{"report_id":"6852c123-510c-42a0-a1e4-72695e8b83bf","version":0,"status":"done","tags":[],"date":"2026-09-17T08:27:38Z","url":{"schema":"http","addr":"t4k7n9qw.com/","fqdn":"t4k7n9qw.com","domain":"t4k7n9qw.com","tld":"com"},"ip":{"addr":"104.21.65.178","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"t4k7n9qw.com/#/","fqdn":"t4k7n9qw.com","domain":"t4k7n9qw.com","tld":"com"},"title":"Home","dom":{"size":70283,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (29796), with CRLF, CR, LF line terminators","md5":"37acf167d53c585b889e6167af8c0d56","sha1":"155acb145d5bf875afcdd0b830ed865c69e8e217","sha256":"566a3cc061d92ade3563c70b404a858b8e166b21650665a9cef7ba313ae3d890","sha512":"365394f9d07562cba2c41aec3591ae3d310f0ce94babae8557c005639572f676ad2c02765f1f7f9fcda84ba34bbd008b8a402410ad9983de0839eb83924a7c79","ssdeep":"768:fYMA6znUUimSZXl68+KYZAPuwyaMPIYiy++XZgTewjtKddW6YEJJS+:gEzn7imSxlSZAmwy/PIAW6YEJJS+","tlshash":"b1632134b05a28a27a7bc8c9b265af0e3952bf37c0951954f77a17b84fdb8f02d18714","dom_hash":"domhash8886eb3ef5fe26746d036bd2da53e1ff","first_seen":"2026-09-17T08:27:45.76904Z","last_seen":"2026-09-17T08:27:45.76904Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"t4k7n9qw.com/","fqdn":"t4k7n9qw.com","domain":"t4k7n9qw.com","tld":"com"},"ip":{"addr":"104.21.65.178","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-22T08:27:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"api.t4k7n9qw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"t4k7n9qw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ws.t4k7n9qw.com","ip":{"addr":"104.21.65.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-06","domain_rank":0,"first_seen":"2026-09-17T08:22:07.844294Z","last_seen":"2026-09-17T08:22:07.844294Z","alert_count":0,"request_count":1,"received_data":626,"sent_data":544,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"124.174.83.120","port":443,"asn":0,"as":"","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-09-12T03:33:30.20867Z","alert_count":0,"request_count":1,"received_data":577,"sent_data":547,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"api.t4k7n9qw.com","ip":{"addr":"104.21.65.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-06","domain_rank":0,"first_seen":"2026-09-17T08:22:07.847958Z","last_seen":"2026-09-17T08:22:07.847958Z","alert_count":2,"request_count":2,"received_data":1646,"sent_data":1153,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"shapi.bigstocks.org","ip":{"addr":"104.21.18.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-06-24","domain_rank":0,"first_seen":"2026-09-17T08:22:07.855677Z","last_seen":"2026-09-17T08:22:07.855677Z","alert_count":0,"request_count":3,"received_data":832173,"sent_data":1740,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"t4k7n9qw.com","ip":{"addr":"104.21.65.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-06","domain_rank":0,"first_seen":"2026-09-17T08:22:07.846708Z","last_seen":"2026-09-17T08:22:07.846708Z","alert_count":23,"request_count":23,"received_data":3772697,"sent_data":11674,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"t4k7n9qw.com/static/js/index.8e856619.js","fqdn":"t4k7n9qw.com","domain":"t4k7n9qw.com","tld":"com"},"ip":{"addr":"104.21.65.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3d5fdd54b09c203c5c960dc84c942fc","sha1":"2e0f771345ff71841a1a298195fbc545de798744","sha256":"e5db1b943aeff79f8b042a7387495b1cdd67ded20b0fe7690b0b7682267bdde1","sha512":"bcdc7fa2f69714010a4ce3f57e2be7e4178ce478613458fecbb60760aeb81a3b470d35cd13c48a8dacabfd0950f1ef882e78ed954bd907bdc359fdf1989d5404","ssdeep":"6144:WrAexV5/xeyuyYtyi8OQ9MUjDxeJrQcdCRVsMddcHFophRKF96xSHW7s:WrAexV5/xeyuyYtyi8OQ9MUfxenv","tlshash":"e534f82a384eaebfc7a91681785abf0131e61ce368c4d4d743cc6f115be92499723b71","size":242675,"data":"","first_seen":"2026-09-17T08:22:13.794693Z","last_seen":"2026-09-17T08:35:14.048581Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t4k7n9qw.com/static/js/pages-ai-grade~pages-ai-pastearning~pages-ai-product~pages-ai-quantization~pages-ai-transaction~page~d0f26a43.46d2a6a4.js","fqdn":"t4k7n9qw.com","domain":"t4k7n9qw.com","tld":"com"},"ip":{"addr":"104.21.65.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f30b64516efe19e6bd0dc8ddd25b6ca1","sha1":"112aca5cb082b96cde783fb01da6ebded737fda1","sha256":"85640e628ee167b501b5614bb7355154087c5193384529e92de7589ff1294028","sha512":"4732fc1f42847063b7d45085391320c011ab1bd520bd9a09900fc793930906a021674a4f3d53190465547ef39c20b495081a312508966b3ee6b54f5eae4b9f1b","ssdeep":"192:MmAamgZ1ivqRs6/TV+ca3OQfMLEvTEYx2wqxc+gbkx/VZ2hqRsIoHuhXm2x:MmAaT1iS1VHa3OXLEvThxxqxA6XOutZ","tlshash":"55b2dc92e45c08e4bffbe40f935e721f6a447fa5c0a098649dbb418e09ddb7115b4b2c","size":24261,"data":"","first_seen":"2026-09-17T08:22:13.811282Z","last_seen":"2026-09-17T08:35:14.050097Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t4k7n9qw.com/static/js/pages-ai-transaction~pages-index-bibi~pages-index-bibiDetail~pages-index-contractOrder~pages-index-h~9544ecc0.e1af8f9c.js","fqdn":"t4k7n9qw.com","domain":"t4k7n9qw.com","tld":"com"},"ip":{"addr":"104.21.65.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd758c4cc131e3549f1ae8de537944cf","sha1":"57396f4e7fc1c8003af2f98278fe63f6b5eb8d47","sha256":"5427a432077500c771180618d196e2d2ad13248d89b584f690ccc922295157df","sha512":"f2688e384c0d757cd778677302ca83000fa24050da773164eb4df3fa4d1d7ff4a275e4341a7d1dfc0fbb0a1d43d5f1fce0b3e111ed9c2000061d111ed6d73daf","ssdeep":"384:7aD58GM6ArYYxSv07GbRYDYPdLTubEq2F7hF:7C58GM6ArLxSv07GbR0sJTuAqo","tlshash":"1652098af0c6f41506d341b7802f86015179bad8306646ac7bfdfdf60a9998c23a7b3c","size":14260,"data":"","first_seen":"2026-09-17T08:22:13.801961Z","last_seen":"2026-09-17T08:35:14.098422Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t4k7n9qw.com/static/js/pages-index-index.1e849ed8.js","fqdn":"t4k7n9qw.com","domain":"t4k7n9qw.com","tld":"com"},"ip":{"addr":"104.21.65.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b7d33e1e5b3c18cd021ed980c27b141","sha1":"1446fb285864076acc1d64e9300a7ffbf517ab0f","sha256":"cb136f8aa83f1ac191b8f3fa1ae88fed6ee90fa7add0511b82ddddf486d34e56","sha512":"951ffd8dce009cf814e230a7faa0fbc8b4d874d6c1be664c2ba1afe349402fe936b5fcc23cde8619ab13bfd435fbadc03163f29acbe085392f3236330ac0465a","ssdeep":"12288:G/pI0aQjQBAVAA9A2s3vRNIPnrJBR8m4f4sIvBRgf8ol82fD8y9K96QoPF0pm:Gh1CAOZ+ntkFf4fdu82fD8y9Q6Qo+k","tlshash":"e1351998b654b03543a771b4056f090f9336680db50b85a8fb69e4ea6cbd44f323bf78","size":1082361,"data":"","first_seen":"2026-09-17T08:22:13.852608Z","last_seen":"2026-09-17T08:35:14.115208Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t4k7n9qw.com/","fqdn":"t4k7n9qw.com","domain":"t4k7n9qw.com","tld":"com"},"ip":{"addr":"104.21.65.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1b17c22ebce0d3513e2066b34994b370","sha1":"654276b80e1693f6af1bda17c896ec120431cf5d","sha256":"422e25890aa37cbe958a672622cdf00b6d804a39478d2aaedf99edd0ddf366c6","sha512":"af32a06e9cf784426649531239e48f731a74d06fa9a2857d98926029d2715716f08c284c9fcff3db187c48dc9e00e6b715a3f2b82f9cf87e453431d3d9d4c526","ssdeep":"","tlshash":"29c08cb836201430074bb21c713ce3883db300023003350bb41c028d0ff0ec44231ea8","size":180,"data":"","first_seen":"2023-03-08T02:37:39Z","last_seen":"2026-09-17T08:35:14.116461Z","times_seen":103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t4k7n9qw.com/static/js/chunk-vendors.11123681.js","fqdn":"t4k7n9qw.com","domain":"t4k7n9qw.com","tld":"com"},"ip":{"addr":"104.21.65.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab7f60cf5d4815cc02eec97a9534f4ac","sha1":"d1ba1072104e8ad1074494683d105b72c8c02625","sha256":"f16600e4454898592e48adb528706c4c0f29d2071d3062bc4393e5abfefa77e6","sha512":"17589dfec062c3bc22785637564b2daac140953c182396437aff68ff343772179f38dacc69a35b8cdcbf04325d26e90722ff18f71ee7828f62044b4697d00127","ssdeep":"12288:drKHDr6Ed8i5mignrw7a7kPb4TamswZGrDlh9osU7U+hUf:YHDr6Ed8i5mZpkPb4TRZGFh9ojovf","tlshash":"c8a50ac87291b0a587a365a5403f500be33ead646c4c4458f767ece76cb8a8d5227f3e","size":2150565,"data":"","first_seen":"2026-09-17T08:22:13.850139Z","last_seen":"2026-09-17T08:35:14.119475Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"indexen","filename":"https://t4k7n9qw.com/static/js/pages-index-index.1e849ed8.js","line_number":1,"column_number":5274},{"level":"log","text":"3333en","filename":"https://t4k7n9qw.com/static/js/pages-index-index.1e849ed8.js","line_number":1,"column_number":1150},{"level":"log","text":"WebSocket连接已打开！","filename":"https://t4k7n9qw.com/static/js/pages-index-index.1e849ed8.js","line_number":1,"column_number":12302}]},"http":[{"url":{"schema":"https","addr":"api.t4k7n9qw.com/api/common/getsetting","fqdn":"api.t4k7n9qw.com","domain":"t4k7n9qw.com","tld":"com"},"ip":{"addr":"104.21.65.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://t4k7n9qw.com/","date":"2026-09-17T08:27:04.352Z","timestamp":1789633624352,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t4k7n9qw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 08:01:38 GMT","end":"Sat, 05 Dec 2026 09:00:09 GMT"},"fingerprint":{"sha1":"3D:A6:ED:FA:F5:07:9E:9C:90:FE:B8:61:5A:B2:DE:C5:7D:5D:E7:A9","sha256":"4F:AD:B1:B1:D4:EC:02:1B:D6:A2:9D:D3:31:B2:6A:C3:A6:56:80:F1:AD:E4:C9:10:03:F4:BA:F1:DE:BD:C8:B5"}}},"request":{"raw":"OPTIONS /api/common/getsetting HTTP/1.1\r\nHost: api.t4k7n9qw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,lang\r\nReferer: https://t4k7n9qw.com/\r\nOrigin: https://t4k7n9qw.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b9WVV6G7qYK%2FEwSM7Q0s2VpkyXcaStfTO6IxSG3UOkR2jRU5YtJuvlMJogW0rej3Gn1St4PAGQ67K2wU7kMveFV7jeckMcBzsEcj4c2B%2B8y8C1AhbDHO9Spv46VLU7y739K4\"}]}\r\ncache-control: no-cache, private\r\ndate: Thu, 17 Sep 2026 08:27:04 GMT\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization,content-type,lang\r\naccess-control-max-age: 0\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c6bac85d99120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":823,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-17T17:41:52.790885Z","times_seen":18519253,"resource_available":true,"data":null}},"time_used":568,"timings":{"blocked":-1,"dns":0,"connect":18,"send":0,"wait":550,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"api.t4k7n9qw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shapi.bigstocks.org/upload/images/fdb19b828c636d3a0ef75b06a55fa848.jpg","fqdn":"shapi.bigstocks.org","domain":"bigstocks.org","tld":"org"},"ip":{"addr":"104.21.18.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t4k7n9qw.com/","date":"2026-09-17T08:27:05.687Z","timestamp":1789633625687,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigstocks.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 18:35:02 GMT","end":"Thu, 29 Oct 2026 19:33:04 GMT"},"fingerprint":{"sha1":"D2:02:5B:7E:33:74:F9:03:E7:42:AA:39:FC:65:87:C0:8D:96:5D:A6","sha256":"35:E6:2F:4D:52:67:31:31:FA:E3:EC:7B:29:8B:F2:29:37:5B:BD:4C:27:68:3A:94:51:8A:D9:92:93:0A:26:1D"}}},"request":{"raw":"GET /upload/images/fdb19b828c636d3a0ef75b06a55fa848.jpg HTTP/1.1\r\nHost: shapi.bigstocks.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t4k7n9qw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 17 Sep 2026 08:27:06 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Mar 2025 07:01:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"67e254df-11ecb\"\r\nexpires: Sat, 17 Oct 2026 08:21:31 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 334\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uJX%2BG4GPzi9OpT2gJXcKOHL49UU%2FxI5fE4xGQhYUd4Y4YWRD2cOEl8sewM%2Fk%2BjBU43pgb%2F7oFYD2tyg7mqjErDK2t6kaNbzfq%2FeCFX6OMYE7KRHQqq%2FCGyqrj2J3GRHueThHfaVS\"}]}\r\ncf-ray: a3c6bad28a35dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73419,"size_decoded":73746,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x510, components 3","md5":"624aa57b182c11b055643c16218fa470","sha1":"979cfea56642f0cde4865f72e335e57a6ed06dd0","sha256":"e31d6a1af408ea35dc46bd3eca251984490cec1e5c005b84732004a81636ecae","sha512":"19dadcbda0c1981e44b9ff6f1b64358e1cbe01db5e7c31a9732870530c3871fd6bf919cea0aeca06fbb87e0acef53ca62c5c0fb39be35c93a2619a5a49192357","ssdeep":"1536:rrYln7PHrFXwZMtkIFInSgCJ7CIYIJVlnX0GIs7JZGvUlRnUgrTQU:rrc7jFYMtBF85CJ7/lbmsbrHBQU","tlshash":"8773022429d04cd7aca7fe72e5f44f2611d6868eb9fd0af2d6c1dc34042864fa1e6499","first_seen":"2026-05-30T07:44:14.665292Z","last_seen":"2026-09-17T08:35:14.100286Z","times_seen":5,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":6,"connect":3,"send":0,"wait":53,"receive":0,"ssl":302},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t4k7n9qw.com/static/js/index.8e856619.js","fqdn":"t4k7n9qw.com","domain":"t4k7n9qw.com","tld":"com"},"ip":{"addr":"104.21.65.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://t4k7n9qw.com/","date":"2026-09-17T08:27:03.670Z","timestamp":1789633623670,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t4k7n9qw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 08:01:38 GMT","end":"Sat, 05 Dec 2026 09:00:09 GMT"},"fingerprint":{"sha1":"3D:A6:ED:FA:F5:07:9E:9C:90:FE:B8:61:5A:B2:DE:C5:7D:5D:E7:A9","sha256":"4F:AD:B1:B1:D4:EC:02:1B:D6:A2:9D:D3:31:B2:6A:C3:A6:56:80:F1:AD:E4:C9:10:03:F4:BA:F1:DE:BD:C8:B5"}}},"request":{"raw":"GET /static/js/index.8e856619.js HTTP/1.1\r\nHost: t4k7n9qw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t4k7n9qw.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 08:27:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 10 Sep 2026 09:04:35 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zt9PweTEJGpM1fg6Lz%2BZY0QEo%2FhVU80MSo86LGfmT6jfFxLIYgmJWSa%2FEGQhJjmD27IpBGcmbxvHM1kNQtDxWU2ngSCodM7HWR4aFfQZl8VAf3EBa6i6c6lHQ8sgnEY%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6aa272a3-3b3f3\"\r\nexpires: Thu, 17 Sep 2026 20:21:26 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 337\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c6bac3fca7b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":242675,"size_decoded":63237,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (52514), with no line terminators","md5":"f3d5fdd54b09c203c5c960dc84c942fc","sha1":"2e0f771345ff71841a1a298195fbc545de798744","sha256":"e5db1b943aeff79f8b042a7387495b1cdd67ded20b0fe7690b0b7682267bdde1","sha512":"bcdc7fa2f69714010a4ce3f57e2be7e4178ce478613458fecbb60760aeb81a3b470d35cd13c48a8dacabfd0950f1ef882e78ed954bd907bdc359fdf1989d5404","ssdeep":"6144:WrAexV5/xeyuyYtyi8OQ9MUjDxeJrQcdCRVsMddcHFophRKF96xSHW7s:WrAexV5/xeyuyYtyi8OQ9MUfxenv","tlshash":"e534f82a384eaebfc7a91681785abf0131e61ce368c4d4d743cc6f115be92499723b71","first_seen":"2026-09-17T08:22:13.794693Z","last_seen":"2026-09-17T08:35:14.048581Z","times_seen":4,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"t4k7n9qw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t4k7n9qw.com/static/images/homepage/m5.png","fqdn":"t4k7n9qw.com","domain":"t4k7n9qw.com","tld":"com"},"ip":{"addr":"104.21.65.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t4k7n9qw.com/","date":"2026-09-17T08:27:04.339Z","timestamp":1789633624339,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t4k7n9qw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 08:01:38 GMT","end":"Sat, 05 Dec 2026 09:00:09 GMT"},"fingerprint":{"sha1":"3D:A6:ED:FA:F5:07:9E:9C:90:FE:B8:61:5A:B2:DE:C5:7D:5D:E7:A9","sha256":"4F:AD:B1:B1:D4:EC:02:1B:D6:A2:9D:D3:31:B2:6A:C3:A6:56:80:F1:AD:E4:C9:10:03:F4:BA:F1:DE:BD:C8:B5"}}},"request":{"raw":"GET /static/images/homepage/m5.png HTTP/1.1\r\nHost: t4k7n9qw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t4k7n9qw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 08:27:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 10 Sep 2026 09:04:35 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VMCYjGSIaybsttIQ1iy%2F3xRFkZfoAg67P%2FO7fq4CbIhMe9WbwCzNFhgK816tCimfA03iGZJIjzp9y%2BF5Vl4aLq%2BWcDZsryN5E%2Fw0RW%2FtXa%2BUsneeYHNIIyLeke7Dhas%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6aa272a3-14af\"\r\nexpires: Sat, 17 Oct 2026 08:21:30 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 334\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c6bac81cf8b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5295,"size_decoded":5814,"mime_type":"image/png","magic":"PNG image data, 105 x 106, 8-bit/color RGBA, non-interlaced","md5":"6f42f580394a2b7829b3cb912dc92289","sha1":"eee59e5578e1c5078f877e31d990d637611bd7c4","sha256":"da7afbf4b34ef2e4e538f4569fccbdcfb45d4cd1bd9c7907e1a693a1f90ffaa0","sha512":"d3dbd08de2f6212019059e0ce1addfcba330ee7a06d0f115aad79f474c2770ce9cf7759a79124fb35beb4ca71c41d33125f2471ad05112d9c72cb213da5f4dc1","ssdeep":"96:d22bhDCP+0ggnqCgHg0/smE64R5OXzElqBY/FBp7VcL9Ujh8OJ:DQDnqCOz9Ep4glV5WL9ohfJ","tlshash":"22b18de4f7807e12909517e1f4f7c02739b59088e0b2b12aa4dde41328a63e9f4f7876","first_seen":"2025-10-22T11:32:11.288385Z","last_seen":"2026-09-17T08:35:14.045829Z","times_seen":18,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"t4k7n9qw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t4k7n9qw.com/static/tabBarIco/icon-tab-4.png","fqdn":"t4k7n9qw.com","domain":"t4k7n9qw.com","tld":"com"},"ip":{"addr":"104.21.65.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t4k7n9qw.com/","date":"2026-09-17T08:27:04.348Z","timestamp":1789633624348,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t4k7n9qw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 08:01:38 GMT","end":"Sat, 05 Dec 2026 09:00:09 GMT"},"fingerprint":{"sha1":"3D:A6:ED:FA:F5:07:9E:9C:90:FE:B8:61:5A:B2:DE:C5:7D:5D:E7:A9","sha256":"4F:AD:B1:B1:D4:EC:02:1B:D6:A2:9D:D3:31:B2:6A:C3:A6:56:80:F1:AD:E4:C9:10:03:F4:BA:F1:DE:BD:C8:B5"}}},"request":{"raw":"GET /static/tabBarIco/icon-tab-4.png HTTP/1.1\r\nHost: t4k7n9qw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t4k7n9qw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 08:27:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 10 Sep 2026 09:04:35 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8X5ZZcI1bSRAOXHR1Fb430XK%2B7%2FVuMbO8v5sEqbqCD4RPkmNIBILnqBIixjrbmY3SGq9DZsug9e7KX3FfTPz4dAmDbTaajlNW%2BfknHHWi9cdTE7lM%2FO%2FLHB9OMk1F%2Bg%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6aa272a3-2a08\"\r\nexpires: Sat, 17 Oct 2026 08:21:30 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 333\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c6bac82cfeb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10760,"size_decoded":11520,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"24fd3089ad21de82b4ce8f9725be177d","sha1":"b4bdffbee127c9b4e13a05da56b746a0542adba8","sha256":"c12d1e6c5058d265e935171efe8c02df18cfbffc09e61b21202763e0a04673bb","sha512":"a50cc140cb1b39abfc32ec789c88cfad8fbbdfe9596245c7463e160001df6071432faffdbf65edd32e9fe30ee4abf8c28f5b9567da9f0e77f9f10c3282b77275","ssdeep":"192:GOT7cQuaN96SKj2787Dcd8YpeEJdvPRRItrN9:GvQgSd+MFXJ3GtJ9","tlshash":"8622c084e977832652e0a0e00707c925ea99d59b5c573f73f8c30b1ec8b88d92053fb4","first_seen":"2025-10-22T11:32:11.298317Z","last_seen":"2026-09-17T08:35:14.068441Z","times_seen":19,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"t4k7n9qw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t4k7n9qw.com/static/tabBarIco/icon-tab-5.png","fqdn":"t4k7n9qw.com","domain":"t4k7n9qw.com","tld":"com"},"ip":{"addr":"104.21.65.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t4k7n9qw.com/","date":"2026-09-17T08:27:04.350Z","timestamp":1789633624350,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t4k7n9qw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 08:01:38 GMT","end":"Sat, 05 Dec 2026 09:00:09 GMT"},"fingerprint":{"sha1":"3D:A6:ED:FA:F5:07:9E:9C:90:FE:B8:61:5A:B2:DE:C5:7D:5D:E7:A9","sha256":"4F:AD:B1:B1:D4:EC:02:1B:D6:A2:9D:D3:31:B2:6A:C3:A6:56:80:F1:AD:E4:C9:10:03:F4:BA:F1:DE:BD:C8:B5"}}},"request":{"raw":"GET /static/tabBarIco/icon-tab-5.png HTTP/1.1\r\nHost: t4k7n9qw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t4k7n9qw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 08:27:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 10 Sep 2026 09:04:35 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lk95QI5LWqx89XzPy2PLA6J0NxUeERz0cKaVk3G6iOc5Q52AFVjt6Rm2CB1iqw6QQmqzOFFvAGQvbYGz3PJbIY7CrBnJcY2%2BC5xGMxPyHYNkG3yduKo0MWmmN%2BBFtts%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6aa272a3-2097\"\r\nexpires: Sat, 17 Oct 2026 08:21:30 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 333\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c6bac83d00b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8343,"size_decoded":9089,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"89dc14de6bcf7232ef4655051c650860","sha1":"f42e28f787d2f59b136a676286195c21cc9e0101","sha256":"7267cfbb067e69f0cc73bfa6b4ba76d8828d9998678e5eb7b6b232ac1099398e","sha512":"6a92c5af8b35a2a4bed3dc4fab911eac1d683319f214eef2f5e985d05ded69e225764323f87652505e72f27e0b88d01c61bf214675229f2491e0a73e72bd9d0e","ssdeep":"96:Kk75myO+o8lVsFVEU0HCbyfoHMCz19B8RNORNNFUelR0o3dWTIYlYKyCmyYclBm3:t7OtLFkATBSKN4eVNldpI0hLe3bmL","tlshash":"93029f37ebdd6f089b2293a531d50e6ebd9a4729a0d00813761c9892878887857d37a6","first_seen":"2025-10-22T11:32:11.300271Z","last_seen":"2026-09-17T08:35:14.083531Z","times_seen":19,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"t4k7n9qw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.t4k7n9qw.com/api/common/index","fqdn":"api.t4k7n9qw.com","domain":"t4k7n9qw.com","tld":"com"},"ip":{"addr":"104.21.65.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://t4k7n9qw.com/","date":"2026-09-17T08:27:04.354Z","timestamp":1789633624354,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t4k7n9qw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 08:01:38 GMT","end":"Sat, 05 Dec 2026 09:00:09 GMT"},"fingerprint":{"sha1":"3D:A6:ED:FA:F5:07:9E:9C:90:FE:B8:61:5A:B2:DE:C5:7D:5D:E7:A9","sha256":"4F:AD:B1:B1:D4:EC:02:1B:D6:A2:9D:D3:31:B2:6A:C3:A6:56:80:F1:AD:E4:C9:10:03:F4:BA:F1:DE:BD:C8:B5"}}},"request":{"raw":"OPTIONS /api/common/index HTTP/1.1\r\nHost: api.t4k7n9qw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,lang\r\nReferer: https://t4k7n9qw.com/\r\nOrigin: https://t4k7n9qw.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aZT1tXhqanGSeTiVcTu1iHag8huGazffNhn8lZep1vW5lmbzr7AeslhBAGpuSVEbpjtnA6SU32CoZwkt0R7gC1paDlRYlDwCfTcsZWVbf%2FMzNIvjJ%2FisndNtMKVShwLtAk4a\"}]}\r\ncache-control: no-cache, private\r\ndate: Thu, 17 Sep 2026 08:27:04 GMT\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization,content-type,lang\r\naccess-control-max-age: 0\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c6bac85d9a120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":823,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-17T17:41:52.790885Z","times_seen":18519253,"resource_available":true,"data":null}},"time_used":538,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":524,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"api.t4k7n9qw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t4k7n9qw.com/static/js/pages-index-index.1e849ed8.js","fqdn":"t4k7n9qw.com","domain":"t4k7n9qw.com","tld":"com"},"ip":{"addr":"104.21.65.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://t4k7n9qw.com/","date":"2026-09-17T08:27:04.054Z","timestamp":1789633624054,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t4k7n9qw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 08:01:38 GMT","end":"Sat, 05 Dec 2026 09:00:09 GMT"},"fingerprint":{"sha1":"3D:A6:ED:FA:F5:07:9E:9C:90:FE:B8:61:5A:B2:DE:C5:7D:5D:E7:A9","sha256":"4F:AD:B1:B1:D4:EC:02:1B:D6:A2:9D:D3:31:B2:6A:C3:A6:56:80:F1:AD:E4:C9:10:03:F4:BA:F1:DE:BD:C8:B5"}}},"request":{"raw":"GET /static/js/pages-index-index.1e849ed8.js HTTP/1.1\r\nHost: t4k7n9qw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t4k7n9qw.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 08:27:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 10 Sep 2026 09:04:35 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2zFesD7rBFL2qJTw%2BYE9CKce0y3y8A%2FwqC%2FRmzcsb7s1VEetR1BzerHEvERnJy%2FSFBpoRgILMJVx95S%2FwaGW0pkXJFb0Deog%2FlNH0ht0GEAlTkKRndX79BXmAsmyv3Q%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6aa272a3-1083f9\"\r\nexpires: Thu, 17 Sep 2026 20:21:28 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 335\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c6bac65cd5b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1082361,"size_decoded":396099,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (55009)","md5":"1a145972a0cc643b9dbc87feba335fb0","sha1":"a534e76d8a955c0cd717dc5f882a7fb929ec3994","sha256":"f225dccf40ad6528d65b26281feeb64285280bd0cc21f0ddc0e17c9bc029f994","sha512":"dfe7cd1c5a13729e52ed7f530185d54349c26668f322e7df1bdfd4dbf7b7b4e0462e42bfb3076b888441ee80c70df2ef778b54de3702ca5cba0be0cee99be18c","ssdeep":"12288:G/pI0aQjQBAVAA9A2s3vRNIPnrJBR8m4f4sIvBRgf8ol82fD8y9K96QoPFf:Gh1CAOZ+ntkFf4fdu82fD8y9Q6Qox","tlshash":"e1251a98b654b03543a771b4016f090f9336690db50b85a8fb69e4ea6cbd44f323bf78","first_seen":"2026-09-17T08:22:13.831295Z","last_seen":"2026-09-17T08:35:14.073471Z","times_seen":4,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"t4k7n9qw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t4k7n9qw.com/static/images/homepage/m2.png","fqdn":"t4k7n9qw.com","domain":"t4k7n9qw.com","tld":"com"},"ip":{"addr":"104.21.65.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t4k7n9qw.com/","date":"2026-09-17T08:27:04.333Z","timestamp":1789633624333,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t4k7n9qw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 08:01:38 GMT","end":"Sat, 05 Dec 2026 09:00:09 GMT"},"fingerprint":{"sha1":"3D:A6:ED:FA:F5:07:9E:9C:90:FE:B8:61:5A:B2:DE:C5:7D:5D:E7:A9","sha256":"4F:AD:B1:B1:D4:EC:02:1B:D6:A2:9D:D3:31:B2:6A:C3:A6:56:80:F1:AD:E4:C9:10:03:F4:BA:F1:DE:BD:C8:B5"}}},"request":{"raw":"GET /static/images/homepage/m2.png HTTP/1.1\r\nHost: t4k7n9qw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t4k7n9qw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 08:27:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 10 Sep 2026 09:04:35 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8G4N6jPcnxG79%2BH5%2BfzuDEJiISP4Pq%2Fw6KAqPK7I9p1zvtE%2BUi43h7UKW3Qzh7mzy6vSuW5C%2Fn5LFl1bnQf2DOomf7fvBL0w4eM7uwdNsFPuobEmNKq4h7poBTtyuSE%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6aa272a3-18ca\"\r\nexpires: Sat, 17 Oct 2026 08:21:30 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 334\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c6bac81cf5b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6346,"size_decoded":7118,"mime_type":"image/png","magic":"PNG image data, 105 x 106, 8-bit/color RGBA, non-interlaced","md5":"6d9a42331b9d72708661222a470a0fc7","sha1":"eee82161d24605d227c46a3ae2e32c033ac7d8f8","sha256":"8f911f7fdbab8e1948035e8190f01588d1a9e4e7404ff153c9d7cd8f38788042","sha512":"d1961f064ea66d808231d81d6dd0ee1cc9dcb1f493feebb9fdb38b6b00c0d5332ee0b6034690793f280416e5f70e889aa18eb2d92a886f34608a8df591f72a4b","ssdeep":"192:D9zZ9g4yKazQFOku57BuT9ghLKDyZUy3zm8OyzH7:T97yJcMkT9CZUmASH7","tlshash":"19d19fd9eee82cffcf4bb3a56015cea447a0554968f0e446dd25d1e836808bd18fe4c2","first_seen":"2023-10-05T05:45:51Z","last_seen":"2026-09-17T08:35:14.06653Z","times_seen":20,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"t4k7n9qw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t4k7n9qw.com/static/index.149e085d.css","fqdn":"t4k7n9qw.com","domain":"t4k7n9qw.com","tld":"com"},"ip":{"addr":"104.21.65.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://t4k7n9qw.com/","date":"2026-09-17T08:27:03.668Z","timestamp":1789633623668,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t4k7n9qw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 08:01:38 GMT","end":"Sat, 05 Dec 2026 09:00:09 GMT"},"fingerprint":{"sha1":"3D:A6:ED:FA:F5:07:9E:9C:90:FE:B8:61:5A:B2:DE:C5:7D:5D:E7:A9","sha256":"4F:AD:B1:B1:D4:EC:02:1B:D6:A2:9D:D3:31:B2:6A:C3:A6:56:80:F1:AD:E4:C9:10:03:F4:BA:F1:DE:BD:C8:B5"}}},"request":{"raw":"GET /static/index.149e085d.css HTTP/1.1\r\nHost: t4k7n9qw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t4k7n9qw.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 08:27:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 10 Sep 2026 09:04:35 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yoSL8gUg7amyEC0TORkITnyOCi3v1USAjT847TD6mO%2FYzP%2BYDFTlEbUehbzg8IEVfmJdUWbH8KlSQRo%2BynFpkV%2Fy4PNW5fTtNmaJvDLjlkRo4WwuLtH9gjQSVj1UZ7c%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6aa272a3-17f86\"\r\nexpires: Thu, 17 Sep 2026 20:21:26 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 337\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c6bac3eca5b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98182,"size_decoded":31113,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"53c6b28515f1a1c3892442b7b843d596","sha1":"488401227bca1ed6806285fecbdbc89ec3f147fd","sha256":"f62bf853d2338897e8c298109becd21c0f3a9b14462ccf7f16f70c3cb7a5efe8","sha512":"69c4e2eba91328677cea49a96b90196e4f89af5539443603ab9ed6a616a89c227cb8741c5cb01215318211f9251f2c5fc6ce3cf1cb9b05c3dae555313b864829","ssdeep":"1536:qlIApuK7hmVmU2RS1Wu3xdynGgv7eh/nLhlvbc:hApuK7hmV+S1Wu3iGH1nLPI","tlshash":"f5a3f73719012e39e52bcd26b6c1ab5a1e60c033e15307adfbb476288bcf9c9167b745","first_seen":"2026-07-04T00:29:50.545322Z","last_seen":"2026-09-17T08:35:14.096449Z","times_seen":65,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"t4k7n9qw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t4k7n9qw.com/static/tabBarIco/icon-tab-11.png","fqdn":"t4k7n9qw.com","domain":"t4k7n9qw.com","tld":"com"},"ip":{"addr":"104.21.65.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t4k7n9qw.com/","date":"2026-09-17T08:27:04.344Z","timestamp":1789633624344,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t4k7n9qw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 08:01:38 GMT","end":"Sat, 05 Dec 2026 09:00:09 GMT"},"fingerprint":{"sha1":"3D:A6:ED:FA:F5:07:9E:9C:90:FE:B8:61:5A:B2:DE:C5:7D:5D:E7:A9","sha256":"4F:AD:B1:B1:D4:EC:02:1B:D6:A2:9D:D3:31:B2:6A:C3:A6:56:80:F1:AD:E4:C9:10:03:F4:BA:F1:DE:BD:C8:B5"}}},"request":{"raw":"GET /static/tabBarIco/icon-tab-11.png HTTP/1.1\r\nHost: t4k7n9qw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t4k7n9qw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 08:27:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 10 Sep 2026 09:04:35 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fvGhILeQitsLL0A0K%2F3qmmlUaERry%2Be9EzjDgPkP5y2Pew2gYAg0SrfaL9Y4QbqrW%2FsVblWCCsK6OzmjrAXUassaCe9iCQvZastJNLPiFsvx8ShKR%2Fqc9WT72WA6o%2F8%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6aa272a3-14a7\"\r\nexpires: Sat, 17 Oct 2026 08:21:30 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 334\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c6bac82cfbb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5287,"size_decoded":6043,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"f5c91fa66d93f1dd5c3557966db917d7","sha1":"711f70a3c7191eb2588cfcde32d6c75eb3d3e7d8","sha256":"9bcbe2972a37190df8ede2a0d1063eaf1ac53bd6761465968d4631a8d33d9dfc","sha512":"b0b035ae6e005ccce2597a6f87ed02a9168905a049ec09258530faba4475b1f210d60d1b2bf7cd3bd81dc9b97919ce0e24a90907b473010052b73e5936a7d048","ssdeep":"96:bH2Okrbwlbmmm6xNF9gQWpYD+lj/VRXB/TRCZXd48AIxMO5Wv17VlUOHNUDlYrPE:bbkvotm6xQvj9H/TRCQhWMfv17VlUOHa","tlshash":"a5b17d9812f6d4b191aea90f59ea29d5043400df1186e995a0e97cf1e0cf1f2fae8686","first_seen":"2025-10-22T11:32:11.282406Z","last_seen":"2026-09-17T08:35:14.101381Z","times_seen":19,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"t4k7n9qw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t4k7n9qw.com/assets/uniicons.2579c7da.ttf","fqdn":"t4k7n9qw.com","domain":"t4k7n9qw.com","tld":"com"},"ip":{"addr":"104.21.65.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://t4k7n9qw.com/","date":"2026-09-17T08:27:04.355Z","timestamp":1789633624355,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t4k7n9qw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 08:01:38 GMT","end":"Sat, 05 Dec 2026 09:00:09 GMT"},"fingerprint":{"sha1":"3D:A6:ED:FA:F5:07:9E:9C:90:FE:B8:61:5A:B2:DE:C5:7D:5D:E7:A9","sha256":"4F:AD:B1:B1:D4:EC:02:1B:D6:A2:9D:D3:31:B2:6A:C3:A6:56:80:F1:AD:E4:C9:10:03:F4:BA:F1:DE:BD:C8:B5"}}},"request":{"raw":"GET /assets/uniicons.2579c7da.ttf HTTP/1.1\r\nHost: t4k7n9qw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t4k7n9qw.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 08:27:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 10 Sep 2026 09:04:35 GMT\r\npriority: u=3,i=?0\r\netag: \"6aa272a3-8bf0\"\r\naccept-ranges: bytes\r\nage: 333\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yiwLxxuLJ2qFi7wMmnz5VsRoNh8rER2OE8wl4QfjnJk3sZ9ut18S0AlIBwk2vKpuemjOykeNyI%2BaBqi8WoilZIrCv0MabQI5qkOmbFQKHyOkku27vr9irhF2Sp%2FKd20%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c6bac83d02b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 35824\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35824,"size_decoded":36534,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"GSUB\", 18 names, Macintosh, Created by iconfontuniiconsRegularuniiconsuniiconsVersion 1.0uniiconsGenerated by svg2ttf from F","md5":"2579c7da7e5cb4418f36e17c71125128","sha1":"de4aad75292f9386525b52ae801f9b2252ea07c4","sha256":"32e978a546182be7be788ebf4dbce57b8cc8b6f4d9da0c9d3a46a5e030bc1efc","sha512":"690b27e2d6c53eb6bff5ffba83b69cd03496c78c546aa79705639ea4526f89f85a1fb4ca0b7352d8c8a9428c07f14d5f61cbdc8c2c45156ee815095fd0504181","ssdeep":"768:NjUnym6cVBqac6riFK/d8PWenmP7p7+A9cbWL2eRGXSOu:ZUnym6mqB6WsdenmP97dqb4lSu","tlshash":"dff28d65176d4e6ada7e4abb188761130f7dff3060b2ea15ee8ebc4e84080f005d4b1e","first_seen":"2024-06-29T16:50:30Z","last_seen":"2026-09-17T08:35:14.085712Z","times_seen":2973,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"t4k7n9qw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shapi.bigstocks.org/upload/images/d4aea8d0e6e0549986c768441f42782e.png","fqdn":"shapi.bigstocks.org","domain":"bigstocks.org","tld":"org"},"ip":{"addr":"104.21.18.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t4k7n9qw.com/","date":"2026-09-17T08:27:05.684Z","timestamp":1789633625684,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigstocks.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 18:35:02 GMT","end":"Thu, 29 Oct 2026 19:33:04 GMT"},"fingerprint":{"sha1":"D2:02:5B:7E:33:74:F9:03:E7:42:AA:39:FC:65:87:C0:8D:96:5D:A6","sha256":"35:E6:2F:4D:52:67:31:31:FA:E3:EC:7B:29:8B:F2:29:37:5B:BD:4C:27:68:3A:94:51:8A:D9:92:93:0A:26:1D"}}},"request":{"raw":"GET /upload/images/d4aea8d0e6e0549986c768441f42782e.png HTTP/1.1\r\nHost: shapi.bigstocks.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t4k7n9qw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 08:27:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 25 Mar 2025 07:01:51 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BRueO1XdLPbzPyVzlG9UbxH7L3ia%2FvsbkhYLceIO50cHH0vA8Wkl4gcLPbyIYkPn59p58UUVfc%2FeT2cEYvBuhfWtHMrbUIm7%2FDzmnkOry2HdV80A8%2FrEan4MXhO4ozZq0K0pZxdY\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"67e254df-233b5\"\r\nexpires: Sat, 17 Oct 2026 08:21:31 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 340\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c6baf8b9d9b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144309,"size_decoded":145123,"mime_type":"image/png","magic":"PNG image data, 384 x 150, 8-bit/color RGBA, non-interlaced","md5":"5d09af24a239316ce55c68823c28ede8","sha1":"7693e0945584083812498f7f44e1373608f31c9f","sha256":"91864c20a4c1c2cfb20801ac69977c76edf0ddf12a28988408e3b3ba94958afc","sha512":"3ff2b3c8a538c352870907cb750b988dc5c145f09f2b48eb36f68a8ffa2cec8593dd8e07963489873abf0d78f8e48b129ce41dfa503f25039cb44afc966357c9","ssdeep":"3072:hjB6gNlqVkhEm1HCnIXaNssPpehH3Axwmm36lfTrNPnNtNQ:h5fSkSm1HbaHPAHXmyafTr5n1Q","tlshash":"64e312b2ab851421b0ff300bc7c605aa9d87538ef643549158e76a2bc7c55cfbc8b6c2","first_seen":"2026-09-17T08:22:13.821275Z","last_seen":"2026-09-17T08:35:14.108379Z","times_seen":4,"resource_available":false,"data":null}},"time_used":6485,"timings":{"blocked":-1,"dns":8,"connect":2,"send":0,"wait":50,"receive":7,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t4k7n9qw.com/static/js/pages-ai-transaction~pages-index-bibi~pages-index-bibiDetail~pages-index-contractOrder~pages-index-h~9544ecc0.e1af8f9c.js","fqdn":"t4k7n9qw.com","domain":"t4k7n9qw.com","tld":"com"},"ip":{"addr":"104.21.65.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://t4k7n9qw.com/","date":"2026-09-17T08:27:04.052Z","timestamp":1789633624052,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t4k7n9qw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 08:01:38 GMT","end":"Sat, 05 Dec 2026 09:00:09 GMT"},"fingerprint":{"sha1":"3D:A6:ED:FA:F5:07:9E:9C:90:FE:B8:61:5A:B2:DE:C5:7D:5D:E7:A9","sha256":"4F:AD:B1:B1:D4:EC:02:1B:D6:A2:9D:D3:31:B2:6A:C3:A6:56:80:F1:AD:E4:C9:10:03:F4:BA:F1:DE:BD:C8:B5"}}},"request":{"raw":"GET /static/js/pages-ai-transaction~pages-index-bibi~pages-index-bibiDetail~pages-index-contractOrder~pages-index-h~9544ecc0.e1af8f9c.js HTTP/1.1\r\nHost: t4k7n9qw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t4k7n9qw.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 08:27:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 10 Sep 2026 09:04:35 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LdQ57iD3J%2BnqeZCmZtnt3jy6%2F0%2FvcCpoeydOw9oyHAvhMQx0pYAicegDx1rqibRz%2F7V5xAl7y2eTKyUa8FUE8xq3gguvj9Nfw4ss2au0aWwvEWFtEy82UG86T6pDpgE%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6aa272a3-37b4\"\r\nexpires: Thu, 17 Sep 2026 20:21:28 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 335\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c6bac65cd4b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14260,"size_decoded":6114,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (13718), with no line terminators","md5":"cd758c4cc131e3549f1ae8de537944cf","sha1":"57396f4e7fc1c8003af2f98278fe63f6b5eb8d47","sha256":"5427a432077500c771180618d196e2d2ad13248d89b584f690ccc922295157df","sha512":"f2688e384c0d757cd778677302ca83000fa24050da773164eb4df3fa4d1d7ff4a275e4341a7d1dfc0fbb0a1d43d5f1fce0b3e111ed9c2000061d111ed6d73daf","ssdeep":"384:7aD58GM6ArYYxSv07GbRYDYPdLTubEq2F7hF:7C58GM6ArLxSv07GbR0sJTuAqo","tlshash":"1652098af0c6f41506d341b7802f86015179bad8306646ac7bfdfdf60a9998c23a7b3c","first_seen":"2026-09-17T08:22:13.801961Z","last_seen":"2026-09-17T08:35:14.098422Z","times_seen":4,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"t4k7n9qw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t4k7n9qw.com/static/images/homepage/m1.png","fqdn":"t4k7n9qw.com","domain":"t4k7n9qw.com","tld":"com"},"ip":{"addr":"104.21.65.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t4k7n9qw.com/","date":"2026-09-17T08:27:04.335Z","timestamp":1789633624335,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t4k7n9qw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 08:01:38 GMT","end":"Sat, 05 Dec 2026 09:00:09 GMT"},"fingerprint":{"sha1":"3D:A6:ED:FA:F5:07:9E:9C:90:FE:B8:61:5A:B2:DE:C5:7D:5D:E7:A9","sha256":"4F:AD:B1:B1:D4:EC:02:1B:D6:A2:9D:D3:31:B2:6A:C3:A6:56:80:F1:AD:E4:C9:10:03:F4:BA:F1:DE:BD:C8:B5"}}},"request":{"raw":"GET /static/images/homepage/m1.png HTTP/1.1\r\nHost: t4k7n9qw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t4k7n9qw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 08:27:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 10 Sep 2026 09:04:35 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SBtt7bq0VC8ptOTD2NNlJFBy3ExjU%2FlQp%2FaUPQBUlASU2Qtv2leH7%2FlQ6UGeVLMlHGDm3yym%2FMVMFvlebaFkGTI37qzXIm3Ipu07odxIr9bmAGCAcv3PNWpoekkQsJU%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6aa272a3-192e\"\r\nexpires: Sat, 17 Oct 2026 08:21:30 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 333\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c6bac81cf6b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6446,"size_decoded":7205,"mime_type":"image/png","magic":"PNG image data, 105 x 106, 8-bit/color RGBA, non-interlaced","md5":"000ecc297124baf79f3cfb434ba16ecf","sha1":"4bedecb576642919c7aa9712749f5a2860274549","sha256":"2d6d222a478192e47b37f987cbeb5cd551ba084048ff9d4f9c5456b8f935d361","sha512":"2d71101b985f16cba06ed417b5b96de474e78caca49b9973e52a76c6eef83f3704aac0dda89c3b149fdd91c844d04bb18942d5c15f920100383b7a60bd13903e","ssdeep":"192:ImoAqEd+E2Hax9zZoYb3wgV+Nyw5JofXYOFA:sAf+E2qdL80+NzDog3","tlshash":"9fd1a08a36f8e942226545d19e470f5cdb66060bce7937717e842d1ea2042ddb2d331a","first_seen":"2023-10-05T05:45:51Z","last_seen":"2026-09-17T08:35:14.07705Z","times_seen":17,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"t4k7n9qw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t4k7n9qw.com/static/images/homepage/m4.png","fqdn":"t4k7n9qw.com","domain":"t4k7n9qw.com","tld":"com"},"ip":{"addr":"104.21.65.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t4k7n9qw.com/","date":"2026-09-17T08:27:04.337Z","timestamp":1789633624337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t4k7n9qw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 08:01:38 GMT","end":"Sat, 05 Dec 2026 09:00:09 GMT"},"fingerprint":{"sha1":"3D:A6:ED:FA:F5:07:9E:9C:90:FE:B8:61:5A:B2:DE:C5:7D:5D:E7:A9","sha256":"4F:AD:B1:B1:D4:EC:02:1B:D6:A2:9D:D3:31:B2:6A:C3:A6:56:80:F1:AD:E4:C9:10:03:F4:BA:F1:DE:BD:C8:B5"}}},"request":{"raw":"GET /static/images/homepage/m4.png HTTP/1.1\r\nHost: t4k7n9qw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t4k7n9qw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 08:27:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 10 Sep 2026 09:04:35 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yDPdO%2F4wKkjBiP31ZrMw27MdmVI%2FMkgl0IG%2Fh%2BkbVIHPDWA08BkrOaNIWS2oJNqep5Z%2BSyCm9d3xBa4sli2C1HQN61fq09WUH4OH0IrGEvUqvYGDakfkn4BrILrumo8%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6aa272a3-1070\"\r\nexpires: Sat, 17 Oct 2026 08:21:30 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 334\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c6bac81cf7b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4208,"size_decoded":4980,"mime_type":"image/png","magic":"PNG image data, 108 x 108, 8-bit/color RGBA, non-interlaced","md5":"0cc1b9eb63f9839f785920b6bebfcad6","sha1":"2c11e37ff7ff6dd60a16d4a1149d11ebeae824cf","sha256":"9718446a42f60be88f29bf467a3f6d1c1b29044b713052204e46ff17af8fd60b","sha512":"2784f31be775765dbc8e0b0db40d810e380c7e47649455ee7d1fad2c70dd24828a6a45e7775f4675e9454973c1e2f62f09757c23d0c35555dbc10321c5b106fe","ssdeep":"96:A4zvIB+jVI4tj+iLtLc8fT2R5wbcw5O7IpNzFUJAgM08zan:A4kB+vh+ktLc8L+WbI7I7zFUC09n","tlshash":"9e916c9ea72a7305c7ae38319b06af13d5287655da1d31b40cf0ca07e4b26d7dc4226b","first_seen":"2024-08-20T06:34:53.399265Z","last_seen":"2026-09-17T08:35:14.079356Z","times_seen":27,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"t4k7n9qw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t4k7n9qw.com/static/tabBarIco/icon-tab-3.png","fqdn":"t4k7n9qw.com","domain":"t4k7n9qw.com","tld":"com"},"ip":{"addr":"104.21.65.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t4k7n9qw.com/","date":"2026-09-17T08:27:04.345Z","timestamp":1789633624345,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t4k7n9qw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 08:01:38 GMT","end":"Sat, 05 Dec 2026 09:00:09 GMT"},"fingerprint":{"sha1":"3D:A6:ED:FA:F5:07:9E:9C:90:FE:B8:61:5A:B2:DE:C5:7D:5D:E7:A9","sha256":"4F:AD:B1:B1:D4:EC:02:1B:D6:A2:9D:D3:31:B2:6A:C3:A6:56:80:F1:AD:E4:C9:10:03:F4:BA:F1:DE:BD:C8:B5"}}},"request":{"raw":"GET /static/tabBarIco/icon-tab-3.png HTTP/1.1\r\nHost: t4k7n9qw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t4k7n9qw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 08:27:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 10 Sep 2026 09:04:35 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=exlPvrHVzBKKffoe49FNsjk51b3OCs69nRT9jXi2g%2FDDqBQ8KHVllXGdtedbiGn%2F9pCoGF7Rtym1la%2BOe1UcH%2F0Za%2BGsaEJUl3kSJYT0GwBaBqLGd0MhHIuQxlGX%2FH4%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6aa272a3-2c29\"\r\nexpires: Sat, 17 Oct 2026 08:21:29 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 334\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c6bac82cfcb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11305,"size_decoded":12003,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"78c657dae679083d0f48ded26cff59ec","sha1":"b4d2c5d72e09158fa39181e168581bad863288f9","sha256":"0c488ba547a9da1ee8b68fb51da8d539427df7231ab857a4664ac34330adcf93","sha512":"caa42de58a27b7d0fedd813bab728f1e2e8d85d3ed4a1e54c2e74081e147e9d90a2e5fb14004f9a7200226d187f71affff950e413428bf6744b36bba9c6eabdc","ssdeep":"192:g4EZgqg1gl2jcg7du/Qrmwib61MXlOii8mkZYwvXc9nkplMqlk/3SjkBSLm8L9hW:gLcxu/QTG61MVOii86SOq43SjkULb9hW","tlshash":"4432cf37c487acfa94f0448e7ff7ac59da00901a3b953205a4c2ce419c696984efee5b","first_seen":"2025-10-22T11:32:11.26211Z","last_seen":"2026-09-17T08:35:14.088516Z","times_seen":19,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"t4k7n9qw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t4k7n9qw.com/static/tabBarIco/icon-tab-44.png","fqdn":"t4k7n9qw.com","domain":"t4k7n9qw.com","tld":"com"},"ip":{"addr":"104.21.65.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t4k7n9qw.com/","date":"2026-09-17T08:27:04.349Z","timestamp":1789633624349,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t4k7n9qw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 08:01:38 GMT","end":"Sat, 05 Dec 2026 09:00:09 GMT"},"fingerprint":{"sha1":"3D:A6:ED:FA:F5:07:9E:9C:90:FE:B8:61:5A:B2:DE:C5:7D:5D:E7:A9","sha256":"4F:AD:B1:B1:D4:EC:02:1B:D6:A2:9D:D3:31:B2:6A:C3:A6:56:80:F1:AD:E4:C9:10:03:F4:BA:F1:DE:BD:C8:B5"}}},"request":{"raw":"GET /static/tabBarIco/icon-tab-44.png HTTP/1.1\r\nHost: t4k7n9qw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t4k7n9qw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 08:27:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 10 Sep 2026 09:04:35 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BKT4ZgcQzi%2FDpj0SCmUhgOVnvgpUYgzdgD116f1mLof6C08fuLHP22Zp4V6EQEyy%2BSqCgLTBakbOYjo9OQX2xSN5Qm07deueyjqPXClp3M5XCf9ITlBgfSuLiM6bDYw%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6aa272a3-1ba3\"\r\nexpires: Sat, 17 Oct 2026 08:21:30 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 333\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c6bac83cffb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7075,"size_decoded":7798,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"eebee7c6679e4476cb493dc44a7fb2cd","sha1":"a46f5c53d487dc84a73a1239630634ac9c5dbcb8","sha256":"930e091a0c737ad4e3c46afca779188bee544dbbee34ae0695b6ee557c3512f6","sha512":"1a345dd3d4f5a11f60a61da807888d55e8c6ffecf4468a5d01bdf02dfaff2718e4289884a805d7c8a7dfe45ce9f119d40fb467ff153154f7e87da2b649c2656e","ssdeep":"192:VScWOzl24M6miBQ6bq9MqgCdg0dIRbsf2QI03xxNMoGRKn6RYK1:MGzIgOo4FVdgRRzF037NMC6N1","tlshash":"50e18e64e03d50abd390b0224c5de4adda5b2fa1a78dc050ce858d5a461e5245f77f3a","first_seen":"2025-11-17T06:50:36.519797Z","last_seen":"2026-09-17T08:35:14.082396Z","times_seen":18,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"t4k7n9qw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t4k7n9qw.com/static/tabBarIco/icon-tab-55.png","fqdn":"t4k7n9qw.com","domain":"t4k7n9qw.com","tld":"com"},"ip":{"addr":"104.21.65.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t4k7n9qw.com/","date":"2026-09-17T08:27:04.351Z","timestamp":1789633624351,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t4k7n9qw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 08:01:38 GMT","end":"Sat, 05 Dec 2026 09:00:09 GMT"},"fingerprint":{"sha1":"3D:A6:ED:FA:F5:07:9E:9C:90:FE:B8:61:5A:B2:DE:C5:7D:5D:E7:A9","sha256":"4F:AD:B1:B1:D4:EC:02:1B:D6:A2:9D:D3:31:B2:6A:C3:A6:56:80:F1:AD:E4:C9:10:03:F4:BA:F1:DE:BD:C8:B5"}}},"request":{"raw":"GET /static/tabBarIco/icon-tab-55.png HTTP/1.1\r\nHost: t4k7n9qw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t4k7n9qw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 08:27:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 10 Sep 2026 09:04:35 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FXS0OS9xcewjAjx1qP7CeAxHYp%2FbuhG96mBx%2BAX6BWiueHSfs2UhuJ9MD%2Be4o2n5V2J%2BxrED4UCMqq4RidAmIotY3htUMdaifhOY%2FNEgtvgJ%2Fhsa0CLcusQESqVrIxQ%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6aa272a3-15de\"\r\nexpires: Sat, 17 Oct 2026 08:21:30 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 333\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c6bac83d01b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5598,"size_decoded":6223,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"51de372112a0e09d9ff26ff3d2ac09e6","sha1":"06dda767beae724f52a1bc5a364d886bfd6e30ca","sha256":"d8cc283735edf3dcae811100569ffe0441c4aa792166e0b52d04e5630b1ed6fb","sha512":"45ae0d6e15dfb35dec42c117320cb9300b917bd4f1dda9634c81d97949a4c6a100533dbd1a6a2a9c700eb6a671855c066b6a5261949d5e7f73ddb01d27121b3b","ssdeep":"96:90aInHDh1dXdztE/Q0Pzfr6E4kn7XcM8BVFJYQE:ejHDZXdztE40PjrMknwM8BVFPE","tlshash":"d9c18d161d0cf13dca8169676fde9260a0ac570ef25935a5c62dc20ea603ab1b3221da","first_seen":"2025-10-22T11:32:11.316756Z","last_seen":"2026-09-17T08:35:14.107419Z","times_seen":19,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"t4k7n9qw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t4k7n9qw.com/static/images/login.png","fqdn":"t4k7n9qw.com","domain":"t4k7n9qw.com","tld":"com"},"ip":{"addr":"104.21.65.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t4k7n9qw.com/","date":"2026-09-17T08:27:04.121Z","timestamp":1789633624121,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t4k7n9qw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 08:01:38 GMT","end":"Sat, 05 Dec 2026 09:00:09 GMT"},"fingerprint":{"sha1":"3D:A6:ED:FA:F5:07:9E:9C:90:FE:B8:61:5A:B2:DE:C5:7D:5D:E7:A9","sha256":"4F:AD:B1:B1:D4:EC:02:1B:D6:A2:9D:D3:31:B2:6A:C3:A6:56:80:F1:AD:E4:C9:10:03:F4:BA:F1:DE:BD:C8:B5"}}},"request":{"raw":"GET /static/images/login.png HTTP/1.1\r\nHost: t4k7n9qw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t4k7n9qw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 08:27:04 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HZej1r45pba7Ruvdw%2FKtTGeQFYV5S7%2FQ5aQl7sS6PUu7vEAA%2BsfSeeXMLeKXlvrunPzjBtWktceYCNeMmWWYZrlljs8k6VpeF4kLzTpcUJZmrthljuU7dmX%2F1Qh0HWc%3D\"}]}\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a3c6bac6ccdcb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138,"size_decoded":702,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-09-17T17:42:08.563054Z","times_seen":328198,"resource_available":true,"data":null}},"time_used":403,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":403,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"t4k7n9qw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t4k7n9qw.com/static/images/homepage/eth.png","fqdn":"t4k7n9qw.com","domain":"t4k7n9qw.com","tld":"com"},"ip":{"addr":"104.21.65.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t4k7n9qw.com/","date":"2026-09-17T08:27:04.331Z","timestamp":1789633624331,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t4k7n9qw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 08:01:38 GMT","end":"Sat, 05 Dec 2026 09:00:09 GMT"},"fingerprint":{"sha1":"3D:A6:ED:FA:F5:07:9E:9C:90:FE:B8:61:5A:B2:DE:C5:7D:5D:E7:A9","sha256":"4F:AD:B1:B1:D4:EC:02:1B:D6:A2:9D:D3:31:B2:6A:C3:A6:56:80:F1:AD:E4:C9:10:03:F4:BA:F1:DE:BD:C8:B5"}}},"request":{"raw":"GET /static/images/homepage/eth.png HTTP/1.1\r\nHost: t4k7n9qw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t4k7n9qw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 08:27:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 10 Sep 2026 09:04:35 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yRMTw%2FYEurLyt9%2FKj560aFm1kDMFpyys3MIPlWoKAjJOjgTK1PjnIcNWjwQzv5nZAf4%2B%2BWVYkXYaWyn18pmn9zmTVkExg3qtKVi1djEPFZHvSK1CllO6dJjbHTZh0XI%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6aa272a3-3757\"\r\nexpires: Sat, 17 Oct 2026 08:21:30 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 334\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c6bac81cf4b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14167,"size_decoded":14933,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"7ec441595fbf77531de6e543ce54d413","sha1":"cc070cbc8846bd37a4c6def0b40e0352f9ab932c","sha256":"fa31fc77aee1418e3275c1c000628be4b73a39f7409610641ce7f93171648b79","sha512":"ee214bb5e6856ebbf98881fb00325a75d89ce466090addf54e97432b9f31342e47b6afa2c9f8224af925e6ff4710c3dda3d9b42785e188a0c1f4cd0ede7a390f","ssdeep":"384:tDBh+BN6YcfuFH9pbr3auNURbMGL7eqnr+czpHorM:tDCwzfYXbr30KqrjpHT","tlshash":"d552c0447ec5a1c14c0a04ca2945903cd7b31fabdbf9e63a551583087edfbce0db6214","first_seen":"2026-09-17T08:22:13.796873Z","last_seen":"2026-09-17T08:35:14.087787Z","times_seen":4,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"t4k7n9qw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t4k7n9qw.com/static/tabBarIco/icon-tab-33.png","fqdn":"t4k7n9qw.com","domain":"t4k7n9qw.com","tld":"com"},"ip":{"addr":"104.21.65.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t4k7n9qw.com/","date":"2026-09-17T08:27:04.346Z","timestamp":1789633624346,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t4k7n9qw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 08:01:38 GMT","end":"Sat, 05 Dec 2026 09:00:09 GMT"},"fingerprint":{"sha1":"3D:A6:ED:FA:F5:07:9E:9C:90:FE:B8:61:5A:B2:DE:C5:7D:5D:E7:A9","sha256":"4F:AD:B1:B1:D4:EC:02:1B:D6:A2:9D:D3:31:B2:6A:C3:A6:56:80:F1:AD:E4:C9:10:03:F4:BA:F1:DE:BD:C8:B5"}}},"request":{"raw":"GET /static/tabBarIco/icon-tab-33.png HTTP/1.1\r\nHost: t4k7n9qw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t4k7n9qw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 08:27:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 10 Sep 2026 09:04:35 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L87waQWgNgWfktMnsMYUW1WTfjHFY1jeo8ud7L7ZbtuhCyiOaXRL73DoiPQwuNrLeXZt3GRRjbey1XVvI%2BWSI6wyvO5EndaH7VOUYFTHhQlt6mnzCyW7Rv77OOKYtBg%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6aa272a3-1c85\"\r\nexpires: Sat, 17 Oct 2026 08:21:30 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 333\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c6bac82cfdb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7301,"size_decoded":8065,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"503d504287caf8e683479df1f43c2c84","sha1":"6af2937c71035387caeb9885e6def91c0bd1961b","sha256":"beeb325b321f4f0db1a26785a3725a92e26933b88f37d13b19979142988523e0","sha512":"b42fb0c8c1b47a805f60f8f7b045e8bfdf1adb0141936683a2339d4de4e28a05f98447e88a221455af486168a4a76165d61960aa99a0d256535f0ec1b190e7d7","ssdeep":"192:UM5yA7yte41p3/rHblLjXfcrkFLm3b32KK:UW7ytey/zlXNFLgb32KK","tlshash":"8be1ae867938296114ea99072b4313425a7a05f4c9fa925073af8e8ce874f1721ff916","first_seen":"2025-10-22T11:32:11.268948Z","last_seen":"2026-09-17T08:35:14.075373Z","times_seen":19,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"t4k7n9qw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://ws.t4k7n9qw.com/","fqdn":"ws.t4k7n9qw.com","domain":"t4k7n9qw.com","tld":"com"},"ip":{"addr":"104.21.65.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://t4k7n9qw.com/","date":"2026-09-17T08:27:05.426Z","timestamp":1789633625426,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t4k7n9qw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 08:01:38 GMT","end":"Sat, 05 Dec 2026 09:00:09 GMT"},"fingerprint":{"sha1":"3D:A6:ED:FA:F5:07:9E:9C:90:FE:B8:61:5A:B2:DE:C5:7D:5D:E7:A9","sha256":"4F:AD:B1:B1:D4:EC:02:1B:D6:A2:9D:D3:31:B2:6A:C3:A6:56:80:F1:AD:E4:C9:10:03:F4:BA:F1:DE:BD:C8:B5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ws.t4k7n9qw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://t4k7n9qw.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: Ht3kzLPfNtg/3mU8Cm2I9A==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Thu, 17 Sep 2026 08:27:12 GMT\r\nConnection: upgrade\r\nServer: cloudflare\r\nUpgrade: websocket\r\nSec-WebSocket-Version: 13\r\nSec-WebSocket-Accept: RKBQI+9cVrmivdwabKBctmpqWtE=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xGMO3G400e5ylzJBBQoa1NzQ7YAtE6PpVWf0BA%2BdvBZwRlElX3scS0BB%2Ff4YyKKJrTJ1HEPGoBc3%2BccRA7PHDTb8VSedS%2BFrn428NzJN%2Fi8vy3mR0fuDJpLlmE5VW21n6XU%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCF-RAY: a3c6baf7af455a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":626,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-17T17:41:52.790885Z","times_seen":18519253,"resource_available":true,"data":null}},"time_used":13422,"timings":{"blocked":0,"dns":6508,"connect":6505,"send":0,"wait":403,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapi.bigstocks.org/upload/images/664471821189d8eefc6f9c0c02e91956.jpg","fqdn":"shapi.bigstocks.org","domain":"bigstocks.org","tld":"org"},"ip":{"addr":"104.21.18.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t4k7n9qw.com/","date":"2026-09-17T08:27:05.686Z","timestamp":1789633625686,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigstocks.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 18:35:02 GMT","end":"Thu, 29 Oct 2026 19:33:04 GMT"},"fingerprint":{"sha1":"D2:02:5B:7E:33:74:F9:03:E7:42:AA:39:FC:65:87:C0:8D:96:5D:A6","sha256":"35:E6:2F:4D:52:67:31:31:FA:E3:EC:7B:29:8B:F2:29:37:5B:BD:4C:27:68:3A:94:51:8A:D9:92:93:0A:26:1D"}}},"request":{"raw":"GET /upload/images/664471821189d8eefc6f9c0c02e91956.jpg HTTP/1.1\r\nHost: shapi.bigstocks.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t4k7n9qw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 17 Sep 2026 08:27:06 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Mar 2025 07:01:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"67e254df-95784\"\r\nexpires: Sat, 17 Oct 2026 08:21:31 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 334\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MIBitvBrm%2BUn34gkC%2FEHXW9qL1ioqYu%2B%2BzqMH9Nd8lNlVU96lbZoIA7xAEIuoyTvsedCQEzZv6r2DBHr5jUrwmhGiNgKr7L00ecRtNGwKgBq5LGn8dm%2BQg8S81knERTSjIGvz%2BTk\"}]}\r\ncf-ray: a3c6bad28a39dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":612228,"size_decoded":596630,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1792x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"76b70e4ea6918c4ac5b405fe540b99f3","sha1":"ad2aab38da885a92c9af23d7c24280ef24e4f0c0","sha256":"5e90e97ef162cce1e42888342d2070f06f532aadd863aa1d52bf9f35e79ba577","sha512":"68444b5fc049ea992a63ba2072e1f30ae40485de57c1d0d29287876bc3a786d6414eaeecf36bd88daa728128755dab2577fea8c3d7ccb48192191588c670a8f0","ssdeep":"12288:gw8vKGhQpjT6GrF8GiFMOFcIf337TeRo31Z8C9R9tD1Al4/rt:gyGKjT35vHOFcI/7d31ZX9R9Vyl4/rt","tlshash":"a6d423523c191886fdc763fca0d88c41d564fba0ea85407bb6798446cbccf79b98c9b5","first_seen":"2026-09-17T08:22:13.800447Z","last_seen":"2026-09-17T08:35:14.090062Z","times_seen":4,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":7,"connect":3,"send":0,"wait":55,"receive":0,"ssl":302},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t4k7n9qw.com/","fqdn":"t4k7n9qw.com","domain":"t4k7n9qw.com","tld":"com"},"ip":{"addr":"104.21.65.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-17T08:27:03.051Z","timestamp":1789633623051,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t4k7n9qw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 08:01:38 GMT","end":"Sat, 05 Dec 2026 09:00:09 GMT"},"fingerprint":{"sha1":"3D:A6:ED:FA:F5:07:9E:9C:90:FE:B8:61:5A:B2:DE:C5:7D:5D:E7:A9","sha256":"4F:AD:B1:B1:D4:EC:02:1B:D6:A2:9D:D3:31:B2:6A:C3:A6:56:80:F1:AD:E4:C9:10:03:F4:BA:F1:DE:BD:C8:B5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: t4k7n9qw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 08:27:03 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qbMnpNytwWrs7RR1PSx4zYp0z2%2B070uVTS%2FbAQ9icVeu9nP02jnYq58axXFJCnUKtN0UkR19n%2Foo%2BAxKo%2B1WgYk7kQDebRtfOiQgOGVyiVf38jFmE7gcWueXz1yL0Kw%3D\"}]}\r\nlast-modified: Thu, 10 Sep 2026 09:04:35 GMT\r\npriority: u=0,i\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a3c6bac03c63b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":984,"size_decoded":1260,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (393), with CRLF line terminators","md5":"03fed913b208e99910a579787e0f70f7","sha1":"e00ec70eb046b7ae8da86082238907595e9be085","sha256":"72577045d42b85bc5227c3b45a053d59ec9aa4c5997095362ef23c5cd262ed06","sha512":"58bd628e66bf8f00cfafda1729b23e7ae45b5ea7906e91186e1ff4ddbd0b7454ffe49445916a1bdaf38c7b40f2ab0fa08ee9458dd62f3c00c46e64d2749a23d1","ssdeep":"","tlshash":"a91144e25c00d56926308be87578f31c84b954baa922dc90b5ec05dd8ff4fc8487a888","first_seen":"2026-09-17T08:22:13.827804Z","last_seen":"2026-09-17T08:35:14.069771Z","times_seen":4,"resource_available":true,"data":null}},"time_used":415,"timings":{"blocked":0,"dns":3,"connect":19,"send":0,"wait":393,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"t4k7n9qw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t4k7n9qw.com/static/js/chunk-vendors.11123681.js","fqdn":"t4k7n9qw.com","domain":"t4k7n9qw.com","tld":"com"},"ip":{"addr":"104.21.65.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://t4k7n9qw.com/","date":"2026-09-17T08:27:03.669Z","timestamp":1789633623669,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t4k7n9qw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 08:01:38 GMT","end":"Sat, 05 Dec 2026 09:00:09 GMT"},"fingerprint":{"sha1":"3D:A6:ED:FA:F5:07:9E:9C:90:FE:B8:61:5A:B2:DE:C5:7D:5D:E7:A9","sha256":"4F:AD:B1:B1:D4:EC:02:1B:D6:A2:9D:D3:31:B2:6A:C3:A6:56:80:F1:AD:E4:C9:10:03:F4:BA:F1:DE:BD:C8:B5"}}},"request":{"raw":"GET /static/js/chunk-vendors.11123681.js HTTP/1.1\r\nHost: t4k7n9qw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t4k7n9qw.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 08:27:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 10 Sep 2026 09:04:35 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lxEcs%2BMewK1P3lKTew0YcenVbUjw3F4hf6HHM46qaS6QaEKK8BenTsiV45EFyH9psZW120mUl52J13MUB3t1J1M5lkjL8neBUs1Bl3%2BsUf3JJIW4haweXSX4y5Y%2F9Ls%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6aa272a3-20d0a5\"\r\nexpires: Thu, 17 Sep 2026 20:21:26 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 336\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c6bac3eca6b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2150565,"size_decoded":715103,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65192), with no line terminators","md5":"a22c985c6c135646e78bca233e8fd6be","sha1":"11f8db6603bd447b545117c9e1a63062b3592efa","sha256":"6dda29a3ec4f68793ae65a8d94d387b75267f7c078f170e10bed2b1aa53de836","sha512":"30f9c2132c825fcd184c97b21e3d714f1931f9b75a850b1ef5d466a94275d039dd5e8d825d2b82826228c25fdf71ce28b5a130d3cb6c496ccf9ee0d0f9ba3f31","ssdeep":"6144:drPSHKO8o6yykdz63JvmOiolz0dD5zbyJzLidvFQKCqKvrfw7adAxravkDacZKk:drKHDr6Ed8i5mignrw7a7kPr","tlshash":"772518c87291f07647e320b4003f210bb23b6968a84d8498f676e8e56d79d9d6277f3d","first_seen":"2026-09-17T08:22:13.833564Z","last_seen":"2026-09-17T08:35:14.072448Z","times_seen":4,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"t4k7n9qw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t4k7n9qw.com/static/js/pages-ai-grade~pages-ai-pastearning~pages-ai-product~pages-ai-quantization~pages-ai-transaction~page~d0f26a43.46d2a6a4.js","fqdn":"t4k7n9qw.com","domain":"t4k7n9qw.com","tld":"com"},"ip":{"addr":"104.21.65.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://t4k7n9qw.com/","date":"2026-09-17T08:27:04.050Z","timestamp":1789633624050,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t4k7n9qw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 08:01:38 GMT","end":"Sat, 05 Dec 2026 09:00:09 GMT"},"fingerprint":{"sha1":"3D:A6:ED:FA:F5:07:9E:9C:90:FE:B8:61:5A:B2:DE:C5:7D:5D:E7:A9","sha256":"4F:AD:B1:B1:D4:EC:02:1B:D6:A2:9D:D3:31:B2:6A:C3:A6:56:80:F1:AD:E4:C9:10:03:F4:BA:F1:DE:BD:C8:B5"}}},"request":{"raw":"GET /static/js/pages-ai-grade~pages-ai-pastearning~pages-ai-product~pages-ai-quantization~pages-ai-transaction~page~d0f26a43.46d2a6a4.js HTTP/1.1\r\nHost: t4k7n9qw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t4k7n9qw.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 08:27:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 10 Sep 2026 09:04:35 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zBZS52KVOEJ2aPMgMEJAPgyheI4vb8hm4bggW75MteLpeeZRxMOkCuK3upG4Nr0DeifwH3XC1PzEJhHRvixuP084nwncKHD6p1Uaz1H18Dz6hG42XFXLQq2tfDS6PSk%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6aa272a3-5ec5\"\r\nexpires: Thu, 17 Sep 2026 20:21:28 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 335\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c6bac65cd3b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24261,"size_decoded":6388,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22865), with no line terminators","md5":"f30b64516efe19e6bd0dc8ddd25b6ca1","sha1":"112aca5cb082b96cde783fb01da6ebded737fda1","sha256":"85640e628ee167b501b5614bb7355154087c5193384529e92de7589ff1294028","sha512":"4732fc1f42847063b7d45085391320c011ab1bd520bd9a09900fc793930906a021674a4f3d53190465547ef39c20b495081a312508966b3ee6b54f5eae4b9f1b","ssdeep":"192:MmAamgZ1ivqRs6/TV+ca3OQfMLEvTEYx2wqxc+gbkx/VZ2hqRsIoHuhXm2x:MmAaT1iS1VHa3OXLEvThxxqxA6XOutZ","tlshash":"55b2dc92e45c08e4bffbe40f935e721f6a447fa5c0a098649dbb418e09ddb7115b4b2c","first_seen":"2026-09-17T08:22:13.811282Z","last_seen":"2026-09-17T08:35:14.050097Z","times_seen":4,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"t4k7n9qw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t4k7n9qw.com/static/tabBarIco/icon-tab-1.png","fqdn":"t4k7n9qw.com","domain":"t4k7n9qw.com","tld":"com"},"ip":{"addr":"104.21.65.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t4k7n9qw.com/","date":"2026-09-17T08:27:04.341Z","timestamp":1789633624341,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t4k7n9qw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 08:01:38 GMT","end":"Sat, 05 Dec 2026 09:00:09 GMT"},"fingerprint":{"sha1":"3D:A6:ED:FA:F5:07:9E:9C:90:FE:B8:61:5A:B2:DE:C5:7D:5D:E7:A9","sha256":"4F:AD:B1:B1:D4:EC:02:1B:D6:A2:9D:D3:31:B2:6A:C3:A6:56:80:F1:AD:E4:C9:10:03:F4:BA:F1:DE:BD:C8:B5"}}},"request":{"raw":"GET /static/tabBarIco/icon-tab-1.png HTTP/1.1\r\nHost: t4k7n9qw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t4k7n9qw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 08:27:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 10 Sep 2026 09:04:35 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FS8I%2BvpjarYUJEwOIYsoF8cbzyGSu%2FnT2GxYOysAg%2BlHV0batnrLPRdaHXgME5kgy9r8OtkiOILw1Awigke4m%2BJFZr0SHI1kfH7GDRLLKFHbtpNaf4HAxxImBqG%2FhD0%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6aa272a3-1ea5\"\r\nexpires: Sat, 17 Oct 2026 08:21:30 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 333\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c6bac82cf9b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7845,"size_decoded":8545,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"b9d2018edda9e46778b69c846d899572","sha1":"cf3a5639b3b3ce6eb4469a0857aa0507dec0599c","sha256":"6ad6531bfdf19249a3fe28e78ae8324d48266fd71557e59c186d490e3fcdc403","sha512":"e34207af007975c4b6c25d7e826d15be451d95fc850fb928dab92f5ca83973e685e2ab522befdf9ba56d04139d6dc2581048e1bdaa11748ee8fb952e9d927553","ssdeep":"192:pjED3l+WzJQjC30bL//cNVkw7qpm7oEACZQmFLlEG:pE1+qJQNTUDkw7EvEAC2mrh","tlshash":"74f19fc49ad89743af1dab23353feb33bcad6c5471daa7f61b8c2d0d499c256950020a","first_seen":"2025-10-22T11:32:11.260279Z","last_seen":"2026-09-17T08:35:14.067633Z","times_seen":19,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"t4k7n9qw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"124.174.83.120","port":443,"asn":0,"as":"","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t4k7n9qw.com/","date":"2026-09-17T08:27:06.738Z","timestamp":1789633626738,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t4k7n9qw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 17 Sep 2026 08:27:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Thu, 17 Sep 2026 15:27:07 GMT\r\ncache-control: max-age=25200\r\nset-cookie: __uni__uid=rBACe2qrpFtf56kTA+0OAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__uni__uid","value":"rBACe2qrpFtf56kTA+0OAg==","quoted":false,"path":"/","domain":"dcloud.net.cn","raw_expires":"Thu, 31-Dec-37 23:55:55 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__uni__uid=rBACe2qrpFtf56kTA+0OAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":577,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-09-17T08:35:14.111435Z","times_seen":20503,"resource_available":false,"data":null}},"time_used":1038,"timings":{"blocked":0,"dns":4,"connect":258,"send":0,"wait":257,"receive":0,"ssl":519},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t4k7n9qw.com/static/images/homepage/13.png","fqdn":"t4k7n9qw.com","domain":"t4k7n9qw.com","tld":"com"},"ip":{"addr":"104.21.65.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t4k7n9qw.com/","date":"2026-09-17T08:27:04.329Z","timestamp":1789633624329,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t4k7n9qw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 08:01:38 GMT","end":"Sat, 05 Dec 2026 09:00:09 GMT"},"fingerprint":{"sha1":"3D:A6:ED:FA:F5:07:9E:9C:90:FE:B8:61:5A:B2:DE:C5:7D:5D:E7:A9","sha256":"4F:AD:B1:B1:D4:EC:02:1B:D6:A2:9D:D3:31:B2:6A:C3:A6:56:80:F1:AD:E4:C9:10:03:F4:BA:F1:DE:BD:C8:B5"}}},"request":{"raw":"GET /static/images/homepage/13.png HTTP/1.1\r\nHost: t4k7n9qw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t4k7n9qw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 08:27:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 10 Sep 2026 09:04:35 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=74O1XTtl%2Bb3ztdPkASZKmzsvHzfEzKq%2BNkypBFFkE3XU7zPhiTUHfD09pJDS%2FFMglwfwDtmqeHDQuXSk%2BXniSLYij9GhWNbYCaw%2B%2Bsv9qdKNKNBBf6UXApHCFdmU3Ks%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6aa272a3-19d2\"\r\nexpires: Sat, 17 Oct 2026 08:21:30 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 334\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c6bac81cf3b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6610,"size_decoded":7120,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"553834d62a212aa0a4d4d315a5260cf7","sha1":"08e0556f80c164e95ce30fa8fc6cb230db9d459b","sha256":"39b07be3a59bc770ceedd164e61d762e653467b36763352bc6fd40c8a599e5c1","sha512":"bd911fe7a3f9a97b6e9b469ffdd6a446941f15c2b372a6e2eddf61076abe659ae09d8f0ad41301d09ccd0fd04ea2ade042f382dbb0aab4b5194ac7480b4612f8","ssdeep":"96:dSK2CcM7Wi3KV/aaAV2f5Wa55uw3K6rGfwNbM67YMrR2ldIM0FrF54NvYuFI06XY:QxyKL7Ua5zrBM6lnp54pB5v","tlshash":"81d1afc3fed0e812ebc81e088c57405a8af70bb19398f975e8e8d98454716fd55582ef","first_seen":"2023-05-26T11:52:40Z","last_seen":"2026-09-17T08:35:14.099473Z","times_seen":22,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"t4k7n9qw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}