-20T10:09:24.763142Z","last_seen":"2026-08-13T09:17:47.739414Z","times_seen":16,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/cdn-cgi/mitigation/v2/chl/stage/2.65ffe92e4c26.1786612675723.ed8afe90c9e594a23d257257.df219ab39669c4fcccbcc47ed04852c1cb2c81e2333158c401427afd1ec6e654","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://candystress.st/","date":"2026-08-13T09:16:25.784Z","timestamp":1786612585784,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candystress.st","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 10:42:46 GMT","end":"Tue, 29 Sep 2026 10:42:45 GMT"},"fingerprint":{"sha1":"0E:CB:49:5A:42:9F:9A:10:58:6F:B3:46:92:19:8F:D0:E9:6E:C9:96","sha256":"BC:1F:1D:2F:8B:32:DC:27:B8:29:28:14:3F:FF:3F:A8:96:62:78:27:78:BC:52:DB:06:4C:E5:BC:30:F3:3B:CF"}}},"request":{"raw":"GET /cdn-cgi/mitigation/v2/chl/stage/2.65ffe92e4c26.1786612675723.ed8afe90c9e594a23d257257.df219ab39669c4fcccbcc47ed04852c1cb2c81e2333158c401427afd1ec6e654 HTTP/1.1\r\nHost: candystress.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://candystress.st/\r\nX-DW-Stage-Key: ALvUmmkZXHDjlvdadn3KGmZRUvmevmfanOkZUq4iRk8\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dwsk_ed8afe90c9e594a23d257257=ALvUmmkZXHDjlvdadn3KGmZRUvmevmfanOkZUq4iRk8; __diamwall=0x873822896; dwid=5d55694fd6090d16b3e036214d3eb62a; _dwa=0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Thu, 13 Aug 2026 09:16:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: private, no-store, no-cache, must-revalidate\r\netag: W/\"34030-j1t4RNh2LGdvH4uG5iYXu1zqcrM\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: sameorigin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":213040,"size_decoded":93911,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"5c8747447e8ae1ace808d19f7fc4b8f5","sha1":"8f5b7844d8762c676f1f8b86e62617bb5cea72b3","sha256":"a7347515751e4428782a28a549bf6508b57f012d09564bfe0c20336e9da57f85","sha512":"ee9a600b8e87df23e7342caa538ef6a877fefe452303d59b03d52e1a93af2a06cd7e9967f63e8f69a9096951b8306c94efd827333665577ff2775a398bc09bbb","ssdeep":"3072:jfx2RsHxKShqSJAGqRVSwX4BY59EMRZlaEP5Vvnile1+L1pG0t:jfx2qHcdSJdqRwwoBu/ZPv3MG0t","tlshash":"4d24faabf6c0f3d74786ea436249b51933eb7ea7c48515244b22d7030dbba8753392d2","first_seen":"2026-08-13T09:16:58.008257Z","last_seen":"2026-08-13T09:16:58.008257Z","times_seen":1,"resource_available":true,"data":null}},"time_used":462,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":462,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"candystress.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candystress.st/cdn-cgi/challenge/v2/api/error","fqdn":"candystress.st","domain":"candystress.st","tld":"st"},"ip":{"addr":"216.146.31.1","port":443,"asn":207731,"as":"Nxsr, Unipessoal Lda","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://candystress.st/","date":"2026-08-13T09:16:29.915Z","timestamp":1786612589915,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candystress.st","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 10:42:46 GMT","end":"Tue, 29 Sep 2026 10:42:45 GMT"},"fingerprint":{"sha1":"0E:CB:49:5A:42:9F:9A:10:58:6F:B3:46:92:19:8F:D0:E9:6E:C9:96","sha256":"BC:1F:1D:2F:8B:32:DC:27:B8:29:28:14:3F:FF:3F:A8:96:62:78:27:78:BC:52:DB:06:4C:E5:BC:30:F3:3B:CF"}}},"request":{"raw":"POST /cdn-cgi/challenge/v2/api/error HTTP/1.1\r\nHost: candystress.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 526\r\nOrigin: https://candystress.st\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://candystress.st/\r\nCookie: __diamwall=0x873822896; dwid=5d55694fd6090d16b3e036214d3eb62a; _dwa=0; _dwbi=1.1786612589508.5d5a42102d9bb86f8e4bbdf7108dcd73.231c204e1bcfba2f1a5d90a0fd49efdce0cfca35e99adbbf7c381fcdc7545950; _dwcg=2.1786612589511.4e317edc6aa9f672645fc0af0f9b8804.3474781bcc6d628baa046afa348dac8aef6b99f903e303071275bf4421122ab6\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":526,"data":"{\"rl\":0,\"a\":0,\"s\":\"bindAudit@https://candystress.st/cdn-cgi/mitigation/v2/chl/chlb.lib?bdt=0\u0026b12=0\u0026brc=0 line 1 \u003e eval:1:472985|_dwVmacfdfacdc0d07ee7c21adf862dec0c4df@https://candystress.st/cdn-cgi/mitigation/v2/chl/chlb.lib?bdt=0\u0026b12=0\u0026brc=0 line 1 \u003e eval:1:510231|async*heapProxy@https://candystress.st/cdn-cgi/mitigation/v2/chl/chlb.lib?bdt=0\u0026b12=0\u0026brc=0 line 1 \u003e eval:1:525668\",\"ch\":\"84b568fb14efa985d49edbcc584c4b0472c75ddd5426c5df08a1224f4376d5fc\",\"sp\":\"65ffe92e4c26\",\"ph\":\"core_run\",\"ec\":\"x0j\",\"err\":\"x0j\",\"src\":\"chlb\"}"}},"response":{"raw":"HTTP/2 204 \r\nserver: openresty\r\ndate: Thu, 13 Aug 2026 09:16:30 GMT\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: sameorigin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":1626,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T12:51:48.895884Z","times_seen":17871536,"resource_available":true,"data":null}},"time_used":783,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":783,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"candystress.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}