{"report_id":"60805cc2-8848-4740-828c-8206e3a1887a","version":0,"status":"done","tags":[],"date":"2026-08-22T03:18:57Z","url":{"schema":"http","addr":"dpd.vqmxa.ink/com","fqdn":"dpd.vqmxa.ink","domain":"vqmxa.ink","tld":"ink"},"ip":{"addr":"104.21.56.140","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"dpd.vqmxa.ink/com/#/index","fqdn":"dpd.vqmxa.ink","domain":"vqmxa.ink","tld":"ink"},"title":"DPD Local","dom":{"size":34644,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (32188)","md5":"b40032adf3e70a63bf6a5dc239334183","sha1":"7865e2671f7dded1822d29bf6270dcd53346fed6","sha256":"d3ed983d7216febaaccc2584fde4a4ebca33da2929447af5752b8c0878308caf","sha512":"dbeb4d1bf71ab4ce8299dff704ea383d5cec32856ed2dbd02a4686d096b975418c5b002a325ee0295106d2e52145459f2f8f6401da46893eea53265d0934b7ed","ssdeep":"768:yTjJPRbBocR/O9LRj/AHDksOreeJTas/9B5lepJ/WbTrANjbJjT8XYMGeCre5oBd:g2PcjseeJvHle7OTrA9bJjT8X1Ge8e5M","tlshash":"87f26322a5040266617b81c4fb767be571a7e31bc90800247aad0e50effff69bf32565","dom_hash":"domhash153075fded26a4461551cb531d77e997","first_seen":"2026-08-22T03:19:02.680722Z","last_seen":"2026-08-22T03:19:02.680722Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"dpd.vqmxa.ink/com","fqdn":"dpd.vqmxa.ink","domain":"vqmxa.ink","tld":"ink"},"ip":{"addr":"104.21.56.140","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-26T03:18:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dpd.vqmxa.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"dpd.vqmxa.ink","ip":{"addr":"104.21.56.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-14","domain_rank":0,"first_seen":"2026-08-22T02:50:07.860367Z","last_seen":"2026-08-22T02:50:07.860368Z","alert_count":12,"request_count":13,"received_data":1263762,"sent_data":6974,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dpd.vqmxa.ink/com/assets/W_2v5uRy.js","fqdn":"dpd.vqmxa.ink","domain":"vqmxa.ink","tld":"ink"},"ip":{"addr":"104.21.56.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"420a2d8fe6d129db7347f1971b0b0612","sha1":"61d5a1c2c48544266f6cf843cda7a9f5a0d12540","sha256":"ba7fa58ca61eb4805a5bbe4246b01302a84d952976534c17b071b750b9f9e170","sha512":"66529737f3d7c235a34fe402e8a5ce85c0336eb17741abf88fc7b64b760044080af5bb374f78b5e444e82d9920e10e78b8d8eb1652f2b8e2ff74f9c17b0ad581","ssdeep":"1536:k9Z0bh8UBrz3EVw/uPPPKWLESmdR7ChR6K633u3B3D3NC3CfIG+ZyyQVY33Na9Kw:k9Z0bh86nD/uPPyWLEN7Chd633u3B3Dp","tlshash":"ac83d5090d10bd7d304b386e747510932c296ee6f0fbabe05ae6dd01ab45fad211eb4a","size":84941,"data":"","first_seen":"2026-08-22T02:48:44.575208Z","last_seen":"2026-08-22T03:22:39.308245Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dpd.vqmxa.ink/com/assets/DhqmAzot.js","fqdn":"dpd.vqmxa.ink","domain":"vqmxa.ink","tld":"ink"},"ip":{"addr":"104.21.56.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a1b4c52e6b45ca5bdba668c5b4cf187","sha1":"98950ae12d79ca781a696b3c67e39a11c7e7faa9","sha256":"65273d6f816e11b8e846c3dbeae4fdbeb9c48523951665e9835b33f0087c9915","sha512":"8b206123c7c0a63d9ccd17d44e5b6bcf3845d4306e540b7f7faa6d61c6a221cb33d062e490d4641e722c40afc2ef68c7f16ef79368764dc66a24279c56f25f8f","ssdeep":"3072:PLpSe/aSjhXSSS+SQ2UDPMaWTTLy5x294dRy:1//7j0SdxjMVTHy5xa4a","tlshash":"3b043bc53251b0a253fa15e3407b1007f3396925380d899cb25cfdef6c6a98a61b7f7a","size":183340,"data":"","first_seen":"2026-08-05T07:13:51.96529Z","last_seen":"2026-08-22T03:22:39.310032Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dpd.vqmxa.ink/com/assets/pCcDUJId.js","fqdn":"dpd.vqmxa.ink","domain":"vqmxa.ink","tld":"ink"},"ip":{"addr":"104.21.56.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a664e2ea38768d3c63a2224be5a18429","sha1":"1597afb0bce6f92fa399ca92a216efeb09239a24","sha256":"50212b07ed5632b6f118288edb4922fc011134035e0007c4a40619aafe3d7bf7","sha512":"c86f8ce51040fb31ae676d14f2eba65bc58056bf1da71b642b73d954c54d0a9595225239f7e13f09f5be2ef7592f0a825425f4d34bd6b038fc8ae2deb068e2b9","ssdeep":"6144:opG8G9FXkYxS8NM0r0O0Nrkb/Ew1a+XA9DPnYjHwLd+A7cAdSErehBWODhg7J493:op8kYx3B3Y3UAUFoQTYU+9u","tlshash":"a7c417d22b4ff2da016208a7439b30c6b10e7bab380ce5057ff4f5941ea5769796e934","size":554094,"data":"","first_seen":"2026-08-22T02:48:44.581627Z","last_seen":"2026-08-22T03:22:39.310715Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"dpd.vqmxa.ink/com/assets/W_2v5uRy.js","fqdn":"dpd.vqmxa.ink","domain":"vqmxa.ink","tld":"ink"},"ip":{"addr":"104.21.56.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dpd.vqmxa.ink/com/","date":"2026-08-22T03:18:29.623Z","timestamp":1787368709623,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vqmxa.ink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 06:55:56 GMT","end":"Tue, 17 Nov 2026 07:53:36 GMT"},"fingerprint":{"sha1":"F9:07:AC:5F:C8:75:8E:AD:3B:17:DE:E5:5F:3E:43:14:3E:39:30:98","sha256":"6E:36:CB:95:E7:54:F7:8D:69:86:A6:42:7F:EE:5E:0A:38:28:2E:C9:65:91:30:A9:27:48:61:DE:EB:11:76:42"}}},"request":{"raw":"GET /com/assets/W_2v5uRy.js HTTP/1.1\r\nHost: dpd.vqmxa.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.vqmxa.ink/com/\r\nCookie: _vt=2de2df0b-7ae1-4a80-be57-903c02525cbd\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 22 Aug 2026 03:18:29 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\ncontent-encoding: gzip\r\nage: 1732\r\naccept-ranges: bytes\r\nlast-modified: Sat, 22 Aug 2026 02:49:37 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ijt9YvjMwI%2FuPPunwH7YqOB4JDCHnODyV1iW5BjLdETEMF7Mt4wtfdUVJAyx2thYyyMx07BjTa9SSP1qOrOi2WMZZJLEm67YAvuuu5uQxr7WzVURNfmvtQrsKAqlJ1VH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a2eebb0329487130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 29613\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84941,"size_decoded":30349,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"420a2d8fe6d129db7347f1971b0b0612","sha1":"61d5a1c2c48544266f6cf843cda7a9f5a0d12540","sha256":"ba7fa58ca61eb4805a5bbe4246b01302a84d952976534c17b071b750b9f9e170","sha512":"66529737f3d7c235a34fe402e8a5ce85c0336eb17741abf88fc7b64b760044080af5bb374f78b5e444e82d9920e10e78b8d8eb1652f2b8e2ff74f9c17b0ad581","ssdeep":"1536:k9Z0bh8UBrz3EVw/uPPPKWLESmdR7ChR6K633u3B3D3NC3CfIG+ZyyQVY33Na9Kw:k9Z0bh86nD/uPPyWLEN7Chd633u3B3Dp","tlshash":"ac83d5090d10bd7d304b386e747510932c296ee6f0fbabe05ae6dd01ab45fad211eb4a","first_seen":"2026-08-22T02:48:44.575208Z","last_seen":"2026-08-22T03:22:39.308245Z","times_seen":8,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dpd.vqmxa.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.vqmxa.ink/com/assets/Dw2Q-3X1.css","fqdn":"dpd.vqmxa.ink","domain":"vqmxa.ink","tld":"ink"},"ip":{"addr":"104.21.56.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dpd.vqmxa.ink/com/","date":"2026-08-22T03:18:29.628Z","timestamp":1787368709628,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vqmxa.ink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 06:55:56 GMT","end":"Tue, 17 Nov 2026 07:53:36 GMT"},"fingerprint":{"sha1":"F9:07:AC:5F:C8:75:8E:AD:3B:17:DE:E5:5F:3E:43:14:3E:39:30:98","sha256":"6E:36:CB:95:E7:54:F7:8D:69:86:A6:42:7F:EE:5E:0A:38:28:2E:C9:65:91:30:A9:27:48:61:DE:EB:11:76:42"}}},"request":{"raw":"GET /com/assets/Dw2Q-3X1.css HTTP/1.1\r\nHost: dpd.vqmxa.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.vqmxa.ink/com/\r\nCookie: _vt=2de2df0b-7ae1-4a80-be57-903c02525cbd\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 22 Aug 2026 03:18:29 GMT\r\ncontent-type: text/css;charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\ncontent-encoding: gzip\r\nage: 1732\r\naccept-ranges: bytes\r\nlast-modified: Sat, 22 Aug 2026 02:49:37 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QVqORiXFPccuwwRhCHdteOliNpEzmOvBKYXcxTtSDyfHkmd8nCMfxab82t%2BXy8YTI3QR7uUbvcOAyfKDvqfwOn9Q0cpn6Om7Uqg7SkX90%2Fg8ZAOVvflmRoCZMAAc%2Bzum\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a2eebb03294b7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8208\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60381,"size_decoded":8940,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (60380)","md5":"b68d450f564fa4095b39a4b7c57a0978","sha1":"58a3ea9eb890327d9c3a2e567eb0795ec5fbd376","sha256":"6a9cf39ffa1d41a393da1e5030b9b46c98bd11c4fe778081710dc6fbbbd0ed10","sha512":"0589959a1c2d7ef261fbc90d12ba4daa951e6bc1a786d0b33170561e739dd855252f9861f8cf1ff66e19ad2d8a7eeeb9125a7b471c5bf6f6cb87c3a68e2cac15","ssdeep":"768:1/fGmmVAL0uVYXEAFAtCbRgVaXp9jC8FpKdDm0pC59PwL3yVe0FpJvY:QOAuVYXt/tggP7a","tlshash":"de439561362c2038f97bd955b8d09bae3109f313d5235aeeee65a535cc870933b3269c","first_seen":"2026-08-22T02:48:44.572728Z","last_seen":"2026-08-22T03:22:39.308843Z","times_seen":8,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dpd.vqmxa.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.vqmxa.ink/com/assets/OwDWr5DG.woff","fqdn":"dpd.vqmxa.ink","domain":"vqmxa.ink","tld":"ink"},"ip":{"addr":"104.21.56.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dpd.vqmxa.ink/com/","date":"2026-08-22T03:18:30.677Z","timestamp":1787368710677,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vqmxa.ink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 06:55:56 GMT","end":"Tue, 17 Nov 2026 07:53:36 GMT"},"fingerprint":{"sha1":"F9:07:AC:5F:C8:75:8E:AD:3B:17:DE:E5:5F:3E:43:14:3E:39:30:98","sha256":"6E:36:CB:95:E7:54:F7:8D:69:86:A6:42:7F:EE:5E:0A:38:28:2E:C9:65:91:30:A9:27:48:61:DE:EB:11:76:42"}}},"request":{"raw":"GET /com/assets/OwDWr5DG.woff HTTP/1.1\r\nHost: dpd.vqmxa.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.vqmxa.ink/com/assets/BEr9LRr8.css\r\nCookie: _vt=2de2df0b-7ae1-4a80-be57-903c02525cbd\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 22 Aug 2026 03:18:30 GMT\r\ncontent-type: application/octet-stream;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w4LA0tqLvA%2BhT4c7rkOJpPaxZVO6hiR5VE77OKMVaPD8hb0OOypDmmCEP8fZRVcGftmx961iYgey4eAF6fQSk%2FOrkRvF2l2zkqOqJ9SL9duccxHy0ceEWs%2BZnsnjvMKm\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nage: 1732\r\nlast-modified: Sat, 22 Aug 2026 02:49:38 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2eebb09b95f7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60042,"size_decoded":60722,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format, TrueType, length 60042, version 1.0","md5":"32319d6149e2659c974fef61dfd5cc42","sha1":"e2aedccccdbad3f63b14e27941c59e7ba533cc51","sha256":"c99d0b5a290e48d4e4cbb86c29dd12436f465696702a81ded130a411f1e98cd3","sha512":"93a8d50361921549721c1313a53b122fd14fa7470c801bb1a785a72d0c022da4db26b650eb776ce0f9a2e4971363efc84095f0a8a30e57751d9a580454295e9a","ssdeep":"1536:yqdSnqzzEYachE4HiGuwH9wxpzLDFV6aP:yGKch0GFH9AxDH6G","tlshash":"7d4302dad28b50059c2ed4b12acdf4d8fe0516f58cdd75688eb4d1a823efddd9949030","first_seen":"2023-04-21T20:51:14Z","last_seen":"2026-08-22T03:22:39.312706Z","times_seen":2110,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dpd.vqmxa.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.vqmxa.ink/com/assets/D6WjOvV9.png","fqdn":"dpd.vqmxa.ink","domain":"vqmxa.ink","tld":"ink"},"ip":{"addr":"104.21.56.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dpd.vqmxa.ink/com/","date":"2026-08-22T03:18:29.776Z","timestamp":1787368709776,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vqmxa.ink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 06:55:56 GMT","end":"Tue, 17 Nov 2026 07:53:36 GMT"},"fingerprint":{"sha1":"F9:07:AC:5F:C8:75:8E:AD:3B:17:DE:E5:5F:3E:43:14:3E:39:30:98","sha256":"6E:36:CB:95:E7:54:F7:8D:69:86:A6:42:7F:EE:5E:0A:38:28:2E:C9:65:91:30:A9:27:48:61:DE:EB:11:76:42"}}},"request":{"raw":"GET /com/assets/D6WjOvV9.png HTTP/1.1\r\nHost: dpd.vqmxa.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.vqmxa.ink/com/\r\nCookie: _vt=2de2df0b-7ae1-4a80-be57-903c02525cbd\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 22 Aug 2026 03:18:29 GMT\r\ncontent-type: image/png;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nage: 1732\r\nlast-modified: Sat, 22 Aug 2026 02:49:37 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2J1nuMDu6KgUQ1Uyz1AaxXuHFKFBltvXruYo72ZxWyhIB%2BvbS1pYD%2BdT2C2imZV18HirpgvFRbzibsbmpcSMN%2FoZ7vQdJ27C6JNPbe9T0%2B9ZjLDruQFoXOW8O%2FoDm%2B7S\"}]}\r\ncf-ray: a2eebb04194d7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20781,"size_decoded":21429,"mime_type":"image/png; charset=utf-8","magic":"PNG image data, 141 x 67, 8-bit/color RGBA, non-interlaced","md5":"7fd40f3f20acbd2fdc7f81a77534ad38","sha1":"d55bfd5300bb1cb29316481db93002ed52dd00df","sha256":"6dcfd3f9716c0b3a5305ba18bcf64214c0b19b950f154e3c7a32bb51833a4ed6","sha512":"4eb176028f309ec5d3b608e15518add59fb854d0c69701973bdf9a2018c1628c8cd254729c48279db23937f1d2fc10d4bedbe29ebb189723757fca4863f2ef44","ssdeep":"192:vSNktOMOO0JLsMJ7bH+xwCOsb/w2T3X5erxHsk+m4:autOrNPexss42T3cdCm4","tlshash":"00926c60feb0319550cac2700dd97c188852aec788d28d07baec5a152f54fbc6e8f2e7","first_seen":"2025-10-14T22:06:20.884098Z","last_seen":"2026-08-22T03:22:39.307626Z","times_seen":821,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dpd.vqmxa.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://dpd.vqmxa.ink/console/?uuid=e05a14af-752c-45cf-a387-b4facf576b27\u0026shopHost=\u0026EIO=4\u0026transport=websocket","fqdn":"dpd.vqmxa.ink","domain":"vqmxa.ink","tld":"ink"},"ip":{"addr":"104.21.56.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://dpd.vqmxa.ink/com/","date":"2026-08-22T03:18:30.391Z","timestamp":1787368710391,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vqmxa.ink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 06:55:56 GMT","end":"Tue, 17 Nov 2026 07:53:36 GMT"},"fingerprint":{"sha1":"F9:07:AC:5F:C8:75:8E:AD:3B:17:DE:E5:5F:3E:43:14:3E:39:30:98","sha256":"6E:36:CB:95:E7:54:F7:8D:69:86:A6:42:7F:EE:5E:0A:38:28:2E:C9:65:91:30:A9:27:48:61:DE:EB:11:76:42"}}},"request":{"raw":"GET /console/?uuid=e05a14af-752c-45cf-a387-b4facf576b27\u0026shopHost=\u0026EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: dpd.vqmxa.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://dpd.vqmxa.ink\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: I6Q8QGXgsaRnu4c8DAXcDg==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nCookie: _vt=2de2df0b-7ae1-4a80-be57-903c02525cbd\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sat, 22 Aug 2026 03:18:30 GMT\r\nConnection: upgrade\r\nServer: cloudflare\r\nupgrade: websocket\r\nsec-websocket-accept: lh9hpAHtHNdaK2QZffefUm7AJrE=\r\nsec-websocket-extensions: permessage-deflate\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rli7kQwkZTWs9P7bztJ70lAvu2npXsWUFMRW8rm8OzrON7BpRyolTyU0DVQO4dWYF5YFyT3F38nUqZGSpbKAxMY0CeTLA5Q4ZsZEKfVgVvsdYhlol1WIwyjjd0ocpIPp\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCF-RAY: a2eebb0808bc2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":629,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T06:26:49.928163Z","times_seen":18029198,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":0,"dns":10,"connect":11,"send":0,"wait":78,"receive":0,"ssl":5},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dpd.vqmxa.ink/com/assets/fS-WSyLf.jpg","fqdn":"dpd.vqmxa.ink","domain":"vqmxa.ink","tld":"ink"},"ip":{"addr":"104.21.56.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dpd.vqmxa.ink/com/","date":"2026-08-22T03:18:30.681Z","timestamp":1787368710681,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vqmxa.ink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 06:55:56 GMT","end":"Tue, 17 Nov 2026 07:53:36 GMT"},"fingerprint":{"sha1":"F9:07:AC:5F:C8:75:8E:AD:3B:17:DE:E5:5F:3E:43:14:3E:39:30:98","sha256":"6E:36:CB:95:E7:54:F7:8D:69:86:A6:42:7F:EE:5E:0A:38:28:2E:C9:65:91:30:A9:27:48:61:DE:EB:11:76:42"}}},"request":{"raw":"GET /com/assets/fS-WSyLf.jpg HTTP/1.1\r\nHost: dpd.vqmxa.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.vqmxa.ink/com/\r\nCookie: _vt=2de2df0b-7ae1-4a80-be57-903c02525cbd\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 22 Aug 2026 03:18:30 GMT\r\ncontent-type: image/jpeg;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nage: 1732\r\nlast-modified: Sat, 22 Aug 2026 02:49:38 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cvfy2mnfEhn6sZPYHwS%2B3Avsc2bhBzTERRkb0782AJORuK4y2DHRQ4KouvY%2F6MchyFY1Kf0kshyLA4h3OlIacNS82T%2BiNHU%2FVPSyQXTAvCnxJmwosbHEROBxh9l6089n\"}]}\r\ncf-ray: a2eebb09b9617130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":134719,"size_decoded":135361,"mime_type":"image/jpeg; charset=utf-8","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1280x853, components 3","md5":"c9366d3c96a7e0b114309b0c71cf2ba0","sha1":"582b2fea1bd70cc908b82e33d07ffbafeb7a303a","sha256":"7e166c9fb31e3358ced873ed61e59da1e2e849a5193e27d5c4dab3a5a8ed1e44","sha512":"77d145beed6247975a6e419bf3606e9336fb06f22e552546b01ef82e34e5b7fc278113c49848d3f25148bf2fb772b4fbb4a381d4d0faff177727e61a78473909","ssdeep":"3072:JRiYiMREGUNgNtLewB/jxzWxE4Zn9T/JVIt6XnuG4D2zHCOr:aYiMqGAsCIFzWxE+9Nytkr","tlshash":"0bd312e45ea45412f401ee7a4cf05943c2423ee77bc5da48b38b3f10baa41619eeb8d7","first_seen":"2026-08-22T02:48:44.583554Z","last_seen":"2026-08-22T03:22:39.312101Z","times_seen":8,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dpd.vqmxa.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.vqmxa.ink/com","fqdn":"dpd.vqmxa.ink","domain":"vqmxa.ink","tld":"ink"},"ip":{"addr":"104.21.56.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-22T03:18:29.148Z","timestamp":1787368709148,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vqmxa.ink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 06:55:56 GMT","end":"Tue, 17 Nov 2026 07:53:36 GMT"},"fingerprint":{"sha1":"F9:07:AC:5F:C8:75:8E:AD:3B:17:DE:E5:5F:3E:43:14:3E:39:30:98","sha256":"6E:36:CB:95:E7:54:F7:8D:69:86:A6:42:7F:EE:5E:0A:38:28:2E:C9:65:91:30:A9:27:48:61:DE:EB:11:76:42"}}},"request":{"raw":"GET /com HTTP/1.1\r\nHost: dpd.vqmxa.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Sat, 22 Aug 2026 03:18:29 GMT\r\ncontent-type: text/plain;charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=0,i\r\nlocation: /com/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JRSb2KmadPlc4mpzznjFkktDX%2BvMIfyYeoEAALdOPdKMZvyy55l%2BK0toraKCAp3dT0yVX%2F2SFlfBlg72ITwO%2FfpdLeS7Q0%2FP4BeFp8N4qaVhBtythj2%2BRmj03IbLDjkK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2eebb0069427130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T06:26:49.928163Z","times_seen":18029198,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":16,"connect":14,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dpd.vqmxa.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.vqmxa.ink/com/assets/DhqmAzot.js","fqdn":"dpd.vqmxa.ink","domain":"vqmxa.ink","tld":"ink"},"ip":{"addr":"104.21.56.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dpd.vqmxa.ink/com/","date":"2026-08-22T03:18:29.625Z","timestamp":1787368709625,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vqmxa.ink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 06:55:56 GMT","end":"Tue, 17 Nov 2026 07:53:36 GMT"},"fingerprint":{"sha1":"F9:07:AC:5F:C8:75:8E:AD:3B:17:DE:E5:5F:3E:43:14:3E:39:30:98","sha256":"6E:36:CB:95:E7:54:F7:8D:69:86:A6:42:7F:EE:5E:0A:38:28:2E:C9:65:91:30:A9:27:48:61:DE:EB:11:76:42"}}},"request":{"raw":"GET /com/assets/DhqmAzot.js HTTP/1.1\r\nHost: dpd.vqmxa.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.vqmxa.ink/com/\r\nCookie: _vt=2de2df0b-7ae1-4a80-be57-903c02525cbd\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 22 Aug 2026 03:18:29 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nvary: accept-encoding\r\npriority: u=1,i=?0\r\ncontent-encoding: gzip\r\nage: 1732\r\nlast-modified: Sat, 22 Aug 2026 02:49:37 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fLP%2Bxe6UkuoQXnpAIDxlSHIGX8vdV%2FL8eX3MGCdchyAUa5kB3tBh%2F6gZ040iXgYh0kevN425EqNU%2FlXL2eJHj5kiITokHJazMbIysj0sS6q9z94tS%2F2Kamxz0nYugmKo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2eebb0329497130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":183340,"size_decoded":67207,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2a1b4c52e6b45ca5bdba668c5b4cf187","sha1":"98950ae12d79ca781a696b3c67e39a11c7e7faa9","sha256":"65273d6f816e11b8e846c3dbeae4fdbeb9c48523951665e9835b33f0087c9915","sha512":"8b206123c7c0a63d9ccd17d44e5b6bcf3845d4306e540b7f7faa6d61c6a221cb33d062e490d4641e722c40afc2ef68c7f16ef79368764dc66a24279c56f25f8f","ssdeep":"3072:PLpSe/aSjhXSSS+SQ2UDPMaWTTLy5x294dRy:1//7j0SdxjMVTHy5xa4a","tlshash":"3b043bc53251b0a253fa15e3407b1007f3396925380d899cb25cfdef6c6a98a61b7f7a","first_seen":"2026-08-05T07:13:51.96529Z","last_seen":"2026-08-22T03:22:39.310032Z","times_seen":9,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dpd.vqmxa.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.vqmxa.ink/com/assets/pCcDUJId.js","fqdn":"dpd.vqmxa.ink","domain":"vqmxa.ink","tld":"ink"},"ip":{"addr":"104.21.56.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dpd.vqmxa.ink/com/","date":"2026-08-22T03:18:29.626Z","timestamp":1787368709626,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vqmxa.ink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 06:55:56 GMT","end":"Tue, 17 Nov 2026 07:53:36 GMT"},"fingerprint":{"sha1":"F9:07:AC:5F:C8:75:8E:AD:3B:17:DE:E5:5F:3E:43:14:3E:39:30:98","sha256":"6E:36:CB:95:E7:54:F7:8D:69:86:A6:42:7F:EE:5E:0A:38:28:2E:C9:65:91:30:A9:27:48:61:DE:EB:11:76:42"}}},"request":{"raw":"GET /com/assets/pCcDUJId.js HTTP/1.1\r\nHost: dpd.vqmxa.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.vqmxa.ink/com/\r\nCookie: _vt=2de2df0b-7ae1-4a80-be57-903c02525cbd\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 22 Aug 2026 03:18:29 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nvary: accept-encoding\r\npriority: u=1,i=?0\r\ncontent-encoding: gzip\r\nage: 1732\r\nlast-modified: Sat, 22 Aug 2026 02:49:37 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9ko1oVD9yFY%2Fl0vVkqtQC6LlHlIHiJ7UavuBbSmPZGUqlkzpsItxNJuLfMe47D8NBky0UQcV17SuJfAxclC3s7umpmOBim7te3nq1kquI0QVz45FnvAfTy0a3DoLbe1i\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2eebb03294a7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":554094,"size_decoded":182963,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a664e2ea38768d3c63a2224be5a18429","sha1":"1597afb0bce6f92fa399ca92a216efeb09239a24","sha256":"50212b07ed5632b6f118288edb4922fc011134035e0007c4a40619aafe3d7bf7","sha512":"c86f8ce51040fb31ae676d14f2eba65bc58056bf1da71b642b73d954c54d0a9595225239f7e13f09f5be2ef7592f0a825425f4d34bd6b038fc8ae2deb068e2b9","ssdeep":"6144:opG8G9FXkYxS8NM0r0O0Nrkb/Ew1a+XA9DPnYjHwLd+A7cAdSErehBWODhg7J493:op8kYx3B3Y3UAUFoQTYU+9u","tlshash":"a7c417d22b4ff2da016208a7439b30c6b10e7bab380ce5057ff4f5941ea5769796e934","first_seen":"2026-08-22T02:48:44.581627Z","last_seen":"2026-08-22T03:22:39.310715Z","times_seen":8,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dpd.vqmxa.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.vqmxa.ink/com/","fqdn":"dpd.vqmxa.ink","domain":"vqmxa.ink","tld":"ink"},"ip":{"addr":"104.21.56.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-22T03:18:29.304Z","timestamp":1787368709304,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vqmxa.ink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 06:55:56 GMT","end":"Tue, 17 Nov 2026 07:53:36 GMT"},"fingerprint":{"sha1":"F9:07:AC:5F:C8:75:8E:AD:3B:17:DE:E5:5F:3E:43:14:3E:39:30:98","sha256":"6E:36:CB:95:E7:54:F7:8D:69:86:A6:42:7F:EE:5E:0A:38:28:2E:C9:65:91:30:A9:27:48:61:DE:EB:11:76:42"}}},"request":{"raw":"GET /com/ HTTP/1.1\r\nHost: dpd.vqmxa.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 22 Aug 2026 03:18:29 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: accept-encoding\r\npriority: u=0,i\r\nset-cookie: _vt=2de2df0b-7ae1-4a80-be57-903c02525cbd; Path=/; Expires=Sat, 22-Aug-2026 03:28:29 GMT; Max-Age=600\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yz6V8cTO%2FgxOhotCfE1Lf7Gf%2BvCLC7KYeug%2BIKouNUgOtjoYq0T1abTg9NdRdVLK%2BUcMV7lPVQTOvbRZmUn4jqULlVEpxvanHLDcZqmzRPM%2BwFJJvNTL4AieTn7mA%2Bnq\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2eebb0129437130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"_vt","value":"2de2df0b-7ae1-4a80-be57-903c02525cbd","quoted":false,"path":"/","expires":"2026-08-22T03:28:29Z","raw_expires":"Sat, 22-Aug-2026 03:28:29 GMT","max_age":600,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"_vt=2de2df0b-7ae1-4a80-be57-903c02525cbd; Path=/; Expires=Sat, 22-Aug-2026 03:28:29 GMT; Max-Age=600"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2386,"size_decoded":1734,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF, CR, LF line terminators","md5":"a9734f57edf17d7d4874be1584dbbe5f","sha1":"eaa98e3a0592b22fe16560f36ae50564861cba27","sha256":"035ca11dfec9021ebf95abb6ff200b4b26b1aae50c94523322e5d364dd0f996a","sha512":"ff076f36ad0f25f757d8240529375b594bbd5ff5f5d00320e72f21dc154b3a6ff72ad447c50706d2ab7ebc19e3f4119b6fd7265e9b5e6d980acecb230cab5969","ssdeep":"","tlshash":"9b41118215930c2a132353a2dfd6a20691f1d603c14fec5878fd10ae4fa5a8999e7f38","first_seen":"2026-08-22T02:48:44.579893Z","last_seen":"2026-08-22T03:22:39.309458Z","times_seen":8,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dpd.vqmxa.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.vqmxa.ink/com/assets/BEr9LRr8.css","fqdn":"dpd.vqmxa.ink","domain":"vqmxa.ink","tld":"ink"},"ip":{"addr":"104.21.56.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dpd.vqmxa.ink/com/","date":"2026-08-22T03:18:29.629Z","timestamp":1787368709629,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vqmxa.ink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 06:55:56 GMT","end":"Tue, 17 Nov 2026 07:53:36 GMT"},"fingerprint":{"sha1":"F9:07:AC:5F:C8:75:8E:AD:3B:17:DE:E5:5F:3E:43:14:3E:39:30:98","sha256":"6E:36:CB:95:E7:54:F7:8D:69:86:A6:42:7F:EE:5E:0A:38:28:2E:C9:65:91:30:A9:27:48:61:DE:EB:11:76:42"}}},"request":{"raw":"GET /com/assets/BEr9LRr8.css HTTP/1.1\r\nHost: dpd.vqmxa.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.vqmxa.ink/com/\r\nCookie: _vt=2de2df0b-7ae1-4a80-be57-903c02525cbd\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 22 Aug 2026 03:18:29 GMT\r\ncontent-type: text/css;charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\ncontent-encoding: gzip\r\nage: 1732\r\naccept-ranges: bytes\r\nlast-modified: Sat, 22 Aug 2026 02:49:37 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eOK6tNRiuC1RCp6z7LU7OvYm7G36PsJREywMk3I9f4iOv2r79IQRjZtuEKCrwOWe396U3Ir2gh4Dw7Y4Vf4xG4nm3dbS7dVFdMvmeYiTsh8GnyC5hHc3Q4wQ%2F0VpVME8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a2eebb03294c7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11920\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72646,"size_decoded":12649,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b13e8e9c4f3e15968c493f94f6b0af10","sha1":"e5ba773e02fa9da2c5fe88b4498c1f331e0cf2c5","sha256":"72525cc321476beee7d95b664e778ca2631f393ca5b4a169b91db60ae62a46cb","sha512":"f1b3ac2193688976be98485e869c9bb870fb46a1c92e19b58f832d0b0a296d1fb5894819afec745a439f98bd393378670a58a67b081f10d99818fe5e2d68f758","ssdeep":"768:rltO/xR1ySZjKKl1Qq5cRypIONVeNONpNJ0GvBmi/Nb/fG+1Yp:rlg/Hll1Qq5cRCIaAONOGYi/NrA","tlshash":"4563d8a9765c2428f97bc6a31be41add02147242f112439ce6277d25cddf7e33e32a98","first_seen":"2026-08-22T02:48:44.585777Z","last_seen":"2026-08-22T03:22:39.306099Z","times_seen":8,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dpd.vqmxa.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.vqmxa.ink/com/assets/BOnPfxxG.woff","fqdn":"dpd.vqmxa.ink","domain":"vqmxa.ink","tld":"ink"},"ip":{"addr":"104.21.56.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dpd.vqmxa.ink/com/","date":"2026-08-22T03:18:30.676Z","timestamp":1787368710676,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vqmxa.ink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 06:55:56 GMT","end":"Tue, 17 Nov 2026 07:53:36 GMT"},"fingerprint":{"sha1":"F9:07:AC:5F:C8:75:8E:AD:3B:17:DE:E5:5F:3E:43:14:3E:39:30:98","sha256":"6E:36:CB:95:E7:54:F7:8D:69:86:A6:42:7F:EE:5E:0A:38:28:2E:C9:65:91:30:A9:27:48:61:DE:EB:11:76:42"}}},"request":{"raw":"GET /com/assets/BOnPfxxG.woff HTTP/1.1\r\nHost: dpd.vqmxa.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.vqmxa.ink/com/assets/BEr9LRr8.css\r\nCookie: _vt=2de2df0b-7ae1-4a80-be57-903c02525cbd\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 22 Aug 2026 03:18:30 GMT\r\ncontent-type: application/octet-stream;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EbPY2xlHl2n1vtii2fIt3DimCgVniuus0cN%2Bsq%2BCWbfx1lKir%2BMxDFV6v2eqCgMOJhOWedI0WHvG974yZdCbMqVuXtB1H81MDlEw3N8Svlxbr3rFO1Iqwojq4LjnoWyL\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nage: 1732\r\nlast-modified: Sat, 22 Aug 2026 02:49:38 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2eebb09b95e7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60781,"size_decoded":61461,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format, TrueType, length 60781, version 1.0","md5":"20398ebf2986259c88014178d7044844","sha1":"02422f7f86e44268579b2b3694ca72eaaa8a301a","sha256":"9e462606602d426b676f2b6f9c0b6629b02f91204214898f7d4a56749c4e00d0","sha512":"e353fbce67c1e46ecfc04c74e56d06f8916149d071700fee9cce2976987f2c5a5878dcd434590beeb02c417e9da0379696695f49ac9561ac423eb3d592438133","ssdeep":"1536:/mNyBIPLRqPeSDzYi5G0ChYnizF7Bz/bad7bSByIdPSE9:+VzRqbHT000iwz/bO7bjo9","tlshash":"3053026d635f1330ad5cb62770e8ea782d16fdbc61c2e9020351b2ca0e7a265e72d35d","first_seen":"2023-04-21T20:51:14Z","last_seen":"2026-08-22T03:22:39.311448Z","times_seen":2097,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dpd.vqmxa.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.vqmxa.ink/com/assets/D6WjOvV9.png","fqdn":"dpd.vqmxa.ink","domain":"vqmxa.ink","tld":"ink"},"ip":{"addr":"104.21.56.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dpd.vqmxa.ink/com/","date":"2026-08-22T03:18:30.680Z","timestamp":1787368710680,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vqmxa.ink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 06:55:56 GMT","end":"Tue, 17 Nov 2026 07:53:36 GMT"},"fingerprint":{"sha1":"F9:07:AC:5F:C8:75:8E:AD:3B:17:DE:E5:5F:3E:43:14:3E:39:30:98","sha256":"6E:36:CB:95:E7:54:F7:8D:69:86:A6:42:7F:EE:5E:0A:38:28:2E:C9:65:91:30:A9:27:48:61:DE:EB:11:76:42"}}},"request":{"raw":"GET /com/assets/D6WjOvV9.png HTTP/1.1\r\nHost: dpd.vqmxa.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.vqmxa.ink/com/\r\nCookie: _vt=2de2df0b-7ae1-4a80-be57-903c02525cbd\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 22 Aug 2026 03:18:30 GMT\r\ncontent-type: image/png;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nage: 1733\r\nlast-modified: Sat, 22 Aug 2026 02:49:37 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LNcdZ5XXkwezm%2FbMD5g5RtqAmJbw8%2B3COU%2Bf46SvYI94eHWteRi0atNLv4UejYGE%2FAht19Zssfoo1IK4f0SP2RKMSyZfbEgGbaUULhUJlFU5rwHYf1CebkVAiQPih26N\"}]}\r\ncf-ray: a2eebb09b9607130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20781,"size_decoded":21422,"mime_type":"image/png; charset=utf-8","magic":"PNG image data, 141 x 67, 8-bit/color RGBA, non-interlaced","md5":"7fd40f3f20acbd2fdc7f81a77534ad38","sha1":"d55bfd5300bb1cb29316481db93002ed52dd00df","sha256":"6dcfd3f9716c0b3a5305ba18bcf64214c0b19b950f154e3c7a32bb51833a4ed6","sha512":"4eb176028f309ec5d3b608e15518add59fb854d0c69701973bdf9a2018c1628c8cd254729c48279db23937f1d2fc10d4bedbe29ebb189723757fca4863f2ef44","ssdeep":"192:vSNktOMOO0JLsMJ7bH+xwCOsb/w2T3X5erxHsk+m4:autOrNPexss42T3cdCm4","tlshash":"00926c60feb0319550cac2700dd97c188852aec788d28d07baec5a152f54fbc6e8f2e7","first_seen":"2025-10-14T22:06:20.884098Z","last_seen":"2026-08-22T03:22:39.307626Z","times_seen":821,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dpd.vqmxa.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
