{"report_id":"773a04e5-4d91-452f-9d1a-d439898d9bd2","version":6,"status":"done","tags":[],"date":"2026-03-23T15:44:31Z","url":{"schema":"https","addr":"dewanusa.quest/register?referral=aba5101774263051952","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"172.67.178.197","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"dewanusa.quest/register?referral=aba5101774263051952","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"title":"Dewanusa - Platform Official Game Online Terpopuler Di Indonesia","dom":{"size":6643,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (5178)","md5":"23807b3d4e0cc934b7763a97f1bc442c","sha1":"2cc9f93ce6726899acae0ab122ca0f32435cd8c0","sha256":"a922b0b735f787721fa1d51cf51cae163648d22921a6a26b64d039447f5732ba","sha512":"b2b689cdb8764930645f5bc9c081a118f6a08aa909b1ed8547fbafd35992b19a964addabe3a1d61bfea1fb21c5067b0491dd9e562970c708ff265ea76363f5cc","ssdeep":"192:bAG2vs2FsQIHm4d4v+R7VdnJ0lXjLMhON8jWz8mlggk3hp+N:2edVpcjLIOMWz8mlggk3hp+N","tlshash":"a5d1313f413127399027de6c4bb477574238d46a7d6a67fa25126a19c7cbe8308e338b","dom_hash":"domhash1b4ad9dcc14e775302ead940e1ae03a3","first_seen":"2026-03-23T15:44:44.409616Z","last_seen":"2026-03-26T08:43:48.618217Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"dewanusa.quest/register?referral=aba5101774263051952","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"172.67.178.197","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-27T15:44:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-23T15:44:11Z","timestamp":1774280651,"ip_dst":{"addr":"43.132.105.206","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":53604,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Tencent Cloud Storage Domain (myqcloud .com in TLS SNI)","source":"{\"timestamp\":\"2026-03-23T15:44:11.223110+0000\",\"flow_id\":692820634161615,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":53604,\"dest_ip\":\"43.132.105.206\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2050737,\"rev\":1,\"signature\":\"ET INFO Observed Tencent Cloud Storage Domain (myqcloud .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_02_06\"]}},\"tls\":{\"sni\":\"core-1333692039.cos.ap-hongkong.myqcloud.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"699a80bdb17efe157c861f92c5bf5d1d\",\"string\":\"771,49199,0-65281-11\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":910,\"bytes_toclient\":1606,\"start\":\"2026-03-23T15:44:10.709071+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-23T15:44:11Z","timestamp":1774280651,"ip_dst":{"addr":"43.132.105.206","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":53620,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Tencent Cloud Storage Domain (myqcloud .com in TLS SNI)","source":"{\"timestamp\":\"2026-03-23T15:44:11.481086+0000\",\"flow_id\":4835592808280,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":53620,\"dest_ip\":\"43.132.105.206\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2050737,\"rev\":1,\"signature\":\"ET INFO Observed Tencent Cloud Storage Domain (myqcloud .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_02_06\"]}},\"tls\":{\"sni\":\"core-1333692039.cos.ap-hongkong.myqcloud.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"699a80bdb17efe157c861f92c5bf5d1d\",\"string\":\"771,49199,0-65281-11\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":753,\"bytes_toclient\":3092,\"start\":\"2026-03-23T15:44:10.960344+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"core-1333692039.cos.ap-hongkong.myqcloud.com","ip":{"addr":"43.132.105.206","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"domain_registered":"2013-04-24","domain_rank":0,"first_seen":"2025-07-23T13:52:43.558513Z","last_seen":"2025-08-27T21:04:31.385593Z","alert_count":0,"request_count":2,"received_data":442754,"sent_data":1011,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.livechatinc.com","ip":{"addr":"2.19.183.147","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"domain_registered":"2005-10-31","domain_rank":36142,"first_seen":"2012-06-22T08:37:34Z","last_seen":"2026-03-23T10:39:58.103915Z","alert_count":0,"request_count":19,"received_data":1401214,"sent_data":9141,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}]},{"fqdn":"secure.livechatinc.com","ip":{"addr":"95.100.107.136","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"domain_registered":"2005-10-31","domain_rank":8212,"first_seen":"2012-08-20T19:27:12Z","last_seen":"2026-03-23T15:01:12.367212Z","alert_count":0,"request_count":1,"received_data":2002,"sent_data":713,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"172.217.20.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-03-22T22:23:33.61086Z","alert_count":0,"request_count":1,"received_data":466394,"sent_data":435,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.livechatinc.com","ip":{"addr":"95.100.107.156","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"domain_registered":"2005-10-31","domain_rank":29526,"first_seen":"2013-12-20T14:27:35Z","last_seen":"2026-03-16T21:42:39.776913Z","alert_count":0,"request_count":4,"received_data":22065,"sent_data":2589,"comment":"","tags":null,"fingerprints":null},{"fqdn":"accounts.livechatinc.com","ip":{"addr":"95.100.107.136","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"domain_registered":"2005-10-31","domain_rank":44666,"first_seen":"2017-07-31T05:50:56Z","last_seen":"2026-03-23T12:39:59.395752Z","alert_count":0,"request_count":1,"received_data":1797,"sent_data":534,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.files-text.com","ip":{"addr":"95.100.107.136","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"domain_registered":"2023-08-09","domain_rank":89437,"first_seen":"2024-04-10T05:26:58Z","last_seen":"2026-03-19T20:09:39.920547Z","alert_count":0,"request_count":4,"received_data":391000,"sent_data":2090,"comment":"","tags":null,"fingerprints":null},{"fqdn":"dewanusa.quest","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":92,"request_count":92,"received_data":2984503,"sent_data":53805,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dewanusa.quest/register?referral=aba5101774263051952","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7b047d2684359452e6a328297ad1d89e","sha1":"db895c7869fbeb736aa5e869d15d915c1cfc78ff","sha256":"2587d8031afc7850195ba58b0e975d3210a273ccc78aa4513d1a79c876dd8df7","sha512":"dbe72095ec055849ba17b4e9647c020b809cacc0f7d17db44faba85e6dbe75675cb02a7e343c5ccac64b0aec48c44d12474ad3281af9286e5f8df728bc2c2463","ssdeep":"","tlshash":"17c08c88210a0c7241a626008b2fa604b0423214d4e8ae21888963045e30e07db44820","size":153,"data":"","first_seen":"2026-03-23T15:44:44.533979Z","last_seen":"2026-03-26T08:43:48.81751Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/5635-634e7af486094013.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d7309f2b4a216402a2a3af3148b65fa","sha1":"04de0bd77f458970ea1785f713571e441155cf2c","sha256":"4803b1e8464e102e70b53de21e9c02a06eb99d446f8c4d3f9619f5e47f5c536d","sha512":"8f8128016b282173843523fe40262969dd604a36089ce230a3fd47ab4d5485010b0bf977578345ef8de8b6e06911b875905ada73d9d8ff2cb1169492762a58bc","ssdeep":"192:urep/cZpmoOwhWKSv8hcXS4meDEagFaBij3W5wFfK1JN:urXI78hcXS4mQaF8wW5wFf+N","tlshash":"3802e7d471d2f470bba79160d03f406db21c28541a8cadbcf3a3dcf429a05ead222b69","size":8969,"data":"","first_seen":"2026-03-23T15:44:44.530202Z","last_seen":"2026-03-26T08:43:48.694066Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/main-app-b61413a84bc595d1.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"873a366407cddd9410a06f6bc85f65b8","sha1":"1845118bd7f0a9cf92be879a0d5e64d9a0cb98a1","sha256":"74a13df85e93d18fa1a8ca01360d7a6affc5eae57b04d001da47045f6e2a8eb4","sha512":"a56c1673ed347c16b216aa36a054ec91610141f4af548929ef85f69a1750b0b4145c2392f0dd9acbbaa3bf8d97186614ef2436b6ab6c08d2940e1a2819f9d238","ssdeep":"","tlshash":"a4f0fb9a4f1cf52f5d26ad75fe97ace2285f5275202b4e606901de713c23bacd270414","size":572,"data":"","first_seen":"2026-03-23T15:44:44.493231Z","last_seen":"2026-03-26T08:43:48.789753Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/9.xhyEK0_l.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.19.183.147","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"c96a39460d2b0a92409b2b92f3da88f9","sha1":"c1ad7e3c7f38743ebadf589676726dad6799a9d5","sha256":"af2012b0cdfa449f186df2f8dc9b3e64b48b8c5c630cc8d3c4df61973499e7c4","sha512":"c6a642b4f09c7dc0b2679c972cc99e4c1e00e268d309aae062883d3eeeb7d3e39bef53388dd20aae7f733da57ed2374c1b12ded0997cbca2762b4b03c332cbfd","ssdeep":"","tlshash":"27a022ca38ca32ae020230300f0f20c0e0b8c02c030e0328800a0200b2300a002ffc3c","size":74,"data":"","first_seen":"2024-06-24T12:34:03Z","last_seen":"2026-07-27T01:40:34.400213Z","times_seen":18485,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/11.DJPUQwQu.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.19.183.147","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"640caab52100a1e9dfe618aaeb79838f","sha1":"4654776a82e5405614a595d40cb33ca2b5bae0b5","sha256":"fb8eb817d7251014c136b441bd4004fa6567908059013edbb938925f23b67ceb","sha512":"17d605182be517c5e797b2fd823b9ab7b6bd73d97bd2c3d11c5eb29d108cd350d789116528e351abaebdf3654cc65100b9e3353064ba38c9ab9008126c6a3061","ssdeep":"","tlshash":"00e08cbdfca8d92152f5e9f8c0b60822cb593b0e502382b0f60e6f4a9519199a552826","size":300,"data":"","first_seen":"2024-08-27T15:26:59Z","last_seen":"2026-08-09T12:11:02.310365Z","times_seen":29139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/register?referral=aba5101774263051952","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b09acf40f4abfd8bf0b9a1ca33d2cbd5","sha1":"9f01384d4cfba92df3877d38bba2eb4403bf0849","sha256":"4198fb6f0c5b921082254d2e9cfc93dff7fa98614d6a067afe5c9a0578442caa","sha512":"57da3f95f478c0c112954d2dd98051aa77a2b82c5f2fe7ba40e88fa0f50d516f33e159febf42a0172a2c3e61950b757f7a4a156163e6b3067b99f467f3904529","ssdeep":"","tlshash":"19011289fc42b07696963228763bfa07516313251894a4336efdc36fef32d97811368c","size":844,"data":"","first_seen":"2026-03-23T15:44:44.534871Z","last_seen":"2026-03-26T08:43:48.819577Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/7578-4507425450582a27.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eeab93b4025d2abd1d49ef6a95b5541b","sha1":"06e264903c38d96e19791ef54e9011092fe1b743","sha256":"a5aafda15423d305b79593bc0399fd6b72041fa3040fa127467b96826d97421b","sha512":"10b3614ff6fb68aae381a3327b3356415dc8ec70a75779c137a55a9c6436667df2338de0facd07232e7f6cd81ffb1741d6fe9c7dafc251a801ace98aed1be4e2","ssdeep":"192:TjJWjEQ8vRTrNvjJpSArUTSf5JAtpueT3bS4c:/JQ8p5vbrUAMtIe3K","tlshash":"03e1d7b9b5d8f68475e74dec24fb840ca15e092cc03a1a2dfbd564661296dd03827bec","size":7305,"data":"","first_seen":"2026-03-23T15:44:44.411706Z","last_seen":"2026-03-26T08:43:48.704247Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/8548-dcb26dca6b83bdbc.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4533f2f5c172d95fd90bb5b6a7d1d1b5","sha1":"3beac665fe87c54301f286b9f645b5b4f81c22ac","sha256":"134271ad0b9fb6a7119793018ad7d4bcd7e87e8c413986f4bc3af0ebd5d5bc9d","sha512":"994404b82dfc71f7e6f7fbdb37c635257e691c142c22856395caefe83c5eba717e1e70aa6929e730a1e99e79611d00afdee4b4a83cc185886fdc1f55ed8dd968","ssdeep":"192:kDQ0Sg+W0Wu39iHTVz0x57k3Tv59kjCQsENC/MET0IkV:gSgpu32Vz0x5o3Tv5KjnsEkEEwIa","tlshash":"f62267a87f2390626b3f4bcde95e8bd8f71a221217150e79f67738550a5cdc8ec82149","size":10484,"data":"","first_seen":"2026-03-23T15:44:44.419139Z","last_seen":"2026-03-26T08:43:48.762348Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-B9DLSJH0MC","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.20.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"020ab8e3d40c146ced26f29edb5cca27","sha1":"2f645715a050c858f25550822eca4c6d1b53b450","sha256":"99f48ce672519a94a7796e59c14ab6d23edbc3575c4a576a2eab12f656ad3cdc","sha512":"7cb898de167c7c01d1e0cfdd45a46158919b2f0c86cc69e943c310d557d07c6202d733a2499d51962a7d977385ae066837b4fa25b7349e5b375178f1830b8eff","ssdeep":"6144:TOHJ8B4fKAfICc93KwiKHnm8SBtS5K2wzO3Qpan8Gv/UywU2yIS+p:Tr4RfICAbHm8eeBUX","tlshash":"a6a4f9ceb3da70265396f478903f018ba57b28a2b45cc899f189cce42d7465a4277f7c","size":465790,"data":"","first_seen":"2026-03-23T15:44:44.488569Z","last_seen":"2026-03-23T15:44:44.488569Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/livechat.hgJsKRWh.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.19.183.147","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a06ecb0aea6247a9cf4458c604c0910","sha1":"1cde3c0d6ccec1951dde410fa90f224572d0f567","sha256":"e8317dbfe5c4731a8f0b8d2ba68cf03987156d773de81f916e6861a7c5a817f8","sha512":"614992feae9cf682a18c5e8d9893587e67be993e4d02566ba0fbed9d3e7572058aed41237268ed19428a1f54606d9f1926680c7ac086a38c7597eeba26aec597","ssdeep":"","tlshash":"75e0cadadb0039e2f688ddf4c404e4e206fb13aa4bb583b084cf137153150a5de06502","size":401,"data":"","first_seen":"2026-03-20T13:10:16.665174Z","last_seen":"2026-03-24T07:16:47.182581Z","times_seen":223,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/531-1c355ace24eaed22.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"583ae2704f651d4e3eb375bc8d227e2c","sha1":"fc3842f8ee5d1caef0b7b7405aedeeefa318eeea","sha256":"6857b35537b56f58c47514be3f92ccdff2485fc79bfb47fca2149e727b910316","sha512":"77cd5b125754d3e0c0c2e7647adc0fc0778dde7153993068cedba2c80722baa5f3dcd9b4e76035181e370428be8fa1bffd2087510d25ab58256809abed45c76b","ssdeep":"384:KTMMTptRCIMjJKq71/5w4fFtwXSKrNzQU7bcgkiTkToTH3Cs:8zTzyNYi1U7bcS62l","tlshash":"9072fac1b051b4f4dbf741d191ff400aa33a3e486d2e8218b1b9ac972a516ec7257fb6","size":16588,"data":"","first_seen":"2026-03-23T15:44:44.52676Z","last_seen":"2026-03-26T08:43:48.634215Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/934-a7039514578e6f7a.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d579e34f0dd9aa8a5ea228b3e0150a93","sha1":"155184d5f39552a5e161a542d5cbfce0be74a51e","sha256":"631b5894eecddfa397aa192ab4f051c69a36369115b10b1ec56f14af38e5fb1e","sha512":"a23df9fc8a78db6e2865ec8e64a65be8bbd6481cabe42eae18dec5678f184360c6abe2061f311e20b665dbe0352fb8bff82f5d554205327e6d2a491730e355f5","ssdeep":"96:dq0BbZ6O7yCtR8hXsE4C7RRmMKIyNHI/bSI1Mqz81fuyV4tNv9fA2Xh2KoZZKQQH:nljxosVCjKIpTSgXafVV43atZZjLdJ1C","tlshash":"6ff196e1f792a465ad6bc2c9e5db8804f6390a0416250e34f173189432886daff53fb9","size":8113,"data":"","first_seen":"2026-03-23T15:44:44.527593Z","last_seen":"2026-03-26T08:43:48.709558Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/register?referral=aba5101774263051952","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"22e25f9900325b878714300592041891","sha1":"274749a40433c3ebd1defe687ea1eace32dd9b1e","sha256":"0931c9a5cff0f3ada852d407d54fa300e039e45c3ff5ab6e4daa0a97635b55d2","sha512":"7a111778aab02a5d3e423201a207f247409528aad219aa550813eec0dec63dab4d093c8e66008cc8fdd52e9a7a1585facb8a3a998a611325844b8e7355a6ef90","ssdeep":"","tlshash":"f0f0234c3c52b42337f93634c3278e6f3359070135839524c605cc346c544c60896c8d","size":444,"data":"","first_seen":"2026-03-23T15:44:44.535731Z","last_seen":"2026-03-26T08:43:48.820286Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/6974-bf9309e9fff11a70.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9cd2eb22fbab8a4a8acf5cc529724ff","sha1":"1ae9ec2225ec8f1289f939259897697ed32cf114","sha256":"abf25cacec44e6e0bc3ab8f53321cb97b4fd618b3fc763314d9984184dbb832d","sha512":"297888af53216907e700d54954c45fc2d589c34ddf0aece1ad4d8bb25739307daf5b0a0c69401735382f897bdbeab05b8a4ffcbc724bd15cb9ba09236c279937","ssdeep":"384:f+R9XKKkH19cOBrZchQt7kgR2W9ROkTfqxQrJJURFXPqCywZh0:ZlV9cOBVchQ572W9zuWibXPqb","tlshash":"dba2a56de295bb3c579df608e6360c047e1b0866db45a0f899d8a7c17c7c8c52047b7b","size":22457,"data":"","first_seen":"2026-03-23T15:44:44.497243Z","last_seen":"2026-03-26T08:43:48.669464Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/831-60bf24560e714f89.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d6e46ba43b7611fa2ae52a5e87f88b1","sha1":"eeefa7168c12253e4884c2d8828b4bb9749b2147","sha256":"79a6c745e7e326c82901e3469a2a81abcfd7b00564b7bf2353810a51f910dd00","sha512":"b82c554ca414467316f85e46313a42a00cfd3a4cda145e79f969093b0ed7b9dfe42633e64334ff275a2e736fdb6e73fd62bef5a5efd895a0cf47db45ce49b9ff","ssdeep":"1536:krfAB8lnYhJRaKF+FsktCECSAgstHurzQTzl1rBuyfOabKAzG6O/bBcCl9gZDWIi:kbeDS3stYUTzlt6A4zBcClmJXSlh6B3y","tlshash":"2d932ad9b692f87597ab83c8c46f0545f22d0528251e486cf2eacce21459ec8e473fbd","size":92033,"data":"","first_seen":"2026-03-23T15:44:44.420145Z","last_seen":"2026-03-26T08:43:48.772134Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/register?referral=aba5101774263051952","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4941b1c2c240d870fc03ae0406939074","sha1":"d1b90bf12ebbfeba06c64eb2edb1d30279ef5551","sha256":"87b8eecf67a7b491ce3e9a9b295789ca5820212acce17d6745822a72fc057b8c","sha512":"b704e2f8b7df0e3c9639f02ba11f7a76036ff823b96da06b8cfe7a9a9c1df7d5a4d170b78f838f38dfcd4affa57ef0b4580bd16d2dbd453d9e30f9f68e064ae0","ssdeep":"","tlshash":"13f0239c3c52b05337f93634c2239e6f3352070075835524c606cc2828544c61886c4d","size":445,"data":"","first_seen":"2026-03-23T15:44:44.536539Z","last_seen":"2026-03-26T08:43:48.821919Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_dynamic_configuration?x-region=us-south1\u0026license_id=17809494\u0026client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5\u0026url=https%3A%2F%2Fdewanusa.quest%2Fregister%3Freferral%3Daba5101774263051952\u0026channel_type=code\u0026origin=livechat\u0026implementation_type=manual_channels\u0026jsonp=__za5a2jacvg8","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"95.100.107.136","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"11623aedb8b1033772bb3a181b5b3ece","sha1":"63fe3d02f4b2dc8799716a7e52d0773899ea2e52","sha256":"93d1bed6bcb165f130a467a8a950276111f205bd8a1d104651089dfdfa6126c1","sha512":"fe41c109caa74cc98b1676cde7694285c00e93a7fddff8e5e1d7512d6502a49c41df33728180e0878ef4df7377fc27d4c0e19eacb5fd6aa2523101801e9df5ce","ssdeep":"","tlshash":"b7e06873e905843886c5e3f1c0046a41ad34029e9084b8bcf5aa0150520f7eda724917","size":385,"data":"","first_seen":"2026-03-23T15:44:44.481212Z","last_seen":"2026-03-23T15:44:44.481212Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/690-eb9a0daf484b161d.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b75a7616909d74cf21e2a5da53519e4","sha1":"56c2bd4ef9f0cce901e8ca08464f41a680c3ce4c","sha256":"d108fc2e666ddfaf6e5a1bf9342bc91eb5b5aca8345e2c46f8bb74715f89ab4c","sha512":"a28064a65c7c4ac8c2dd0e98a7089a865d53019a6954d093f16d790e325659cab35f4456c2ae4efd909733b872d9132142e3ff94bb4764124c2965017232cb0f","ssdeep":"192:5A9eQshaA4xBSSwSVMX49sW31xNZZQwARcAhZbNWIepCx7TQPL9h:5vbamSBmtW31xNZKwARcAhvW2xnQD9h","tlshash":"35f17474a75194a03f6f49cce88e4d94f72a92028f394c75f57a1aa4538cbc4ed413bd","size":7648,"data":"","first_seen":"2026-03-23T15:44:44.496281Z","last_seen":"2026-03-26T08:43:48.714704Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/register?referral=aba5101774263051952","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"57feb403fc0ad297195f748b79c1764a","sha1":"d16670ebe7c64508aebdfffb42f298f4292b65cf","sha256":"336b99994a8910f317baccee842e3a4eef42e77320d2d460a47f25e12e76cc46","sha512":"61112c0fa9dd83eb65e241c21991c5926824b562e3a6186d08f9f207c0cf3396dbabbb1ddd39c2156bceafcfd9f0d85dc1cd0aad78b4331e8d5001b440436d39","ssdeep":"","tlshash":"c1f0a35d3c66b05737fd7538c667ce7f33650b0175839525c645cc2478544865886d4e","size":445,"data":"","first_seen":"2026-03-23T15:44:44.537354Z","last_seen":"2026-03-26T08:43:48.822853Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/tracking.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.19.183.147","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a344c67ab1b42e6ebb9c23e3bd916d99","sha1":"1b8af7b30cc9831348b1dc8b61cb57ae912a2b05","sha256":"216a409d1add9fcb0ec72ef2d4d02cbab37761ae2dbf41dbc2fecf6aae0474ae","sha512":"df8fe41d081450012161536e726cfe19aa425e2bd3544f8d3e612d9c623d4fc480ba7a60f9a9a6270a06121db1edb0a310b9d7e7d0ae9b5a1bfcd94980b07fe6","ssdeep":"1536:E5y/uRri7DJnagIckNmeuR5bydWiBwpDwLCPoRvCRW6Rtt:E4/uRu79aXuRxyk8vCdRf","tlshash":"07a338d67282b03493f785e7a17f6216b33a291c740d8410f17cec6a396a9878177f2e","size":102724,"data":"","first_seen":"2026-03-20T12:44:21.754759Z","last_seen":"2026-04-25T08:26:24.664416Z","times_seen":269,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.livechatinc.com/customer/action/open_chat?license_id=17809494\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=b8f4f49c-d724-4914-a885-4e5a1e71f678\u0026use_parent_storage=1\u0026x-region=us-south1","fqdn":"secure.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"95.100.107.136","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"d30bfddcdb3764a782b7c8584021d1d6","sha1":"64ed02149d0db57e6c1d68992361d7c1330a663a","sha256":"5a8894efd9ef253bc344f5587ea4fb4f4b8da39d4dbd49a390c2302898411623","sha512":"7f7061097e172e659abcf34d29c148da0bc746fde1307cefa2bcc88ee94db292ba498b3f287a8436b39f9e6d44d5e145350896e447ac7c3cfb281a91a5bc6c97","ssdeep":"","tlshash":"79b09222c200942a24ba8118239fa6073110537a80660c1b143c64a436e610f80a239f","size":105,"data":"","first_seen":"2025-03-02T06:33:06.481005Z","last_seen":"2026-07-27T01:40:34.488861Z","times_seen":26483,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/7.qYTqns9Q.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.19.183.147","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"d541ce2d754402b833cc65b76eaea2c6","sha1":"c36a92a0f5cef497ce42b1e8b4c72c8d9bd3786b","sha256":"80353503e48ebf6c2ae9f70184d3e758f64bacf48afe147e039df807509200cb","sha512":"f8cd5cc49f9276c580419958bf312ee0a311194fd41d116ee709e56401d769511700031ec9f3e6151f8da6b7e13b16e374a231e31cb00b92413ce5c751c2a0b6","ssdeep":"","tlshash":"f090044530d334753111111c453f5c0551144c4c05d55730c010d5551f514f4571fc4c","size":40,"data":"","first_seen":"2024-07-04T09:32:22Z","last_seen":"2026-08-09T12:11:02.339658Z","times_seen":29935,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/2619-04bc32f026a0d946.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c358925a71873c489c9acf268fcec12","sha1":"920c46adfeeefb53491083e8f0167ff485bb5c0e","sha256":"a9b6c2213ea787a015c0169d198b4a90d7a44a0cc17abb0d132e8362d3016ced","sha512":"4642c5b3998c2ed71d006501a710a64b8c58ce5310963dd3ece3f4b4010e8ffef9df1364e33cb575869705f78893217bcdabeec60f947afd64fcac6a60339892","ssdeep":"192:w2cihbWekOYxxURMeobT9jZHYOHC0dwMcGW/j:RxUGMFvjimwMcGWb","tlshash":"0b02c8e675e1f8e2836b0190443b100bf37e1db5181e9184e3a95ce6f9b046dd1b2faa","size":8564,"data":"","first_seen":"2025-09-10T05:14:21.968653Z","last_seen":"2026-08-11T08:46:45.420369Z","times_seen":4159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/register?referral=aba5101774263051952","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7ee5f03e3c07d4ee320d20852b0a1fa6","sha1":"9c7e216b8e79c03e795c876e6cda392b3f27cdf9","sha256":"00ff832f87d5bf2967e74413cff98915f6b13157f580cdb03672f25b1675e1ea","sha512":"a2964c3a4164387a61e148953df78a87a469e5362b4dbe5df1b060ea83266f59620b02a48a5a9f77492b29c5a390553b23cd6ca6687a7757e7db8c8b1ef2e759","ssdeep":"","tlshash":"bbf0ab9d3c66b0673bf93739d623cb6f33a607017583a525d646cc2468649861886d8e","size":445,"data":"","first_seen":"2026-03-23T15:44:44.538604Z","last_seen":"2026-03-26T08:43:48.823554Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/3004-d71fa8f3a72b482a.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b3eeb5ea65a7b13f084b59ea1b1a387","sha1":"49b8903f335edbd7ee67781ed9d52b08b56d3a1a","sha256":"cdd756e4d00c3a4f84e1fab47742c808667b81ea48bcd24db850b00f793f8319","sha512":"25ad370572e1133b5c6b8a035f28a72a935c316b5cca389b699917b24a705848d50355fd5f0ef9541d787c0a4567c54af461730f86764eb8f7a60783a9470226","ssdeep":"384:CQ6Ciq+wfMD/baeBxH+uq1mBomW1mfGGWsoLQYlT1Nnmb0to5j5MNblEn8hXbKBk:uxIMTbaeBEuWmumJWJEYx1NnmKo5j5MJ","tlshash":"f2a2f7dc3290f0f1567b83fa807f401e71375924228ea110b155e6dd2c79ebaa26bd7e","size":22378,"data":"","first_seen":"2026-03-23T15:44:44.475823Z","last_seen":"2026-03-26T08:43:48.683106Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/9562-2506a7181cab6977.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bdb31477fb30573c1b899a750ff9f77f","sha1":"9136823ddaa06a365a442ce61d0c205edcc3bdea","sha256":"fd988fc1b2c8a9e9314f60c3d98cce088b305d478a317f1b20bb50ae8d75c1da","sha512":"5710bd365fb8a321af92ccdfe917c1398d7e84edbc7978e422c6c04fdd7e40bd3414a498f6543a79d43b2d20f0cf37903dea8da79552f7894eb8e41304bff2fd","ssdeep":"","tlshash":"e31198280042f8345bf7b9dcee4f06417ed609062528d646a3636a01314774df061dfa","size":1000,"data":"","first_seen":"2026-03-23T15:44:44.539518Z","last_seen":"2026-03-23T15:44:44.539518Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/app/loading-283d6049c6462cb3.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e42255a6ffc1ef644fee177ae658d9f4","sha1":"a4c7ab46e12a1bcb21da60c79eaabeb27885f027","sha256":"ca666a8ded373a83e94751c9b38e7caea3d79cc41d5eb9becd2f4173b5dac5a1","sha512":"78316e3fb0ff16d8d62567cf7b6f53155ec1e200f8b03b5c95580afe2966f14065a31b525a9f3c4fca0a2132d1442677cfcf00f0d1d154148fe6bb28e34e808a","ssdeep":"192:s8KhKfaOSOvxzQYHM51Qn3q9jIde8R8xOpCIFDPu/0LaSk6:sWTHM5I69jNWphu/0LaSD","tlshash":"f712e9cdb682fc3a576352a1c2bf1102f31e18005e1d6914f2b6dc782656dae6239fb9","size":9729,"data":"","first_seen":"2026-03-23T15:44:44.502288Z","last_seen":"2026-03-26T08:43:48.724521Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_localization?organization_id=b8f4f49c-d724-4914-a885-4e5a1e71f678\u0026version=4940c52ca0caf914a8b155bf4411bbe5_e962324dd193458bfabb5f293c0a24ba\u0026language=id\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_localization","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"95.100.107.136","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a10e19f65a782b170b55df663effca14","sha1":"169df5fc084123d96dd1ec7f1f3bc10965ed2d0b","sha256":"e46a5c8d8fc101b485540b22483b4830257d649722006dc63f8eae05c6a2ef01","sha512":"531cfa9828df473b1587cac3aadf1184a50d1509f6156a4f13161b62c215a3370f54f65960d548ff22fcfa3dc0d3cedfdeefe610d2a365ead5746d43998e6d3c","ssdeep":"384:k8eODwsFJ9KlFZmERbo1DQCBuLdAeAk+BdNJ0L:52i4FAnHuJAY+AL","tlshash":"2a62e8540daa79aa0b2753d6f5db5e1e38ec3368ab401a2fdd984f3042847c1735ba3d","size":14603,"data":"","first_seen":"2026-03-23T15:44:44.499934Z","last_seen":"2026-03-26T08:43:48.764578Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/1419-a731b1653862e5f8.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e08ec9625c275818ae651494a5d1476","sha1":"40904fec8f5f8bd76b824e58520386650e7d7fec","sha256":"64cbfc21fb5ef7c155e3c62f94fb1915b3ffd9d4bf1934303570dd33cf123116","sha512":"1ee5c97740c596e6d3606508261cfcbaf8a3995d003f87da71d729543ab4ef7637c72988585b7c8604171ffc116e8cada133c0d4f771be5acd63cea5e8a2fe0b","ssdeep":"192:dja4Qg91/Z5rgNSHyFG0TfDybrcmRqVypDMa5MZPCTRhYGwdwwUbN7JIttoU0taL:FaM1/Z4rGWL2cRVypTreErIttzDL","tlshash":"3a52e8701ae17d8bb967ecd8e087c00f22c7915b602e1e1ed93de95915c2404bfe975e","size":13632,"data":"","first_seen":"2026-03-23T15:44:44.476997Z","last_seen":"2026-03-26T08:43:48.704987Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/6752-8e2650373eceb28f.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cfa456cb0a8808856582d7b25f136a5e","sha1":"8ce8cf6f6cf8898f1c92e482ea95464f642cb8f1","sha256":"bfc5e427febf562f55111a8deea9d6c8658af5fa56ac315a26f1b1f83916c3e5","sha512":"7bdff54535229c2d40fcf5b425fcecc0ae0c1388350b17e8974298bdbbd0c2f81a05ceb9b04d2dbcc69cc7b954a0e84f0c0403cf36800a82ed2eca7b05f319bd","ssdeep":"384:huFojZYTqc2YSu/XefrmUL4+7PTvV6VqX:huFoj4RxfML4TVqX","tlshash":"4162f9e8f235743146bb84bdd1afc07cb62a3628305fd474f1955c25266848db2e2fba","size":14944,"data":"","first_seen":"2026-03-23T15:44:44.49821Z","last_seen":"2026-03-26T08:43:48.803996Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/register?referral=aba5101774263051952","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"62d458d64acb49049394f113aede5da1","sha1":"eda28aa5bbef854e77de4f427c11776127fd39dd","sha256":"a9b0039702c145f39fc8653e1bcae5b62c2e1b28f85cbf356d4e8fa6e9278171","sha512":"80130d6696a69fb3a3967eeda6506d7e301859df3bbbc89a33c7862def58d857e0aa53dfb02d509c7a4980f4da56f137359b153bb1ba9cc3746130defdc47376","ssdeep":"","tlshash":"46f0a35d3c56f16737f97635c2238e6b3355170275c35524c646cc34685449a1846d4d","size":445,"data":"","first_seen":"2026-03-23T15:44:44.540363Z","last_seen":"2026-03-26T08:43:48.825693Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/23.CG_0O8z6.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.19.183.147","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"b7611b253bd4d0d93d87d3327db69aff","sha1":"3a632aa9bbbff151c5feb72041252f17e67b9b53","sha256":"f626b5a9fa608f7ba023f39c76917ac3c2fac66c65b058b9c92612ace640e349","sha512":"a3a5be915ea0b4e5597485cc717919d9ec19fd14234ce64ff52be921b84b3bb90af91b375d397d11377365b2f3b3f977af576290a3f59b5a270ec6c3af24a0d9","ssdeep":"3072:PNWiqU4tayaOrRbD5Ify5yVj2nLYMwgYa/gYaf3UXf3L5P5jgYgMZki:wiL4tayaOrRbD5Ify5yV4LYMwgYa/gYV","tlshash":"d8e35cc4b362e27cdbd7c1e590ab5405f37d3e59b82a4310f1ea9c6a31a89cc513af61","size":151470,"data":"","first_seen":"2026-03-21T09:26:08.577924Z","last_seen":"2026-03-24T07:16:47.168612Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/register?referral=aba5101774263051952","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"077128a70a97b135342070dadbc2f637","sha1":"99f0a0fbccf7cbee35069f0d214d36f3056c7560","sha256":"545ab26b75a3ddf45a30fae71dc1a347172944d66c63c6dae39b3f39f673213c","sha512":"c43471f066da27232264e9a5c22fd0c989fbad9d284a8ef5dee1752a6ab967d28ca5511d18cdbd2e25fe1e85b72b389cf322831523b8bfe20380c2d22d885c28","ssdeep":"","tlshash":"40f0a39d3c66b06737f93534c237de6f3355170175835524c646cc7478644865c5ad4d","size":445,"data":"","first_seen":"2026-03-23T15:44:44.541222Z","last_seen":"2026-03-26T08:43:48.826376Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/8.qaAu5sBM.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.19.183.147","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"255395454f61e79c432c908b1b08f02c","sha1":"42781fc9b0ddec9e5955addc220eed0109a416d5","sha256":"42b40b6c26a69e783cf4549c74313d7f1d5a891cc56d626aa60104293359c913","sha512":"50f1ff0866f5a5e119b1fffb727638aa1efa97ab58b3300755fb299a0817f993b6f4f568bddd233770b612a73e16180cd736fa07faa8d189146b5e31891e066e","ssdeep":"192:hbZtPuLpcfXjyJzCgvNtURXJmrkZYfnwS1flhXX1WXzqdByyYYfktwIaQ4oD:5ZtbjyJDvNtURXJM1ph1XdByy38twDY","tlshash":"92f10abff741e4b0e3eb48e19a190113aa3a1754755d8070f62c8d14a15aac4b277ffb","size":7870,"data":"","first_seen":"2026-03-19T10:33:28.672131Z","last_seen":"2026-03-24T07:16:47.214047Z","times_seen":265,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/10.al-9NYxR.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.19.183.147","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"4a073c5805819d74eabd3e843372d502","sha1":"cb12e953dbee2d3ea08d35d86bcd2476a490bda9","sha256":"0cb3247cac5de8fcdfb226ebe2dc4960b6ed473966359f73ca13ca286309122b","sha512":"036da8fb3959ebbef26b546019535a9edb7a99227a28252878247a756d3a7ea693f48e9ffdaf5886faa7fb2cbe56292bbf9552db5dd1d26e6574d8034ee183ba","ssdeep":"","tlshash":"ebd0a78cb643b0b16276b138853f801fb035e984a44404f0d13ad9c03d7c1a97597c5d","size":236,"data":"","first_seen":"2025-11-04T08:39:27.95245Z","last_seen":"2026-08-09T12:11:02.297333Z","times_seen":16398,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/register?referral=aba5101774263051952","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"78b4be285720019ecfa8a4998ac50ddb","sha1":"51d4d3e026b0b2ef06d19144131f23bcf3077f92","sha256":"1eebadd4dd7b54152cb272c0994e5e1b32ae6dd7dc7452c4eadfa0a02856f4b5","sha512":"d34ee5c8109b413428887ff0824c8bdd73087a89c8939a0491d6b982075fdf9194cbb35fd1554cb9b9b1f6682814248b09d9eccc81ccc5cf7f24247830ea0338","ssdeep":"","tlshash":"23f0ab9d3c66b56737fa3678c3238a6f33a6070175c3da24d646cc28786498a1896d8e","size":445,"data":"","first_seen":"2026-03-23T15:44:44.542065Z","last_seen":"2026-03-26T08:43:48.827288Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/14.CbrGcdbU.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.19.183.147","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"1245fac37f3b266ee47fb9ad9352ffd6","sha1":"2fcb3ffdf47f069995adb65b400bf97bf8376cc9","sha256":"6cad9e49d556963ec7d665099f069175775a55fdd40116dbccf8feab574242c3","sha512":"738b7f1cc7e2b47a1fbbe9210859ed0feb64bfcf8e26e5faf6a2d4ac890384b23a99d52d74896a177d47974c5e9b985b3514fbe2c7c1620ebcc4350cbaf9bc87","ssdeep":"","tlshash":"e421df9ead48e5714be84de590a21c36da68631cb1abc4f0f16b1e9633058c312f3e17","size":1202,"data":"","first_seen":"2026-03-19T11:32:13.705712Z","last_seen":"2026-03-24T07:16:47.234363Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/19.CmqAOXBd.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.19.183.147","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"94646c3b493da342a4559c08a7d57c08","sha1":"c56d10f3fd8f619136ce94a4566cede8b77e6600","sha256":"4a4a80749665cd9223fbae945b708f81eec6bd7abac80c653651868bfb5530e4","sha512":"f7922e344997ea9cdfe4f8268acd7031e143d2941090c5e0e21ba59ab7003f83f565e08f04fff2b0eef31253327a7413bb46e9d13253a50758a5d60b33065463","ssdeep":"3072:zazYGdShfUE2W852wucPNPJS5ZKcDArf+fiGmD5rSEz/XC97XyXFfX6djpGoZXY:zZGdShfUE2W85rrPxJcDArfQiGmD5r93","tlshash":"6df31ae07352ba2cdbe7c1d9e1a63504f33cae45b82b0756f1af6c1e3094a846171fa5","size":170974,"data":"","first_seen":"2026-03-21T09:26:08.649052Z","last_seen":"2026-03-24T07:16:47.257501Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/register?referral=aba5101774263051952","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"729d0b288cf09e7fcf3cca55f8d17096","sha1":"9072269eb64bca94394644173dae058e427a4fbf","sha256":"401f769feec5fb23b91624b9e83f11b880ab062a35338061df06a94f8e80213e","sha512":"e62ac84703b58b597938a9c3459547a8948dc241cd8905454edf7175b1b96a6483a2c6effdbc0ab2e8749ac6cec751300fff62a43a27778c851a5a411bf7f81f","ssdeep":"","tlshash":"f1f0a39d3c5ab45737f93674c2278b6f3355070175839524c745cc6568944861896d4d","size":445,"data":"","first_seen":"2026-03-23T15:44:44.542846Z","last_seen":"2026-03-26T08:43:48.828217Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/register?referral=aba5101774263051952","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c68f315a8a6786e6945d1dca3e152dc4","sha1":"2da3235a1d1ff4b12f4250e8546834b6cba5ca89","sha256":"4c34b05e2c27b5e320a044d85d0c6e9df2af250117336d4adc2fb14a0d522ca0","sha512":"b630e856f0c0f32065217d5333ede6e97fb7d96bff49a7940a7c1004b95ddc1a1b63bd9c869e04db4c9f7106f25d5fbd4b3fa5fa997b42db1d3bf505e7044012","ssdeep":"","tlshash":"74f0234c3c52b05337f93634c3238a6f3351070075835524c605cc2478508c60c8ac4e","size":445,"data":"","first_seen":"2026-03-23T15:44:44.543685Z","last_seen":"2026-03-26T08:43:48.828919Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/2.e4ZPo7IS.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.19.183.147","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"b8704e9a4fac9cc6ed31a8ee1ced5744","sha1":"599832fa652fb79cff9fee0acfc06371c39cd801","sha256":"b03428d1cd76ca76a60c969ad81ec13b9c53b424561703c4cde067c7c9dac2dc","sha512":"c175128402adf09a457727636f145aad345c2fbd4ae2a2ec1478e383bb1cb96a853163d3be9c911b249b943cc60ae82c8979f03468098cb4de96a9648003a16b","ssdeep":"12288:AR51UTGQCkC8iMQiiH56K1rNZoEOWtaPloSdXGZMRZNW8KfAZExrr8jr0IbM4f+T:AR51UTGnZohzGf","tlshash":"30946bd0b242b938dbe7c19b90bb1609f73d3d09b42a9661f1bde85d33940489277fa4","size":445522,"data":"","first_seen":"2026-03-20T13:10:16.638449Z","last_seen":"2026-03-24T07:16:47.227643Z","times_seen":225,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/1448-5bf4aecc6643c106.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"007c0b55698293e58966e1dc5d770409","sha1":"f699609555491407a1f155e6283e0a3de0717da6","sha256":"83fa8bbac169d2ea73abe178b4aafc458d5b09d4ffc68d9ed1e26f5258666625","sha512":"05b4c57f2c3940ed7210a509932650258d73cbcd76f9b86734a2611dc5305f9556014a93fe11ce82c03c8614991f4b7910400acf12b2450f5d2fbf71609a3e2a","ssdeep":"192:X/xQWNzZ8Ux0rQJwk1EqpcoBzPpz8UzSTTalE7j9mYyM3KXEwJrVqGGrc:5nNzZ8UyreHzPpz8UzSTT3hwXXFVqFY","tlshash":"90220a91b01235a8e7ab4685c7af010c7f7a2b08af0e5574b2b88c26577938cd3a577d","size":10322,"data":"","first_seen":"2026-03-23T15:44:44.532004Z","last_seen":"2026-03-26T08:43:48.707758Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/app/template-ce27f352978faf60.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"38c6b99b6ee948315ca4f974b0c49282","sha1":"f4553461ce821bd6ce08a2f96fb05574028e74c9","sha256":"3017bc953aeba87a234118e3e0913c48e60c454104914451f9cc4b66e904f569","sha512":"189bfc2a0b064a4a9bc8b6d80f83ebf108d1bd2d9569c0720557e00758f70f2b7e21203c9c0a3a1cae8a0e5ad0222f0a9368bd0401780893d8b8a0df9f01def3","ssdeep":"","tlshash":"c851d7bfa642388d23af45e4803b1407f24e6c79202e8c64a792dcb922d1d746676de8","size":2963,"data":"","first_seen":"2026-03-23T15:44:44.434719Z","last_seen":"2026-03-26T08:43:48.725384Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-11T09:53:20.781535Z","times_seen":417988,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/register?referral=aba5101774263051952","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fabaadca054d2c2cf92dccc57e069278","sha1":"410e83b899373d50c0145e222c1789b1b339c14d","sha256":"65b133d48172ae52b3b8187d88a79cc6245be810f4c8dbac507d68b9ec4e252b","sha512":"75b57128659fd1e3039ee4337fb55c76fb5334fe0905f6913b5569754a06cbb557a31b36766cdba318e8627c5440ba695f22a39fd24a28f4a5938698c28dc83e","ssdeep":"","tlshash":"c1f0238d3c52b01337f93534c2638e7f3365070135c35524c646cc3428508860846c8d","size":445,"data":"","first_seen":"2026-03-23T15:44:44.544521Z","last_seen":"2026-03-26T08:43:48.82983Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/app/(auth)/register/page-e2a6459aec1100aa.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c35a1beec290e0fa8f0b4088b711c806","sha1":"b42552bfa1827e0d7ff1aece290f75bd98c80666","sha256":"caf6cf36b1f8512876ff721ccda2f1259cd5553a1a8e7ba2f3c93db6117b3f5c","sha512":"e9796896254bc84936b426fd5425bd56e2469a58fe9b2f26a3569232e44b73b4542a582a945a06d8d67c40be9cffd0e90896a16687101d3dfc75104232f9f948","ssdeep":"384:voP8LriS1QbfjSqXV9DFyKP7WcKCDADImXlCDnDuKVkpeUFz++T92EH0atzj4sw:vlLO7fjSqXV9DFyKPqec0msT6in+TjNa","tlshash":"01a285648bce1e8fe966ece4b497c10e12cbd11b111e595ed93da42d22d3400bfec35a","size":23366,"data":"","first_seen":"2026-03-23T15:44:44.433645Z","last_seen":"2026-03-26T08:43:48.711202Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/6650-b0d7d93c3e72564d.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"26024a4d3d0763c0396794c322778747","sha1":"7a19fffdf7f4aeed016566d4590ea6b8efbda1db","sha256":"387127cf5b423ca964e579ca4c2c0701b10fdc67061318884c2ad20600e5b47d","sha512":"5125e921fe6848457729b2031926886686b67750a7b376d7ff7cf9ef981d45b50a78e29f594d00c1a5b5a01a0e19af1ea7882bbe988a8a5fe365d7055f97dfa1","ssdeep":"96:NUpBA4lErV/Xh2WHhQZezubBHonrmzTAQ46aAfXptW7LGxLvJgU2B2fMy5CZwspV:NTV/1KZezYBHZzTAcaAR2GxLvJgfy5CH","tlshash":"e6c1d887e966a49bcf4d2c3d803b4f23e0a62a251d4ec49062f0d467167fe4d7560d79","size":5713,"data":"","first_seen":"2026-03-23T15:44:44.423661Z","last_seen":"2026-03-26T08:43:48.718821Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/1256-417ff298a02f60ce.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d599ab04eb3ee581d79dc69acae9f762","sha1":"1efd244916a7e38086cffcaea98d27ddf3d3edec","sha256":"e223e8762a5d39e1f9af494cd93768b0456865c90f0a5c147ccab70e3c9ce6b5","sha512":"65a067e5365ff1f82ed434bdb227733604d0690edc0b3c243be75f5b381eaa7102149b9a7e66fcbeb33ff67d306aab2295df313fd55de34ae61e3bdde9f01f89","ssdeep":"768:SP58/YJJZNsOrlcXUgO6EQj3pl/izf+Z3LbI1iIW0Egp/u:SP5wuZN7lgUgO6EQj3n/izf+Z3LbI1iz","tlshash":"9df2f89a6112f8728aff82ead05f1b04732c1159670c48ecb57e9ee922e0d646747f7c","size":35352,"data":"","first_seen":"2026-03-23T15:44:44.422674Z","last_seen":"2026-03-26T08:43:48.690661Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/7976-72b08d0d566b1866.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0fd17b844422f8fa52a5a3fa4b053c68","sha1":"2af77b46b132f9a83e95297e4cf09ce6539ec844","sha256":"c72fb3c2b22630616909cd7bea6a90b9a7016e8c393d43769d52af72c5d1eebc","sha512":"c1748dad0db448c773cf1720719e7fa7509d9a6c89e7c760bb501f167098b099c6ad62032cab37b51da74c4f90dacf8c008220457943d2cdf1928d3bbbccdd81","ssdeep":"1536:AHaIGJF4jDMbBMbhVKXI8+2b/2fxwSV9JFQWbbEv4vVYHGrI7b3f+:A67J+jGIwSNEv4v6H7Xf+","tlshash":"b4533bc1b3d2f42a9b6d61d654254002f37a9eac240d94acf3b46ceb319694da0ebf35","size":65684,"data":"","first_seen":"2026-03-23T15:44:44.494107Z","last_seen":"2026-03-26T08:43:48.715646Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/register?referral=aba5101774263051952","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ce0f0b8cd18de9e6a4fe76a1aa5fc098","sha1":"7ac960a4c2013b635bb55793697e52c3d4d540e0","sha256":"2d5f9a2cdf1c6030395d68e018eaa06f1fe39f3daab3605f1479000e0ba76c59","sha512":"ac820a12b17aa4def34eb26ebc07bbc2dee3e5b86ef32b6b7df1a8164ebb28ff70241e8fc74bb9af34bc95bd5ae0fe687d39a5e494bdf357ab2a5e25a8fadaeb","ssdeep":"","tlshash":"47f0ab9d3c66b06737f93639c723cb7f37a607017583a568ca46cc2468648da189ad8e","size":445,"data":"","first_seen":"2026-03-23T15:44:44.54533Z","last_seen":"2026-03-26T08:43:48.830747Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/4935-12b0e84df5b0b290.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5974372b1639abacd1e89dc15d4f46d7","sha1":"41c5414b9306b914de713559e6b412aee41a1b91","sha256":"2df85bca68e5600779e33723e48ef2d1993cb426f3f56d65216467c1363bf4c0","sha512":"441fd919213cd10efc66439f63802a0d8749d572d00fc24f011cbaf53d3900de38d3c928dde1eddf5d57b236bb8b531409a750a362d05ebe2f4dd34011e9505a","ssdeep":"1536:82Ws6U4l7Ilhqx0s9CuLrDbM0QHSa2C9gwyX723p2In02tK2sS6b5pU:82WW4l7yMx0s9R5CN2C9gwyL23p2In0G","tlshash":"0f636ca972a2b0554367c0ced0af4887f76c2914310e4ca5f393f8b8a5a85dd9173f7a","size":73341,"data":"","first_seen":"2026-03-23T15:44:44.457063Z","last_seen":"2026-03-26T08:43:48.80745Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/5502-42c25be9f2e7fa2f.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"763c1410327e4d5ff096181820a44a65","sha1":"8372b5896ac57ac06afdfe838e1e4281c8d9f8ca","sha256":"f32c48b0af36aa6da2c66dd4db004fdc6bc007c6b12b70985627a54e1584003e","sha512":"caf849a0e015a9c048afaa564c00cdb7dbdb86ca5690ace6ca3bea9e7997a7f35fdf1d61ea7348f3dd43c3bf25edf9121ce573335fb518ae37b3cc30f5374daf","ssdeep":"192:9fm817YPaQAn8ufEk4UIIQAKZnnEYnaw/jaSL3Uhi84ng0QvVqMSx5:M8ka80yngpVqMS/","tlshash":"31e1d7d4b78afc648fbac287d51d4498b75615009f4f08e8f3af44244298e5ca26a7fa","size":6811,"data":"","first_seen":"2026-03-23T15:44:44.440291Z","last_seen":"2026-03-26T08:43:48.792238Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/app/error-7a82f2ef8d29ec42.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fa113a0d59cc37823cbd298803ef7de","sha1":"75137b033027726e63d9e6f23008da2a196c23c6","sha256":"f5718e61ffab4ea80b96f11fb4650f15a20955da7cde323d6f2ea0d8c6d8bf25","sha512":"e6990bb57cc2646013fee52b5adc0224554a204bb6e9ded1a5b8b76c2e67f453707b759544cecbe08f8aa275bd25ba00d69cdac04374666c02cc9e41ebfb8539","ssdeep":"","tlshash":"571120697184bc98786708ec583bd41cb1570c3c027daa7c7ad79d1c01d84c0f1637c8","size":1081,"data":"","first_seen":"2026-03-23T15:44:44.414508Z","last_seen":"2026-03-26T08:43:48.686756Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/5239-b24dd7149d741c56.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"24ffdff582fac1bdd8b78863dfd9407d","sha1":"3d0f974d40796861b8ae1de7cf57d6a7ad703114","sha256":"60fc951da3b5d4e0590a75e5ee728e1590ff1345d76b70c3b90a07283b0b710d","sha512":"b2163a0dc170339066493b68e0914480d7e52a6cd8fbacbce64326ee330aede0fd04d631001a0254e49267fb75ed66ab0394983a544376bc2aeebabfe6917cc5","ssdeep":"192:fiRFVYEC4Bg4zKjOoGuP8wAjLIaWA3L2BVUwroOmMV7uD8avnswa+d8Xb+JN:CI4q4gOoh8PUaW6cVFqND5swZWXbC","tlshash":"325219723695fce6239bc0d5d43f000af3755d71762ab08873ea88d9e9e4584b0a2f76","size":14226,"data":"","first_seen":"2025-09-20T22:56:48.515572Z","last_seen":"2026-08-01T21:04:36.326892Z","times_seen":144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/6930-97dbad9ee68747b3.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"31525278b6dfb87f212de83495050d4d","sha1":"78a173c2dc7bc12dd0941cb1c794f6de69810f83","sha256":"b1b4c57f9fa8c8ded2d4860f4085affb25cd0930adc75f0a04ccf92d0d987ec8","sha512":"5b810523719f7334823af475cff7a939c524e24b0abc8126e64921116fe7504180158fd298986d4a2086f1a0674c58991e6468b54598c6e3a9cdeecfbc28fcfa","ssdeep":"384:IFxCFMMrS8kdzORMxpF278M8J8TveFxaM:0MFMQS8yzORmkoM8aTveXaM","tlshash":"ed42d79af565f061c3434466406f0146f23a3f5de5298408f33a9df93a9288a77b7f3a","size":13118,"data":"","first_seen":"2026-03-23T15:44:44.471677Z","last_seen":"2026-03-26T08:43:48.756787Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/register?referral=aba5101774263051952","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fa7aec8f5b4360ec295f8d0416f108ed","sha1":"e5ba3a997b620f989417d156b6a009fa6f3dde03","sha256":"2cf36efad022e807399eb69acad6cebe026cc3dda3af15f5dd554dedf8bf6b50","sha512":"6b6577201fa1d9a8a2c0ce4201bab9f44741f3b8c91a6063805d031e6c28f94839d58bde0d759c5c6937f68d0e7379da79882819488b8240414187c047b82b24","ssdeep":"","tlshash":"a9f0a35d3c66b55737fe7539c2238a7f3755170175835524c645cc2468544c61886d4d","size":445,"data":"","first_seen":"2026-03-23T15:44:44.54617Z","last_seen":"2026-03-26T08:43:48.831498Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/register?referral=aba5101774263051952","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a2329868dae5e7059e20c12627169850","sha1":"13d49d49af74479e6034f0acfc1ed3b1e8d90e4b","sha256":"caacb2807eee400d0f647d4001fd5d8d49e28176964392be3d6b5c38a69cd25a","sha512":"635c83e93523728fd32a5f33eb1a9e4c6ea9dd95182d5cb55286a017628aa87ea76458f2c905238c8e7b0a3cb504a6ef75f16a69c9335ff267c4b22952a3998c","ssdeep":"","tlshash":"2cf0239d3c56b01337fa3634c2238b6f3362070071835524c605cc3438505c60886c4d","size":445,"data":"","first_seen":"2026-03-23T15:44:44.54705Z","last_seen":"2026-03-26T08:43:48.832222Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/4.-uwpThwu.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.19.183.147","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"99eeab214509db314b95132ebb5692b4","sha1":"dff06790aa602047a08dd7988b9f09dceb34be62","sha256":"78b0af123fa33269f2327509cf4f6faf0b1ef1495c54ec846f8fa3daa95117c7","sha512":"998cd3446c1887410c0c21d3dc3bc465778b0d19c65f1eeb16e6d8f8cefe27dab247300d3f3893b7adb2dca143464f5c4e4aca4e6975ede0262662036d8f5312","ssdeep":"6144:xpMuuKAnNxfpyB5jofpxLewPrhsdbFVrq:rMuuKAn/pyB5j8xLeOrhsdbru","tlshash":"16245bc4b18af53887eb34e6547e2002f63d6d18784c8564f75cdeb63da858a8273f29","size":218759,"data":"","first_seen":"2026-03-19T10:33:28.721348Z","last_seen":"2026-03-24T07:16:47.13038Z","times_seen":271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/register?referral=aba5101774263051952","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f00b751cb3750b7c4da0e31e2b4c0dfb","sha1":"a767e53b2a00a7ab6b9bfda706547c735fecad55","sha256":"1c8afc70d6069978024c5ff8f5f9cd787f52413e1cfe7caf7017dd1af322a5eb","sha512":"c7bd80c2f8eaaa189f015d15e60baf3ee4c8b680f3113bf61debf1f2fccbe4ded1ecf5c5ca46373ca73d165826a56162c57965536a610a67ebbb7e79d6383b18","ssdeep":"","tlshash":"e4f0a39d3c56f15737f93539c3238a6f3355170175935525c645cc2468548861886d8d","size":445,"data":"","first_seen":"2026-03-23T15:44:44.547865Z","last_seen":"2026-03-26T08:43:48.834791Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/6475-b9a765fe0c43db46.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"14d7677bad5c23090385341929bdf0f1","sha1":"1e1734b550ebf2544a4fa9a897c57c4ef35c2aed","sha256":"945ecafb15e6a508ea8d273cab19b5b31b97c18d617263403b4d95388a038b53","sha512":"6ede005e1e53a467e18f4d11e5997c2698f86b0df48623fbfba74f0f0c58a4183dee3d4a8b09f1ce240ec376842ed99d0d9bb470290d52f1ccbd3423027dfaab","ssdeep":"96:bhPPSo9qYMSSqCPT2sd7PyKV3KJtNSTCtO+Q46d+QhTT9/pmhE9s739+WyBsd:BPLtlSqix5GlQ46F10T","tlshash":"6cb1b7f3b782f834aa3f5564906a001dbb975c8dc05d1c6cf3a6ec809694186ce75fba","size":5106,"data":"","first_seen":"2026-03-23T15:44:44.487539Z","last_seen":"2026-03-26T08:43:48.755608Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_configuration?organization_id=b8f4f49c-d724-4914-a885-4e5a1e71f678\u0026version=713.0.1.38.141.37.1.1.3.1.3.17.1\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_static_config","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"95.100.107.136","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"8be3793c8f1eb3282224f5881301fee9","sha1":"2fc7e4c413c9547557ad1087e574b0d597db9fc2","sha256":"a9bd4e24b9909d7305b23404a6e84c16fcaaa18b278fce5b8f77c0abb8dcf9f6","sha512":"5cff2a4502bd0f45a8fc868b0a4521ab432984241b210d36931d802c878c8670354d1b1b7ad982c7f48bec934037328686505f70f147468bd4df53f2f495c15f","ssdeep":"96:uQhUwhUmhUsXhUAdLlK/muZXyWfy9qePJDO/mmfZzyAU69nMcem/3PJvzLq:PGwGmGsXGAdeGt9qCUKK9nMcewxb2","tlshash":"a0c1312a835fc9bbb377d14e62dbbb0e3408517961f8593fe464c63061862c7d311eaa","size":5843,"data":"","first_seen":"2026-03-23T15:44:44.483818Z","last_seen":"2026-03-26T08:43:48.759943Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/register?referral=aba5101774263051952","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"84983fcf6787d20c1073ade250a4108e","sha1":"0fcdf37ee8b66a151f6ce6e2c70c7770e89d47ad","sha256":"a1b0e1a46df45075246c46bc8bc5ec6f35edc67f136042911237f3bd2e71fa5b","sha512":"d96422bf173587e49b7670bf4bc5147ce4bc8d9c5f3997a8be464f403a0b3d734f0b5a01cedaeb2da1b126d35f83766c41e5360d189548a961e2dc23f52ef008","ssdeep":"","tlshash":"7ff0a35d3c96f45737f93535c3238e7f73a5170175835934c646cc35785448a1846d4d","size":445,"data":"","first_seen":"2026-03-23T15:44:44.548775Z","last_seen":"2026-03-26T08:43:48.836807Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/register?referral=aba5101774263051952","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2e9d763ebd536049b3582a3ce70b63d7","sha1":"dad8c13e941c4d8c07b584c659c3d652e6034656","sha256":"171af7963121acadae1e09b29439591cd0cecef2a7565e82bcdddb55d2dfed83","sha512":"9676319944ed500ba6f4b66deb29d74a31b633c2dbe5e10985962e79632fd2414540050ee759777683fc2314abc825c23e2ccb6b01a201ea1b1d894a5c3441d3","ssdeep":"","tlshash":"81f0dc5d2c66b05337f93678c2238a6f3351070071839524c606cc3428504c60846c4e","size":446,"data":"","first_seen":"2026-03-23T15:44:44.549588Z","last_seen":"2026-03-26T08:43:48.837742Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/5.DDJgJSMw.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.19.183.147","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"08183989d9bc505e82215b96d1581512","sha1":"1c0eab7cbf49c114ba686578f1fc1e6a32fa68b4","sha256":"30f5c6a4e57eae1f47d3c20ddc27f78d616094e519d1ded2eea87106fe08b34e","sha512":"3ff2c6ed74f219c420e45447b522a7155ec27f869fbb273ba1a1406400192e596da71dc5e5ab60910c447eada553545a96a0d1dd57cf7c6c307a7cc57ee5b01b","ssdeep":"","tlshash":"602121d91dc3d430d33c48e902e5889e697c8ea4e1ee01e0d9946dc67f20960667fead","size":1189,"data":"","first_seen":"2026-03-19T10:33:28.754436Z","last_seen":"2026-04-07T10:47:46.110501Z","times_seen":1312,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/1991-b814e40b7d0ea1da.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aedca25e4e2f16bc082e2ee8e417d2bf","sha1":"d597009134bfa2185e9394c0e5c6fc433f6ab771","sha256":"da6633a7e8dbe754838e0aec06bc1b8b764b7784eae368ebc08af29377f7b44f","sha512":"6d715e365e0f0a56dbc67ebf8ea0f7bac810524bbb90ab1177a713f4dd0c2f29ea6a5cfb8520e4c6595b157d49cbaf4324065d411c96309b38c8db11b14a15be","ssdeep":"384:SVqgvEGJtRO9gLcP6NIoDG0W/6CTmfGWWQ2WmSO:SVP5JtRO9gLIEK0VCT1WN7O","tlshash":"20b20988b593b41406a392a550ff514e72bd2d1ca5cc9098f2a2d0fe2df698c6177ff8","size":24141,"data":"","first_seen":"2026-03-23T15:44:44.449709Z","last_seen":"2026-03-26T08:43:48.701522Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/5604-eb2ed400912f2125.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a715055abd555a1108832eb58462ccc8","sha1":"90b204e13f424d5e4dc8251cc8018d024772af78","sha256":"ee0ead6e23e94de204149b886132fa33146738c8baa23903460df734fe4cca42","sha512":"2415357cc69e550d5d0050957cd404cbd20b32ce50fff66cb7e5b59871e756aabd67e863e7847e47d0429f119a7b60c3fdcd97e9858ecc2746bf2b4599133986","ssdeep":"","tlshash":"f511e2a25651ed6704c308a7d97b0205e69c1c30092bddff273bccaee880c5c3455a6a","size":1000,"data":"","first_seen":"2026-03-23T15:44:44.550433Z","last_seen":"2026-03-23T15:44:44.550433Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/0.BHriPMts.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.19.183.147","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"cf1dd01b8af3590a3106548bf1362247","sha1":"efa4e242fad6d38577baff449278a28efc83bb47","sha256":"92682ea10e45ff4b921137d801ecacd87a478fa402f78e70af78781765a7faa6","sha512":"f9b097f00d811bb0c5b0a251a59e352bbb1d1b4bd1f83804e10f0b803b8500765408556045bd7b01141846c921642179f18d9b5de7e2b10fa4f8ca9bbe0158c4","ssdeep":"1536:Bc32VfDmtAn1VRxWffbp2jOxY58wHRJzL5ye+:BcUfDmtu1VRckqxY58CJ35v+","tlshash":"ea7329d2f681f4399be7a8e555388003fa3a7958781cc270f31cce14215e58665b7f6b","size":78342,"data":"","first_seen":"2026-03-20T13:10:16.697723Z","last_seen":"2026-03-24T07:16:47.18318Z","times_seen":223,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/1.CCzcvYl-.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.19.183.147","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"e3897bf5b6cf846a15a47fb6bf13089e","sha1":"f08e34f980dc8677948f7306bd1fd6cefb907bb8","sha256":"0600b0e00c69c6400774404bcdd90b535f434713aca3c815c051cda8b77e50c3","sha512":"6b53d096db4db441ff016916cc829b6ba5a4cc8097cb2d818411d1278d2aa7d96156085cc3c1c04dda6d0ea041bd16ae6908120c99c632f78ac8f33e1f8b9b53","ssdeep":"1536:EOW45ZFdvjhCQgPVA2vtIFSGurXS3qNFJ0WW:pjv7hgq2OSGSXS6Ngh","tlshash":"f7434ddef14174315be355f2a06f9006b73a2a2c385cc0b0f629dd9925de44ba227f6d","size":55443,"data":"","first_seen":"2026-03-20T13:10:16.647118Z","last_seen":"2026-03-24T07:16:47.243606Z","times_seen":225,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/17.BT9jUAD0.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.19.183.147","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"14698b997135b229c15bc5817ed020d3","sha1":"5afc2438a71273a8f1820c766e96f397b2806699","sha256":"96e43792002693d12bffd72956dc425e03e113315cbf63031c7e839e661fd115","sha512":"add083fc100a740d1de15b363e3e213cc84ca9fc4913da9ea691619f688e6b885d8ac7a16d96309f9b55fc10322cb54c3f23c4281df1f5131fa8d40655fc0793","ssdeep":"192:JIcs/+sXpRMzExyv5vHcj/pIWpIizfq7ovx7vc:Gcs/+sX7Mzpv8llbqs7vc","tlshash":"2af1f9dc1322eaedd98296fe12381009b16d6de93c36c244dfeec81a70255c86d38db3","size":8044,"data":"","first_seen":"2026-03-21T09:26:08.692071Z","last_seen":"2026-03-24T07:16:47.244372Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/18.BwJqqA7t.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.19.183.147","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"b7eea9e08547172d80a90ede5fc239b5","sha1":"c309ed972776ff2f42d6233d434199378b0b0449","sha256":"5c301867cb63a886e85962abdd05a64d3eb6df916260efc1433f22b97ed87128","sha512":"30e11b1d7dec0d21284297f0c6addd8aa824c4ae5a45514e6cb9c35767a092535e3d8b1a1d58593326f4d8cfc8eb451f4d92da5bae6bbcafb375409fdb2ff73d","ssdeep":"96:iIUUP2pJtLmIiCZ+lDFlL+o8C1iq9S3jHN+3NtbNu82HMTOC:6UV5CwlZlCo8uicS3jt+9txpBKC","tlshash":"2481c8ab32dcbcb6f5c682e690675160539d11a9280d4fd0d02bcfd501ba3d436eaf6b","size":4151,"data":"","first_seen":"2026-03-21T09:26:08.668755Z","last_seen":"2026-03-24T07:16:47.233684Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/3.DazHfinG.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.19.183.147","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"2d77a6aa353e00f553a63318304ed405","sha1":"79829fe224284805c193a91d2fd444f246271fe0","sha256":"f068996cda742dd6fdb0e857c16b010966bf690480381465595e2b22935de2cb","sha512":"8a7fdf55c616c0d7f3f6d03d2196d7c4d82cb385c2dc73ba36ab9a08ac2f43cbee752de0e10302fda3277fa54813cad993b838b0ae98ac1f17e3d5001a67a228","ssdeep":"","tlshash":"fcf08bc53592f5ea02ab59c548379003f3298818b4baf580e614c5f12493057471ab27","size":546,"data":"","first_seen":"2026-03-18T09:33:42.028688Z","last_seen":"2026-04-07T10:47:46.077135Z","times_seen":1372,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/187-4e25cc6737ba3fc8.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"518eb0816ba9bd65ccc10d23144f9784","sha1":"30675042d33fa65552d581a3ae55bbac01c0b524","sha256":"aaf45e97e2e2d0dbc8724f6d7fa5cbac55a0d5747d05f078d14070387d8a5db3","sha512":"34384fdb5ae09b27d59b69a6e29fb8b288048d10070f6ba77610394b147b3876823e660555ca92633687ca3375f78b9ccd3e0c843416aeb0db68fd39db757170","ssdeep":"384:RjqJMb6doxR810n0c0247bugZxIgNstICdb8a9Q7MQdXbG0:ltUC0dVbu6JGCLFdLz","tlshash":"1eb209712252f031e9ffe6dce88e46a8b73b1e84bd150c71b4a2ae550104ec4f5dbb29","size":25188,"data":"","first_seen":"2026-03-23T15:44:44.43909Z","last_seen":"2026-03-26T08:43:48.744621Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/6.CmDDbhqB.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.19.183.147","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"c3bc63875af35e6419ebf4990e9a1291","sha1":"0e0b7d2dd95abd8f282c722fe3fa4c4c90a275da","sha256":"a9162f8842f5d0b7554ee148f946446e6acbadcb40a2f232c828681a9685582a","sha512":"db8e5b7f70baab09bbd380fc701424bb71a75dd65599fa995333474df2ea5d69baa52da9e4ea25b04c02ca63b6ce80ba5e7467a99c8534719ccfcd45a23cffac","ssdeep":"1536:VgZQ8kK8O9hbCvSPT/FyXb+BzpHxQwXzmyU9zP+M3jYPuCoOTAjyp5pmLWqVWM:VgK8kKB9hbCWBswEwDm93j+tUWbAWqVP","tlshash":"d9d3f9e83951f9626bf312a710af5807b33c192b280c4950a211fdddb9b845eb17bf9d","size":138079,"data":"","first_seen":"2026-03-18T09:33:42.057685Z","last_seen":"2026-04-07T10:47:46.058674Z","times_seen":1367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"1e700a661439a33c88f84a6f4ee0bfef","sha1":"120b78173c7c15470263889e0925c2a8e430588f","sha256":"a922e23aa0b41aacbaed923a4b49ec83d0435436517719f4d7e56f704b826cc7","sha512":"2724dec25d84ca5dfb15bf24b157e42563b920c03b5a3ce832819893aacc6dea4df626e76ba0def61e6f527c4213dbaeb96d2c10abba12b995ba10b809d46233","ssdeep":"192:TAG2vs2FsQIHm4d4v+R7VdnJ0lXjLMhON8fHOWz8KH2klggk3hp+Z:eedVpcjLIORWz8Ylggk3hp+Z","tlshash":"72e1423f4131272a8027de6c4bb477574238d46a7d6e67ea25126b19c7cbe8314e338b","size":6855,"data":"","first_seen":"2026-03-23T15:44:44.551282Z","last_seen":"2026-03-23T15:44:44.551282Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"16d2f23f9d5a94922e6bc82d8c9042fc","sha1":"9487caca669930d29935953acfdc460dbb446ecb","sha256":"15e43e1fd131f8c7f427ed046be7070bc4409148ce4a4599fb45f9ba141b5334","sha512":"85e4e22793ba0fc94ffc7f46495d4abf1bcb97bc69c27ea407126bb337d8e5103cc485fc0a471441a536bf9b591fbcdb783783ad5ae93c47b78c9afab5e40bbf","ssdeep":"192:TAG2vs2FsQIHm4d4v+R7VdnJ0lXjLMhON8fHQWz8KHqMlggk3hp+Z:eedVpcjLIO7Wz8ylggk3hp+Z","tlshash":"81e1532f4131273a8027de6c4bb477574238d4667d6a67ea25126a19d7cbe8308e338b","size":6860,"data":"","first_seen":"2026-03-23T15:44:44.552239Z","last_seen":"2026-03-23T15:44:44.552239Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"dewanusa.quest/_next/image?url=https%3A%2F%2Fcore-1333692039.cos.ap-hongkong.myqcloud.com%2Fnewsa%2Fe2cb18be%2Fimages%2Fdefault%2Fbank-bank-cimb-niaga-hdikwc3w.png\u0026w=256\u0026q=75","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:10.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/image?url=https%3A%2F%2Fcore-1333692039.cos.ap-hongkong.myqcloud.com%2Fnewsa%2Fe2cb18be%2Fimages%2Fdefault%2Fbank-bank-cimb-niaga-hdikwc3w.png\u0026w=256\u0026q=75 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6052\r\nserver: cloudflare\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: sKYqrmRrHtjWWwhxlXQpvh-HXLdJJPYpEEKsIr6wyDM\r\ncontent-disposition: attachment; filename=\"bank-bank-cimb-niaga-hdikwc3w.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;, frame-ancestors *;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ko4udng3pODze%2BrRk5XxUJx6nfN9AL9YynBgldaaQgYyWZVIxQ93cjRcYrT1i8flepV9b8oj19D6Svl7GWeIrXMAtQTin9tu4%2FgxyvUQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e50eb7796b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6052,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b81b3e2e876e53f2c9a4cd3dd491ca27","sha1":"fc01f8fa67ad1f2966c284934c8f17680bf8bc9b","sha256":"b0a62aae646b1ed8d65b0871957429be1f875cb74924f6291042ac22beb0c833","sha512":"8f21f0966a6679529cc29015d14fc24de8fa73b8da5fa1abc7dd7a9001bbc74ef5a5db7e5fa37ca9ba11ee8bd0327a9b8e1e4da4685ee276fee2feed64d34790","ssdeep":"96:v3xEdlwpBM+y5WPJHU++khmxlsYrvr1/dwcyDiX8fQs/SQbjx64uAnlA0HuLfon:v3xSipJy50JRhalsYrT5NyDZIs/7vcCd","tlshash":"2ec19f189b5470e5fc886f7d7c968b1008c3fb37631cd5e026eaec58acd72e5c19a549","first_seen":"2026-03-23T15:44:44.410723Z","last_seen":"2026-03-26T08:43:48.752531Z","times_seen":5,"resource_available":false,"data":null}},"time_used":812,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":812,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/7578-4507425450582a27.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/static/chunks/7578-4507425450582a27.js HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:09 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 12 Mar 2026 06:33:20 GMT\r\netag: W/\"1c89-19ce0bfee10\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\nage: 315362\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IOtBj0pS7LwsxKWnxMWXg3EF1UQ2zFFSGaZklCfjc%2Bn%2FTdoDWbjlglI7n7C%2Fa2s5rItOk3dDajibd4nl2l9Fl6TMpgh2dgEXbizFqusZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e4abc2096b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7305,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7305), with no line terminators","md5":"eeab93b4025d2abd1d49ef6a95b5541b","sha1":"06e264903c38d96e19791ef54e9011092fe1b743","sha256":"a5aafda15423d305b79593bc0399fd6b72041fa3040fa127467b96826d97421b","sha512":"10b3614ff6fb68aae381a3327b3356415dc8ec70a75779c137a55a9c6436667df2338de0facd07232e7f6cd81ffb1741d6fe9c7dafc251a801ace98aed1be4e2","ssdeep":"192:TjJWjEQ8vRTrNvjJpSArUTSf5JAtpueT3bS4c:/JQ8p5vbrUAMtIe3K","tlshash":"03e1d7b9b5d8f68475e74dec24fb840ca15e092cc03a1a2dfbd564661296dd03827bec","first_seen":"2026-03-23T15:44:44.411706Z","last_seen":"2026-03-26T08:43:48.704247Z","times_seen":5,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/register?referral=aba5101774263051952","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:12.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"POST /register?referral=aba5101774263051952 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/x-component\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nnext-action: 002f3be31f2cc81e60598252d217798b8b82c44967\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22(auth)%22%2C%7B%22children%22%3A%5B%22register%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2\r\nOrigin: https://dewanusa.quest\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_B9DLSJH0MC=GS2.1.s1774280650$o1$g0$t1774280650$j60$l0$h0; _ga=GA1.1.2034164557.1774280650\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"[]"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:12 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\nx-current-path: /register\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\nx-action-revalidated: [[],0,0]\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R9LRtPQLI9uGFWUHupvogSXCU59AFmdmalQV7uPu3Ozacl6su0g%2BGT%2BSQHS5VyB8lAvOUNEREsZsI9gwv7CYS4PAChTL4v1fSwdPqGhu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e5bfd7896b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"a156a084c0f9d33ff4db238bf8b497bf","sha1":"2c7e4be80aa08c192df83376a0e30dbb504b08fd","sha256":"cfacd4e93b1e3b8ab64180bfd62539aec0a4527a34bfd611353d61e6d8e45c29","sha512":"ffbb78eb28b71f543e3939bdee1c1cfb1d14697d6f1bebe8de2711d60a06c534469d5ee5b9cae57703cd053cd3cc17bd3c9851a474a3726d48b709f78c1202b8","ssdeep":"","tlshash":"35a012014c5445d5c807a040209406040cdcf119e0c92014e889e400983d91432624b7","first_seen":"2026-03-23T15:44:44.412736Z","last_seen":"2026-03-26T08:43:48.647328Z","times_seen":5,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":186,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"core-1333692039.cos.ap-hongkong.myqcloud.com/newsa/e2cb18be/images/ui/logo/favicon-znti7pse.png","fqdn":"core-1333692039.cos.ap-hongkong.myqcloud.com","domain":"myqcloud.com","tld":"com"},"ip":{"addr":"43.132.105.206","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:13.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cos.ap-hongkong.myqcloud.com","organization":"Shenzhen Tencent Computer Systems Company Limited"},"issuer":{"commonName":"GlobalSign Atlas R3 OV TLS CA 2026 Q1","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Mar 2026 07:35:01 GMT","end":"Fri, 02 Apr 2027 07:35:01 GMT"},"fingerprint":{"sha1":"F3:D7:6E:13:68:23:65:72:46:DD:C3:C6:C6:97:CA:F3:1A:2A:BF:E0","sha256":"D3:73:DE:50:36:F6:35:C0:3E:DB:5A:B2:24:6D:88:10:98:AE:18:B5:11:83:30:89:69:94:CA:15:66:04:56:39"}}},"request":{"raw":"GET /newsa/e2cb18be/images/ui/logo/favicon-znti7pse.png HTTP/1.1\r\nHost: core-1333692039.cos.ap-hongkong.myqcloud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/png\r\nContent-Length: 272769\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nContent-Disposition: attachment\r\nDate: Mon, 23 Mar 2026 15:44:13 GMT\r\nETag: \"95e45444dbd349f2798312e0075dba7e\"\r\nLast-Modified: Tue, 25 Nov 2025 10:26:34 GMT\r\nServer: tencent-cos\r\nVary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-cos-force-download: true\r\nx-cos-hash-crc64ecma: 10267694515464679544\r\nx-cos-request-id: NjljMTVmY2RfOThmMjcwOV8xOWZlXzk4OTE1NmY=\r\nx-cos-storage-class: MAZ_STANDARD\r\nx-cos-version-id: MTg0NDQ5ODAwMDczMTUwODg4MzA\r\nx-cosindex-replication-status: Complete\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":272769,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 600, 8-bit/color RGBA, non-interlaced","md5":"95e45444dbd349f2798312e0075dba7e","sha1":"159114a1862c90e6f4038dfa7584401732b271a1","sha256":"f052861e8a7ac853a37f4f4317e0d15f890f8ec628f5bfc7f9132b5fd2856f1d","sha512":"eb74aaa87ef7d3fe7810108ed20ad30d3b524ee1b951c87832a24e0b45f7c47a46018392b8472cca330dbc8f45a5674e3ce741cc8010f8bf03c4bcb86d2f5490","ssdeep":"6144:2f6nPCc6P0tAZaLN2FaZIB8gkTqiXSF56ZhlkCTUjFgqZ+aHy:A6P/LNMB8gkTE5YlkCAKqZJS","tlshash":"6f44233e644294097aeb81ae7266f7c4adc32dd858c49d23b90ddd313b9185f70b1f82","first_seen":"2026-03-23T15:44:44.413611Z","last_seen":"2026-03-26T08:43:48.689937Z","times_seen":5,"resource_available":false,"data":null}},"time_used":574,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":281,"receive":293,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/app/error-7a82f2ef8d29ec42.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/static/chunks/app/error-7a82f2ef8d29ec42.js HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:10 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 13:26:11 GMT\r\netag: W/\"439-19d0b6cc915\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VhzENEXn6ypUv2uGXOVHyqAsaepPqkMzckNcYRFErvGHG2q4hElErFUgtQn7vvOZYGHSoi%2FXQxh0IepOQr0lWpBM9mNkSTVcwA1Rnzr2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e4acc4c96b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1081,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1081), with no line terminators","md5":"1fa113a0d59cc37823cbd298803ef7de","sha1":"75137b033027726e63d9e6f23008da2a196c23c6","sha256":"f5718e61ffab4ea80b96f11fb4650f15a20955da7cde323d6f2ea0d8c6d8bf25","sha512":"e6990bb57cc2646013fee52b5adc0224554a204bb6e9ded1a5b8b76c2e67f453707b759544cecbe08f8aa275bd25ba00d69cdac04374666c02cc9e41ebfb8539","ssdeep":"","tlshash":"571120697184bc98786708ec583bd41cb1570c3c027daa7c7ad79d1c01d84c0f1637c8","first_seen":"2026-03-23T15:44:44.414508Z","last_seen":"2026-03-26T08:43:48.686756Z","times_seen":5,"resource_available":true,"data":null}},"time_used":854,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":854,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/image?url=https%3A%2F%2Fcore-1333692039.cos.ap-hongkong.myqcloud.com%2Fnewsa%2Fe2cb18be%2Fimages%2Fdefault%2Fbank-bank-permata-8dchmk8j.jpg\u0026w=256\u0026q=75","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:10.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/image?url=https%3A%2F%2Fcore-1333692039.cos.ap-hongkong.myqcloud.com%2Fnewsa%2Fe2cb18be%2Fimages%2Fdefault%2Fbank-bank-permata-8dchmk8j.jpg\u0026w=256\u0026q=75 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2250\r\nserver: cloudflare\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: w5CJmY_a8Z7hJqrIo0tBhvOO7bV2oFHY7UFY7V2428c\r\ncontent-disposition: attachment; filename=\"bank-bank-permata-8dchmk8j.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;, frame-ancestors *;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6jjqKSMkmtGxwR0z%2FqyhhzH4NrN1inOvs0m%2FRyVjt0l38PHzTdsOqoUBGIBUdOYz8JrDULr1FafiUggToEykrAa8lLUHohQ2Ri57r8%2FV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e50eb7296b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2250,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x170, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d8e4439061ab59858e469b9eb6d407e1","sha1":"7efa5c6c355a4f6585aadb339ce6a80972558c55","sha256":"c39089998fdaf19ee126aac8a34b4186f38eedb576a051d8ed4158ed5db8dbc7","sha512":"4c8025c8a55930e7e5b93f7cd8f75e9b129e618ec215ef68275fd3fd6ff8ff89247119c8152a85fd23b5a9faba54660a0c60b338f3ea91572dcb24b92cf80fd4","ssdeep":"","tlshash":"534119026292a0add6c7cd275856fe8c6776f3f6e2888a37110fc5506327e616610a81","first_seen":"2026-03-23T15:44:44.415385Z","last_seen":"2026-03-26T08:43:48.62667Z","times_seen":5,"resource_available":false,"data":null}},"time_used":816,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":815,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/image?url=%2Ficons%2Fchrome.webp\u0026w=48\u0026q=75","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:10.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/image?url=%2Ficons%2Fchrome.webp\u0026w=48\u0026q=75 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 756\r\nserver: cloudflare\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: t939NK3Gt7N6Aoj_BtyA-D3yJ_2zgZuss_3yGcsRVog\r\ncontent-disposition: attachment; filename=\"chrome.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;, frame-ancestors *;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ikvy%2FC%2B8qNQCx8rkLJI3RjjAbxbeKy58XbWqFiswlPg5GRgMojOzFq%2BkiJxmtHLW65VyoQUdmc2SXwotiNq8SaTxzb1JblmaGSF6Ulht\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e50fbb896b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":756,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"361a99615d8a295dac469571216884bc","sha1":"76f57788c375adc49e4cc5f016bb2239fbe771e8","sha256":"b7ddfd34adc6b7b37a0288ff06dc80f83df227fdb3819bacb3fdf219cb115688","sha512":"e4d27edfc29ec3e48c5a8e8f06159849f3cf13bdba35546fc63dd1a1fdcece09718c608eefc1ba4706d6123e2df3698e8908d568864d3cdf6af0f39e049bfdad","ssdeep":"","tlshash":"a201655b975da6bc986eb820b16878090ce2c5d3201380a6307985c140876b8ffd2d10","first_seen":"2025-07-23T13:52:55.457242Z","last_seen":"2026-03-26T08:43:48.774338Z","times_seen":6,"resource_available":false,"data":null}},"time_used":826,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":826,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/register?referral=aba5101774263051952","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:12.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"POST /register?referral=aba5101774263051952 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/x-component\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nnext-action: 00ca3157fcac7b4c52f0c4c3ab40ab474e6fcc98c8\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22(auth)%22%2C%7B%22children%22%3A%5B%22register%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2\r\nOrigin: https://dewanusa.quest\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_B9DLSJH0MC=GS2.1.s1774280650$o1$g0$t1774280650$j60$l0$h0; _ga=GA1.1.2034164557.1774280650\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"[]"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:13 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\nx-current-path: /register\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\nx-action-revalidated: [[],0,0]\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z6HqMNVMmgElv953pBHb%2BfJaZYjE%2F0XDpuPqtW69X8nabrrZ%2F5m%2BxJ5oamKS46usDekxciC6OgNzPPTzlECnsd2MHcJM4iYU5bcSrb2I\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e600f1896b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":272,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"c8df38203fc34f0176970e9dde6bd39d","sha1":"df4c58b025bcccd9fcf3af9ec3908b16df1d7abd","sha256":"518481860b0ebeba0e0a219f5a6c8249a405ef434667ae1627cd14c730d3bbf8","sha512":"69b3c18a6d50351f1a53923dd521e976767c946950cef5298fa8248b063af7285e8681eed71f6a45b1a6dfa4cb0499521c7c4565be021aaecaf25712aad8bfd4","ssdeep":"","tlshash":"40d012257928ebb5c446448370ba6f069fbcb56e44d85cecea46e384603e97b740607f","first_seen":"2026-03-23T15:44:44.417355Z","last_seen":"2026-03-26T08:43:48.696436Z","times_seen":2,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/9562-2506a7181cab6977.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/static/chunks/9562-2506a7181cab6977.js HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:10 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 13:26:11 GMT\r\netag: W/\"3090-19d0b6cc918\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mLm4pPJInKr6BeDwDr42LUSN51Xhp3hac7XmWmTgNQPnH3T%2BSCBpWxri5B3KBCa2Sw%2FpJ7Da4r7iK0xgnPbcN4DjB77juEZc9Tw2xnI8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e4aabfe96b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12432,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12428), with no line terminators","md5":"7f83a7432737dd3bf4745de4b10f081a","sha1":"a8412bfc72190b5e638cb7c38e6daac72019d298","sha256":"a635d04c9ba0e9cc4ba004241e4ca328c9daab7762e75bec28b4e4b33ec1a16e","sha512":"f6a9725bd49b7aa7e79e3005fba627bb81eb33ee4215d5a02f859f5a8b2e27ac918f160a9dd0759a90e97a2143e0c2c182004ef82d35bcaaa28e308ef91c7924","ssdeep":"384:A5HLQiyMaNARPZQBfHA58jDJwVWn6Q8WnGl:KCNA1IAMAv1WM","tlshash":"6142fae4a293b866ff6fe1c5d8cf4416bb0e98106b290d25f273564411c8784e562ffe","first_seen":"2026-03-23T15:44:44.418202Z","last_seen":"2026-03-26T08:43:48.682461Z","times_seen":5,"resource_available":true,"data":null}},"time_used":939,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":939,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/8548-dcb26dca6b83bdbc.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/static/chunks/8548-dcb26dca6b83bdbc.js HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:10 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 13:26:11 GMT\r\netag: W/\"28f4-19d0b6cc918\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J4lYyKk2QZVNCYs0N8MujeMS2%2BhliC7Uda2063Vv%2Bh8p9W%2Bibeu%2BWOA8fPR9kCxo9oV0SUBUeWJBnM1aasgcDw%2FyaW4PfW%2FHUHn%2Bqemk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e4abc2d96b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10484,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10484), with no line terminators","md5":"4533f2f5c172d95fd90bb5b6a7d1d1b5","sha1":"3beac665fe87c54301f286b9f645b5b4f81c22ac","sha256":"134271ad0b9fb6a7119793018ad7d4bcd7e87e8c413986f4bc3af0ebd5d5bc9d","sha512":"994404b82dfc71f7e6f7fbdb37c635257e691c142c22856395caefe83c5eba717e1e70aa6929e730a1e99e79611d00afdee4b4a83cc185886fdc1f55ed8dd968","ssdeep":"192:kDQ0Sg+W0Wu39iHTVz0x57k3Tv59kjCQsENC/MET0IkV:gSgpu32Vz0x5o3Tv5KjnsEkEEwIa","tlshash":"f62267a87f2390626b3f4bcde95e8bd8f71a221217150e79f67738550a5cdc8ec82149","first_seen":"2026-03-23T15:44:44.419139Z","last_seen":"2026-03-26T08:43:48.762348Z","times_seen":5,"resource_available":true,"data":null}},"time_used":889,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":889,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/831-60bf24560e714f89.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/static/chunks/831-60bf24560e714f89.js HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:09 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 12 Mar 2026 06:33:20 GMT\r\netag: W/\"16781-19ce0bfee10\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\nage: 315362\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aKitmvKksXewMsutld3BvqZibziHGTK0QYrZmFanVUFebc8Z8kyqJRZCISirfix6UnjWwyM7Tt6U8N2Wi6PiSBLwNa4mwjzQI0SOpMfr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e4acc4596b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92033,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9d6e46ba43b7611fa2ae52a5e87f88b1","sha1":"eeefa7168c12253e4884c2d8828b4bb9749b2147","sha256":"79a6c745e7e326c82901e3469a2a81abcfd7b00564b7bf2353810a51f910dd00","sha512":"b82c554ca414467316f85e46313a42a00cfd3a4cda145e79f969093b0ed7b9dfe42633e64334ff275a2e736fdb6e73fd62bef5a5efd895a0cf47db45ce49b9ff","ssdeep":"1536:krfAB8lnYhJRaKF+FsktCECSAgstHurzQTzl1rBuyfOabKAzG6O/bBcCl9gZDWIi:kbeDS3stYUTzlt6A4zBcClmJXSlh6B3y","tlshash":"2d932ad9b692f87597ab83c8c46f0545f22d0528251e486cf2eacce21459ec8e473fbd","first_seen":"2026-03-23T15:44:44.420145Z","last_seen":"2026-03-26T08:43:48.772134Z","times_seen":5,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/image?url=%2Ficons%2Fedge.webp\u0026w=48\u0026q=75","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:10.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/image?url=%2Ficons%2Fedge.webp\u0026w=48\u0026q=75 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 852\r\nserver: cloudflare\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: UBpqtcwO3I6dz2LSvO-bVqxVbkASsZNBoo5GeM5S2zA\r\ncontent-disposition: attachment; filename=\"edge.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;, frame-ancestors *;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vv0qByQ34GcwaNb1rI0G4IDIBn1rXgVvhGk8ZpQlX2sxou41GI0Ky5ikp783JrBF4sOBwmFMYe7WCIJELe3oiZhdgpVDJ0gURDvGkiQr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e50fbcb96b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":852,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f8d603740d4576ca42532a6ee3196ad9","sha1":"8701b3eb876b737f5da1b28bf08473a26c0a4968","sha256":"501a6ab5cc0edc8e9dcf62d2bcef9b56ac556e4012b19341a28e4678ce52db30","sha512":"b8577842c1fbdbfd022ff8b06bb2060a0178367c9f995348cedaf9a17f4d69f95d63b1447a80272f1d0cb4febe12e5789f9281692679042519609873f6c8d38a","ssdeep":"","tlshash":"40015228d9a05298ae2cd5f750b0a0adf4b2a08716ec135a506762bae0ced516135a99","first_seen":"2025-07-23T13:52:55.528295Z","last_seen":"2026-03-26T08:43:48.642256Z","times_seen":6,"resource_available":false,"data":null}},"time_used":819,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":819,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/7.qYTqns9Q.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.19.183.147","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=17809494\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=b8f4f49c-d724-4914-a885-4e5a1e71f678\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-03-23T15:44:12.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/7.qYTqns9Q.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWyxnNF90VtIrYKeURpOtZtoAaIudpmY6iNa0Oowc3SaYNCaPj-87cE8_vdWNmUItkA57SlQB_Q\r\nlast-modified: Fri, 20 Mar 2026 11:49:45 GMT\r\netag: \"d541ce2d754402b833cc65b76eaea2c6\"\r\nx-goog-generation: 1774007385334203\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 40\r\nx-goog-hash: crc32c=jQQqwg==, md5=1UHOLXVEArgzzGW3bq6ixg==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 23 Mar 2027 15:44:12 GMT\r\ndate: Mon, 23 Mar 2026 15:44:12 GMT\r\ncontent-length: 40\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":40,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"d541ce2d754402b833cc65b76eaea2c6","sha1":"c36a92a0f5cef497ce42b1e8b4c72c8d9bd3786b","sha256":"80353503e48ebf6c2ae9f70184d3e758f64bacf48afe147e039df807509200cb","sha512":"f8cd5cc49f9276c580419958bf312ee0a311194fd41d116ee709e56401d769511700031ec9f3e6151f8da6b7e13b16e374a231e31cb00b92413ce5c751c2a0b6","ssdeep":"","tlshash":"f090044530d334753111111c453f5c0551144c4c05d55730c010d5551f514f4571fc4c","first_seen":"2024-07-04T09:32:22Z","last_seen":"2026-08-09T12:11:02.339658Z","times_seen":29935,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/1256-417ff298a02f60ce.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/static/chunks/1256-417ff298a02f60ce.js HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:10 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 13:26:11 GMT\r\netag: W/\"8a18-19d0b6cc919\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gIaIyu%2FaFFE0s2tg3Q8KFLE1PdVB7lz0gRc00cnftz%2BPgzppJwSu4%2BflCck6CBjcmbSfZCfUe%2F0fRHAdCRPT2RV15x1fzuvFk%2BTun7vz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e4abc1b96b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35352,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35350), with no line terminators","md5":"d599ab04eb3ee581d79dc69acae9f762","sha1":"1efd244916a7e38086cffcaea98d27ddf3d3edec","sha256":"e223e8762a5d39e1f9af494cd93768b0456865c90f0a5c147ccab70e3c9ce6b5","sha512":"65a067e5365ff1f82ed434bdb227733604d0690edc0b3c243be75f5b381eaa7102149b9a7e66fcbeb33ff67d306aab2295df313fd55de34ae61e3bdde9f01f89","ssdeep":"768:SP58/YJJZNsOrlcXUgO6EQj3pl/izf+Z3LbI1iIW0Egp/u:SP5wuZN7lgUgO6EQj3n/izf+Z3LbI1iz","tlshash":"9df2f89a6112f8728aff82ead05f1b04732c1159670c48ecb57e9ee922e0d646747f7c","first_seen":"2026-03-23T15:44:44.422674Z","last_seen":"2026-03-26T08:43:48.690661Z","times_seen":5,"resource_available":true,"data":null}},"time_used":864,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":864,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/6650-b0d7d93c3e72564d.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/static/chunks/6650-b0d7d93c3e72564d.js HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:10 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 13:26:11 GMT\r\netag: W/\"1651-19d0b6cc919\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BWQObQ5N%2Fn4lsbSIZ0sBxE8PPjbU38bBloHtUpOgFu5FbTGzwzuvSdr5U2WfmSS6nAjTFU28tmja64yxd5ztUpmxqD6Z6wX8Hoj91pZR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e4abc1d96b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5713,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5713), with no line terminators","md5":"26024a4d3d0763c0396794c322778747","sha1":"7a19fffdf7f4aeed016566d4590ea6b8efbda1db","sha256":"387127cf5b423ca964e579ca4c2c0701b10fdc67061318884c2ad20600e5b47d","sha512":"5125e921fe6848457729b2031926886686b67750a7b376d7ff7cf9ef981d45b50a78e29f594d00c1a5b5a01a0e19af1ea7882bbe988a8a5fe365d7055f97dfa1","ssdeep":"96:NUpBA4lErV/Xh2WHhQZezubBHonrmzTAQ46aAfXptW7LGxLvJgU2B2fMy5CZwspV:NTV/1KZezYBHZzTAcaAR2GxLvJgfy5CH","tlshash":"e6c1d887e966a49bcf4d2c3d803b4f23e0a62a251d4ec49062f0d467167fe4d7560d79","first_seen":"2026-03-23T15:44:44.423661Z","last_seen":"2026-03-26T08:43:48.718821Z","times_seen":5,"resource_available":true,"data":null}},"time_used":856,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":856,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/image?url=https%3A%2F%2Fcore-1333692039.cos.ap-hongkong.myqcloud.com%2Fd4735e3a%2Fimages%2Fdefault%2Fe-wallet-dana-0qia0agh.jpeg\u0026w=256\u0026q=75","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:10.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/image?url=https%3A%2F%2Fcore-1333692039.cos.ap-hongkong.myqcloud.com%2Fd4735e3a%2Fimages%2Fdefault%2Fe-wallet-dana-0qia0agh.jpeg\u0026w=256\u0026q=75 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2298\r\nserver: cloudflare\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: 9NxZN56f4aoE28eR0mvXlmqiCE67Pr8q-EGzwkE8VyI\r\ncontent-disposition: attachment; filename=\"e-wallet-dana-0qia0agh.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;, frame-ancestors *;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4tzBTlTFI4JWqWzTPpYlQFV5TzN%2BTq7MnmSLGL9YwAh3plu%2B7U1EJSWlLT7FOcw2v1GEIoVsGJPssKRG0TH4yqLRDt7rFe6nyXCoOlbf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e50eb9b96b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2298,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 225x225, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"59d6bb769ddc7307146c86a0b8205359","sha1":"74ecdee51d3adcfc519d97c58b19f15e330550a8","sha256":"f4dc59379e9fe1aa04dbc791d26bd7966aa2084ebb3ebf2af841b3c2413c5722","sha512":"68a9fe19eeb689591314cf302a08f93b1e2dc9e1cbd7984e5a0df61c54f9cbf59c9f84f93a21acde6bf6660ea1e8ff8a7281745f4bb2a48bd4fc01f8349eb4b8","ssdeep":"","tlshash":"54413b76a31588a9cc0e13b4f29794cc660b0ff00cd1a5f762965ce0c2517fc760f119","first_seen":"2025-07-23T13:52:55.553206Z","last_seen":"2026-03-26T08:43:48.797904Z","times_seen":6,"resource_available":false,"data":null}},"time_used":832,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":832,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/3.DazHfinG.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.19.183.147","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=17809494\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=b8f4f49c-d724-4914-a885-4e5a1e71f678\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-03-23T15:44:12.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/3.DazHfinG.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWxGr0FxCf0m4amwRLK06AvFOq7yq9s5A2fcf-8A8leb2XlENq6icXUzSZnxudDqPebIzcUrkPY\r\nlast-modified: Fri, 20 Mar 2026 11:49:45 GMT\r\netag: \"2d77a6aa353e00f553a63318304ed405\"\r\nx-goog-generation: 1774007385319142\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 546\r\nx-goog-hash: crc32c=k77Z4w==, md5=LXemqjU+APVTpjMYME7UBQ==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 23 Mar 2027 15:44:12 GMT\r\ndate: Mon, 23 Mar 2026 15:44:12 GMT\r\ncontent-length: 546\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":546,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (545)","md5":"2d77a6aa353e00f553a63318304ed405","sha1":"79829fe224284805c193a91d2fd444f246271fe0","sha256":"f068996cda742dd6fdb0e857c16b010966bf690480381465595e2b22935de2cb","sha512":"8a7fdf55c616c0d7f3f6d03d2196d7c4d82cb385c2dc73ba36ab9a08ac2f43cbee752de0e10302fda3277fa54813cad993b838b0ae98ac1f17e3d5001a67a228","ssdeep":"","tlshash":"fcf08bc53592f5ea02ab59c548379003f3298818b4baf580e614c5f12493057471ab27","first_seen":"2026-03-18T09:33:42.028688Z","last_seen":"2026-04-07T10:47:46.077135Z","times_seen":1372,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"api.livechatinc.com/v3.6/customer/rtm/ws?organization_id=b8f4f49c-d724-4914-a885-4e5a1e71f678\u0026x-region=us-south1","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"95.100.107.156","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=17809494\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=b8f4f49c-d724-4914-a885-4e5a1e71f678\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-03-23T15:44:12.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /v3.6/customer/rtm/ws?organization_id=b8f4f49c-d724-4914-a885-4e5a1e71f678\u0026x-region=us-south1 HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://secure.livechatinc.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: gf00zrXL4zta/B0oTxX63A==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nsec-websocket-accept: ekd0ckW4czxo3zs0zjliAVWvSvc=\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://secure.livechatinc.com\r\nDate: Mon, 23 Mar 2026 15:44:13 GMT\r\nUpgrade: websocket\r\nConnection: Upgrade\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T09:57:30.082626Z","times_seen":17834258,"resource_available":true,"data":null}},"time_used":492,"timings":{"blocked":0,"dns":1,"connect":21,"send":0,"wait":427,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/register?referral=aba5101774263051952","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-23T15:44:08.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /register?referral=aba5101774263051952 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:09 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nx-current-path: /register\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nlink: \u003c/_next/static/media/155cae559bbd1a77-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/4de1fea1a954a5b6-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/55c20a7790588da9-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/6d664cce900333ee-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/7ff6869a1704182a-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\"\r\nx-powered-by: Next.js\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aihJrCAwoiUrz6VtPjL%2FqSEBODWQJXiLrnRMTInsVw%2BJ95myobgsljFuFjfOmRzDlhxg9FysVNepDI9bJkbzf0w1gpsJTCxMrqqDsFDq\"}]}\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e0e8e42cc9e57e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":631035,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"600768a1d8eefb4d4c6aa3e5cc7c03c6","sha1":"991043bfafbf5914848e951d4f3d7b57129077f4","sha256":"6b577ad7262004ec6779c5f78938e76e04c34a42115686a343795c9f9876a150","sha512":"ba2b8cdbcb350317634d76ba14e64a8f3b82e07fbf09fd41a606851ae68127fb0ed8cc2154472acc63413521099b52131516dcf5e5b62a6d8a764ba44f811ec3","ssdeep":"6144:sT0roQCAF2htQ/CkKhjxx5oSU2ReYcwu4pdpEgxGv8:s7QCAF2htQ/CkKhjxx5oZsu8","tlshash":"3ed454f8c988fd8ba4b61d56f4e5dd8e908b5124b2c4dab45a8a8ce403bbc3707531dd","first_seen":"2026-03-23T15:44:44.42665Z","last_seen":"2026-03-23T15:44:44.42665Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1242,"timings":{"blocked":80,"dns":58,"connect":8,"send":0,"wait":1075,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/media/155cae559bbd1a77-s.p.woff2","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/static/media/155cae559bbd1a77-s.p.woff2 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:09 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 13912\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 12 Mar 2026 06:33:20 GMT\r\netag: W/\"3658-19ce0bfee0a\"\r\ncontent-security-policy: frame-ancestors *;\r\nage: 627144\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aquGmU1VzAy%2FoB7G0HEqr6wHBZ0kUx5NUq7NnlWx2r7vxAsnnXqnlBJ9otAvGXR%2B1htmKDNCnTVh3MPxT1I5u9ocke%2B5EHJvqbDBPQ23\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e4a9ba396b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13912,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13912, version 1.0","md5":"268d01e94fa0e3a13787891fe19f739c","sha1":"64b2f150043886c95b0ed2bafa0071b01b93cad4","sha256":"7bb29c58eadc0f0c7b704f5fce2490d10cb62efa55797a09c9b8f91b3b54cb34","sha512":"5bdba045eedb848c7fbaa6755f6ea14c48f64eaff196405be512af1eb115d2e6b81bed4ab71ae4b6b09300f10f5562b1c518d06733cb27fdc3e27e3d3364bd26","ssdeep":"192:15DEV4fdDdGtHvIEY530I4w8aFzASJzSQDcdZ3FN2t9g2aigcaROswc21kvrg9Qr:7oKxGJIT4ZuPzSXdyg2alqc2uTg3CN1","tlshash":"8252d1d538798a8ec5a5212c255e6f4dd3237df37e196d4681dd8a34e19c8033ce8b98","first_seen":"2023-05-06T05:46:29Z","last_seen":"2026-08-11T09:14:16.865288Z","times_seen":2752,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/css/bfbc09307378af05.css","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/static/css/bfbc09307378af05.css HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:10 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 13:26:11 GMT\r\netag: W/\"bc2-19d0b6cc917\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NT0W9hDiJEwI62a00tiSZFOU33THEESj3dR6ksCycnk6IFDJILBA0nfkEs9RzfTqJxNPWUT1aP4vAndDaLqu3xz4UFiDQU1soyVYd3K1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e4a9bb496b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3010,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (3010), with no line terminators","md5":"650cc8352107e40240f0060a4b2e173f","sha1":"231ba87aef04d6002450f99284ea6230fd0b7a56","sha256":"76a620512c620711e06b28b80f1cbcd9d4433545d5d0fff403bb042d22ba7359","sha512":"7eb6f81cb7d0d10d43698b2d6194146bfab8223a7fc5f16aaaa4a4a81515c2486760079121e281ccae5a0a87c9111a11d3d3b077a4ca0c5f9ad147d19cc2561c","ssdeep":"","tlshash":"0851df31927434b8d7ff922545d3667c152a90c2bfae028cd536af28a2c967e1a165cc","first_seen":"2023-10-16T00:24:03Z","last_seen":"2026-08-04T19:10:16.387612Z","times_seen":155,"resource_available":false,"data":null}},"time_used":905,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":905,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/5604-eb2ed400912f2125.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/static/chunks/5604-eb2ed400912f2125.js HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:10 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 13:26:11 GMT\r\netag: W/\"d3c1-19d0b6cc917\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YyOlehwE78JFRnvX3h4e41qH4FqiBIjfhTDggoyKwmYoWXi4NFuC9vSFhhq6Pe1bgZILoxbKqFVLXlRsH9Zw8qlnXEVJwrau4G0XJ2l5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e4aabe596b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54209,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54203), with no line terminators","md5":"d73c4146dadc4dc2acafd052337daa3c","sha1":"2d169bb7340c1fecf1135a196af637026b9c3960","sha256":"90d408e834438e1e2536d6d4b24cf4cb0f01c22e5a29579708565ab748260bb3","sha512":"a7967420a477b09e112f079da9e79eb8ce9d2024e15b43134ca92877b15cfece50c7f2169a2a32d540b63b419a1d7805bd8c666699864d882c9dcf5d5dd9a177","ssdeep":"1536:DN3NpnQ2oY8pGNpTF2nwSreDx7p3v9aCf5LY/a+cvYbXyNHTRx3i:DN3NpnQ2oY8pGNpTF2nwSreD73vV53HO","tlshash":"2433e8a0f181b1262a4343d5843e0309af7e3874564ca46bb3ac9dd71d65cca4a7ffb2","first_seen":"2026-01-10T01:11:01.694763Z","last_seen":"2026-04-13T08:00:08.198132Z","times_seen":7,"resource_available":true,"data":null}},"time_used":974,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":786,"receive":188,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/image?url=%2Ficons%2Fgambling-support.webp\u0026w=96\u0026q=75","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:10.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/image?url=%2Ficons%2Fgambling-support.webp\u0026w=96\u0026q=75 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1286\r\nserver: cloudflare\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: 9lta1xyi7M8Ry1OQf_Ips5zMwQyupdr9Yv18UnvWRDE\r\ncontent-disposition: attachment; filename=\"gambling-support.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;, frame-ancestors *;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f3u%2Bm4kOLc5vlEggPaWSyoQSB7ruKEEO9JX56E6S97%2FCnjiohJ%2FElQSDhMKWz1LAAn7cOY1Lg8QenMMzFVchyd%2BHJbfUe5iICVs6up9H\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e50fbae96b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1286,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3ccc6907db94d03df6c97ab7c1679861","sha1":"d6822de046931a3b0569aaf2f6618f8da9a6c2d4","sha256":"f65b5ad71ca2eccf11cb53907ff229b39cccc10caea5dafd62fd7c527bd64431","sha512":"f2c4f21b98db214e1c2dbb338bbc6bcdb60903490ed6079c6e029d3bbd1fed8620c73b525f8436293b910b7ccef8853420a832b54e9b10b10db35ee1319ff2cd","ssdeep":"","tlshash":"9221871a9cb4548fca807fe34ed4688e375e24c22c8d646ec81ba2b9c0232dd577e7d1","first_seen":"2025-07-23T13:52:55.425333Z","last_seen":"2026-03-26T08:43:48.663347Z","times_seen":6,"resource_available":false,"data":null}},"time_used":827,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":827,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/image?url=https%3A%2F%2Fcore-1333692039.cos.ap-hongkong.myqcloud.com%2Fimages%2Fui%2Fproviders%2Flogo%2Fpgsoft.webp\u0026w=256\u0026q=75","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:10.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/image?url=https%3A%2F%2Fcore-1333692039.cos.ap-hongkong.myqcloud.com%2Fimages%2Fui%2Fproviders%2Flogo%2Fpgsoft.webp\u0026w=256\u0026q=75 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1352\r\nserver: cloudflare\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: JQYNGPeDXNwzExMrHBGgXqQUd9J5uXUjDChYljbvQtU\r\ncontent-disposition: attachment; filename=\"pgsoft.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;, frame-ancestors *;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hqeA%2Bm0WvmD2Cn7MulpA3pGyJaV95pYiCSOdOgrV7OHi7Xx5dLH1qFhc6WMfHqsI2kdhMhuCvDGkue72CG%2Fqe%2BmjYEij61g%2BWveSbdd2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e510bdd96b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1352,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1b4ea113aa553638bde53387328a32fa","sha1":"8b7e22cab46bb0f1a82259b51cee9bc83989e365","sha256":"25060d18f7835cdc3313132b1c11a05ea41477d279b975230c28589636ef42d5","sha512":"0806ec5d583792f4d2b0f57c09fd83d7330a7db4accd031d0600a80a4c6bfd548371760b87c2a0cc69fa78dd2ea28f0acb8561ce2561774324959c36a06006a8","ssdeep":"","tlshash":"3d210843c94000ab98abb882ba2c224c8057c33a80f39f531602f574e2b8b793c62270","first_seen":"2025-07-23T13:52:55.405346Z","last_seen":"2026-03-26T08:43:48.814228Z","times_seen":6,"resource_available":false,"data":null}},"time_used":797,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":797,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/livechat.hgJsKRWh.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.19.183.147","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=17809494\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=b8f4f49c-d724-4914-a885-4e5a1e71f678\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-03-23T15:44:12.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/livechat.hgJsKRWh.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWz4cO_QzE_YckGZzyfFPJh_3vcf6yi2ye8G7_vS8nI4t4oXmY5FTt5SU4fWLP37h7mgTSptMgQ\r\nx-goog-generation: 1774007385363393\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 401\r\nx-goog-hash: crc32c=vxQ2HA==, md5=egbssK6mJHqc9EWMYEwJEA==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nlast-modified: Fri, 20 Mar 2026 11:49:45 GMT\r\netag: \"7a06ecb0aea6247a9cf4458c604c0910\"\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 23 Mar 2027 15:44:12 GMT\r\ndate: Mon, 23 Mar 2026 15:44:12 GMT\r\ncontent-length: 401\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":401,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (400)","md5":"7a06ecb0aea6247a9cf4458c604c0910","sha1":"1cde3c0d6ccec1951dde410fa90f224572d0f567","sha256":"e8317dbfe5c4731a8f0b8d2ba68cf03987156d773de81f916e6861a7c5a817f8","sha512":"614992feae9cf682a18c5e8d9893587e67be993e4d02566ba0fbed9d3e7572058aed41237268ed19428a1f54606d9f1926680c7ac086a38c7597eeba26aec597","ssdeep":"","tlshash":"75e0cadadb0039e2f688ddf4c404e4e206fb13aa4bb583b084cf137153150a5de06502","first_seen":"2026-03-20T13:10:16.665174Z","last_seen":"2026-03-24T07:16:47.182581Z","times_seen":223,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":66,"dns":1,"connect":22,"send":0,"wait":22,"receive":1,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/app/(auth)/register/page-e2a6459aec1100aa.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/static/chunks/app/(auth)/register/page-e2a6459aec1100aa.js HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:10 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 13:26:11 GMT\r\netag: W/\"5b46-19d0b6cc916\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tOwmCZcHS7gouPFwAvk4VL7JM4BmOqGBzwqzaStuOqcvb0NJHBdX%2B4GdW71pVO405n60CkP5dzojk52yPX%2BwR6KYKMgBm%2BLQhlHGJzX8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e4acc3b96b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23366,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (23366), with no line terminators","md5":"c35a1beec290e0fa8f0b4088b711c806","sha1":"b42552bfa1827e0d7ff1aece290f75bd98c80666","sha256":"caf6cf36b1f8512876ff721ccda2f1259cd5553a1a8e7ba2f3c93db6117b3f5c","sha512":"e9796896254bc84936b426fd5425bd56e2469a58fe9b2f26a3569232e44b73b4542a582a945a06d8d67c40be9cffd0e90896a16687101d3dfc75104232f9f948","ssdeep":"384:voP8LriS1QbfjSqXV9DFyKP7WcKCDADImXlCDnDuKVkpeUFz++T92EH0atzj4sw:vlLO7fjSqXV9DFyKPqec0msT6in+TjNa","tlshash":"01a285648bce1e8fe966ece4b497c10e12cbd11b111e595ed93da42d22d3400bfec35a","first_seen":"2026-03-23T15:44:44.433645Z","last_seen":"2026-03-26T08:43:48.711202Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1014,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1014,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/app/template-ce27f352978faf60.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/static/chunks/app/template-ce27f352978faf60.js HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:09 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 12 Mar 2026 06:33:20 GMT\r\netag: W/\"b93-19ce0bfee0c\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\nage: 640792\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=17iTI%2Binvpsq2VURaa6rFeolZjgLmjSiSjpEqFSw2BfiXywPxdhhKR%2B2mAw%2FH%2FNTAdUQr3FGxogwmKYp5zMzlPjnAYToxEQCU6%2BGnwOQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e4acc4e96b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2963,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2963), with no line terminators","md5":"38c6b99b6ee948315ca4f974b0c49282","sha1":"f4553461ce821bd6ce08a2f96fb05574028e74c9","sha256":"3017bc953aeba87a234118e3e0913c48e60c454104914451f9cc4b66e904f569","sha512":"189bfc2a0b064a4a9bc8b6d80f83ebf108d1bd2d9569c0720557e00758f70f2b7e21203c9c0a3a1cae8a0e5ad0222f0a9368bd0401780893d8b8a0df9f01def3","ssdeep":"","tlshash":"c851d7bfa642388d23af45e4803b1407f24e6c79202e8c64a792dcb922d1d746676de8","first_seen":"2026-03-23T15:44:44.434719Z","last_seen":"2026-03-26T08:43:48.725384Z","times_seen":5,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/tracking.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.19.183.147","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:10.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /tracking.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWxEvAsMvymxHM1muhyHDA-zLZDHowIUx7I-l6KrC9GMQHHu7v0TCzFkLMOvx4zcu5N-p4u3GXA\r\nlast-modified: Fri, 20 Mar 2026 11:49:45 GMT\r\nx-goog-generation: 1774007385482931\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 102724\r\nx-goog-hash: crc32c=e1J+Pg==, md5=o0TGerG0Lm67nCPjvZFtmQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 33200\r\ncache-control: public, max-age=28800\r\nexpires: Mon, 23 Mar 2026 23:44:10 GMT\r\ndate: Mon, 23 Mar 2026 15:44:10 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":102724,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"a344c67ab1b42e6ebb9c23e3bd916d99","sha1":"1b8af7b30cc9831348b1dc8b61cb57ae912a2b05","sha256":"216a409d1add9fcb0ec72ef2d4d02cbab37761ae2dbf41dbc2fecf6aae0474ae","sha512":"df8fe41d081450012161536e726cfe19aa425e2bd3544f8d3e612d9c623d4fc480ba7a60f9a9a6270a06121db1edb0a310b9d7e7d0ae9b5a1bfcd94980b07fe6","ssdeep":"1536:E5y/uRri7DJnagIckNmeuR5bydWiBwpDwLCPoRvCRW6Rtt:E4/uRu79aXuRxyk8vCdRf","tlshash":"07a338d67282b03493f785e7a17f6216b33a291c740d8410f17cec6a396a9878177f2e","first_seen":"2026-03-20T12:44:21.754759Z","last_seen":"2026-04-25T08:26:24.664416Z","times_seen":269,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":86,"dns":26,"connect":21,"send":0,"wait":23,"receive":27,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.livechatinc.com/customer/action/open_chat?license_id=17809494\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=b8f4f49c-d724-4914-a885-4e5a1e71f678\u0026use_parent_storage=1\u0026x-region=us-south1","fqdn":"secure.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"95.100.107.136","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:12.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /customer/action/open_chat?license_id=17809494\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=b8f4f49c-d724-4914-a885-4e5a1e71f678\u0026use_parent_storage=1\u0026x-region=us-south1 HTTP/1.1\r\nHost: secure.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ncontent-length: 758\r\ndate: Mon, 23 Mar 2026 15:44:12 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1776,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1776), with no line terminators","md5":"f8cc732a8204a4b03d274e16f23e8e12","sha1":"8a2219478f27623f539b5a89e0325225c026b2c6","sha256":"fd8d111297b1b658c8a6d8177208f2f5fec51b1538ec502a3688278345d93136","sha512":"44db6da16ce7945a0f2f76edd9517b20d76d9496978349f0f4b842dc94f44e5f5d52be0325ce9a141b3902a9c821717e1333bd8b1ef96ec94f83cb567fd390c1","ssdeep":"","tlshash":"a7314373a600c91d7174c221fd8bb08e895d534e8644acf2b19412fe0ad1ed58173e29","first_seen":"2026-03-20T13:10:16.680685Z","last_seen":"2026-03-24T07:16:47.200323Z","times_seen":223,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":408,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/game/live?_rsc=h5wy4","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:12.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /game/live?_rsc=h5wy4 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22(auth)%22%2C%7B%22children%22%3A%5B%22register%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nnext-router-prefetch: 1\r\nnext-url: /register\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_B9DLSJH0MC=GS2.1.s1774280650$o1$g0$t1774280650$j60$l0$h0; _ga=GA1.1.2034164557.1774280650\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:12 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\nx-current-path: /game/live\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8bn31uykt%2F%2F5nKX1tYvYMMzc6C4jnMxN3NGQhwSl%2FeZ5C0vaIcwPU4BPMN9FrC1iOlDAvb7%2BsTIhFgZIamZB3k1h%2FsWrf8ZXFUBNoPHx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e5c0da796b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":198,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"2abff96040c9d3d1d539db5bb8d852a1","sha1":"1ad08a7a2eea43c1f690e98b299137400fc73d67","sha256":"b9b49245468c43ab46a6dc1bdfcec7efa58e929e679196fcb5861ab4ca3814ef","sha512":"140dbf41eb3fdc866e7d21203528fb440aa568f8239919b611a8ba41cce38f8cd39ee178f4abeacb233e818ba9f1b7faff335e818d78b3f27a9815881fd0d563","ssdeep":"","tlshash":"87d0a922084029b60aba20a0002eea4b388e483b22c828f090924e043bb722101436c8","first_seen":"2026-03-23T15:44:44.436709Z","last_seen":"2026-03-26T08:43:48.632274Z","times_seen":5,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/register?referral=aba5101774263051952","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:13.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"POST /register?referral=aba5101774263051952 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/x-component\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nnext-action: 00528c7d1d525d33773fc05ef2ba22170df0b8c5dc\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22(auth)%22%2C%7B%22children%22%3A%5B%22register%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2\r\nOrigin: https://dewanusa.quest\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_B9DLSJH0MC=GS2.1.s1774280650$o1$g0$t1774280650$j60$l0$h0; _ga=GA1.1.2034164557.1774280650\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"[]"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:13 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\nx-current-path: /register\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\nx-action-revalidated: [[],0,0]\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hyq3elhnkJjBHsq%2B4%2FKfmEnZwUT7VVXaYMeJ2eVWFctkwt3xtxfwMCzTA0Lb7sjn86ekiRw%2FftiEAId2HOqWneOH384lJSSlEb3lEi55\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e618acb96b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14701,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (14651)","md5":"02c0c82006af91d142fdaf0314f40713","sha1":"7de1d86b52f1034f75abf73a91b990b52d25859b","sha256":"2dc90f613f3e25fb734de083e755a8cbcd995b913db885b52fb36ffed21070c3","sha512":"94852376cf5498f83f113a0824946c4f9c5c5cc95f5bfbd1909620ed559adbf967355f9ff4bf978d2b0aa70cd2c8f7a026461478742903b8baa1a3bbdab92e9a","ssdeep":"192:AF1KR3f6SY1ckqZeqUdnwp0P6bWc98Bus/qLi4elQVT7TTMz6SS27tn529LZ2Bsw:ACUxB57690BnF8hKW10aTAPCONIF3C","tlshash":"2162ffa52768f77bd064118571af7b83cb3f212d58859bfcfe86c748823d8b9a50250e","first_seen":"2026-03-23T15:44:44.437556Z","last_seen":"2026-03-26T08:43:48.680734Z","times_seen":2,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/187-4e25cc6737ba3fc8.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/static/chunks/187-4e25cc6737ba3fc8.js HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:10 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 13:26:11 GMT\r\netag: W/\"6264-19d0b6cc918\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q5sO6TEO%2BfDTaUYDgLAiH0dp5fwZqYLwhrx8LQCRk2Y0eyVjWifbuLdwc613U%2FTdEqsWSwnDs3%2BXzhBEPspCm%2Bk6x5HE%2BuoCfr9CGwiz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e4acc3696b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25188,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (25186), with no line terminators","md5":"518eb0816ba9bd65ccc10d23144f9784","sha1":"30675042d33fa65552d581a3ae55bbac01c0b524","sha256":"aaf45e97e2e2d0dbc8724f6d7fa5cbac55a0d5747d05f078d14070387d8a5db3","sha512":"34384fdb5ae09b27d59b69a6e29fb8b288048d10070f6ba77610394b147b3876823e660555ca92633687ca3375f78b9ccd3e0c843416aeb0db68fd39db757170","ssdeep":"384:RjqJMb6doxR810n0c0247bugZxIgNstICdb8a9Q7MQdXbG0:ltUC0dVbu6JGCLFdLz","tlshash":"1eb209712252f031e9ffe6dce88e46a8b73b1e84bd150c71b4a2ae550104ec4f5dbb29","first_seen":"2026-03-23T15:44:44.43909Z","last_seen":"2026-03-26T08:43:48.744621Z","times_seen":5,"resource_available":true,"data":null}},"time_used":879,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":879,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/5502-42c25be9f2e7fa2f.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/static/chunks/5502-42c25be9f2e7fa2f.js HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:10 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 13:26:11 GMT\r\netag: W/\"1a9b-19d0b6cc919\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q3AXZwsmSoGDJznyp6%2BN9WPUPy4Ccj8ILbYak4AzDvkQ4dS8zJWvKflUJbXUsQBZaoPdEPq8xI%2FoeSVvr9M8xCT2zG6hIPQmAn8WzYwW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e4acc3a96b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6811,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6811), with no line terminators","md5":"763c1410327e4d5ff096181820a44a65","sha1":"8372b5896ac57ac06afdfe838e1e4281c8d9f8ca","sha256":"f32c48b0af36aa6da2c66dd4db004fdc6bc007c6b12b70985627a54e1584003e","sha512":"caf849a0e015a9c048afaa564c00cdb7dbdb86ca5690ace6ca3bea9e7997a7f35fdf1d61ea7348f3dd43c3bf25edf9121ce573335fb518ae37b3cc30f5374daf","ssdeep":"192:9fm817YPaQAn8ufEk4UIIQAKZnnEYnaw/jaSL3Uhi84ng0QvVqMSx5:M8ka80yngpVqMS/","tlshash":"31e1d7d4b78afc648fbac287d51d4498b75615009f4f08e8f3af44244298e5ca26a7fa","first_seen":"2026-03-23T15:44:44.440291Z","last_seen":"2026-03-26T08:43:48.792238Z","times_seen":2,"resource_available":true,"data":null}},"time_used":870,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":870,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/image?url=https%3A%2F%2Fcore-1333692039.cos.ap-hongkong.myqcloud.com%2Fnewsa%2Fe2cb18be%2Fimages%2Fdefault%2Fbank-bank-mandiri-0pido290.png\u0026w=256\u0026q=75","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:10.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/image?url=https%3A%2F%2Fcore-1333692039.cos.ap-hongkong.myqcloud.com%2Fnewsa%2Fe2cb18be%2Fimages%2Fdefault%2Fbank-bank-mandiri-0pido290.png\u0026w=256\u0026q=75 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6098\r\nserver: cloudflare\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: nh2Nw06P6zoKZxe9oHOzSAEMH1UxrwSjXAVc0TwjdrM\r\ncontent-disposition: attachment; filename=\"bank-bank-mandiri-0pido290.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;, frame-ancestors *;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=boZkP2Ac4HwOveM%2FeZ8lJOGKO7x9BEyoQf0a4MICsvCQeQsLoVtkANQeqvVknq9Bx4dg40cXG3dBq38Gd3imCvoWXLWR2lHhEGBlSvgu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e50db5e96b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6098,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"285ff626a9b194b8ffc1cbe26fa5725a","sha1":"a512c5d128063e99917051e6b19cc8bf4baf850c","sha256":"9e1d8dc34e8feb3a0a6717bda073b348010c1f5531af04a35c055cd13c2376b3","sha512":"69676733bbcd91f024aab234e896dab695060da236c561650e7c2fc99a08c8ba982e63b96525a9705611ecaf133167520b145b84127ba45cba8e6e835d178e0d","ssdeep":"96:3Ua5TqpX9OtTzRYMWSJ60zkEQrfm4b1zj8X4j2FHZOu80E8i5EW2Op0vrXtFLoAb:EK29YHzOD/UOuPEfu+0vrTLofy","tlshash":"3bc1bf191886b694f1c5843f1fdb452f29852b1cff79de285bf8eb12a46d03a06170a8","first_seen":"2026-03-23T15:44:44.441232Z","last_seen":"2026-03-26T08:43:48.700728Z","times_seen":5,"resource_available":false,"data":null}},"time_used":845,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":845,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/image?url=https%3A%2F%2Fcore-1333692039.cos.ap-hongkong.myqcloud.com%2Fimages%2Fui%2Fproviders%2Flogo%2Fag.webp\u0026w=256\u0026q=75","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:10.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/image?url=https%3A%2F%2Fcore-1333692039.cos.ap-hongkong.myqcloud.com%2Fimages%2Fui%2Fproviders%2Flogo%2Fag.webp\u0026w=256\u0026q=75 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1908\r\nserver: cloudflare\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: y0FWtV1VjNVBECE9wmT5J8edBKw_DLi3U_v_xRECLO8\r\ncontent-disposition: attachment; filename=\"ag.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;, frame-ancestors *;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2oBYhwex6Deoe7T2uk92cn9aW2k5Q4kjHMGlNF%2BqIgDyss1MEJPrm9GG%2Fy4t5E9aVzRX3WsN8QvK5RSZN3264dP0HbAr1RJn8jo92kHF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e510bfa96b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1908,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4c14a18d3b1c3167a7d91c241892c711","sha1":"33b75426a0920b687eb350451b00bb37125dc461","sha256":"cb4156b55d558cd54110213dc264f927c79d04ac3f0cb8b753fbffc511022cef","sha512":"9a3f3472b4aea480c7405136de706ae68202e4d3ee8e01abe42ef0c2868b3bf1880e4e72708f53cfe30eab1fb9a99d54646f64b5751c21cdc131faef5710fe7f","ssdeep":"","tlshash":"73411d9d1fa549458b58e723aa3fe6d01f4e62d101b95d433056acd3bb95fd03434c84","first_seen":"2025-07-23T13:52:55.526486Z","last_seen":"2026-03-26T08:43:48.677587Z","times_seen":6,"resource_available":false,"data":null}},"time_used":817,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":816,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"accounts.livechatinc.com/v2/customer/token","fqdn":"accounts.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"95.100.107.136","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=17809494\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=b8f4f49c-d724-4914-a885-4e5a1e71f678\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-03-23T15:44:12.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"POST /v2/customer/token HTTP/1.1\r\nHost: accounts.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 225\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure.livechatinc.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":225,"data":"{\"response_type\":\"token\",\"grant_type\":\"cookie\",\"client_id\":\"c5e4f61e1a6c3b1521b541bc5c5a2ac5\",\"organization_id\":\"b8f4f49c-d724-4914-a885-4e5a1e71f678\",\"redirect_uri\":\"https://secure.livechatinc.com/customer/action/open_chat\"}"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://secure.livechatinc.com\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\ncontent-type: application/json\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ncontent-length: 201\r\ndate: Mon, 23 Mar 2026 15:44:13 GMT\r\nset-cookie: __lc_cid=5092245f-05bd-4cab-9501-566f18284d55; Path=/v2/customer/token; Domain=accounts.livechatinc.com; Expires=Thu, 23 Mar 2028 15:44:13 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None; Partitioned\n__lc_cst=13725790a7bf96ad72ee3656ba478ef35de198dcc9c28d47115c195c675a8c853529b4b77f6fdfb7d490d74f3690d508471827fafeb8f22b9b25c011c513; Path=/v2/customer/token; Domain=accounts.livechatinc.com; Expires=Thu, 23 Mar 2028 15:44:13 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None; Partitioned\n__lc_cid=5092245f-05bd-4cab-9501-566f18284d55; Path=/customer/token; Domain=accounts.livechatinc.com; Expires=Thu, 23 Mar 2028 15:44:13 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None; Partitioned\n__lc_cst=13725790a7bf96ad72ee3656ba478ef35de198dcc9c28d47115c195c675a8c853529b4b77f6fdfb7d490d74f3690d508471827fafeb8f22b9b25c011c513; Path=/customer/token; Domain=accounts.livechatinc.com; Expires=Thu, 23 Mar 2028 15:44:13 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None; Partitioned\n__oauth_redirect_detector=counter=1\u0026t=1774280683\u0026tag=42313cca95cc5c62fe166c1551a5c1f8c883555c; Path=/; Expires=Mon, 23 Mar 2026 15:44:43 GMT; HttpOnly; Secure; SameSite=None\r\nstrict-transport-security: max-age=86400 ; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":201,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"39ea4840c1b18d52338ce34d32c62a47","sha1":"c5730844a8e870bb8bfa790a0d4ac6e7116a5a06","sha256":"e5de6b21f4654d8e2aa959f30f39cc0a2939f0d2e388c79401440f3d6207fc7a","sha512":"c5444d0921c199fe49a2c947dacef6d071a0105ad81080ec5bebeb86365a2eaf56cc553ccf892dd7c25713030426fbecec1f016b02cfb000a40559b6c5dbc5a2","ssdeep":"","tlshash":"b6d022cb8684bca98ed52b2304440f487c0622aec18864dcc8e9801e1e04a72b32fa3a","first_seen":"2026-03-23T15:44:44.443721Z","last_seen":"2026-03-23T15:44:44.443721Z","times_seen":1,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/14.CbrGcdbU.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.19.183.147","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=17809494\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=b8f4f49c-d724-4914-a885-4e5a1e71f678\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-03-23T15:44:25.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/14.CbrGcdbU.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWx_DdejqqfQHgtmanG04MHx3gMo4tSMzQgiXIGCiurUx9Vx4ws8SMp7txADeWQgotomayyobQ\r\nlast-modified: Fri, 20 Mar 2026 11:49:45 GMT\r\nx-goog-generation: 1774007385279180\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 1202\r\nx-goog-hash: crc32c=uhWGNw==, md5=EkX6w387Jm7kf7mtk1L/1g==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 578\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 23 Mar 2027 15:44:25 GMT\r\ndate: Mon, 23 Mar 2026 15:44:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1202,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1201)","md5":"1245fac37f3b266ee47fb9ad9352ffd6","sha1":"2fcb3ffdf47f069995adb65b400bf97bf8376cc9","sha256":"6cad9e49d556963ec7d665099f069175775a55fdd40116dbccf8feab574242c3","sha512":"738b7f1cc7e2b47a1fbbe9210859ed0feb64bfcf8e26e5faf6a2d4ac890384b23a99d52d74896a177d47974c5e9b985b3514fbe2c7c1620ebcc4350cbaf9bc87","ssdeep":"","tlshash":"e421df9ead48e5714be84de590a21c36da68631cb1abc4f0f16b1e9633058c312f3e17","first_seen":"2026-03-19T11:32:13.705712Z","last_seen":"2026-03-24T07:16:47.234363Z","times_seen":41,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/2.e4ZPo7IS.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.19.183.147","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=17809494\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=b8f4f49c-d724-4914-a885-4e5a1e71f678\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-03-23T15:44:12.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/2.e4ZPo7IS.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWznuoSjtYg1hrkeruZx9ObC5nsYko6BtE6oo8s41eYZ4kf3boQ6avoej3dk5P9jhH6f9ZELs24\r\nx-goog-generation: 1774007385375770\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 445522\r\nx-goog-hash: crc32c=XulvnQ==, md5=uHBOmk+snMbtMajuHO1XRA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 125484\r\nlast-modified: Fri, 20 Mar 2026 11:49:45 GMT\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 23 Mar 2027 15:44:12 GMT\r\ndate: Mon, 23 Mar 2026 15:44:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":445522,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b8704e9a4fac9cc6ed31a8ee1ced5744","sha1":"599832fa652fb79cff9fee0acfc06371c39cd801","sha256":"b03428d1cd76ca76a60c969ad81ec13b9c53b424561703c4cde067c7c9dac2dc","sha512":"c175128402adf09a457727636f145aad345c2fbd4ae2a2ec1478e383bb1cb96a853163d3be9c911b249b943cc60ae82c8979f03468098cb4de96a9648003a16b","ssdeep":"12288:AR51UTGQCkC8iMQiiH56K1rNZoEOWtaPloSdXGZMRZNW8KfAZExrr8jr0IbM4f+T:AR51UTGnZohzGf","tlshash":"30946bd0b242b938dbe7c19b90bb1609f73d3d09b42a9661f1bde85d33940489277fa4","first_seen":"2026-03-20T13:10:16.638449Z","last_seen":"2026-03-24T07:16:47.227643Z","times_seen":225,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"core-1333692039.cos.ap-hongkong.myqcloud.com/newsa/031b4af5/images/ui/logo/desktop/logo-k9cgzumj.png","fqdn":"core-1333692039.cos.ap-hongkong.myqcloud.com","domain":"myqcloud.com","tld":"com"},"ip":{"addr":"43.132.105.206","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:10.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cos.ap-hongkong.myqcloud.com","organization":"Shenzhen Tencent Computer Systems Company Limited"},"issuer":{"commonName":"GlobalSign Atlas R3 OV TLS CA 2026 Q1","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Mar 2026 07:35:01 GMT","end":"Fri, 02 Apr 2027 07:35:01 GMT"},"fingerprint":{"sha1":"F3:D7:6E:13:68:23:65:72:46:DD:C3:C6:C6:97:CA:F3:1A:2A:BF:E0","sha256":"D3:73:DE:50:36:F6:35:C0:3E:DB:5A:B2:24:6D:88:10:98:AE:18:B5:11:83:30:89:69:94:CA:15:66:04:56:39"}}},"request":{"raw":"GET /newsa/031b4af5/images/ui/logo/desktop/logo-k9cgzumj.png HTTP/1.1\r\nHost: core-1333692039.cos.ap-hongkong.myqcloud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/png\r\nContent-Length: 168736\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nContent-Disposition: attachment\r\nDate: Mon, 23 Mar 2026 15:44:11 GMT\r\nETag: \"decb82474a70e1db949ae1f5fab84d45\"\r\nLast-Modified: Mon, 16 Jun 2025 10:41:23 GMT\r\nServer: tencent-cos\r\nVary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-cos-force-download: true\r\nx-cos-hash-crc64ecma: 8803333732375305899\r\nx-cos-request-id: NjljMTVmY2JfOThmMjcwOV8xYTFiXzk4MWU0ZTM=\r\nx-cos-storage-class: MAZ_STANDARD\r\nx-cos-version-id: MTg0NDQ5OTQwMDMyMjU4MDE2NjU\r\nx-cosindex-replication-status: Complete\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":168736,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1399 x 983, 8-bit/color RGBA, non-interlaced","md5":"decb82474a70e1db949ae1f5fab84d45","sha1":"03613606a5451249048fc937710d986dfa393a47","sha256":"ef3a4d32100ead0da51d780a5b46e4e08a04fa644d0b24307ca1f0e784e9164a","sha512":"1d498b173553d4796617bf0fc40116589f746d07dc6f837987ccc4099ce8219b62fe4fdf3c4d214cff68e80ee1e90a90811949653c728d85f66613d0b4bd7276","ssdeep":"3072:R0QNVGF/jp2vnKPD2WMlwDBUscfIscSFikkjqHZnjjQes729i/qh:7kVAnKPDmwB7cfIiFSqHZvQao6","tlshash":"f9f3f10d979708acd052d377fca10eb5e7f95a6948758b48bbb4cb3a4eca7e6c112d00","first_seen":"2026-03-23T15:44:44.447143Z","last_seen":"2026-03-26T08:43:48.716952Z","times_seen":5,"resource_available":false,"data":null}},"time_used":3057,"timings":{"blocked":1119,"dns":346,"connect":255,"send":0,"wait":282,"receive":528,"ssl":523},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/media/4de1fea1a954a5b6-s.p.woff2","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/static/media/4de1fea1a954a5b6-s.p.woff2 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:10 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 13980\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 13:26:11 GMT\r\netag: W/\"369c-19d0b6cc914\"\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6etEJnY%2FP3Oj%2BfvZY9DudxQZcUGn4izGS53yzH1qHabqjIEJj%2FUjmA8DeHFsC6M5Q%2BCVhX%2BxxzIZL1hYf3yWXf%2F%2FB9S6hyMBHfPAV0NW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e4a9ba796b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13980,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13980, version 1.0","md5":"b7d6b48d8d12946dc808ff39aed6c460","sha1":"3f18028a04b3fb39bb1cc33dce401d04e9207970","sha256":"d4ae5188a65370ecfe28f42293bbee8297cfd5712c6aadfdb270d48f2bcd88b0","sha512":"7c719a3026913201c92129f92b5c08bbe4344fc9c3b2d95445a3ec23974acc7de4555177145dfb8ae007572d03038fb3461e62654c386a60ddf32b0608edbd7a","ssdeep":"384:xE1ZUpMQcRcGQO/z6vwr1/4UcKURb5nbC5n:x+OcKGpz6vwrB4cURBQ","tlshash":"6552d041c8074200cbbb3471b46a9dd168914030a9dd24592b71e9b137f63affd5ae8e","first_seen":"2023-05-06T05:46:29Z","last_seen":"2026-08-11T09:56:05.993945Z","times_seen":11218,"resource_available":false,"data":null}},"time_used":1105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":916,"receive":189,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/1991-b814e40b7d0ea1da.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/static/chunks/1991-b814e40b7d0ea1da.js HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:10 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 13:26:11 GMT\r\netag: W/\"5e4d-19d0b6cc918\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l7zix52dEcZPmsWwQVHYygqONZcwLFYE6rfV5n5QCMNr%2BdrmX6mITwuboXDUG1HCTbNU%2FfLRjb0b2r81fcgL40u5ETjRpFakYRumwS8t\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e4aabfc96b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24141,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (24141), with no line terminators","md5":"aedca25e4e2f16bc082e2ee8e417d2bf","sha1":"d597009134bfa2185e9394c0e5c6fc433f6ab771","sha256":"da6633a7e8dbe754838e0aec06bc1b8b764b7784eae368ebc08af29377f7b44f","sha512":"6d715e365e0f0a56dbc67ebf8ea0f7bac810524bbb90ab1177a713f4dd0c2f29ea6a5cfb8520e4c6595b157d49cbaf4324065d411c96309b38c8db11b14a15be","ssdeep":"384:SVqgvEGJtRO9gLcP6NIoDG0W/6CTmfGWWQ2WmSO:SVP5JtRO9gLIEK0VCT1WN7O","tlshash":"20b20988b593b41406a392a550ff514e72bd2d1ca5cc9098f2a2d0fe2df698c6177ff8","first_seen":"2026-03-23T15:44:44.449709Z","last_seen":"2026-03-26T08:43:48.701522Z","times_seen":5,"resource_available":true,"data":null}},"time_used":861,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":861,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/image?url=https%3A%2F%2Fcore-1333692039.cos.ap-hongkong.myqcloud.com%2Fimages%2Fui%2Fproviders%2Flogo%2Fnlca.webp\u0026w=256\u0026q=75","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:10.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/image?url=https%3A%2F%2Fcore-1333692039.cos.ap-hongkong.myqcloud.com%2Fimages%2Fui%2Fproviders%2Flogo%2Fnlca.webp\u0026w=256\u0026q=75 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1450\r\nserver: cloudflare\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: 3ARDJT4FD50BzaaKTgBwziGwylh_KJxYEgirGQPG5bU\r\ncontent-disposition: attachment; filename=\"nlca.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;, frame-ancestors *;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1m%2FK7fsHt%2FZEqUK81jgdjMcFHkrmJbmXgT7AQ6gmDrZd7vR5RAHsTllHZc4XM8eHcA2wnzgNaOu5NglI2wA14si195WX5V3SlUEZNo7n\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e510be296b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1450,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"14827c6e1494c4f44a24522e4c5861ff","sha1":"d22189329d8dcc297bc80ad9b7029040ec620f13","sha256":"dc0443253e050f9d01cda68a4e0070ce21b0ca587f289c581208ab1903c6e5b5","sha512":"752a5c217ccad2cee134d5195551a4d59d09b1db4cda0626ffff585f86953ef11dfa04e344318861517cbf2085fbcec0b11a6056419a349983edbace23b68cc2","ssdeep":"","tlshash":"5431c775cd9758b8c81b8f213f73326bb316a18d9e0d05a1eb45a4c78986c686c23470","first_seen":"2025-07-23T13:52:55.542202Z","last_seen":"2026-03-26T08:43:48.676609Z","times_seen":6,"resource_available":false,"data":null}},"time_used":807,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":807,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/image?url=https%3A%2F%2Fcore-1333692039.cos.ap-hongkong.myqcloud.com%2Fimages%2Fui%2Fproviders%2Flogo%2Faspect.webp\u0026w=256\u0026q=75","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:10.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/image?url=https%3A%2F%2Fcore-1333692039.cos.ap-hongkong.myqcloud.com%2Fimages%2Fui%2Fproviders%2Flogo%2Faspect.webp\u0026w=256\u0026q=75 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4506\r\nserver: cloudflare\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: NlTDPvLRUteFaXSPDputi6UEAC0SWAYd2eiexKoHrrA\r\ncontent-disposition: attachment; filename=\"aspect.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;, frame-ancestors *;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mDOQPEDoozjrDncldq1tlAD3LqtL%2F1YmUGXe%2F2IxQcexj6mT%2BC6Jo2TNfEH6UyUnNxRr6XEkEO9aOWeD9Kp1dxo8kHTNw%2BOF2b2e5K%2Fp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e510bfc96b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4506,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"990ab1705d0bf69d16131329316af209","sha1":"7e77d2d6bddc6bfb934066988532f3dac9510086","sha256":"3654c33ef2d152d78569748f0e9bad8ba504002d1258061dd9e89ec4aa07aeb0","sha512":"be24aa5006f1ce9cd7455184535f59aa769c54be6dba81171fddf027382e85be158bc61953e40d7295556ab6a913bdf6c1506a1a32f1038cce64fc37efb96004","ssdeep":"96:MWyU5jVL1WiPTdmG6Qvpn+Uk2jHCwMtROqVKIL56gnjE6ce:MWyC1BDv9fi9RLpHj","tlshash":"b1915c18d84b62c2dd3f16a9e78575c2d6eb3489c20c4a56ce1880903ee3ec8e7d41e5","first_seen":"2025-07-23T13:52:55.539103Z","last_seen":"2026-03-26T08:43:48.759217Z","times_seen":6,"resource_available":false,"data":null}},"time_used":816,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":816,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.files-text.com/us-south1/api/lc/main/17809494/0/ec/ff772af303e6959cebfa57ba80ca5a23.png","fqdn":"cdn.files-text.com","domain":"files-text.com","tld":"com"},"ip":{"addr":"95.100.107.136","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:14.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /us-south1/api/lc/main/17809494/0/ec/ff772af303e6959cebfa57ba80ca5a23.png HTTP/1.1\r\nHost: cdn.files-text.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 38126\r\ncontent-type: image/png\r\ndate: Mon, 23 Mar 2026 15:44:14 GMT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38126,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 320 x 320, 8-bit colormap, non-interlaced","md5":"8c2e21de74abeab3daa2b4f0a5a95125","sha1":"b3f1d8b4317fed225bb49a92f860457b05dc3113","sha256":"309e6b06a2a3a681c6ce247edf51d97ba6ea4c784f5d56c69a3a3326d187d107","sha512":"0c32eec10c4bd3e908af2706bd5fa1aaaf19b2488b60a983a57f1d655fc45dcda9d39f2f01f662057a44305ac61b97b94253c1db3238cf7e79be130bcc610e7a","ssdeep":"768:5ARyPEwSW9xri44QZD5FUSTgy2VmBTQGINpwJDUTcM:5ARyswfP+44QZMEGVmBT4NEUgM","tlshash":"0403f1c5106702ba8191333def0caade80408ca27674d17ca5fba0adec56e554d6bcfa","first_seen":"2026-03-23T15:44:44.453174Z","last_seen":"2026-03-26T08:43:48.648934Z","times_seen":5,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":21,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/image?url=https%3A%2F%2Fcore-1333692039.cos.ap-hongkong.myqcloud.com%2Fnewsa%2Fe2cb18be%2Fimages%2Fdefault%2Fe-wallet-ovo-vs5lg2kf.jpg\u0026w=256\u0026q=75","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:10.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/image?url=https%3A%2F%2Fcore-1333692039.cos.ap-hongkong.myqcloud.com%2Fnewsa%2Fe2cb18be%2Fimages%2Fdefault%2Fe-wallet-ovo-vs5lg2kf.jpg\u0026w=256\u0026q=75 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1986\r\nserver: cloudflare\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: XHJCq73mF9xfUg04ajc6EK3l8hE0wZf6AJX2e8HajuQ\r\ncontent-disposition: attachment; filename=\"e-wallet-ovo-vs5lg2kf.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;, frame-ancestors *;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uoK6qwRKTI8SLS3ee9GHO4DrIgbWOBg7qAXk%2Bsr%2Fe5snU5WbvJmfPAyHGo4uBsoZ3M%2BnbwL269y367o94lfjQKjvxQNoLLPlwdjEKdXQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e50eb7c96b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1986,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x256, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9e7fdfac58d9a5e06ad296883f031f96","sha1":"f820512ca0da782b21a8b69b94db35ea424131e6","sha256":"5c7242abbde617dc5f520d386a373a10ade5f21134c197fa0095f67bc1da8ee4","sha512":"b71cd7eca815d85e9c4643fd9c61d833476106a5e420635ee14f99e89e53f3a1a702abd7dec81c1d9a1c092221347de15f09ce689d42531babef886fb546dd29","ssdeep":"","tlshash":"c6410ab7f673c533c15c5e758d6643402f81f6c96868e4076ea036b5916eed23183a88","first_seen":"2026-03-23T15:44:44.45417Z","last_seen":"2026-03-26T08:43:48.712206Z","times_seen":5,"resource_available":false,"data":null}},"time_used":812,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":811,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/promotion?_rsc=h5wy4","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:12.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /promotion?_rsc=h5wy4 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22(auth)%22%2C%7B%22children%22%3A%5B%22register%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nnext-router-prefetch: 1\r\nnext-url: /register\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_B9DLSJH0MC=GS2.1.s1774280650$o1$g0$t1774280650$j60$l0$h0; _ga=GA1.1.2034164557.1774280650\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:12 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\nx-current-path: /promotion\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IxQemcE8zYsmJ8Alsv%2FDkysARKOxIFn1dcLyUSUFaDgAi7nnTcA%2FGAuyiHl%2BNxT2kq%2Bf9crvT4Z4UV%2B%2Bat3q5yFJhLL1%2BaP4Ls6%2B1lcR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e5de9e596b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"683446884f14bc23295f3d0117ac49a6","sha1":"08a3e28862d3378c2f1351a5e807b9a78acf7a8a","sha256":"db13bc5d6b80a7e931dbc72b5222eb056b83cda1004efeb1731b6548b48b2d3f","sha512":"87ef356f61104112ffecf3743d7565eee0f5a101ffef6ce46c88e0614e2b826bfe39d8e2dbd27951d88c7e569f7c32a95c5539cb9b6c5c711d50d271cf32e777","ssdeep":"","tlshash":"7dc08c22844029f98c661291101dc78f2a2f0207b0d834f850924900a3b713110034e8","first_seen":"2026-03-23T15:44:44.455299Z","last_seen":"2026-03-26T08:43:48.705713Z","times_seen":5,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":229,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/6.CmDDbhqB.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.19.183.147","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=17809494\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=b8f4f49c-d724-4914-a885-4e5a1e71f678\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-03-23T15:44:12.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/6.CmDDbhqB.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWyaHCsD2Pz4QcFoK3R2XL2zvVbq3gbRNVm3VsA8wpwHOIGqRAUE3YNJ4b_W2avgJJzw6LMeQTU\r\nlast-modified: Fri, 20 Mar 2026 11:49:45 GMT\r\nx-goog-generation: 1774007385432191\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 138079\r\nx-goog-hash: crc32c=Z9KKRw==, md5=w7xjh1rzXmQZ6/SZDpoSkQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 43513\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 23 Mar 2027 15:44:12 GMT\r\ndate: Mon, 23 Mar 2026 15:44:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":138079,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (48378)","md5":"c3bc63875af35e6419ebf4990e9a1291","sha1":"0e0b7d2dd95abd8f282c722fe3fa4c4c90a275da","sha256":"a9162f8842f5d0b7554ee148f946446e6acbadcb40a2f232c828681a9685582a","sha512":"db8e5b7f70baab09bbd380fc701424bb71a75dd65599fa995333474df2ea5d69baa52da9e4ea25b04c02ca63b6ce80ba5e7467a99c8534719ccfcd45a23cffac","ssdeep":"1536:VgZQ8kK8O9hbCvSPT/FyXb+BzpHxQwXzmyU9zP+M3jYPuCoOTAjyp5pmLWqVWM:VgK8kKB9hbCWBswEwDm93j+tUWbAWqVP","tlshash":"d9d3f9e83951f9626bf312a710af5807b33c192b280c4950a211fdddb9b845eb17bf9d","first_seen":"2026-03-18T09:33:42.057685Z","last_seen":"2026-04-07T10:47:46.058674Z","times_seen":1367,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/4935-12b0e84df5b0b290.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/static/chunks/4935-12b0e84df5b0b290.js HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:10 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 13:26:11 GMT\r\netag: W/\"11e7d-19d0b6cc917\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ij5opJSwxFtD33rQlc4Mp%2FJo0rXIlP5wykLo745Fo5XrLwqXUIb0CWnDZ%2FhAgdwgck%2F6vGM9wh1vBH9uCMi7SNwywcDkrjo23GtcBTRI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e4aabdb96b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73341,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5974372b1639abacd1e89dc15d4f46d7","sha1":"41c5414b9306b914de713559e6b412aee41a1b91","sha256":"2df85bca68e5600779e33723e48ef2d1993cb426f3f56d65216467c1363bf4c0","sha512":"441fd919213cd10efc66439f63802a0d8749d572d00fc24f011cbaf53d3900de38d3c928dde1eddf5d57b236bb8b531409a750a362d05ebe2f4dd34011e9505a","ssdeep":"1536:82Ws6U4l7Ilhqx0s9CuLrDbM0QHSa2C9gwyX723p2In02tK2sS6b5pU:82WW4l7yMx0s9R5CN2C9gwyL23p2In0G","tlshash":"0f636ca972a2b0554367c0ced0af4887f76c2914310e4ca5f393f8b8a5a85dd9173f7a","first_seen":"2026-03-23T15:44:44.457063Z","last_seen":"2026-03-26T08:43:48.80745Z","times_seen":5,"resource_available":true,"data":null}},"time_used":1223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1025,"receive":198,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/2619-04bc32f026a0d946.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/static/chunks/2619-04bc32f026a0d946.js HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:09 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 12 Mar 2026 06:33:20 GMT\r\netag: W/\"2174-19ce0bfee0e\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\nage: 315362\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nOm512CvYk6qxNu3C4S%2BrbUHiBM2etryyamSTFbew3vDYzRm5iulD6krmwuuDrhjDrp%2F8CT5saEx28SYeLc%2FjrR8fhwzpWxjGXCC3YX3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e4aac0296b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8564,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8564), with no line terminators","md5":"3c358925a71873c489c9acf268fcec12","sha1":"920c46adfeeefb53491083e8f0167ff485bb5c0e","sha256":"a9b6c2213ea787a015c0169d198b4a90d7a44a0cc17abb0d132e8362d3016ced","sha512":"4642c5b3998c2ed71d006501a710a64b8c58ce5310963dd3ece3f4b4010e8ffef9df1364e33cb575869705f78893217bcdabeec60f947afd64fcac6a60339892","ssdeep":"192:w2cihbWekOYxxURMeobT9jZHYOHC0dwMcGW/j:RxUGMFvjimwMcGWb","tlshash":"0b02c8e675e1f8e2836b0190443b100bf37e1db5181e9184e3a95ce6f9b046dd1b2faa","first_seen":"2025-09-10T05:14:21.968653Z","last_seen":"2026-08-11T08:46:45.420369Z","times_seen":4159,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/media/6d664cce900333ee-s.p.woff2","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:10.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/static/media/6d664cce900333ee-s.p.woff2 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_B9DLSJH0MC=GS2.1.s1774280650$o1$g0$t1774280650$j60$l0$h0; _ga=GA1.1.2034164557.1774280650\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:10 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 14168\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 13:26:11 GMT\r\netag: W/\"3758-19d0b6cc914\"\r\ncontent-security-policy: frame-ancestors *;\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dG2wuCbaX3yJo8OVWE1nxLy1LZ%2F8kIKFfMeQaq3GlnMx%2Bh769rnY7BP8SQiGZ0hocX5ubuCObU6EMQ2fnGUeC5tTJRJ8ioK2P17iAVBo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e5389f596b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14168,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14168, version 1.0","md5":"017598645bcc882a3610effe171c2ca3","sha1":"ceaca8172b95b6954d5a5752698a5162d7e9877c","sha256":"7a7ce1a34f3e9944fe88fc61abbc93b6db383afa2b90815fd7ccea456fbce4e5","sha512":"cadb36cbcdcd7e84ee9305a676f4d8d3b19fc199481835b726fbcd20f2463074908040b7aca60e284b5ab8ab3b03798f38cc06873d6e4b06ddf7a018e6c666d8","ssdeep":"384:cIeFsvkj/uwoczzNcnQzpjJSx7MZBEuNdu:ihxhzsQ9YxEEQg","tlshash":"bb52e181361151524c851f6d3784c3efec1118dff2acaae07e22255506fe4f276be92b","first_seen":"2023-05-06T05:46:29Z","last_seen":"2026-08-11T09:56:05.915086Z","times_seen":8036,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/9.xhyEK0_l.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.19.183.147","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=17809494\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=b8f4f49c-d724-4914-a885-4e5a1e71f678\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-03-23T15:44:12.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/9.xhyEK0_l.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWxKJVKx5dzvd3iehm1OAgJzNSeVzLNDVU59XQNFyrTaPYGvaILqMz48H1Ik42zFT9Y4Pc_BpJc\r\nlast-modified: Fri, 20 Mar 2026 11:49:45 GMT\r\netag: \"c96a39460d2b0a92409b2b92f3da88f9\"\r\nx-goog-generation: 1774007385404793\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 74\r\nx-goog-hash: crc32c=pjIEnA==, md5=yWo5Rg0rCpJAmyuS89qI+Q==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 23 Mar 2027 15:44:12 GMT\r\ndate: Mon, 23 Mar 2026 15:44:12 GMT\r\ncontent-length: 74\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":74,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"c96a39460d2b0a92409b2b92f3da88f9","sha1":"c1ad7e3c7f38743ebadf589676726dad6799a9d5","sha256":"af2012b0cdfa449f186df2f8dc9b3e64b48b8c5c630cc8d3c4df61973499e7c4","sha512":"c6a642b4f09c7dc0b2679c972cc99e4c1e00e268d309aae062883d3eeeb7d3e39bef53388dd20aae7f733da57ed2374c1b12ded0997cbca2762b4b03c332cbfd","ssdeep":"","tlshash":"27a022ca38ca32ae020230300f0f20c0e0b8c02c030e0328800a0200b2300a002ffc3c","first_seen":"2024-06-24T12:34:03Z","last_seen":"2026-07-27T01:40:34.400213Z","times_seen":18485,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/19.CmqAOXBd.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.19.183.147","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=17809494\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=b8f4f49c-d724-4914-a885-4e5a1e71f678\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-03-23T15:44:25.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/19.CmqAOXBd.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWz4SDROGeBnf-gUknAJy88cUfJXfDKFT1B1icVP_xy7_WQelF3m9rtVd8yR0e0N_hM-6KZRQmA\r\nlast-modified: Fri, 20 Mar 2026 11:49:45 GMT\r\nx-goog-generation: 1774007385344426\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 170974\r\nx-goog-hash: crc32c=tNxtUg==, md5=lGRsO0k9o0KkVZwIp9V8CA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 23 Mar 2027 15:44:25 GMT\r\ndate: Mon, 23 Mar 2026 15:44:25 GMT\r\ncontent-length: 49362\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":170974,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65487), with no line terminators","md5":"94646c3b493da342a4559c08a7d57c08","sha1":"c56d10f3fd8f619136ce94a4566cede8b77e6600","sha256":"4a4a80749665cd9223fbae945b708f81eec6bd7abac80c653651868bfb5530e4","sha512":"f7922e344997ea9cdfe4f8268acd7031e143d2941090c5e0e21ba59ab7003f83f565e08f04fff2b0eef31253327a7413bb46e9d13253a50758a5d60b33065463","ssdeep":"3072:zazYGdShfUE2W852wucPNPJS5ZKcDArf+fiGmD5rSEz/XC97XyXFfX6djpGoZXY:zZGdShfUE2W85rrPxJcDArfQiGmD5r93","tlshash":"6df31ae07352ba2cdbe7c1d9e1a63504f33cae45b82b0756f1af6c1e3094a846171fa5","first_seen":"2026-03-21T09:26:08.649052Z","last_seen":"2026-03-24T07:16:47.257501Z","times_seen":33,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/17.BT9jUAD0.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.19.183.147","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=17809494\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=b8f4f49c-d724-4914-a885-4e5a1e71f678\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-03-23T15:44:25.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/17.BT9jUAD0.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWxynvNJTLaw-J7DgnvGr6qwKv0KQn26gjLxY9Cx0qEmi3SgBgqJnAPcPUyA9Cz6kDnIkklpaR4\r\nlast-modified: Fri, 20 Mar 2026 11:49:45 GMT\r\nx-goog-generation: 1774007385292373\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 8044\r\nx-goog-hash: crc32c=Bws5zg==, md5=FGmLmXE1sinBW8WBftAg0w==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 3182\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 23 Mar 2027 15:44:25 GMT\r\ndate: Mon, 23 Mar 2026 15:44:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":8044,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8043)","md5":"14698b997135b229c15bc5817ed020d3","sha1":"5afc2438a71273a8f1820c766e96f397b2806699","sha256":"96e43792002693d12bffd72956dc425e03e113315cbf63031c7e839e661fd115","sha512":"add083fc100a740d1de15b363e3e213cc84ca9fc4913da9ea691619f688e6b885d8ac7a16d96309f9b55fc10322cb54c3f23c4281df1f5131fa8d40655fc0793","ssdeep":"192:JIcs/+sXpRMzExyv5vHcj/pIWpIizfq7ovx7vc:Gcs/+sX7Mzpv8llbqs7vc","tlshash":"2af1f9dc1322eaedd98296fe12381009b16d6de93c36c244dfeec81a70255c86d38db3","first_seen":"2026-03-21T09:26:08.692071Z","last_seen":"2026-03-24T07:16:47.244372Z","times_seen":33,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/app/page-b2cb7dcd397e9a12.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/static/chunks/app/page-b2cb7dcd397e9a12.js HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:10 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 13:26:11 GMT\r\netag: W/\"5c12-19d0b6cc916\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ootFppq6HbNYmL%2B%2Fw1TO1UEGQGkTw0dTkIz1DTm5tyk9C%2BRZmVFILNEMSW90A6b0uxCLkzuEXx5peFkte%2BinC2lPSFw0av6BRi%2BL5z0z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e4abc2596b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23570,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (23570), with no line terminators","md5":"2acc9d0ad104b485223c51b5c9126382","sha1":"48e5e5946780b98ad9d37edd4d5f41858f82e12a","sha256":"aedebeecbb374df05cfb8a38c26a9359c43e8c32892ebfe87e3bc26aa74e6d28","sha512":"3d79031631699a10c5484510a853198d2d9d0f29dddf6c47f98815b44d3b7e122ed6392b8b3324e4030dd398ff0b752801c4f51be1b28f97c892c0dc411df457","ssdeep":"384:DEnmeNmt535CYUeuubW6t2TP7Lc6aViaV7nRll+AHqUg44AuE6y8yJQLhiuA0ZCK:HLnXW2sP7w6aViaVfqNqcyJQLhiuRZCK","tlshash":"89b2c8b8abd9fd48a8778ddce097840d624f4c2c833f5a6cb3955c4912d5ac47123bad","first_seen":"2026-03-23T15:44:44.461093Z","last_seen":"2026-03-26T08:43:48.808582Z","times_seen":5,"resource_available":true,"data":null}},"time_used":1104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/css/04bf0757b8056398.css","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/static/css/04bf0757b8056398.css HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:10 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 13:26:11 GMT\r\netag: W/\"dad-19d0b6cc917\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=im7RHq%2BFJaIYYiR7Dgh2qsbXBCbfhDDWbwgKS2hX6mhuGnoZozlmylxjsd1bSrJygdqx24NivtGKvKJLWd62D%2BsMcX6SElRrVrcYl81j\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e4a9bb796b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3501,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (3501), with no line terminators","md5":"75ca6b514d710608b3fc6b021663766d","sha1":"2d8ded6da1f2d0d7b4d29bb1ca40fb9d6ac27839","sha256":"28c196da3d862c7379f77ac2e5904e041f784a140ddbf54fd5024fa23f521837","sha512":"99501ff5de1a545da924f85fe2358a0b0aa9e1d6c8ebbe322f2420c363f2ff930940b324345ccebb19142fad9714fc5854efbe13896a198f76e082eb0531957d","ssdeep":"","tlshash":"2d71af30841e940ed932fc8230c97f136d3d00195ad49d12ee5c89a98fabc6ab3d1f9c","first_seen":"2025-09-24T01:38:43.766302Z","last_seen":"2026-07-27T08:55:59.692435Z","times_seen":12,"resource_available":false,"data":null}},"time_used":944,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":944,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/image?url=https%3A%2F%2Fcore-1333692039.cos.ap-hongkong.myqcloud.com%2Fimages%2Fui%2Fproviders%2Flogo%2Fps.webp\u0026w=256\u0026q=75","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:10.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/image?url=https%3A%2F%2Fcore-1333692039.cos.ap-hongkong.myqcloud.com%2Fimages%2Fui%2Fproviders%2Flogo%2Fps.webp\u0026w=256\u0026q=75 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4050\r\nserver: cloudflare\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: 2iKEoXYo__EhnBtz2dYDuUD6SrVWmv3MSiZGKOgh8-8\r\ncontent-disposition: attachment; filename=\"ps.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;, frame-ancestors *;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n987uUp7dzD2auideTzSm8vxIszQFn1qzelbyt7MNAwvhtwETjVrwVBPPrDhSeBldJivMwpVC7rotQpodndTletVRgvMQd%2BXD8wak%2FqD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e510bf596b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4050,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"94c88ab5569bdc658eb8e1c8ef79ef7c","sha1":"9e9c618ab089d632c8321a83636f902ea05e8446","sha256":"da2284a17628fff1219c1b73d9d603b940fa4ab5569afdcc4a264628e821f3ef","sha512":"d08af16f594638338eb8358719fabc6354048f5946ab84cb45d86afe8cfb0652219d2124f01dc32449dc3340bea26a9183b2821e3067a5d51eece50fd3aaf3c7","ssdeep":"","tlshash":"ed815b9d98871d82309e56b1a041871743873cfee3bdc5a978402d27c7c73497198cb5","first_seen":"2025-07-23T13:52:55.427561Z","last_seen":"2026-03-26T08:43:48.664567Z","times_seen":6,"resource_available":false,"data":null}},"time_used":818,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":817,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/23.CG_0O8z6.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.19.183.147","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=17809494\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=b8f4f49c-d724-4914-a885-4e5a1e71f678\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-03-23T15:44:25.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/23.CG_0O8z6.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWy-yZuU_J_7gYtH43EnoOFmoel8ujk3L2a9y1RZfn494cRPZCOkZFeA-WJdcQQSCJdFY3oAK-8\r\nlast-modified: Fri, 20 Mar 2026 11:49:45 GMT\r\nx-goog-generation: 1774007385351319\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 151470\r\nx-goog-hash: crc32c=tFBKnw==, md5=t2EbJTvU0Nk9h9Myfbaa/w==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 23 Mar 2027 15:44:25 GMT\r\ndate: Mon, 23 Mar 2026 15:44:25 GMT\r\ncontent-length: 46902\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":151470,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (64055)","md5":"b7611b253bd4d0d93d87d3327db69aff","sha1":"3a632aa9bbbff151c5feb72041252f17e67b9b53","sha256":"f626b5a9fa608f7ba023f39c76917ac3c2fac66c65b058b9c92612ace640e349","sha512":"a3a5be915ea0b4e5597485cc717919d9ec19fd14234ce64ff52be921b84b3bb90af91b375d397d11377365b2f3b3f977af576290a3f59b5a270ec6c3af24a0d9","ssdeep":"3072:PNWiqU4tayaOrRbD5Ify5yVj2nLYMwgYa/gYaf3UXf3L5P5jgYgMZki:wiL4tayaOrRbD5Ify5yV4LYMwgYa/gYV","tlshash":"d8e35cc4b362e27cdbd7c1e590ab5405f37d3e59b82a4310f1ea9c6a31a89cc513af61","first_seen":"2026-03-21T09:26:08.577924Z","last_seen":"2026-03-24T07:16:47.168612Z","times_seen":33,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.files-text.com/us-south1/api/lc/main/17809494/greeting/64abfe68f1317ee1a1cb999fd3e66e91.png","fqdn":"cdn.files-text.com","domain":"files-text.com","tld":"com"},"ip":{"addr":"95.100.107.136","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=17809494\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=b8f4f49c-d724-4914-a885-4e5a1e71f678\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-03-23T15:44:25.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /us-south1/api/lc/main/17809494/greeting/64abfe68f1317ee1a1cb999fd3e66e91.png HTTP/1.1\r\nHost: cdn.files-text.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure.livechatinc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 272769\r\ncontent-type: image/png\r\ndate: Mon, 23 Mar 2026 15:44:26 GMT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":272769,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 600, 8-bit/color RGBA, non-interlaced","md5":"95e45444dbd349f2798312e0075dba7e","sha1":"159114a1862c90e6f4038dfa7584401732b271a1","sha256":"f052861e8a7ac853a37f4f4317e0d15f890f8ec628f5bfc7f9132b5fd2856f1d","sha512":"eb74aaa87ef7d3fe7810108ed20ad30d3b524ee1b951c87832a24e0b45f7c47a46018392b8472cca330dbc8f45a5674e3ce741cc8010f8bf03c4bcb86d2f5490","ssdeep":"6144:2f6nPCc6P0tAZaLN2FaZIB8gkTqiXSF56ZhlkCTUjFgqZ+aHy:A6P/LNMB8gkTE5YlkCAKqZJS","tlshash":"6f44233e644294097aeb81ae7266f7c4adc32dd858c49d23b90ddd313b9185f70b1f82","first_seen":"2026-03-23T15:44:44.413611Z","last_seen":"2026-03-26T08:43:48.689937Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1216,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":795,"receive":421,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/1255-8befde0980f5cba9.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/static/chunks/1255-8befde0980f5cba9.js HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:10 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 13:26:11 GMT\r\netag: W/\"2a313-19d0b6cc919\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NzXeGMRbWYF1aXf4SBGEFW82lxi3RxdEuvZOPGYj4nacZSFVnsjjmxJqTZ4j%2FiVQ8qjHnC8kaUBNUL5WQ66177IhFHcSc%2BnV4JQdE5qq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e4aabd096b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172819,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7375dc7f8f821e4249ee40171945cf2e","sha1":"e16f34caa66dd5cf043d83901ef5020b1793bffe","sha256":"c6db8a503fd12312ee49dad5b72e69207e870b793cf9a877f5e3d0ad3f9645df","sha512":"73d3e372ca001ec3a2909e426bc396e331f337786c0da00230eafaca1d1e595412bb2796b3c93882dc8a770e5ef8eec04728b8aa8851e80c933f04b49e5ba5b5","ssdeep":"1536:bzigN+8/BhcO5HYHqLVcXr7yIzPr6Q04ToTlTx1p7eChTVOocZXxreXRNIrjg/Sz:379LmA+Hy4r904Aj44RN0E/Sz","tlshash":"9cf3dab636d0f8d107a780e5843b400af3295c3b146f74a0a3e6dcd975645dea1b3faa","first_seen":"2025-12-14T17:46:05.779857Z","last_seen":"2026-08-09T08:54:01.176049Z","times_seen":462,"resource_available":true,"data":null}},"time_used":1287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":892,"receive":395,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/image?url=https%3A%2F%2Fcore-1333692039.cos.ap-hongkong.myqcloud.com%2Fimages%2Fui%2Fproviders%2Flogo%2Fpp.webp\u0026w=256\u0026q=75","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:10.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/image?url=https%3A%2F%2Fcore-1333692039.cos.ap-hongkong.myqcloud.com%2Fimages%2Fui%2Fproviders%2Flogo%2Fpp.webp\u0026w=256\u0026q=75 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1876\r\nserver: cloudflare\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: vTMPeyLx1f_AecgVpEcG53LRWAZju4iEzpQRvTWRjdk\r\ncontent-disposition: attachment; filename=\"pp.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;, frame-ancestors *;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QaLl8jV3iwqgjkastaFJHZt2Lx%2FI20HHyPafCHDRfgB8h%2FEXnF2m0jlIUIwOLndLhYVj%2FcpXMlf9zC0U3%2Fa0GJELDDfrt7WaGI4hd70%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e50fbd796b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1876,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b495205bc7423f834b2b6bf853d52e5d","sha1":"a08fc379bdbb07e677cf7219ecde50ea098b9e6a","sha256":"bd330f7b22f1d5ffc079c815a44706e772d1580663bb8884ce9411bd35918dd9","sha512":"51da307d3a68445c140f77cc1c1372adfebb63e17b82f9b6c6b76b43017981edf5cad356990955a71548d0f72a897e6fe2448cbc5f243e06077a2ec9e18bdc3d","ssdeep":"","tlshash":"76311b2cd9948937bb505b9518d8119dc61692ce29df853e910437e0ae882b8eea37a4","first_seen":"2025-07-23T13:52:55.505183Z","last_seen":"2026-03-26T08:43:48.675506Z","times_seen":6,"resource_available":false,"data":null}},"time_used":808,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":808,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/?_rsc=h5wy4","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:12.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /?_rsc=h5wy4 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22(auth)%22%2C%7B%22children%22%3A%5B%22register%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nnext-router-prefetch: 1\r\nnext-url: /register\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_B9DLSJH0MC=GS2.1.s1774280650$o1$g0$t1774280650$j60$l0$h0; _ga=GA1.1.2034164557.1774280650\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:12 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\nx-current-path: /\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bTzpO8cF2WvyMlZu3IQZNGkajUDHBTYHTUAG%2BJXWC5WvvFjtdLHigga6Qcz37ODqinAwlCLLWuJiRBkdquywO87sLc5eVHswqoMk%2BJ6i\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e5c0d9996b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":110,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"3aa604d74c50f726828267bfc8896a39","sha1":"d8287c198827f151c004374b6d7ecf4d4ec450e3","sha256":"a647ac35e003b09c671bab50c610b9957dfb458cefd244fc23a93ddebb29ebce","sha512":"f0274771a62b019fb06aaad1603b4a4c6c6a9b1b13b70f511e79e2599aa962f61efbb633fab94483bf74096c3a6b171dea494609f56e06168d168c7cdfc324f7","ssdeep":"","tlshash":"d6b0126288d06dff8c6a30d1011c8b8f2e2ea11b71c974f8a0e388807b3f63062139c8","first_seen":"2026-03-23T15:44:44.46693Z","last_seen":"2026-03-26T08:43:48.721047Z","times_seen":2,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/8.qaAu5sBM.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.19.183.147","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=17809494\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=b8f4f49c-d724-4914-a885-4e5a1e71f678\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-03-23T15:44:12.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/8.qaAu5sBM.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWwgYecx2ym_Hy0K4iDfMhcb5SWe3mPH7XsVYJEGQw4HixvV5xgFSIj0s50MV34m7lTXuPv9aqY\r\nlast-modified: Fri, 20 Mar 2026 11:49:45 GMT\r\nx-goog-generation: 1774007385321191\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 7870\r\nx-goog-hash: crc32c=+M3fxw==, md5=JVOVRU9h55xDLJCLGwjwLA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 2996\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 23 Mar 2027 15:44:12 GMT\r\ndate: Mon, 23 Mar 2026 15:44:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":7870,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7869)","md5":"255395454f61e79c432c908b1b08f02c","sha1":"42781fc9b0ddec9e5955addc220eed0109a416d5","sha256":"42b40b6c26a69e783cf4549c74313d7f1d5a891cc56d626aa60104293359c913","sha512":"50f1ff0866f5a5e119b1fffb727638aa1efa97ab58b3300755fb299a0817f993b6f4f568bddd233770b612a73e16180cd736fa07faa8d189146b5e31891e066e","ssdeep":"192:hbZtPuLpcfXjyJzCgvNtURXJmrkZYfnwS1flhXX1WXzqdByyYYfktwIaQ4oD:5ZtbjyJDvNtURXJM1ph1XdByy38twDY","tlshash":"92f10abff741e4b0e3eb48e19a190113aa3a1754755d8070f62c8d14a15aac4b277ffb","first_seen":"2026-03-19T10:33:28.672131Z","last_seen":"2026-03-24T07:16:47.214047Z","times_seen":265,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/4.-uwpThwu.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.19.183.147","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=17809494\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=b8f4f49c-d724-4914-a885-4e5a1e71f678\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-03-23T15:44:12.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/4.-uwpThwu.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWz3a8su165ceXBiOm87Fh0Dzn8ZjtK4cmo4JK9hERupnATYHxLvvJ4y_ZEX0CxxGT5HNvBfZw\r\nlast-modified: Fri, 20 Mar 2026 11:49:45 GMT\r\nx-goog-generation: 1774007385381017\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 218759\r\nx-goog-hash: crc32c=1pXXNQ==, md5=me6rIUUJ2zFLlRMuu1aStA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 23 Mar 2027 15:44:12 GMT\r\ndate: Mon, 23 Mar 2026 15:44:12 GMT\r\ncontent-length: 67514\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":218759,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (36687)","md5":"99eeab214509db314b95132ebb5692b4","sha1":"dff06790aa602047a08dd7988b9f09dceb34be62","sha256":"78b0af123fa33269f2327509cf4f6faf0b1ef1495c54ec846f8fa3daa95117c7","sha512":"998cd3446c1887410c0c21d3dc3bc465778b0d19c65f1eeb16e6d8f8cefe27dab247300d3f3893b7adb2dca143464f5c4e4aca4e6975ede0262662036d8f5312","ssdeep":"6144:xpMuuKAnNxfpyB5jofpxLewPrhsdbFVrq:rMuuKAn/pyB5j8xLeOrhsdbru","tlshash":"16245bc4b18af53887eb34e6547e2002f63d6d18784c8564f75cdeb63da858a8273f29","first_seen":"2026-03-19T10:33:28.721348Z","last_seen":"2026-03-24T07:16:47.13038Z","times_seen":271,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/favicon.ico","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:11.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nCookie: _ga_B9DLSJH0MC=GS2.1.s1774280650$o1$g0$t1774280650$j60$l0$h0; _ga=GA1.1.2034164557.1774280650\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T09:57:30.082626Z","times_seen":17834258,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/5606-73fe25b398aebe1a.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/static/chunks/5606-73fe25b398aebe1a.js HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:10 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 13:26:11 GMT\r\netag: W/\"b839-19d0b6cc918\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r1%2Fn8BSYJcCkyVa1Vi12zN7xAjPZrre7hAriHbl0G%2FsSwhJXzATpYBiLPl6hEDkOLOzRJ%2BVMxKzra39uDNKdT9Mr5JxJHpe4zPKmGgu1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e4aabfb96b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47161,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (47155), with no line terminators","md5":"1c8b57cf6368fd64e90cd10b0fc0912b","sha1":"c4da03169475eb92f39f95a86d69540478aa3270","sha256":"bf456dfb1339c1b680cd08c82481d3995b392f0a87f67abe08273620f0b69797","sha512":"206f5366af83be0cb7ab8d7688c81ac50a5b7501328f30bbf73902c47d3849890ac6da67d15042b34c4e29ba594b07b37ed44959560e0364bdf00d705b835679","ssdeep":"768:lGbSlwA2G1auheb30Xcp6/S6IjZaZcPnYshxjob9i/P:0elwAJa9kX1SJNaCPYsHkb9uP","tlshash":"96231ab4ba82f975dfbfc1c5e4ce445ef71e06146e1a08a4f2325c5c1285e88d392fa9","first_seen":"2026-03-23T15:44:44.469813Z","last_seen":"2026-03-26T08:43:48.694768Z","times_seen":5,"resource_available":true,"data":null}},"time_used":1094,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":897,"receive":197,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/6930-97dbad9ee68747b3.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/static/chunks/6930-97dbad9ee68747b3.js HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:10 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 13:26:11 GMT\r\netag: W/\"333e-19d0b6cc919\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UuKgJK8f%2BIxeiiAJh94ijxZ9ReQlvH7F65JL21Gg%2FJRvys0DjJmWmfdaEtyXWjeU0D%2FfdEXsoH0mC96mBWUb%2F3kMhP2s9xAgVU0Z1qmK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e4abc1296b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13118,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (13118), with no line terminators","md5":"31525278b6dfb87f212de83495050d4d","sha1":"78a173c2dc7bc12dd0941cb1c794f6de69810f83","sha256":"b1b4c57f9fa8c8ded2d4860f4085affb25cd0930adc75f0a04ccf92d0d987ec8","sha512":"5b810523719f7334823af475cff7a939c524e24b0abc8126e64921116fe7504180158fd298986d4a2086f1a0674c58991e6468b54598c6e3a9cdeecfbc28fcfa","ssdeep":"384:IFxCFMMrS8kdzORMxpF278M8J8TveFxaM:0MFMQS8yzORmkoM8aTveXaM","tlshash":"ed42d79af565f061c3434466406f0146f23a3f5de5298408f33a9df93a9288a77b7f3a","first_seen":"2026-03-23T15:44:44.471677Z","last_seen":"2026-03-26T08:43:48.756787Z","times_seen":5,"resource_available":true,"data":null}},"time_used":886,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":886,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/register?referral=aba5101774263051952","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:13.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"POST /register?referral=aba5101774263051952 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/x-component\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nnext-action: 6091cc044da4fad0e83ee6e2bb99a7849afd5e6a42\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22(auth)%22%2C%7B%22children%22%3A%5B%22register%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 41\r\nOrigin: https://dewanusa.quest\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_B9DLSJH0MC=GS2.1.s1774280650$o1$g0$t1774280650$j60$l0$h0; _ga=GA1.1.2034164557.1774280650\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":41,"data":"[{\"nama\":[\"BRAND NAME\"],\"active\":\"TRUE\"}]"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:13 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\nx-current-path: /register\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\nx-action-revalidated: [[],0,0]\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3vg9YJATmd2vOzUviXQiTV17TcYhl9G1AriqBy1FTucpLd56BjxMXZRYbNvL3urvhvUgYlgA7UYIKpBfJrwhclTBpGUc5XF8W9keMe33\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e631ecf96b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"abeca73a9e07cad9900e11adc1f5f269","sha1":"670c14ebf7d25b333365f7c872a217746120f67d","sha256":"ce06d637bec7e826d2624b23d58a01b8652b5155c8c9484f4be1de70a4169b45","sha512":"a171fe755dbf37b29d532e7d19ee7cc9cde99f76cef1d17d3c4dc112693c1969d35038eca95c8fd1e6a45f80bb2f73952acb4fd85818d5c8a9be22c9fe222ae0","ssdeep":"","tlshash":"ffa011288c888a88ca8b0000280002082eece000aaca3028a882e802202ea0822028b3","first_seen":"2026-03-23T15:44:44.473371Z","last_seen":"2026-03-26T08:43:48.697093Z","times_seen":2,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":233,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/5239-b24dd7149d741c56.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/static/chunks/5239-b24dd7149d741c56.js HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:10 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 13:26:11 GMT\r\netag: W/\"3792-19d0b6cc918\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=icpVGm3L4Yi4ifsU8GrXbQg95lqS%2BBNyENTxDpBQf%2BZ8vhoMGG126c6ERq48UfrGRokGA5qCby9M8kH%2FegWjmILheyD5m6eQieyCypaP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e4abc0d96b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14226,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (14226), with no line terminators","md5":"24ffdff582fac1bdd8b78863dfd9407d","sha1":"3d0f974d40796861b8ae1de7cf57d6a7ad703114","sha256":"60fc951da3b5d4e0590a75e5ee728e1590ff1345d76b70c3b90a07283b0b710d","sha512":"b2163a0dc170339066493b68e0914480d7e52a6cd8fbacbce64326ee330aede0fd04d631001a0254e49267fb75ed66ab0394983a544376bc2aeebabfe6917cc5","ssdeep":"192:fiRFVYEC4Bg4zKjOoGuP8wAjLIaWA3L2BVUwroOmMV7uD8avnswa+d8Xb+JN:CI4q4gOoh8PUaW6cVFqND5swZWXbC","tlshash":"325219723695fce6239bc0d5d43f000af3755d71762ab08873ea88d9e9e4584b0a2f76","first_seen":"2025-09-20T22:56:48.515572Z","last_seen":"2026-08-01T21:04:36.326892Z","times_seen":144,"resource_available":true,"data":null}},"time_used":895,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":895,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/3004-d71fa8f3a72b482a.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/static/chunks/3004-d71fa8f3a72b482a.js HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 13:26:11 GMT\r\netag: W/\"576a-19d0b6cc918\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RBhc6fBVmUIfD6ZPA%2Fp2u8CUy1LCNWOCwVPi9xlD5%2FrY8uzZ%2BW%2BCDxU9oQGy8XBUB2s0r57w3sWdjGWx2gywEzR6%2F%2F0eyVzjPNBo8su%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e4acc3296b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22378,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (22378), with no line terminators","md5":"8b3eeb5ea65a7b13f084b59ea1b1a387","sha1":"49b8903f335edbd7ee67781ed9d52b08b56d3a1a","sha256":"cdd756e4d00c3a4f84e1fab47742c808667b81ea48bcd24db850b00f793f8319","sha512":"25ad370572e1133b5c6b8a035f28a72a935c316b5cca389b699917b24a705848d50355fd5f0ef9541d787c0a4567c54af461730f86764eb8f7a60783a9470226","ssdeep":"384:CQ6Ciq+wfMD/baeBxH+uq1mBomW1mfGGWsoLQYlT1Nnmb0to5j5MNblEn8hXbKBk:uxIMTbaeBEuWmumJWJEYx1NnmKo5j5MJ","tlshash":"f2a2f7dc3290f0f1567b83fa807f401e71375924228ea110b155e6dd2c79ebaa26bd7e","first_seen":"2026-03-23T15:44:44.475823Z","last_seen":"2026-03-26T08:43:48.683106Z","times_seen":5,"resource_available":true,"data":null}},"time_used":1796,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1796,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/1419-a731b1653862e5f8.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/static/chunks/1419-a731b1653862e5f8.js HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:10 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 13:26:11 GMT\r\netag: W/\"3540-19d0b6cc919\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4cC8Rkx1WD1FNA54%2BQkee6ybTHjXKpC2cJqgp4Iuw0XA7SUy%2F1XBPhcqkyB5sulROifGb%2BYMieStJ%2F%2BqdfKTD1uTw0TWz%2BjZeP94ivxE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e4acc4896b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13632,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (13632), with no line terminators","md5":"2e08ec9625c275818ae651494a5d1476","sha1":"40904fec8f5f8bd76b824e58520386650e7d7fec","sha256":"64cbfc21fb5ef7c155e3c62f94fb1915b3ffd9d4bf1934303570dd33cf123116","sha512":"1ee5c97740c596e6d3606508261cfcbaf8a3995d003f87da71d729543ab4ef7637c72988585b7c8604171ffc116e8cada133c0d4f771be5acd63cea5e8a2fe0b","ssdeep":"192:dja4Qg91/Z5rgNSHyFG0TfDybrcmRqVypDMa5MZPCTRhYGwdwwUbN7JIttoU0taL:FaM1/Z4rGWL2cRVypTreErIttzDL","tlshash":"3a52e8701ae17d8bb967ecd8e087c00f22c7915b602e1e1ed93de95915c2404bfe975e","first_seen":"2026-03-23T15:44:44.476997Z","last_seen":"2026-03-26T08:43:48.704987Z","times_seen":5,"resource_available":true,"data":null}},"time_used":793,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":793,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:09 GMT\r\ncontent-type: application/javascript\r\nexpires: Mon, 23 Mar 2026 16:32:09 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1glhpuyPh0%2FsPafRuiZT3vOj5x%2F%2BgkawjFfj3pJWFMMF26sbFv48yXTvsW92OBl5fi4xgX%2BJs8d4pEH9i3hzLlD0uOfflVChhwiynpK4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e0e8e4b5dbe96b1-ARN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-11T09:53:20.781535Z","times_seen":417988,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/image?url=https%3A%2F%2Fcore-1333692039.cos.ap-hongkong.myqcloud.com%2Fnewsa%2Fe2cb18be%2Fimages%2Fdefault%2Ftelecom-xl---axis-r0i4m81e.png\u0026w=256\u0026q=75","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:10.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/image?url=https%3A%2F%2Fcore-1333692039.cos.ap-hongkong.myqcloud.com%2Fnewsa%2Fe2cb18be%2Fimages%2Fdefault%2Ftelecom-xl---axis-r0i4m81e.png\u0026w=256\u0026q=75 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6020\r\nserver: cloudflare\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: TO1txLza2v0pF8ds12YGi9C9ko70EmWKcOgpZLJ4LBg\r\ncontent-disposition: attachment; filename=\"telecom-xl---axis-r0i4m81e.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;, frame-ancestors *;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UY5g3ZYDCdqL8WEdFG2UaXP4Qv5PNtwXWV1pKxFRRDopdMw4cQd2u9bfZ9ExH4gbjFQHs7VBnX8ErPXUlOti4vPq8h914tnVhazc%2BCuU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e50eb9796b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6020,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"32f9ff05402f6895fe92da7be38aa8c3","sha1":"b14f91a379e1bd581594dc4025ced26e49d0a611","sha256":"4ced6dc4bcdadafd2917c76cd766068bd0bd928ef412658a70e82964b2782c18","sha512":"63950f89cb6701431497b5f041c994d4d4dda49edb682e330ccf4d2899e33678f9c1d88127836df61324693fb301d199f83488fad455dec13dfd22bbca0e8d90","ssdeep":"96:sBEUi4S6JRIo7wZrzpLICgK7CQhDZtD3dyALQ1Nrw692TpWpoR/trTtwJRR2iNkZ:sWUi4v7Yzb5GQDZtD3dbLmD92TpWGTRd","tlshash":"22c18d03966028a6186dd70b1d1419cbc21885dbd10a536afffe807b6d6fbdc009af4e","first_seen":"2026-03-23T15:44:44.478823Z","last_seen":"2026-03-26T08:43:48.687742Z","times_seen":5,"resource_available":false,"data":null}},"time_used":821,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":811,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/image?url=https%3A%2F%2Fcore-1333692039.cos.ap-hongkong.myqcloud.com%2Fimages%2Fui%2Fproviders%2Flogo%2Fbng.webp\u0026w=256\u0026q=75","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:10.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/image?url=https%3A%2F%2Fcore-1333692039.cos.ap-hongkong.myqcloud.com%2Fimages%2Fui%2Fproviders%2Flogo%2Fbng.webp\u0026w=256\u0026q=75 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4558\r\nserver: cloudflare\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: WCGHsTtAcswO7YROkP3SBZ6ZlzJ28tlEZMPw13nALQM\r\ncontent-disposition: attachment; filename=\"bng.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;, frame-ancestors *;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Ri%2FghGJmemJ7ive4hZihgotXOrBEZrcI1FPkUdukBsTbDpXODD8D5LK0I%2FDVGI7khR0W2l8Sgy33LjPg%2BknysBxRxK4DT2xGweBa8Sh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e510be996b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4558,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d1962e62cd3289176db750b42df39fad","sha1":"649607c21bd6415a760a5dd6b82b70b6f1aa88e1","sha256":"582187b13b4072cc0eed844e90fdd2059e99973276f2d94464c3f0d779c02d03","sha512":"de0670070d22e1ed8fbb0f248ac3ff5579ac6094d32110331570c4dcc17be794052d4e9dd4bf29d3f68f8a980024697822b8341fb812b6d43f3b067864cfec66","ssdeep":"96:Tfwku81/pgcddLDiRQz2G82hlZd9GLhQFMX9IvW/W5fi:jTjgsdSWl8WEQFM4","tlshash":"b7917dcd4d98dc2c6dd8e9e4720119429de744595f36400bd59cacbd1b3ef7629bc281","first_seen":"2025-07-23T13:52:55.384517Z","last_seen":"2026-03-26T08:43:48.717982Z","times_seen":6,"resource_available":false,"data":null}},"time_used":786,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":786,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_dynamic_configuration?x-region=us-south1\u0026license_id=17809494\u0026client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5\u0026url=https%3A%2F%2Fdewanusa.quest%2Fregister%3Freferral%3Daba5101774263051952\u0026channel_type=code\u0026origin=livechat\u0026implementation_type=manual_channels\u0026jsonp=__za5a2jacvg8","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"95.100.107.136","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:10.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /v3.6/customer/action/get_dynamic_configuration?x-region=us-south1\u0026license_id=17809494\u0026client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5\u0026url=https%3A%2F%2Fdewanusa.quest%2Fregister%3Freferral%3Daba5101774263051952\u0026channel_type=code\u0026origin=livechat\u0026implementation_type=manual_channels\u0026jsonp=__za5a2jacvg8 HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-security-policy: frame-ancestors https://dewanusa.quest/;\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nx-frame-options: allow-from https://dewanusa.quest/\r\ncontent-length: 385\r\ndate: Mon, 23 Mar 2026 15:44:11 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":385,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (385), with no line terminators","md5":"11623aedb8b1033772bb3a181b5b3ece","sha1":"63fe3d02f4b2dc8799716a7e52d0773899ea2e52","sha256":"93d1bed6bcb165f130a467a8a950276111f205bd8a1d104651089dfdfa6126c1","sha512":"fe41c109caa74cc98b1676cde7694285c00e93a7fddff8e5e1d7512d6502a49c41df33728180e0878ef4df7377fc27d4c0e19eacb5fd6aa2523101801e9df5ce","ssdeep":"","tlshash":"b7e06873e905843886c5e3f1c0046a41ad34029e9084b8bcf5aa0150520f7eda724917","first_seen":"2026-03-23T15:44:44.481212Z","last_seen":"2026-03-23T15:44:44.481212Z","times_seen":1,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":173,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/0.BHriPMts.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.19.183.147","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=17809494\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=b8f4f49c-d724-4914-a885-4e5a1e71f678\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-03-23T15:44:12.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/0.BHriPMts.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWxhYJWJEnkxc5DLZ_eiP-VJc_HcyFHkjcwGsRAGIV6C3T3vwOV4BDWe3YSdwWzkbIiH2syPRWE\r\nlast-modified: Fri, 20 Mar 2026 11:49:45 GMT\r\nx-goog-generation: 1774007385287395\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 78342\r\nx-goog-hash: crc32c=laZtmg==, md5=zx3QG4rzWQoxBlSL8TYiRw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 24269\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 23 Mar 2027 15:44:12 GMT\r\ndate: Mon, 23 Mar 2026 15:44:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":78342,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"cf1dd01b8af3590a3106548bf1362247","sha1":"efa4e242fad6d38577baff449278a28efc83bb47","sha256":"92682ea10e45ff4b921137d801ecacd87a478fa402f78e70af78781765a7faa6","sha512":"f9b097f00d811bb0c5b0a251a59e352bbb1d1b4bd1f83804e10f0b803b8500765408556045bd7b01141846c921642179f18d9b5de7e2b10fa4f8ca9bbe0158c4","ssdeep":"1536:Bc32VfDmtAn1VRxWffbp2jOxY58wHRJzL5ye+:BcUfDmtu1VRckqxY58CJ35v+","tlshash":"ea7329d2f681f4399be7a8e555388003fa3a7958781cc270f31cce14215e58665b7f6b","first_seen":"2026-03-20T13:10:16.697723Z","last_seen":"2026-03-24T07:16:47.18318Z","times_seen":223,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/image?url=https%3A%2F%2Fcore-1333692039.cos.ap-hongkong.myqcloud.com%2Fnewsa%2Fe2cb18be%2Fimages%2Fdefault%2Fbank-bank-negara-indonesia--bni--973yerhy.png\u0026w=256\u0026q=75","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:10.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/image?url=https%3A%2F%2Fcore-1333692039.cos.ap-hongkong.myqcloud.com%2Fnewsa%2Fe2cb18be%2Fimages%2Fdefault%2Fbank-bank-negara-indonesia--bni--973yerhy.png\u0026w=256\u0026q=75 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7350\r\nserver: cloudflare\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: lCFpXVZkG-XHhrkhZ-wK6yWniEaXucReNV7tkfOCGNg\r\ncontent-disposition: attachment; filename=\"bank-bank-negara-indonesia--bni--973yerhy.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;, frame-ancestors *;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hIi6zMttOifAYnV13jlCOUur5eOR4qsiHlcGFi71JC4ZMxHGLNliTecjuenomvbn6jseDDHX9G69YqSCatBuqorKv6GCWjBfh3Wjj8cF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e50db6596b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7350,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e00826c6b392fcc8beb15719bc0dc61f","sha1":"e582cf5538dd7d5ea557efc9ee497fef723cbeed","sha256":"9421695d56641be5c786b92167ec0aeb25a7884697b9c45e355eed91f38218d8","sha512":"15dd4ac196c82310d91672be0147c35db3cc331e4c9158de27d2e1ca905d09cffa2fb9c1ae882a5f237c4c12bb28527b090143e90a22c7d193a5b6afee5665ad","ssdeep":"192:EfT9vEpUtBIHCm5bsFSnf6jj0GbgXbyZnJtJQY5BilyIYyE:EpyUtBqN5wFcwjNsX+ZnJtOY5+q","tlshash":"3ae19e64784089abf13f137cab295fb8b1448844a2472fe3d6610cb24da6c93b4e6485","first_seen":"2026-03-23T15:44:44.482887Z","last_seen":"2026-03-26T08:43:48.773052Z","times_seen":5,"resource_available":false,"data":null}},"time_used":816,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":816,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_configuration?organization_id=b8f4f49c-d724-4914-a885-4e5a1e71f678\u0026version=713.0.1.38.141.37.1.1.3.1.3.17.1\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_static_config","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"95.100.107.136","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:11.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /v3.6/customer/action/get_configuration?organization_id=b8f4f49c-d724-4914-a885-4e5a1e71f678\u0026version=713.0.1.38.141.37.1.1.3.1.3.17.1\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_static_config HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ncontent-length: 1779\r\ncache-control: public, max-age=600\r\nexpires: Mon, 23 Mar 2026 15:54:11 GMT\r\ndate: Mon, 23 Mar 2026 15:44:11 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5843,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (5843), with no line terminators","md5":"8be3793c8f1eb3282224f5881301fee9","sha1":"2fc7e4c413c9547557ad1087e574b0d597db9fc2","sha256":"a9bd4e24b9909d7305b23404a6e84c16fcaaa18b278fce5b8f77c0abb8dcf9f6","sha512":"5cff2a4502bd0f45a8fc868b0a4521ab432984241b210d36931d802c878c8670354d1b1b7ad982c7f48bec934037328686505f70f147468bd4df53f2f495c15f","ssdeep":"96:uQhUwhUmhUsXhUAdLlK/muZXyWfy9qePJDO/mmfZzyAU69nMcem/3PJvzLq:PGwGmGsXGAdeGt9qCUKK9nMcewxb2","tlshash":"a0c1312a835fc9bbb377d14e62dbbb0e3408517961f8593fe464c63061862c7d311eaa","first_seen":"2026-03-23T15:44:44.483818Z","last_seen":"2026-03-26T08:43:48.759943Z","times_seen":5,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/10.al-9NYxR.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.19.183.147","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=17809494\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=b8f4f49c-d724-4914-a885-4e5a1e71f678\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-03-23T15:44:12.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/10.al-9NYxR.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWxAkOaMX5pFawYqyP-fWPh4eC_7OiatlvJUNxUSPwE5Bl-LfAPPCr27PyO0FDEBummFjpCBcOL-hF7U9g\r\nlast-modified: Fri, 20 Mar 2026 11:49:45 GMT\r\netag: \"4a073c5805819d74eabd3e843372d502\"\r\nx-goog-generation: 1774007385360759\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 236\r\nx-goog-hash: crc32c=6eM7Vg==, md5=Sgc8WAWBnXTqvT6EM3LVAg==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 23 Mar 2027 15:44:12 GMT\r\ndate: Mon, 23 Mar 2026 15:44:12 GMT\r\ncontent-length: 236\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":236,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"4a073c5805819d74eabd3e843372d502","sha1":"cb12e953dbee2d3ea08d35d86bcd2476a490bda9","sha256":"0cb3247cac5de8fcdfb226ebe2dc4960b6ed473966359f73ca13ca286309122b","sha512":"036da8fb3959ebbef26b546019535a9edb7a99227a28252878247a756d3a7ea693f48e9ffdaf5886faa7fb2cbe56292bbf9552db5dd1d26e6574d8034ee183ba","ssdeep":"","tlshash":"ebd0a78cb643b0b16276b138853f801fb035e984a44404f0d13ad9c03d7c1a97597c5d","first_seen":"2025-11-04T08:39:27.95245Z","last_seen":"2026-08-09T12:11:02.297333Z","times_seen":16398,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/18.BwJqqA7t.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.19.183.147","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=17809494\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=b8f4f49c-d724-4914-a885-4e5a1e71f678\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-03-23T15:44:25.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/18.BwJqqA7t.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWxgG2LC2_txLA5TZeNTUq-HobbXriSm3jOKX9pmKPzU6EA-UWJEGvUl0-kUvrpgKByDPsnCDufJ8QmC2w\r\nlast-modified: Fri, 20 Mar 2026 11:49:45 GMT\r\nx-goog-generation: 1774007385284775\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 4151\r\nx-goog-hash: crc32c=ej/cWA==, md5=t+6p4IVHFy2AqQ7eX8I5tQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 1775\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 23 Mar 2027 15:44:25 GMT\r\ndate: Mon, 23 Mar 2026 15:44:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":4151,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4150)","md5":"b7eea9e08547172d80a90ede5fc239b5","sha1":"c309ed972776ff2f42d6233d434199378b0b0449","sha256":"5c301867cb63a886e85962abdd05a64d3eb6df916260efc1433f22b97ed87128","sha512":"30e11b1d7dec0d21284297f0c6addd8aa824c4ae5a45514e6cb9c35767a092535e3d8b1a1d58593326f4d8cfc8eb451f4d92da5bae6bbcafb375409fdb2ff73d","ssdeep":"96:iIUUP2pJtLmIiCZ+lDFlL+o8C1iq9S3jHN+3NtbNu82HMTOC:6UV5CwlZlCo8uicS3jt+9txpBKC","tlshash":"2481c8ab32dcbcb6f5c682e690675160539d11a9280d4fd0d02bcfd501ba3d436eaf6b","first_seen":"2026-03-21T09:26:08.668755Z","last_seen":"2026-03-24T07:16:47.233684Z","times_seen":33,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.files-text.com/api/accounts/avatars/b8f4f49c-d724-4914-a885-4e5a1e71f678/c951e33a-4ab5-49a1-b9f1-09e98a47a80f/df1fa257-6f00-4911-9a55-a0b51552fee7.jpeg","fqdn":"cdn.files-text.com","domain":"files-text.com","tld":"com"},"ip":{"addr":"95.100.107.136","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=17809494\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=b8f4f49c-d724-4914-a885-4e5a1e71f678\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-03-23T15:44:25.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /api/accounts/avatars/b8f4f49c-d724-4914-a885-4e5a1e71f678/c951e33a-4ab5-49a1-b9f1-09e98a47a80f/df1fa257-6f00-4911-9a55-a0b51552fee7.jpeg HTTP/1.1\r\nHost: cdn.files-text.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure.livechatinc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 75129\r\ncontent-type: image/jpeg\r\ndate: Mon, 23 Mar 2026 15:44:25 GMT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":75129,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 768x1024, components 3","md5":"565b0fc76dcb400f5b3f962c217704df","sha1":"bda68521d1da0fe4c7592254265e3cfba53e529f","sha256":"0e07013662c458df08355a831b1947fcb041b22f031b2054a25b9d84f257d8ae","sha512":"adeae12297959fb5cbcbd32a1547ad80b57fcabe66d8a2d2b341e2a7060f4298b333f904963085203b588f2e26834a1efdaec03b4068ada32e03302aaacad7f6","ssdeep":"1536:LZSfZlAD2V/JXg6Et8A7w6Y4qV7CuCz3yPTM3PVo6dA/X5/Wpp:NSbNV+V3TXg7Cb4Y/mL/J+v","tlshash":"e2730242e4250e1676f72d5de31ed0a20e03eab32f507aa41645e06d8f04e76b7de9c6","first_seen":"2026-03-23T15:44:44.485974Z","last_seen":"2026-03-26T08:43:48.706393Z","times_seen":5,"resource_available":false,"data":null}},"time_used":562,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":369,"receive":193,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/media/7ff6869a1704182a-s.p.woff2","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/static/media/7ff6869a1704182a-s.p.woff2 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:10 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 13724\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 13:26:11 GMT\r\netag: W/\"359c-19d0b6cc914\"\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Ily4GBGOmtnTfvNpugrvkQq57NekUton3fxafxH%2FMLj%2B%2FDyk%2BnARjNOfkPA1GE3%2Fzxy%2FJ5Y2tn4FmoD%2B7jcunjcAlz6W%2B1MWhhIXgEI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e4a9bb196b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13724,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13724, version 1.0","md5":"cf5ec3859b05de1b9351ab934b937417","sha1":"97ffac24ea5fe5c47301f1be229699330ea93bf2","sha256":"bd9a6192274f8f2f3ce31cd3d2cae5ebe32e2fa86fc7c4f60a3c28556e496d56","sha512":"5894f155f390451c92d81b84262cca374b72fde2a0d395022bb863de9eeecd314b35bec0a662e140855522e086c5d969a058d19e3983de5b4bfbda47aaaddcfa","ssdeep":"384:u1cEYWFjUsSDmv62hM0qOUXkBB4WD9U8efQ:L6UWi2IkDjBtefQ","tlshash":"1c52cf101bc50ebb822285b3160a951e5c430da7f18ac9ddb48ddae8e8d72f7d010baf","first_seen":"2023-05-06T05:46:29Z","last_seen":"2026-08-11T09:29:22.800795Z","times_seen":2802,"resource_available":false,"data":null}},"time_used":1077,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":888,"receive":189,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/6475-b9a765fe0c43db46.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/static/chunks/6475-b9a765fe0c43db46.js HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:09 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 12 Mar 2026 06:33:20 GMT\r\netag: W/\"13f2-19ce0bfee0f\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\nage: 623568\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EhtdEjM0u9wFtjkLhXyfusjzA2b4SmevU%2BwPE2DthWv0ZNnF1t3JYVCu%2BZ%2ByW6V%2FmkVkINccJJC7wPMplsJqftH2U2gPygx7hdarfzve\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e4abc0a96b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5106,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5106), with no line terminators","md5":"14d7677bad5c23090385341929bdf0f1","sha1":"1e1734b550ebf2544a4fa9a897c57c4ef35c2aed","sha256":"945ecafb15e6a508ea8d273cab19b5b31b97c18d617263403b4d95388a038b53","sha512":"6ede005e1e53a467e18f4d11e5997c2698f86b0df48623fbfba74f0f0c58a4183dee3d4a8b09f1ce240ec376842ed99d0d9bb470290d52f1ccbd3423027dfaab","ssdeep":"96:bhPPSo9qYMSSqCPT2sd7PyKV3KJtNSTCtO+Q46d+QhTT9/pmhE9s739+WyBsd:BPLtlSqix5GlQ46F10T","tlshash":"6cb1b7f3b782f834aa3f5564906a001dbb975c8dc05d1c6cf3a6ec809694186ce75fba","first_seen":"2026-03-23T15:44:44.487539Z","last_seen":"2026-03-26T08:43:48.755608Z","times_seen":5,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-B9DLSJH0MC","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.20.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:19:44 GMT","end":"Mon, 18 May 2026 18:19:43 GMT"},"fingerprint":{"sha1":"5D:21:36:26:B5:1D:67:14:0D:6A:68:D3:7C:EB:39:6E:A1:45:8C:29","sha256":"BC:A5:DD:5A:08:3A:33:49:76:BB:EB:18:9C:45:17:80:A1:3E:31:5F:BA:F9:93:28:C7:76:A0:97:FF:E9:3F:1C"}}},"request":{"raw":"GET /gtag/js?id=G-B9DLSJH0MC HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 23 Mar 2026 15:44:09 GMT\r\nexpires: Mon, 23 Mar 2026 15:44:09 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 154395\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":465790,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"020ab8e3d40c146ced26f29edb5cca27","sha1":"2f645715a050c858f25550822eca4c6d1b53b450","sha256":"99f48ce672519a94a7796e59c14ab6d23edbc3575c4a576a2eab12f656ad3cdc","sha512":"7cb898de167c7c01d1e0cfdd45a46158919b2f0c86cc69e943c310d557d07c6202d733a2499d51962a7d977385ae066837b4fa25b7349e5b375178f1830b8eff","ssdeep":"6144:TOHJ8B4fKAfICc93KwiKHnm8SBtS5K2wzO3Qpan8Gv/UywU2yIS+p:Tr4RfICAbHm8eeBUX","tlshash":"a6a4f9ceb3da70265396f478903f018ba57b28a2b45cc899f189cce42d7465a4277f7c","first_seen":"2026-03-23T15:44:44.488569Z","last_seen":"2026-03-23T15:44:44.488569Z","times_seen":1,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":54,"dns":0,"connect":21,"send":0,"wait":48,"receive":64,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/media/4de1fea1a954a5b6-s.p.woff2","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:10.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/static/media/4de1fea1a954a5b6-s.p.woff2 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_B9DLSJH0MC=GS2.1.s1774280650$o1$g0$t1774280650$j60$l0$h0; _ga=GA1.1.2034164557.1774280650\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:10 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 13980\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 13:26:11 GMT\r\netag: W/\"369c-19d0b6cc914\"\r\ncontent-security-policy: frame-ancestors *;\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n%2BJq%2BymqKEXEeEbK3ebX5K0jyj3d7VlddioC07SUwTpwSd7zZmzVIyp%2BUV9fGNcMIhqM1i%2BdwfkWv%2Fwltqn5TZqdq%2BvhZlcCJafDirzx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e5389f296b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13980,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13980, version 1.0","md5":"b7d6b48d8d12946dc808ff39aed6c460","sha1":"3f18028a04b3fb39bb1cc33dce401d04e9207970","sha256":"d4ae5188a65370ecfe28f42293bbee8297cfd5712c6aadfdb270d48f2bcd88b0","sha512":"7c719a3026913201c92129f92b5c08bbe4344fc9c3b2d95445a3ec23974acc7de4555177145dfb8ae007572d03038fb3461e62654c386a60ddf32b0608edbd7a","ssdeep":"384:xE1ZUpMQcRcGQO/z6vwr1/4UcKURb5nbC5n:x+OcKGpz6vwrB4cURBQ","tlshash":"6552d041c8074200cbbb3471b46a9dd168914030a9dd24592b71e9b137f63affd5ae8e","first_seen":"2023-05-06T05:46:29Z","last_seen":"2026-08-11T09:56:05.993945Z","times_seen":11218,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/api/mastergame/filter","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:12.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"POST /api/mastergame/filter HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nContent-Type: application/json\r\nx-client-ipx: 0.0.0.0\r\nContent-Length: 2\r\nOrigin: https://dewanusa.quest\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_B9DLSJH0MC=GS2.1.s1774280650$o1$g0$t1774280650$j60$l0$h0; _ga=GA1.1.2034164557.1774280650\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 201 Created\r\ndate: Mon, 23 Mar 2026 15:44:12 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://dewanusa.quest\r\nvary: Origin, Accept-Encoding\r\netag: W/\"e4933-e7gz2MrDlRFhB/PTFP/b+0J5pV0\"\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OnA%2Fs6Ohalj6gTuRN6LVfMRqGpJxhd1R5Hq40tObMLLRR8byuwvU9ddNF3aX6uQBPThZA6YlXVK3tebSsGFnjwSQ6ZKFYBiWeiMXSPxD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e5bfd7396b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"201","status_text":"Created","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":936243,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5f7f3af8d3b6d2aa9729ad0786ce03e8","sha1":"a7c7ff57c23f13fa629e664ec7b15363a6fbabb5","sha256":"c767fa389a206544d574ac29b4aea9e42a9ecd2f776a47ebd24101bfc3732d6e","sha512":"8d6972176ae80a59e6ec7318317d1c76f140d60f9d43974593b6e46594685506595c56bd7c0d037f9227851ed9e1c4729fcdd7a022218021a2e464483a1e963d","ssdeep":"6144:pde0bKPHbqwuyqm7ixnxJ3SuwNIgYnntDAJUDSywn1qrouRbPIyJx4S/nWbw+QN0:d27xfYez","tlshash":"4415367a9d18bfaec75908532c9f3e53e1ac91471d880d74e39a4f2581fff790a26209","first_seen":"2026-03-23T15:44:44.489384Z","last_seen":"2026-03-24T07:16:35.235727Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1016,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":823,"receive":193,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/register?referral=aba5101774263051952","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:12.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"POST /register?referral=aba5101774263051952 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/x-component\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nnext-action: 002f3be31f2cc81e60598252d217798b8b82c44967\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22(auth)%22%2C%7B%22children%22%3A%5B%22register%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2\r\nOrigin: https://dewanusa.quest\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_B9DLSJH0MC=GS2.1.s1774280650$o1$g0$t1774280650$j60$l0$h0; _ga=GA1.1.2034164557.1774280650\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"[]"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:12 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\nx-current-path: /register\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\nx-action-revalidated: [[],0,0]\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E2yVJ2iuGxsYntyHDwIylx0lNcFjLdgjlyOzyyIW02HX1clTbqvoAELnVKZrtxw1ezB%2BCAybJHdMbri7odpZ97auhGcEVW%2BHW%2BBhWdKl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e5e0a4796b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"a156a084c0f9d33ff4db238bf8b497bf","sha1":"2c7e4be80aa08c192df83376a0e30dbb504b08fd","sha256":"cfacd4e93b1e3b8ab64180bfd62539aec0a4527a34bfd611353d61e6d8e45c29","sha512":"ffbb78eb28b71f543e3939bdee1c1cfb1d14697d6f1bebe8de2711d60a06c534469d5ee5b9cae57703cd053cd3cc17bd3c9851a474a3726d48b709f78c1202b8","ssdeep":"","tlshash":"35a012014c5445d5c807a040209406040cdcf119e0c92014e889e400983d91432624b7","first_seen":"2026-03-23T15:44:44.412736Z","last_seen":"2026-03-26T08:43:48.647328Z","times_seen":5,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/api/mastergame/filterrtp","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:13.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"POST /api/mastergame/filterrtp HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nContent-Type: application/json\r\nx-client-ipx: 0.0.0.0\r\nContent-Length: 7012\r\nOrigin: https://dewanusa.quest\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_B9DLSJH0MC=GS2.1.s1774280650$o1$g0$t1774280650$j60$l0$h0; _ga=GA1.1.2034164557.1774280650\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":7012,"data":"{\"idGame\":[441948,442254,441896,442291,442266,442105,442284,452858,442252,442233,441893,452854,442171,442247,442218,442210,441926,452850,442167,441197,441906,449365,452856,441900,441944,452842,442223,442288,441905,442178,434865,442249,434582,441914,434559,442255,434511,441917,434593,441897,434568,442162,442235,434496,441936,434553,442169,434542,434648,441943,434646,434672,441898,434657,434867,442285,434493,434851,442170,434644,434669,442262,434554,450158,442090,434589,434659,442245,434671,434677,452843,434543,434564,434880,442244,434592,434674,442159,439319,434537,434640,441918,434664,434877,452849,434490,434594,441895,434488,434649,442246,434481,434849,442258,434504,434675,442190,434653,434860,441910,434855,442215,434505,434875,442140,434486,434661,442064,434555,434652,453334,441931,434588,434656,453356,441892,434647,434872,453107,442073,434864,434876,453331,442147,434530,434678,453073,442269,439344,434556,434869,453344,442052,434489,434881,453182,441934,434550,434567,453409,441932,434485,434532,453310,442240,436716,434885,453317,441908,434535,434890,453380,442137,434510,434596,453184,441947,434569,434873,453335,442180,434494,434667,453046,442217,434597,434639,434868,453318,452847,434635,434642,434670,453323,442143,434551,434590,453353,441935,434500,434558,453387,442278,434545,434566,453109,442079,452844,434571,434636,453339,442276,434482,434541,453316,441951,439343,434585,434665,453179,442283,434577,453049,442161,434512,453348,442082,436839,451511,434638,453108,442280,451497,434853,453069,442166,451495,434878,449362,442219,451496,453342,442287,434529,453345,442242,434676,453074,442074,451537,434538,453347,453390,452845,451592,434854,453031,441920,451576,453032,442248,451595,434552,453338,442102,451508,434539,453314,442271,451617,434883,453185,441949,442275,451398,434557,453327,441901,451562,434503,450230,452859,451627,434637,453343,442264,451500,434527,453363,442226,451431,434650,453340,441907,451629,434861,453322,442172,451510,434563,453183,453311,442282,451612,453071,453378,442260,451603,453186,453332,442214,451517,453041,453333,442259,436725,451618,453178,453421,441912,451535,434591,453385,453401,442192,451631,453329,453407,441916,451600,453072,453308,441904,442118,451527,453355,449364,439320,451598,453111,442158,439317,451536,434544,453395,442156,451439,453406,452863,451601,453336,442151,451557,453358,442207,451540,453354,441911,451518,453341,442130,451435,453394,442131,434450,451611,436888,453324,442253,451605,451623,436885,452464,453350,442088,451388,451507,436884,452465,452029,452494,442690,440444,453312,442227,451578,442858,440492,436894,452411,451656,452542,441074,439676,453068,442089,451532,442859,440491,436879,452397,451910,452501,440784,439674,442199,439321,451424,450619,439945,436882,452460,451822,452493,440779,439658,441525,453075,452846,451480,442877,440494,436883,452430,451921,442675,440309,442933,453181,452853,451625,442907,439973,436880,452431,451782,452587,440669,440442,436634,453357,442164,451419,441201,440483,436887,452429,451858,452502,439382,440302,450215,453412,442261,451513,439450,439325,436893,452384,451894,452500,442580,453369,442184,451542,441202,439324,436889,452421,451823,452498,440904,440467,436630,453187,442229,451434,442780,440489,436892,452457,451729,452503,442715,440429,441537,453396,442050,451442,439454,439962,436881,452371,451780,452504,441064,440379,442913,453313,442281,439345,451613,450225,439959,436891,452376,451985,452509,440644,439740,441526,453306,441929,439346,451472,442911,439975,436877,452355,452035,452517,441089,439650,453309,441938,451550,439977,436878,452369,452325,452499,436660,440284,442922,453399,442108,451395,439455,439948,436904,452399,452091,452512,440729,439707,439299,436738,453070,441941,436478,442892,436943,452426,451654,452523,440689,440365,441532,441138,453422,442057,436719,451486,442873,439953,436920,452427,451655,452524,442700,439724,441540,442844,453377,441902,451573,439452,439968,436901,452428,451652,452520,440724,439749,441536,441166,453376,442091,442889,436764,436924,452422,452013,452505,436645,440275,439300,441158,453319,441955,451607,442871,440486,436905,452382,451888,452531,440949,440398,442931,441154,453321,442270,451622,434889,442897,439965,436908,452393,451898,452577,440749,440406,440141,442850,453110,442168,451522,434886,442914,439956,436921,452461,451645,452511,440769,440449,441528,442816,453405,442100,451501,451628,434645,439451,439955,436928,452405,451914,452496,442655,440397,439301,442813,453379,442220,451440,451638,434584,442874,439972,436926,452404,451939,452497,442630,440328,442837,453417,442049,439318,434572,442903,436609,436895,452363,451643,440849,440274,441524,441170,453362,442058,434506,442864,440493,436915,452433,451658,452506,442680,439665,442917,441146,453410,442051,442237,451577,434501,439453,439976,436897,452352,452551,436665,439640,441527,442833,453360,441915,451626,434484,442905,439969,436919,452473,452544,440584,440464,442915,442826,453372,453386,442268,451575,434866,442872,439949,436918,452456,451666,452514,440884,439639,450591,442841,453349,442153,451498,434862,442885,439961,436917,452357,452548,440774,439702,442926,441200,453419,442206,451559,434658,434887,442868,439966,436916,452391,452528,440559,439746,442923,436604,453416,452851,451632,434666,439456,439950,436927,452361,451753,452570,440554,439690,453366,442070,451524,434651,442879,439942,436922,452446,452573,440649,439666,436194,453365,442059,451606,434654,442860,440487,436912,452471,452556,440899,439689,442848,453375,442096,451637,434495,442884,439957,436902,452410,451710,452593,441059,440433,442918,441162,453307,442286,451506,434534,442908,439952,436896,452398,452412,451698,452549,440509,440276,442830,442204,451546,434874,442909,439978,436909,452440,451694,452522,442575,439683,442919,436605,442066,451523,434595,442865,439954,436906,452383,452425,451670,451699,452546,442615,439750,441539,438694,453389,442053,451596,434562,442861,439974,436923,452381,451669,452515,440824,439752,441542,436418,442849,453388,452852,451504,434888,442891,440490,436903,452444,451697,452495,440574,439754,441531,441150,453346,442216,451581,434863,442893,439943,436900,452417,451672,451708,452507,440804,440325,441534,442815,453411,442080,451423,434857,442899,439971,436925,452394,451671,451949,452521,442605,440385,441523,441185,453180,442234,439347,451502,434498,442888,439979,441196,436913,452358,451725,452545,442685,440329,442924,436336,453404,442238,451446,434655,442882,437046,442904,436907,452370,451691,452017,452529,440954,439776,442928,441174,453351,441891,442150,451433,434502,439960,442906,436911,452415,451688,451732,452519,442595,440350,436484,436596,453398,441928,442067,451526,434524,434850,442867,439941,436978,452377,451733,452575,442640,440400,449512,436735,453315,442277,451421,434487,434523,442881,439944,440041,436898,452401,451746,452543,439748,442921,449511,441178,453383,441933,451621,434518,434673,442894,439964,440040,436890,436899,452380,451726,453520,452554,440929,439642,449354,436597,453391,442289,451568,434520,434570,442875,439946,436338]}"}},"response":{"raw":"HTTP/3 201 Created\r\ndate: Mon, 23 Mar 2026 15:44:13 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 51\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://dewanusa.quest\r\nvary: Origin, Accept-Encoding\r\netag: W/\"33-uGYhynmT1l+UCD9jowOEpOtB/f0\"\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8bWZ2HAgyeRwKLx3uCLziHDb8rlEtC5Ds3Pj3V0OAUEBkDlF8QhGwEcyzzRc1M937BgxcfGoyjPEkz4neeFlb5d4DAfElqZvnIFoVZST\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e626cf296b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"201","status_text":"Created","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":51,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ea7a3c91f07b580ab37644d0cae534c0","sha1":"b86621ca7993d65f94083f63a30384a4eb41fdfd","sha256":"1ccde6cc68769bf4cf3ac2515b518b4abc5c7ca030019c6b732890b9327f69c1","sha512":"55b1ef3dacfaf946585e21affe945551a898fff92255d913dc71eefad22c752d74ada08084a5a7d9b3b936c9ad01b36ff531517404b281b9cb33026b6072f2e5","ssdeep":"","tlshash":"5f90020119117ed60a01014674019d8950c130855140541b566d6019cb9c96a7452621","first_seen":"2026-03-23T15:44:44.490279Z","last_seen":"2026-03-26T08:43:48.779112Z","times_seen":5,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":258,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/game/table?_rsc=h5wy4","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:12.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /game/table?_rsc=h5wy4 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22(auth)%22%2C%7B%22children%22%3A%5B%22register%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nnext-router-prefetch: 1\r\nnext-url: /register\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_B9DLSJH0MC=GS2.1.s1774280650$o1$g0$t1774280650$j60$l0$h0; _ga=GA1.1.2034164557.1774280650\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:12 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\nx-current-path: /game/table\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xz6Qm5FEXAWbmgxyYJWFb%2FgYzGMop9%2BJrzUr%2BKjAOk5dco36Fr7fiEvyBDFn4Fii5UwcWvjQRaUx4G%2F4xJ%2B4jn9d4rwgsmbkP0xPwL76\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e5c1db396b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":199,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"ecded1277808da781e2739e2b9cec0f6","sha1":"5708d6b9b4341f86ec19e61a7bf768a25dd24e34","sha256":"60dcfb274ff3d7b6dfed8cdecb19857cde3421362f4d0759607e092a2ef9e224","sha512":"6c6713f4fefbee6d86699f67c20a433af365a3d9ef26251316ee3e1b6f4dbdca22feedc66338ebfcb676b6aa7f214d2a0ba8012c8c40ab87f2d6e3606f51fcf3","ssdeep":"","tlshash":"90d0a922094029b609ba10a0002eea4b388f483b22c828f0a0928d043bb32211143ac8","first_seen":"2026-03-23T15:44:44.491226Z","last_seen":"2026-03-26T08:43:48.67445Z","times_seen":5,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":394,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/media/55c20a7790588da9-s.p.woff2","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/static/media/55c20a7790588da9-s.p.woff2 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:10 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 13284\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 13:26:11 GMT\r\netag: W/\"33e4-19d0b6cc914\"\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rZ05B6Bloobn8UeoOB0erHN2%2Fv0aX3AJ2L9KWVHIjkdBaySTkdxcv5cPPejK0d80dNSp5ArwCu3b7m6fhBzYjGnm3F1XxYgSMNjaOAi0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e4a9ba996b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13284,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13284, version 1.0","md5":"816d95a45d019ad06908231c9584ec03","sha1":"abf33faaf22fe33f64691f765896e18ea16c36dd","sha256":"5010c0df836d8c80e36d7fd2ef00de4d7b5b34d359c330489d8b1a695665a719","sha512":"139d5e429ee1e440897a5f549e9313c169a393b030eff8f92510f714f8ccbc478f064af38dd5a4bf5a30ed4ba5e0863553ddc793b28c59d0ae354771359582c6","ssdeep":"384:eXhuCRRKwUTGPMThd+ksSEgOU0fVoKrX8UsUeus:EhxRKwUTG0TVMgJ0fVLRqp","tlshash":"5752cf4078199138e6129c3259deeb5dfb1c8812f578a9c8e5235b74ec490c356ab29f","first_seen":"2023-06-16T12:59:25Z","last_seen":"2026-08-11T09:14:16.846181Z","times_seen":1121,"resource_available":false,"data":null}},"time_used":1115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":916,"receive":199,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/5.DDJgJSMw.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.19.183.147","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=17809494\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=b8f4f49c-d724-4914-a885-4e5a1e71f678\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-03-23T15:44:12.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/5.DDJgJSMw.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWyX_272eg8iP7HpPKMAKNxEbLhfmJ0Nv94PzSBXKHd2AmoOrpfl-GL6Us2yn9xs9WG5rzpR0s8\r\nlast-modified: Fri, 20 Mar 2026 11:49:45 GMT\r\nx-goog-generation: 1774007385324525\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 1189\r\nx-goog-hash: crc32c=X0+BTQ==, md5=CBg5idm8UF6CIVuW0VgVEg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 676\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 23 Mar 2027 15:44:12 GMT\r\ndate: Mon, 23 Mar 2026 15:44:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":1189,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"08183989d9bc505e82215b96d1581512","sha1":"1c0eab7cbf49c114ba686578f1fc1e6a32fa68b4","sha256":"30f5c6a4e57eae1f47d3c20ddc27f78d616094e519d1ded2eea87106fe08b34e","sha512":"3ff2c6ed74f219c420e45447b522a7155ec27f869fbb273ba1a1406400192e596da71dc5e5ab60910c447eada553545a96a0d1dd57cf7c6c307a7cc57ee5b01b","ssdeep":"","tlshash":"602121d91dc3d430d33c48e902e5889e697c8ea4e1ee01e0d9946dc67f20960667fead","first_seen":"2026-03-19T10:33:28.754436Z","last_seen":"2026-04-07T10:47:46.110501Z","times_seen":1312,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/main-app-b61413a84bc595d1.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/static/chunks/main-app-b61413a84bc595d1.js HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:10 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 20 Mar 2026 13:26:11 GMT\r\netag: W/\"23c-19d0b6cc915\"\r\ncontent-security-policy: frame-ancestors *;\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MNK1TuC9l7EWjdlvYkZq8gOJVJ4qN6O48IIzIfG%2FbkY9ZrQGWIPS1UCLbQA6JPVibLT87W0eKcxVYRRO%2FVQ98Bue8pY2lu43UuyBNTGR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e4aabd796b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":572,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (572), with no line terminators","md5":"873a366407cddd9410a06f6bc85f65b8","sha1":"1845118bd7f0a9cf92be879a0d5e64d9a0cb98a1","sha256":"74a13df85e93d18fa1a8ca01360d7a6affc5eae57b04d001da47045f6e2a8eb4","sha512":"a56c1673ed347c16b216aa36a054ec91610141f4af548929ef85f69a1750b0b4145c2392f0dd9acbbaa3bf8d97186614ef2436b6ab6c08d2940e1a2819f9d238","ssdeep":"","tlshash":"a4f0fb9a4f1cf52f5d26ad75fe97ace2285f5275202b4e606901de713c23bacd270414","first_seen":"2026-03-23T15:44:44.493231Z","last_seen":"2026-03-26T08:43:48.789753Z","times_seen":5,"resource_available":true,"data":null}},"time_used":900,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":900,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/7976-72b08d0d566b1866.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/static/chunks/7976-72b08d0d566b1866.js HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:09 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 12 Mar 2026 06:33:20 GMT\r\netag: W/\"10094-19ce0bfee0f\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\nage: 315362\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E5XqE%2FsbkgbYmXvzMx16xcvLlKs%2B%2BVD0XXRaGhJjt7omobbkDXiaRLzoygkukIgUFc53IvNYHurKEo7hJ%2Be3hrA4zh3vb3sQUeDsPAzc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e4acc3996b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65684,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (39600)","md5":"0fd17b844422f8fa52a5a3fa4b053c68","sha1":"2af77b46b132f9a83e95297e4cf09ce6539ec844","sha256":"c72fb3c2b22630616909cd7bea6a90b9a7016e8c393d43769d52af72c5d1eebc","sha512":"c1748dad0db448c773cf1720719e7fa7509d9a6c89e7c760bb501f167098b099c6ad62032cab37b51da74c4f90dacf8c008220457943d2cdf1928d3bbbccdd81","ssdeep":"1536:AHaIGJF4jDMbBMbhVKXI8+2b/2fxwSV9JFQWbbEv4vVYHGrI7b3f+:A67J+jGIwSNEv4v6H7Xf+","tlshash":"b4533bc1b3d2f42a9b6d61d654254002f37a9eac240d94acf3b46ceb319694da0ebf35","first_seen":"2026-03-23T15:44:44.494107Z","last_seen":"2026-03-26T08:43:48.715646Z","times_seen":5,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/image?url=%2Ficons%2F18-plus.webp\u0026w=48\u0026q=75","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:10.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/image?url=%2Ficons%2F18-plus.webp\u0026w=48\u0026q=75 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 454\r\nserver: cloudflare\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: OGPJ4HipNdmlajb66v3EzgHT8SzMwMPFxx4PrzJSx3k\r\ncontent-disposition: attachment; filename=\"18-plus.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;, frame-ancestors *;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iVtv6xNC7jN6ScXdTl3QQhat5FVia3XN92lPNB1JcDQyz9F%2BhPBD0ssV7x%2BZh7zkpZ%2BG90SaE%2BLj8era%2FvjXSYIv8JgIvp3gG32OVuah\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e50fbb496b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":454,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d17759488f4533a6634d18f6a48ea9ec","sha1":"f1178301466ef9da0ae2628e4c475063ff3695cc","sha256":"3863c9e078a935d9a56a36faeafdc4ce01d3f12cccc0c3c5c71e0faf3252c779","sha512":"e2be0be03b4067e5265670d8bc06aa1d421549d1158bf8a007e2c17ffd2d90894b99f97c1c7b4223533d0cc377a0410972e3abe60c969e8b7fcf1bd854eee39f","ssdeep":"","tlshash":"fdf0dc4d25a3489d95862c6a35b0310609cb013c69b8a05758a3583020ea74e3299a6c","first_seen":"2025-07-23T13:52:55.442434Z","last_seen":"2026-03-26T08:43:48.712995Z","times_seen":6,"resource_available":false,"data":null}},"time_used":799,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":798,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/1.CCzcvYl-.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.19.183.147","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=17809494\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=b8f4f49c-d724-4914-a885-4e5a1e71f678\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-03-23T15:44:12.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/1.CCzcvYl-.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWwHbMmkQuVyvd6ht4mPBJo2BtqtVoZ4byjkgIh-FtQLs0gg62r3VwMQ9Vf0D0m2duqqWHWC1A\r\nx-goog-generation: 1774007385285458\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 55443\r\nx-goog-hash: crc32c=NOoE+w==, md5=44l79bbPhGoVpH+2vxMIng==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 20007\r\nlast-modified: Fri, 20 Mar 2026 11:49:45 GMT\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 23 Mar 2027 15:44:12 GMT\r\ndate: Mon, 23 Mar 2026 15:44:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":55443,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (37855)","md5":"e3897bf5b6cf846a15a47fb6bf13089e","sha1":"f08e34f980dc8677948f7306bd1fd6cefb907bb8","sha256":"0600b0e00c69c6400774404bcdd90b535f434713aca3c815c051cda8b77e50c3","sha512":"6b53d096db4db441ff016916cc829b6ba5a4cc8097cb2d818411d1278d2aa7d96156085cc3c1c04dda6d0ea041bd16ae6908120c99c632f78ac8f33e1f8b9b53","ssdeep":"1536:EOW45ZFdvjhCQgPVA2vtIFSGurXS3qNFJ0WW:pjv7hgq2OSGSXS6Ngh","tlshash":"f7434ddef14174315be355f2a06f9006b73a2a2c385cc0b0f629dd9925de44ba227f6d","first_seen":"2026-03-20T13:10:16.647118Z","last_seen":"2026-03-24T07:16:47.243606Z","times_seen":225,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/690-eb9a0daf484b161d.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/static/chunks/690-eb9a0daf484b161d.js HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:10 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 13:26:11 GMT\r\netag: W/\"1de0-19d0b6cc917\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A27wPETzKIF6e30LGZvAscnSM1JANTsJ4T4Jc2ukzh1Q2mpOyesYr17hBvT7UYKL1SUBj5LdA%2B%2F6v16M0TpM8e9kcoxV6MKqONjsfJBH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e4aabed96b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7648,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7648), with no line terminators","md5":"3b75a7616909d74cf21e2a5da53519e4","sha1":"56c2bd4ef9f0cce901e8ca08464f41a680c3ce4c","sha256":"d108fc2e666ddfaf6e5a1bf9342bc91eb5b5aca8345e2c46f8bb74715f89ab4c","sha512":"a28064a65c7c4ac8c2dd0e98a7089a865d53019a6954d093f16d790e325659cab35f4456c2ae4efd909733b872d9132142e3ff94bb4764124c2965017232cb0f","ssdeep":"192:5A9eQshaA4xBSSwSVMX49sW31xNZZQwARcAhZbNWIepCx7TQPL9h:5vbamSBmtW31xNZKwARcAhvW2xnQD9h","tlshash":"35f17474a75194a03f6f49cce88e4d94f72a92028f394c75f57a1aa4538cbc4ed413bd","first_seen":"2026-03-23T15:44:44.496281Z","last_seen":"2026-03-26T08:43:48.714704Z","times_seen":5,"resource_available":true,"data":null}},"time_used":835,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":834,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/6974-bf9309e9fff11a70.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/static/chunks/6974-bf9309e9fff11a70.js HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:09 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 12 Mar 2026 06:33:20 GMT\r\netag: W/\"57b9-19ce0bfee0f\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\nage: 315362\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h7o1gPcszpj%2FaN3i1AXOx9IP5on%2BmLwjFAQ5wlZnHA8me6bTCfcPicPlzEsxrLplw95XWPo0DMEgSpSF%2BscJYpSY6FfAkFQxy%2FNI8Mb8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e4abc0596b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22457,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (22457), with no line terminators","md5":"f9cd2eb22fbab8a4a8acf5cc529724ff","sha1":"1ae9ec2225ec8f1289f939259897697ed32cf114","sha256":"abf25cacec44e6e0bc3ab8f53321cb97b4fd618b3fc763314d9984184dbb832d","sha512":"297888af53216907e700d54954c45fc2d589c34ddf0aece1ad4d8bb25739307daf5b0a0c69401735382f897bdbeab05b8a4ffcbc724bd15cb9ba09236c279937","ssdeep":"384:f+R9XKKkH19cOBrZchQt7kgR2W9ROkTfqxQrJJURFXPqCywZh0:ZlV9cOBVchQ572W9zuWibXPqb","tlshash":"dba2a56de295bb3c579df608e6360c047e1b0866db45a0f899d8a7c17c7c8c52047b7b","first_seen":"2026-03-23T15:44:44.497243Z","last_seen":"2026-03-26T08:43:48.669464Z","times_seen":5,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/6752-8e2650373eceb28f.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/static/chunks/6752-8e2650373eceb28f.js HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:10 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 13:26:11 GMT\r\netag: W/\"3a60-19d0b6cc919\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bc41tYpPhiN5nlV%2FDvfh%2BjunszuYwg8GZ98fVA534UJYRR5Mcg6Hgvn2D4PUoPotLE9VGr0jtN062PIXCoy5wF%2BG2%2F4dvB8yOA6v6nsw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e4acc3d96b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14944,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (11684)","md5":"cfa456cb0a8808856582d7b25f136a5e","sha1":"8ce8cf6f6cf8898f1c92e482ea95464f642cb8f1","sha256":"bfc5e427febf562f55111a8deea9d6c8658af5fa56ac315a26f1b1f83916c3e5","sha512":"7bdff54535229c2d40fcf5b425fcecc0ae0c1388350b17e8974298bdbbd0c2f81a05ceb9b04d2dbcc69cc7b954a0e84f0c0403cf36800a82ed2eca7b05f319bd","ssdeep":"384:huFojZYTqc2YSu/XefrmUL4+7PTvV6VqX:huFoj4RxfML4TVqX","tlshash":"4162f9e8f235743146bb84bdd1afc07cb62a3628305fd474f1955c25266848db2e2fba","first_seen":"2026-03-23T15:44:44.49821Z","last_seen":"2026-03-26T08:43:48.803996Z","times_seen":5,"resource_available":true,"data":null}},"time_used":840,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":840,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/image?url=https%3A%2F%2Fcore-1333692039.cos.ap-hongkong.myqcloud.com%2Fnewsa%2Fe2cb18be%2Fimages%2Fdefault%2Fbank-bank-rakyat-indonesia--bri--8j3z87p2.png\u0026w=256\u0026q=75","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:10.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/image?url=https%3A%2F%2Fcore-1333692039.cos.ap-hongkong.myqcloud.com%2Fnewsa%2Fe2cb18be%2Fimages%2Fdefault%2Fbank-bank-rakyat-indonesia--bri--8j3z87p2.png\u0026w=256\u0026q=75 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8294\r\nserver: cloudflare\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: eOkCH1xRJ73wdDkiw8glR7PnUrC67U4gKbwojgRvG_U\r\ncontent-disposition: attachment; filename=\"bank-bank-rakyat-indonesia--bri--8j3z87p2.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;, frame-ancestors *;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=We%2BumBR7QA6kU9dxdcnooroG8WpwwJXaLMZPjnEWzG2sVAvIJH58AQmpeAg1jeIcp7ox%2FKERpTqDkDyPY%2Ff%2Bu1uMUg2F0V8MNzkDx%2Fsc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e50eba496b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8294,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aef1f344bc68f21883aebdb04932c164","sha1":"79e26a78e579dc3a62ae3ebd926b8765b071c727","sha256":"78e9021f5c5127bdf0743922c3c82547b3e752b0baed4e2029bc288e046f1bf5","sha512":"94499e90f0f0a85708a047f54c3e947147973970ddaa73061e6d5c66ffcabde184791e218e6b1aea0121155f0b4b26267989cca40c3001529391c12ee00ef73b","ssdeep":"192:8dQ3oY9tMka4OoUAAuOmEnWTs/QJe63yzvWv8YC6pnAHUFV5k:mQ3198loKlOn3yyUYCyAHUlk","tlshash":"5602b04c863acc1ad97170d672e9e357613f20c18d924b321cdf486607f40f9d764623","first_seen":"2026-03-23T15:44:44.499097Z","last_seen":"2026-03-26T08:43:48.637946Z","times_seen":5,"resource_available":false,"data":null}},"time_used":808,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":808,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_localization?organization_id=b8f4f49c-d724-4914-a885-4e5a1e71f678\u0026version=4940c52ca0caf914a8b155bf4411bbe5_e962324dd193458bfabb5f293c0a24ba\u0026language=id\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_localization","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"95.100.107.136","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:12.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /v3.6/customer/action/get_localization?organization_id=b8f4f49c-d724-4914-a885-4e5a1e71f678\u0026version=4940c52ca0caf914a8b155bf4411bbe5_e962324dd193458bfabb5f293c0a24ba\u0026language=id\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_localization HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=600\r\nexpires: Mon, 23 Mar 2026 15:54:12 GMT\r\ndate: Mon, 23 Mar 2026 15:44:12 GMT\r\ncontent-length: 5071\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14603,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (14601), with no line terminators","md5":"a10e19f65a782b170b55df663effca14","sha1":"169df5fc084123d96dd1ec7f1f3bc10965ed2d0b","sha256":"e46a5c8d8fc101b485540b22483b4830257d649722006dc63f8eae05c6a2ef01","sha512":"531cfa9828df473b1587cac3aadf1184a50d1509f6156a4f13161b62c215a3370f54f65960d548ff22fcfa3dc0d3cedfdeefe610d2a365ead5746d43998e6d3c","ssdeep":"384:k8eODwsFJ9KlFZmERbo1DQCBuLdAeAk+BdNJ0L:52i4FAnHuJAY+AL","tlshash":"2a62e8540daa79aa0b2753d6f5db5e1e38ec3368ab401a2fdd984f3042847c1735ba3d","first_seen":"2026-03-23T15:44:44.499934Z","last_seen":"2026-03-26T08:43:48.764578Z","times_seen":5,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.files-text.com/us-south1/api/lc/main/17809494/0/logo/07f36bdabe028edc371de15d56c89bd0.png","fqdn":"cdn.files-text.com","domain":"files-text.com","tld":"com"},"ip":{"addr":"95.100.107.136","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=17809494\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=b8f4f49c-d724-4914-a885-4e5a1e71f678\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-03-23T15:44:25.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /us-south1/api/lc/main/17809494/0/logo/07f36bdabe028edc371de15d56c89bd0.png HTTP/1.1\r\nHost: cdn.files-text.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure.livechatinc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 4359\r\ncontent-type: image/png\r\ndate: Mon, 23 Mar 2026 15:44:25 GMT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4359,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 43, 8-bit colormap, non-interlaced","md5":"7eb5330701bb2a4c296052c79fb09004","sha1":"c0dd224f3aa411b5b06f1dfb7453c0b5d42e256e","sha256":"fe0850007ce1782b47ea7bff934d26d9a15f0e106e74ecdee6037a8e949ce51b","sha512":"763266f72d08f1d341c37f8af752d463634fa51826ddd28a005410c98dc5547b7657c4fcd9d95df466024280380d6b81f08bdd702b6d57028e023eba905f5704","ssdeep":"96:9n4XAqlBN5xS4JMNfMfuU3Oul/+D4uFpP+F9VQsB8r61LqxD4WoyB:xUAANXS4J2Q3Oud+Z3+Sfr61+xjoq","tlshash":"8b918d20bcae1521fad854ef49dd0612b56baff9a8de79202ec0b57a77b32d40d304d1","first_seen":"2026-03-23T15:44:44.500865Z","last_seen":"2026-03-26T08:43:48.689281Z","times_seen":5,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":433,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/11.DJPUQwQu.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.19.183.147","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=17809494\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=b8f4f49c-d724-4914-a885-4e5a1e71f678\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-03-23T15:44:12.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/11.DJPUQwQu.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWx4PyYT9oYqxXlkPbcxkU2_l8UG2XuqK-irPkdrkYsOwJ3PKxQqOfAiPJZBmuwg6TDgrEC5kd19iH3-4Q\r\nlast-modified: Fri, 20 Mar 2026 11:49:45 GMT\r\netag: \"640caab52100a1e9dfe618aaeb79838f\"\r\nx-goog-generation: 1774007385266749\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 300\r\nx-goog-hash: crc32c=IuJCUg==, md5=ZAyqtSEAoenf5hiq63mDjw==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 23 Mar 2027 15:44:12 GMT\r\ndate: Mon, 23 Mar 2026 15:44:12 GMT\r\ncontent-length: 300\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":300,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"640caab52100a1e9dfe618aaeb79838f","sha1":"4654776a82e5405614a595d40cb33ca2b5bae0b5","sha256":"fb8eb817d7251014c136b441bd4004fa6567908059013edbb938925f23b67ceb","sha512":"17d605182be517c5e797b2fd823b9ab7b6bd73d97bd2c3d11c5eb29d108cd350d789116528e351abaebdf3654cc65100b9e3353064ba38c9ab9008126c6a3061","ssdeep":"","tlshash":"00e08cbdfca8d92152f5e9f8c0b60822cb593b0e502382b0f60e6f4a9519199a552826","first_seen":"2024-08-27T15:26:59Z","last_seen":"2026-08-09T12:11:02.310365Z","times_seen":29139,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/app/loading-283d6049c6462cb3.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/static/chunks/app/loading-283d6049c6462cb3.js HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:09 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 12 Mar 2026 06:33:20 GMT\r\netag: W/\"2601-19ce0bfee0c\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\nage: 640792\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2vWB97Y8Dux64EzQIXMy8rLYO%2B%2BZBq5LrI%2FtUi6wNGR5uV1Y2xE21q1dSol%2F3L%2FHWSx5T6msUuJACWPPPl%2BnCysL%2BP1HiHjPFciHAh%2FM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e4abc2b96b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9729,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9729), with no line terminators","md5":"e42255a6ffc1ef644fee177ae658d9f4","sha1":"a4c7ab46e12a1bcb21da60c79eaabeb27885f027","sha256":"ca666a8ded373a83e94751c9b38e7caea3d79cc41d5eb9becd2f4173b5dac5a1","sha512":"78316e3fb0ff16d8d62567cf7b6f53155ec1e200f8b03b5c95580afe2966f14065a31b525a9f3c4fca0a2132d1442677cfcf00f0d1d154148fe6bb28e34e808a","ssdeep":"192:s8KhKfaOSOvxzQYHM51Qn3q9jIde8R8xOpCIFDPu/0LaSk6:sWTHM5I69jNWphu/0LaSD","tlshash":"f712e9cdb682fc3a576352a1c2bf1102f31e18005e1d6914f2b6dc782656dae6239fb9","first_seen":"2026-03-23T15:44:44.502288Z","last_seen":"2026-03-26T08:43:48.724521Z","times_seen":5,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/image?url=%2Ficons%2Ffirefox.webp\u0026w=48\u0026q=75","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:10.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/image?url=%2Ficons%2Ffirefox.webp\u0026w=48\u0026q=75 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 834\r\nserver: cloudflare\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: 8zpoHOkjQABtU-QSPnoxhqHd8moeWpmiygIwsWkrEEk\r\ncontent-disposition: attachment; filename=\"firefox.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;, frame-ancestors *;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yDUCBE5Wd2eBETtkSqkugTYqe2hKpeCrPvhYJYL5j8PLfBgQH6yZDBEkNFRiIS1O8JPflAyNB8jDDaLCLqKKOPSeu1mMwoU6u5FC8IGs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e50fbbf96b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":834,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e6fd6e145b4d6dd87656dd840190ff85","sha1":"53e6bd70bcdab9105249bc84a05f65b848cf992f","sha256":"f33a681ce92340006d53e4123e7a3186a1ddf26a1e5a99a2ca0230b1692b1049","sha512":"ad1b982a34bc805f1b9d4276a577809b6f0a0c5aafa59c426f68256abaf7289ed780ca687168f2e24bb0c9a7466568a6838b7cfd8325aad921dabdef7870464b","ssdeep":"","tlshash":"2d01ca259e8e0b34c120cb70b2323a15927b0f0941d6367f98f7145da4b1d43f481a4c","first_seen":"2025-07-23T13:52:55.466657Z","last_seen":"2026-03-26T08:43:48.620607Z","times_seen":6,"resource_available":false,"data":null}},"time_used":822,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":822,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/webpack-a14bbb028c643c2b.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/static/chunks/webpack-a14bbb028c643c2b.js HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:10 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 13:26:11 GMT\r\netag: W/\"d83-19d0b6cc917\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vWm9o3%2Fb0WcMN7rmUKplx%2BScaxfZCis3Ow5IKLWw5xsWNUWzFNmIPxCnkKElQrNMfHoNbrl1zjiZXPqi1cHtgPfiiU1%2BUnRocGLwAf6J\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e4a9bbb96b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3459,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3459), with no line terminators","md5":"1d08718f04035cafc5368d1105c3fcf5","sha1":"ce2909b595532520922e985e5f18b076780b5cc6","sha256":"0209363b52c896fc38d6c674b70d28a24ea564429a3091da3e49e24929898dda","sha512":"a895541e84f7e1fdfb5e6d6fc11567a42df7216372b643006935b1b2162222a22cf58f565d738e3cb66ff9f2bcb2166e9b7a3691bab23a908199d31562680e21","ssdeep":"","tlshash":"9e61c4a93621fab557f004c5987fc142f21a203b051afcb0e707d8bab468aa10462ff3","first_seen":"2026-03-23T15:44:44.504319Z","last_seen":"2026-03-26T08:43:48.719817Z","times_seen":5,"resource_available":true,"data":null}},"time_used":881,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":881,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/app/layout-2e8be1fdea965f51.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/static/chunks/app/layout-2e8be1fdea965f51.js HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:10 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 13:26:11 GMT\r\netag: W/\"8ae0-19d0b6cc915\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sNOqTklO9gV3wP%2Fb%2BTZGCiu%2BuoSvZ7e4RHsuAqflJluxczEmFA2FqTDLYgrqFngrTXcl3xXm0Pug86ICN%2FGTH3cmCXM8e%2BmiCijw%2Fgpi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e4acc4996b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35552,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (35552), with no line terminators","md5":"c9f3ef737639a868ffbf8f755231ea57","sha1":"ecc55b841ccd1f8a6eef4820398bf24d9f62f0cf","sha256":"f8fe95842cac7ee85c9e32bb19497a5bf2cfeb2ad7d278bc8462c04dda4b0aa9","sha512":"ca3eb489c18e6c55d553c82d94a260b8905bb810f158cc5d6bc2cbea7df1b01f58a536fa75c3aeb957fecb784a3e3bc1e42a6ddc0528af6a12917c31f7603859","ssdeep":"768:fxBHzQvgUPYz68nyva2r2niSnnboKvr8GOVuWRV:fxBzYelnyvaTURV","tlshash":"16f2a7346d99ba58ada78cdca1e7480ca14f8c1c813b197cbb98fd9d01d3688b453bdd","first_seen":"2026-03-23T15:44:44.505181Z","last_seen":"2026-03-26T08:43:48.800927Z","times_seen":5,"resource_available":true,"data":null}},"time_used":1130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1129,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/image?url=https%3A%2F%2Fcore-1333692039.cos.ap-hongkong.myqcloud.com%2Fimages%2Fui%2Fproviders%2Flogo%2Fbtga.webp\u0026w=256\u0026q=75","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:10.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/image?url=https%3A%2F%2Fcore-1333692039.cos.ap-hongkong.myqcloud.com%2Fimages%2Fui%2Fproviders%2Flogo%2Fbtga.webp\u0026w=256\u0026q=75 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1450\r\nserver: cloudflare\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: 7V07w26PpOzywgMpWJZgR9B_8Ybbpjky4URca1qWbmI\r\ncontent-disposition: attachment; filename=\"btga.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;, frame-ancestors *;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oe8vKDNqjETaPFIcDwAiOeu%2FEMvz6lCPAOn05pV6mcVGytQvmw2nWPo%2FpROQa1pj%2FQu8hidfM3n1hW8K%2BA9MKshUpNYxNHA8bCQKzTyn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e510bef96b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1450,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"12434d0c6689fbfd382cdbdcc92402c5","sha1":"cdaa90c0fff27b77dc3d0049c1d8f365c93fe83b","sha256":"ed5d3bc36e8fa4ecf2c2032958966047d07ff186dba63932e1445c6b5a966e62","sha512":"37d4e406adf8b694855c30c78b65fddd026ea2e61af772ae55e712049e5993df2c275f6bc433ae19e52416a76f54149ee8033d2a9ae1e5ffec3c87fa48147830","ssdeep":"","tlshash":"e931e9a806b4084ef42fd773a2ccf79296636305445471a8d105ad690757e046ba3431","first_seen":"2025-07-23T13:52:55.475037Z","last_seen":"2026-03-26T08:43:48.673708Z","times_seen":6,"resource_available":false,"data":null}},"time_used":817,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":817,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/game/sport?_rsc=h5wy4","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:12.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /game/sport?_rsc=h5wy4 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22(auth)%22%2C%7B%22children%22%3A%5B%22register%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nnext-router-prefetch: 1\r\nnext-url: /register\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_B9DLSJH0MC=GS2.1.s1774280650$o1$g0$t1774280650$j60$l0$h0; _ga=GA1.1.2034164557.1774280650\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:12 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\nx-current-path: /game/sport\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h7j%2B%2BwQfV5TQqMG%2FWeTyeJfCG%2Ba7S4kBqXASGqMl0kAcZKP%2B7IxCrr43J2mkT2kemZjQLrAJ1rxgnzrED9biUEmHMesimSOAmfP0paqS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e5dd9d796b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":199,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"6d6eb3f4c2dbcaddc6d67089dcee4e24","sha1":"f111a821b5b0f51088231f24ac3164efd1366acf","sha256":"abd4bbe1792aed8f83765aebfcf5f881d943fc414339dbca336101c32c82e13d","sha512":"e198c985beb2784cffb3f84a053dabe3eb8f03c8d89dc2291825454c024306970cf64fe1c3155d91c4510eb95aa07bcef8cd6281c1d87d0748d1f6764fae68dd","ssdeep":"","tlshash":"ffd0a922484029b609ba10a0002eea4b38ce483b22c828f0e0d25e083bb323542436c8","first_seen":"2026-03-23T15:44:44.507022Z","last_seen":"2026-03-26T08:43:48.775241Z","times_seen":5,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/image?url=https%3A%2F%2Fcore-1333692039.cos.ap-hongkong.myqcloud.com%2Fnewsa%2Fd4735e3a%2Fimages%2Fdefault%2Fqris-qris-mvp-hqersiv3.png\u0026w=256\u0026q=75","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:10.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/image?url=https%3A%2F%2Fcore-1333692039.cos.ap-hongkong.myqcloud.com%2Fnewsa%2Fd4735e3a%2Fimages%2Fdefault%2Fqris-qris-mvp-hqersiv3.png\u0026w=256\u0026q=75 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1970\r\nserver: cloudflare\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: 4UP4igr8aFRFCQUUQ1BhD4TMSNmsjDxEdv49M1zVGro\r\ncontent-disposition: attachment; filename=\"qris-qris-mvp-hqersiv3.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;, frame-ancestors *;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bXIbEoxk2DbBYvSR0Bs8IRd9PGFpWh5F7tMV%2FKQOuJsxq0buNlF1x2pTGe5UwNfs3w1q2o6bY%2B%2FSWix0SocJz0LnnPauF4ez3cUk2TTR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e50fba796b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1970,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d02f9a430239726d3634b12552ea67e4","sha1":"a5e8c4266b577476f13f54d5071815b0f100fa9a","sha256":"e143f88a0afc6854450905144350610f84cc48d9ac8c3c4476fe3d335cd51aba","sha512":"198f6dd4a1de5c3e3f384ec90c0c16d189b20a3464acef5796e378eff31615fa013a67b83b28d5f4e237c9448832480352c62720d1c23238de4b0422f306c673","ssdeep":"","tlshash":"9b410a6d5d5af0848de0652e759fb7d75420878c8be14f243c6b2a454ff43609b23360","first_seen":"2026-03-23T15:44:44.518467Z","last_seen":"2026-03-26T08:43:48.640045Z","times_seen":5,"resource_available":false,"data":null}},"time_used":831,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":830,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/media/6d664cce900333ee-s.p.woff2","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/static/media/6d664cce900333ee-s.p.woff2 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:10 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 14168\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 13:26:11 GMT\r\netag: W/\"3758-19d0b6cc914\"\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dhs2rOklrGjStjDZ31VFUOczgQgzvLH01qYXJwKNlccshuTWlv6Ku9PpiF6m8OLUgOH6Il4U%2Fenvd4lkdz86A5M1tufBZSMQuZW5I5ws\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e4a9bae96b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14168,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14168, version 1.0","md5":"017598645bcc882a3610effe171c2ca3","sha1":"ceaca8172b95b6954d5a5752698a5162d7e9877c","sha256":"7a7ce1a34f3e9944fe88fc61abbc93b6db383afa2b90815fd7ccea456fbce4e5","sha512":"cadb36cbcdcd7e84ee9305a676f4d8d3b19fc199481835b726fbcd20f2463074908040b7aca60e284b5ab8ab3b03798f38cc06873d6e4b06ddf7a018e6c666d8","ssdeep":"384:cIeFsvkj/uwoczzNcnQzpjJSx7MZBEuNdu:ihxhzsQ9YxEEQg","tlshash":"bb52e181361151524c851f6d3784c3efec1118dff2acaae07e22255506fe4f276be92b","first_seen":"2023-05-06T05:46:29Z","last_seen":"2026-08-11T09:56:05.915086Z","times_seen":8036,"resource_available":false,"data":null}},"time_used":1062,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":866,"receive":196,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/image?url=https%3A%2F%2Fcore-1333692039.cos.ap-hongkong.myqcloud.com%2Fnewsa%2Fe2cb18be%2Fimages%2Fui%2Flogo%2Fdesktop%2Flogo-znti7pse.png\u0026w=1920\u0026q=75","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/image?url=https%3A%2F%2Fcore-1333692039.cos.ap-hongkong.myqcloud.com%2Fnewsa%2Fe2cb18be%2Fimages%2Fui%2Flogo%2Fdesktop%2Flogo-znti7pse.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 20184\r\nserver: cloudflare\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: YEw8dyvgQkHLZYlShBC-qCRSsEAPlV8RpKvodojDA2E\r\ncontent-disposition: attachment; filename=\"logo-znti7pse.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;, frame-ancestors *;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0al3PzchaLqFTRc7tAXQggEJp7kbb7HBnT2ZmOZua7kZdFlPY%2F%2B2qySictBdjeijGdqdT10p6hcMVwRhW5JUQ2IDP5KYvFBm22VaDbWT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e4b1d0a96b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20184,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e28ef4abcfada64fa352739b2108f9a0","sha1":"5d9857090047f6d95ee54cf9517a0a34ece11327","sha256":"604c3c772be04241cb6589528410bea82452b0400f955f11a4abe87688c30361","sha512":"712f098f25a649b6cc5a70717def815490a66d057a411d393ea057336ea2f199ad325e5313a490458645c22d0d33b025ba2c69ca5e75b3f64783fed0e0506b53","ssdeep":"384:5WLl4BKupUnmcuC9CekkgeIi2QlkaO4M0ZqRbGkhRcsenCfSLrMK6x8:5GlPupAmwCekkg22QPi0M7hysIMK28","tlshash":"9a92e0f0fb6cd904f0a3cf09a9ce9d3e3400e411a5c9ae624a43d8bfd566964369452b","first_seen":"2026-03-23T15:44:44.519438Z","last_seen":"2026-03-26T08:43:48.75795Z","times_seen":5,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/image?url=https%3A%2F%2Fcore-1333692039.cos.ap-hongkong.myqcloud.com%2Fimages%2Fui%2Fproviders%2Flogo%2Fwf.webp\u0026w=256\u0026q=75","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:10.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/image?url=https%3A%2F%2Fcore-1333692039.cos.ap-hongkong.myqcloud.com%2Fimages%2Fui%2Fproviders%2Flogo%2Fwf.webp\u0026w=256\u0026q=75 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5236\r\nserver: cloudflare\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: GyBUfx2AVLgGsdwQIzbbXbLL_BNmSdqKdVjwJSS__S8\r\ncontent-disposition: attachment; filename=\"wf.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;, frame-ancestors *;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2mA7kBe56kK2TuiHxhAA2LSrBwWdI1ibFMnPOEoURO%2FFh%2BUBemQck96ZUJ%2FGHAb4BeD4db%2BEDyxGuzggqsfcd6r7dAW6UXCfKX%2BlZ%2FeW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e510c0196b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5236,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2a3b2ca8fe07b9741c1183c7f1087406","sha1":"fbfe47ac21ce67525f0b8a36f8106d7cd1b6cf07","sha256":"1b20547f1d8054b806b1dc102336db5db2cbfc136649da8a7558f02524bffd2f","sha512":"f8df2421a9a5d06e764b15aa5b429299656d01e6ba7828872137f73d79f010521e2a559ff0a5fa46ba05585c424b1c4872124f76b6943a1c9e0fa3b9a6f7c533","ssdeep":"96:xL+ERi2HhXlyoF3xJr4Y5w1v8mKPM5PYoiyCWIGB49Btu2QZt5/is:xLXRdPXJrn5ev8mKmgoTL5Zvi","tlshash":"50b18f23c06323879de7a6f0901da389244c0b2deafa91b5b990d6c35614454ff73b43","first_seen":"2025-07-23T13:52:55.459016Z","last_seen":"2026-03-26T08:43:48.629569Z","times_seen":6,"resource_available":false,"data":null}},"time_used":816,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":816,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/7632-d71d85eb2f5f70b7.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/static/chunks/7632-d71d85eb2f5f70b7.js HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:10 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 13:26:11 GMT\r\netag: W/\"519f-19d0b6cc918\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qyO8OLOxiKMQXEcVlBStg7WJwsobQg43Z6FCZI%2FEovhc21WNuUE5xwfXh1MJnl6YQ4WVgdRv0jjwS%2B84%2BDZdyAi67O%2Fg5qFOysxACwMb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e4aabf596b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20895,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (20895), with no line terminators","md5":"a472ba03665b61da6913975d1ef2ae77","sha1":"b34745b44facaa4cc35eb3c185563ba87c5e4b24","sha256":"57606df2fc02930d91b6e5dc4a9779d5fa5694037aab027c861c31e780fc3b1f","sha512":"f9e6c8a660c053ea1b9baea350706d5dad28dfe80c5a39d256a18b466e75104390591ee9f941fcbd61534e7b8fcb6522c031ef6a00b7df27dd6f72971ab4c43e","ssdeep":"384:gRHyBTXW3TYTgNm7XTlcM7ayxTlKZ3trSYn+2qy/2HTgGMBMDDHIQ+9Hw3xnPdTw:TamJPayRCdGA+2qVgHBMDDHIB9GtK","tlshash":"9f920a9172437430cffb8286e45b401eb77d695a7a0b4528b263b8e621d6a4df053ff8","first_seen":"2026-03-23T15:44:44.521754Z","last_seen":"2026-03-26T08:43:48.791126Z","times_seen":5,"resource_available":true,"data":null}},"time_used":1125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/image?url=https%3A%2F%2Fcore-1333692039.cos.ap-hongkong.myqcloud.com%2Fnewsa%2Fe2cb18be%2Fimages%2Fdefault%2Fbank-bank-central-asia--bca--2shrzkyo.png\u0026w=256\u0026q=75","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:10.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/image?url=https%3A%2F%2Fcore-1333692039.cos.ap-hongkong.myqcloud.com%2Fnewsa%2Fe2cb18be%2Fimages%2Fdefault%2Fbank-bank-central-asia--bca--2shrzkyo.png\u0026w=256\u0026q=75 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5176\r\nserver: cloudflare\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: NZMtEPY9iSrG_l48cqFEb2zd55HHhvXITBjG4sy5wfE\r\ncontent-disposition: attachment; filename=\"bank-bank-central-asia--bca--2shrzkyo.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;, frame-ancestors *;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I0jTbRpgmnBpWaNNz6qEUZLitdhAzTuFqszS2Mg%2FlTKklUfgE145UfYEas1hUD%2FgW5f8A7dXbsv%2BYYJlTNGmsEhIe14Mh1nOFAKBJPEJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e50db5496b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5176,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bd510f4757661c4ebc543db57993eddc","sha1":"94951dde1f0f026169f710096f899e60a2702d3c","sha256":"35932d10f63d892ac6fe5e3c72a1446f6cdde791c786f5c84c18c6e2ccb9c1f1","sha512":"b047a20954a0b5f7e45e0c7100896745a2df2353691bbc7f653241756cd9e391cd448d092a30429ff74b5d16457a6f20c02b893bebc55e7481ceb640cec0acb7","ssdeep":"96:cChS15HTctn82IVXZQhKI7oirOVJsds+JyeL0ouMJid2tP2IxeCkXbnvAa:cp1dctnaVJUM3nas+JyaJuq2IxeC2vj","tlshash":"8cb18e9c11764f1df2436acc0266b87dd04760baff5eb64904a87854fbe65c2ac30261","first_seen":"2026-03-23T15:44:44.522742Z","last_seen":"2026-03-26T08:43:48.80198Z","times_seen":5,"resource_available":false,"data":null}},"time_used":844,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":844,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/image?url=https%3A%2F%2Fcore-1333692039.cos.ap-hongkong.myqcloud.com%2Fnewsa%2Fe2cb18be%2Fimages%2Fdefault%2Fe-wallet-link-aja-zkrz6knt.png\u0026w=256\u0026q=75","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:10.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/image?url=https%3A%2F%2Fcore-1333692039.cos.ap-hongkong.myqcloud.com%2Fnewsa%2Fe2cb18be%2Fimages%2Fdefault%2Fe-wallet-link-aja-zkrz6knt.png\u0026w=256\u0026q=75 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4748\r\nserver: cloudflare\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: TinvNVQdrLAJw2ywtPwgxw68vnd2y6PLKXwAE25icak\r\ncontent-disposition: attachment; filename=\"e-wallet-link-aja-zkrz6knt.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;, frame-ancestors *;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EXC8GfrexW%2FZhQAx6I4JcHmUNYbiNj9rI%2BciNgijaKAIIVJURuDrvGr974Qf1FMmwp9rjpC4WRYauom6DjMKPdJLKl%2FOfBKpHTKlbRL7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e50eb7f96b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4748,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 225x225, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"12ae2c058228add2fbfc37334df8c26c","sha1":"9bcc5cec270d662ed0b4d2b32422a2e2d23f8a2c","sha256":"4e29ef35541dacb009c36cb0b4fc20c70ebcbe7776cba3cb297c00136e6271a9","sha512":"403e71143a699187aa6f9f1e1cf6bf5e406f24e8bbd52f634b2e137e23896abe8d1614fa01365482974281bf82016b115aceb9ed16f98b5d74631948394910c1","ssdeep":"96:qwibRc4dy77XDGIGUaAw8GTG2n4wINeEmiNhLdHFzMglca21Mv:q/bRcvfXDGIGUA4TSyhLZ5Me2uv","tlshash":"97a16cb073fa97d810abc61de3ec5bc8335c62b12b354a0c211a997f44e066520d63ae","first_seen":"2026-03-23T15:44:44.523989Z","last_seen":"2026-03-26T08:43:48.726619Z","times_seen":5,"resource_available":false,"data":null}},"time_used":824,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":823,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/image?url=https%3A%2F%2Fcore-1333692039.cos.ap-hongkong.myqcloud.com%2Fnewsa%2Fe2cb18be%2Fimages%2Fdefault%2Ftelecom-tsel-bolxv2wp.png\u0026w=256\u0026q=75","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:10.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/image?url=https%3A%2F%2Fcore-1333692039.cos.ap-hongkong.myqcloud.com%2Fnewsa%2Fe2cb18be%2Fimages%2Fdefault%2Ftelecom-tsel-bolxv2wp.png\u0026w=256\u0026q=75 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4780\r\nserver: cloudflare\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: qJGc-MKTYY112usUOvMaANqgGwEFqf393nu7zkeimT4\r\ncontent-disposition: attachment; filename=\"telecom-tsel-bolxv2wp.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;, frame-ancestors *;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oPs6feS7jT0F1YKyGfmSfI0cHFVY6LJvO32y2pFeZheSO%2FNKmuVWmlWXHA%2FVnPLNWX7qOFDLDVF2wlPAzjr2Xw%2Fl0MVhTJk%2BbrmxZqvV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e50eb9296b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4780,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2a36d75304360d9c93db8a48eabee25c","sha1":"9f3baab4e2ce3afa0eaf76a560f0023c42edef9e","sha256":"a8919cf8c293618d75daeb143af31a00daa01b0105a9fdfdde7bbbce47a2993e","sha512":"b902f120ccfd80e9b260422b8ff41f8145ba7d64b2d1e6b328e874b513fa1fd978f3204bd41d241d155824341802c00e8d99fe03939c013b7f2b2c000ea86da4","ssdeep":"96:bcNO2DxwbhW0vdBW64aplpvOvLD7c/h9gWjjKFCcVh5CpJ8iC:Ax1wtWWr+SrOvLn2heWjjK9Vh5C","tlshash":"9aa17eb9443e7f904853453858d0c914a9f1040bd76cea5f9fe2b11b6870a5cd29af55","first_seen":"2026-03-23T15:44:44.525084Z","last_seen":"2026-03-26T08:43:48.636128Z","times_seen":5,"resource_available":false,"data":null}},"time_used":812,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":811,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/image?url=https%3A%2F%2Fcore-1333692039.cos.ap-hongkong.myqcloud.com%2Fimages%2Fui%2Fproviders%2Flogo%2Fpstar.webp\u0026w=256\u0026q=75","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:10.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/image?url=https%3A%2F%2Fcore-1333692039.cos.ap-hongkong.myqcloud.com%2Fimages%2Fui%2Fproviders%2Flogo%2Fpstar.webp\u0026w=256\u0026q=75 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3376\r\nserver: cloudflare\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: XGjkBZgUOs5lyHd9Es3aXHCr7SL3tZTVGcw8ObGAhxM\r\ncontent-disposition: attachment; filename=\"pstar.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;, frame-ancestors *;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RkihWZX6dRINldqM%2BP1aSdJeGqxLHaKaSMvt5%2Bal1NR6CXg%2FwWhdPQ%2ByQlcxLE1F7e4cydGMVsiYqSidFJ%2F2rADFh%2F8APjCImH8MjEED\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e510be496b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3376,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8439b2e1e3deeadcb603766a9e67c783","sha1":"22f00c018a40f4ce7f8195d400848b321cd72e59","sha256":"5c68e40598143ace65c8777d12cdda5c70abed22f7b594d519cc3c39b1808713","sha512":"c52a96985c09b8bc03fa4f45d9e7bef6a8d71070df093ad161b911d4f8ec22f11f2db2ad0de6a26ef4ef182d0f8793d3a4317dcacb2a2889c3a4c54de85a88a3","ssdeep":"","tlshash":"6e618bf590ea312034167ff4108837d06e3e9aa046bb460aeffa0a6c61d09806b9d3c1","first_seen":"2025-07-23T13:52:55.416788Z","last_seen":"2026-03-26T08:43:48.763652Z","times_seen":6,"resource_available":false,"data":null}},"time_used":788,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":788,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/531-1c355ace24eaed22.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/static/chunks/531-1c355ace24eaed22.js HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:10 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 13:26:11 GMT\r\netag: W/\"40cc-19d0b6cc917\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uN6J7Nfdz9%2Br6gTONWJ1nK%2FE7wD1wWC5m6U1slZodOoceY7H9p9m6W7qAMkCzVbE7mUE5eR6D1mpCeYGekqd2sW4N%2Fb25UOcJGh%2BrL9s\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e4aabe996b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16588,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (16588), with no line terminators","md5":"583ae2704f651d4e3eb375bc8d227e2c","sha1":"fc3842f8ee5d1caef0b7b7405aedeeefa318eeea","sha256":"6857b35537b56f58c47514be3f92ccdff2485fc79bfb47fca2149e727b910316","sha512":"77cd5b125754d3e0c0c2e7647adc0fc0778dde7153993068cedba2c80722baa5f3dcd9b4e76035181e370428be8fa1bffd2087510d25ab58256809abed45c76b","ssdeep":"384:KTMMTptRCIMjJKq71/5w4fFtwXSKrNzQU7bcgkiTkToTH3Cs:8zTzyNYi1U7bcS62l","tlshash":"9072fac1b051b4f4dbf741d191ff400aa33a3e486d2e8218b1b9ac972a516ec7257fb6","first_seen":"2026-03-23T15:44:44.52676Z","last_seen":"2026-03-26T08:43:48.634215Z","times_seen":5,"resource_available":true,"data":null}},"time_used":870,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":870,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/934-a7039514578e6f7a.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/static/chunks/934-a7039514578e6f7a.js HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:10 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 13:26:11 GMT\r\netag: W/\"1fb1-19d0b6cc917\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0kWEhZlY8Ox2LS%2BPTnLkGThYVNa1MvVDqPIUJKa2ARMFMpwDVkxJPKJsY4ODS3StfNTEK4KaHsvI16%2BvnMFE41UdFIvKnWZtmDtzY%2BZE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e4aabf096b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8113,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8113), with no line terminators","md5":"d579e34f0dd9aa8a5ea228b3e0150a93","sha1":"155184d5f39552a5e161a542d5cbfce0be74a51e","sha256":"631b5894eecddfa397aa192ab4f051c69a36369115b10b1ec56f14af38e5fb1e","sha512":"a23df9fc8a78db6e2865ec8e64a65be8bbd6481cabe42eae18dec5678f184360c6abe2061f311e20b665dbe0352fb8bff82f5d554205327e6d2a491730e355f5","ssdeep":"96:dq0BbZ6O7yCtR8hXsE4C7RRmMKIyNHI/bSI1Mqz81fuyV4tNv9fA2Xh2KoZZKQQH:nljxosVCjKIpTSgXafVV43atZZjLdJ1C","tlshash":"6ff196e1f792a465ad6bc2c9e5db8804f6390a0416250e34f173189432886daff53fb9","first_seen":"2026-03-23T15:44:44.527593Z","last_seen":"2026-03-26T08:43:48.709558Z","times_seen":5,"resource_available":true,"data":null}},"time_used":952,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":952,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/game/slots?_rsc=h5wy4","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:12.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /game/slots?_rsc=h5wy4 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22(auth)%22%2C%7B%22children%22%3A%5B%22register%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nnext-router-prefetch: 1\r\nnext-url: /register\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_B9DLSJH0MC=GS2.1.s1774280650$o1$g0$t1774280650$j60$l0$h0; _ga=GA1.1.2034164557.1774280650\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:12 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\nx-current-path: /game/slots\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jhNHSUfceXmNZROVPGT0oYA%2BItHPNjTmxi9HO4KBP811NCdfcneou%2F0bSmqQUy7bHc1C7PiZE22r%2FTjxYRzyPtQS%2BABm%2F5i7L%2F%2Fa%2BxTU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e5c0d9c96b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":199,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"19fea0bddd9732b42cc4eefc29cc6ee9","sha1":"6626087fd6b6edcedb75441fe677a176d350741c","sha256":"ccd8be484ced4955b53eb35fe8d7d9481ab41723f5810df493de619f5a4b0ce0","sha512":"c80e24d116e597306107335f3b8efb0dff9e5ebe62abbc862d012bd76fd71d9ec23ba28aee2c17fba4bad08fbbb0575d13c64982f60e5d743c93f8fada8744e0","ssdeep":"","tlshash":"a8d0a922094029b64dba10e0042eea4b38ce483b22c828f090924d043bb322651476c9","first_seen":"2026-03-23T15:44:44.528453Z","last_seen":"2026-03-26T08:43:48.804912Z","times_seen":5,"resource_available":false,"data":null}},"time_used":399,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":188,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/4bd1b696-100b9d70ed4e49c1.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/static/chunks/4bd1b696-100b9d70ed4e49c1.js HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:10 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 13:26:11 GMT\r\netag: W/\"2a3e1-19d0b6cc917\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DzkONx8JhphFj6lfpMGCR2gKvbCZPyF68GUTnxgEVYJpvcLurzNdtEdh10DOFfQF9%2BboV2zSxFflYjSZ6k16jc%2BA6C7H0qIucZfQg3GP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e4a9bc696b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173025,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2a9c2166a0ae63c27a466c7fb5903d80","sha1":"51f1c90c3f1e1d32d0c81e836ded7ed5ba0601d6","sha256":"5421e13a91a9389517b66179f3b4b5eaa0d95245438066d4d7b19ac30aeb809b","sha512":"8dc6274f2637076f1b5c4cd3f61b14259ec5552d844245c8b93a64f19c8b6b7347554a03b994b0f880b7dae74ad65e54eaa00be81783c2cedbae82a7fd4b89dd","ssdeep":"1536:DWET9Lwegcl2MywYleojBFOQLfioEV7hNc7lFlgXGhJx4bzZc5zg5tgW/zAe6c0:Z9LwzMyh1vLEE7RgXOQ5SIA1","tlshash":"ecf3f8ec3999e611aeb342a700df28037378261b240d4d60a614fd9ea57845bb17bfde","first_seen":"2025-08-21T15:49:50.637902Z","last_seen":"2026-08-11T08:46:45.467219Z","times_seen":14408,"resource_available":true,"data":null}},"time_used":1262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":882,"receive":380,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/5635-634e7af486094013.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/static/chunks/5635-634e7af486094013.js HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:09 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 12 Mar 2026 06:33:20 GMT\r\netag: W/\"2309-19ce0bfee0e\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\nage: 640792\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m3mHpXNT5t%2FZZEV8yUG5ozWbl7LXoHSc3WqYvsA0rNxc7%2FNaoqwziKApk%2Bl3kbWyHnokE585EK16fcl9q7pbqz9HSUNWuqMs2gJWqB4k\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e4aabe396b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8969,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8969), with no line terminators","md5":"1d7309f2b4a216402a2a3af3148b65fa","sha1":"04de0bd77f458970ea1785f713571e441155cf2c","sha256":"4803b1e8464e102e70b53de21e9c02a06eb99d446f8c4d3f9619f5e47f5c536d","sha512":"8f8128016b282173843523fe40262969dd604a36089ce230a3fd47ab4d5485010b0bf977578345ef8de8b6e06911b875905ada73d9d8ff2cb1169492762a58bc","ssdeep":"192:urep/cZpmoOwhWKSv8hcXS4meDEagFaBij3W5wFfK1JN:urXI78hcXS4mQaF8wW5wFf+N","tlshash":"3802e7d471d2f470bba79160d03f406db21c28541a8cadbcf3a3dcf429a05ead222b69","first_seen":"2026-03-23T15:44:44.530202Z","last_seen":"2026-03-26T08:43:48.694066Z","times_seen":5,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/8072-1ddc1b284d6d60a7.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/static/chunks/8072-1ddc1b284d6d60a7.js HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:10 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 13:26:11 GMT\r\netag: W/\"4649-19d0b6cc918\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nhiFN%2FuPs4d85unhX2bsoTGKvaZYaFyqTC2yWX5%2Bj2ICjSufM2iDw6qjcou384B85j7Y886yAOEFa86AOx7Ri3Mjf89ABEpmKFwlxkWJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e4abc1096b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17993,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (17993), with no line terminators","md5":"8133de88065b216fdfdb4e3175509c75","sha1":"70b27dc6ae9a0f55ac87124d5fd97f63ad193589","sha256":"3b370869240b5acf09b839c45c5e8ad31c3c83002ba9b286cfd8fcd49fcac1c6","sha512":"40284beb9bdd51997a07f3587a08bcfb7caaa887115f62af9b920bf23b77527f6b83ef01c0fc4f059516ba41e722fcff8d9ddd371e8a0db495c0674c0fe78795","ssdeep":"192:iX0ivH0XBALjitAYvRFbCSJjyjEgxNc/IN1LYCBargyR2LfTWNVx+WFQpsFZfZ9b:4NpMZ1JjbUNhN1LggyTnAWI09Z96t4","tlshash":"b18274edb1c6b072a39b20e9802f9109f37f28d1684e0551e274d6c63c7916a8273fbd","first_seen":"2026-03-23T15:44:44.531166Z","last_seen":"2026-03-26T08:43:48.702312Z","times_seen":5,"resource_available":true,"data":null}},"time_used":1087,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":891,"receive":196,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/_next/static/chunks/1448-5bf4aecc6643c106.js","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:09.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /_next/static/chunks/1448-5bf4aecc6643c106.js HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:10 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 13:26:11 GMT\r\netag: W/\"2852-19d0b6cc91a\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SH67dHZMAxnct9DDMHC76rfzPkqOaMp8DcN2u1TIOcPVRgL8m2l%2Fxs7kOcWrhkoB7yqvq%2FgKy%2Bxx89JUDykXyV215J7155DJ%2FK4apVcc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e4abc1c96b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10322,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10322), with no line terminators","md5":"007c0b55698293e58966e1dc5d770409","sha1":"f699609555491407a1f155e6283e0a3de0717da6","sha256":"83fa8bbac169d2ea73abe178b4aafc458d5b09d4ffc68d9ed1e26f5258666625","sha512":"05b4c57f2c3940ed7210a509932650258d73cbcd76f9b86734a2611dc5305f9556014a93fe11ce82c03c8614991f4b7910400acf12b2450f5d2fbf71609a3e2a","ssdeep":"192:X/xQWNzZ8Ux0rQJwk1EqpcoBzPpz8UzSTTalE7j9mYyM3KXEwJrVqGGrc:5nNzZ8UyreHzPpz8UzSTT3hwXXFVqFY","tlshash":"90220a91b01235a8e7ab4685c7af010c7f7a2b08af0e5574b2b88c26577938cd3a577d","first_seen":"2026-03-23T15:44:44.532004Z","last_seen":"2026-03-26T08:43:48.707758Z","times_seen":5,"resource_available":true,"data":null}},"time_used":839,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":839,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewanusa.quest/game/arcade?_rsc=h5wy4","fqdn":"dewanusa.quest","domain":"dewanusa.quest","tld":"quest"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dewanusa.quest/register?referral=aba5101774263051952","date":"2026-03-23T15:44:12.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewanusa.quest","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 09:43:38 GMT","end":"Mon, 25 May 2026 09:43:37 GMT"},"fingerprint":{"sha1":"52:D9:CC:AA:87:DE:23:64:96:BE:F9:72:C4:87:A3:88:DE:66:43:F2","sha256":"6C:27:59:40:03:27:96:4C:CB:BC:A9:6B:A3:C4:F5:3B:94:E4:75:F0:90:36:A1:CD:D7:55:9D:EB:B2:ED:C5:44"}}},"request":{"raw":"GET /game/arcade?_rsc=h5wy4 HTTP/1.1\r\nHost: dewanusa.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dewanusa.quest/register?referral=aba5101774263051952\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22(auth)%22%2C%7B%22children%22%3A%5B%22register%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nnext-router-prefetch: 1\r\nnext-url: /register\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_B9DLSJH0MC=GS2.1.s1774280650$o1$g0$t1774280650$j60$l0$h0; _ga=GA1.1.2034164557.1774280650\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 15:44:12 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\nx-current-path: /game/arcade\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *;\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z6ZflpRDpFRBe3K8iDjtRZ5T1q6K2tRR%2Bbm4Da0AaYPYLlAorTF7Hnwws0yLcWigRxrqw1ryR%2FEE3v%2F1SP2NHhWhtnT%2FVqiEk4ao0Z6N\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e8e5c1dad96b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"5d024af129ccfeb1c2ffe7f1c7f7a45f","sha1":"08d55a0bb9207b6867425672a7b2b26b921abfcc","sha256":"a7f0521c8bcde4b6f5c6208e17efcf8a4d8d9a521657b9128b2d7ec78e27b9a4","sha512":"582c83556f614ad6c1cd160d5f641651b8c4e80d93dd1917cb7ac05c3d97c7d7310dc908b463d36bd1ce0276f82ffcce4bc8e4a8a2250cdb08f85b360e49fc49","ssdeep":"","tlshash":"f6d0a922485829b609ba10a0002eea4f38ce483b22c83cf090924e043bb322101836c8","first_seen":"2026-03-23T15:44:44.533106Z","last_seen":"2026-03-26T08:43:48.814965Z","times_seen":5,"resource_available":false,"data":null}},"time_used":395,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":395,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"dewanusa.quest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}