{"report_id":"784cd38b-ffeb-4c38-b1f8-e0a8d6ff496f","version":6,"status":"done","tags":[],"date":"2025-11-18T04:50:39Z","url":{"schema":"http","addr":"www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u","fqdn":"www3-vpass.dqhew.cn","domain":"dqhew.cn","tld":"cn"},"ip":{"addr":"172.67.172.218","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"http","addr":"www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u","fqdn":"www3-vpass.dqhew.cn","domain":"dqhew.cn","tld":"cn"},"title":"www3-vpass.dqhew.cn | 502: Bad gateway","dom":{"size":6075,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (394)","md5":"f9c25e773f83cb896dbe734d4e6c83f8","sha1":"77a1f9e6fc0c29f9cbd36218783f21d0d0cebaaf","sha256":"dc9d819593d55e0104bf227edc49d97e19bfa81ee7b061bc965763972e939194","sha512":"b33f769fd9a2e978d0515e35565e7109849a0b00eed58cf468edc7d2aa6e65a74547fd137b96dcd609d138eec368cc326fe68dd2a76af38adc9480818f2655a7","ssdeep":"96:lbDa/D2KUdG4Fh2TG4FdwU24FdfAokKmtmnaLHnR7vraQxN:lPa/yRwBFVMvTnlvOeN","tlshash":"13c12171b1b5027610b3c1a23695eb1ab5e0c613cbff4594b3ddc3631f9ee82a943294","dom_hash":"domhash7d5fe294b226030c8bc8793cc90f65dd","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u","fqdn":"www3-vpass.dqhew.cn","domain":"dqhew.cn","tld":"cn"},"ip":{"addr":"172.67.172.218","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-23T04:50:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"www3-vpass.dqhew.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-18","alert":"Phishing Block","trigger":"www3-vpass.dqhew.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www3-vpass.dqhew.cn","ip":{"addr":"172.67.172.218","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-05-04","domain_rank":0,"first_seen":"2025-11-18T04:50:44.805286Z","last_seen":"2025-11-18T04:50:44.805286Z","alert_count":30,"request_count":15,"received_data":210814,"sent_data":10293,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":11393,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2025-11-16T22:18:59.109305Z","alert_count":0,"request_count":5,"received_data":461334,"sent_data":3814,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u","fqdn":"www3-vpass.dqhew.cn","domain":"dqhew.cn","tld":"cn"},"ip":{"addr":"172.67.172.218","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"bb46b043d8b655d836f6125e60e433a9","sha1":"1e672bb98c6e5d19637bc019eb4fca46b647fc3a","sha256":"12bc3f46c27337ea7b92de59113416d69ae908dafcee25dae5456c182e2e605c","sha512":"e48f928a9b1cc93b48844079353aeb754b14d907584fb7eec3a222ff7864f072682a520a396e96a89bddd6fd09e5cc49087d18c870b929be27c1fcdea4bd315f","ssdeep":"3:N/BKL1X0RQW:eL1ERQW","tlshash":"f95504c4544030701410cc00f350151dd10d544151154407705f45d43f300440554dd1","size":1337359,"data":"","first_seen":"2025-11-18T04:50:50.675924Z","last_seen":"2025-11-18T04:50:50.675924Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/93954b626b88/api.js?onload=cwlZd3\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a9d82640b55b86321c027701e0ceb0cd","sha1":"80c36def1db4274f5dd45171c3e707de83797e72","sha256":"6cadddf1717be85c3467494943718b22cc3b75cfdfc4b972d5fdafc0a659f529","sha512":"3b7fca2af25c467c952ace012edceeaed7514287ef2f61e8521929f26a1fe73cd524df190650a1620d4736d9c37226d0de278e2a4f9312c2728cc2c9325227a6","ssdeep":"768:/C6j02IMgj8LUU6FObbgFZsuAz7Ww5jMSmLLNY1d9V9tGcpfBgQf3MVuY8t:42Jgj8LUU6FKXuS7Xm2Dt","tlshash":"89232a583256797226d980e1a17b63437326753ae94ccc50e423d836367cecad233fba","size":49559,"data":"","first_seen":"2025-11-12T10:24:47.538879Z","last_seen":"2025-11-22T14:46:39.317283Z","times_seen":5703,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u","fqdn":"www3-vpass.dqhew.cn","domain":"dqhew.cn","tld":"cn"},"ip":{"addr":"172.67.172.218","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3d87750eb78ae0b80451bb3c07089767","sha1":"e94eaa4a0caa3d5708afc291391b8c84d4d341b8","sha256":"9cd067a3391bd58415a307843ed4cbece0bf3dfa45f5fbff8c3106ec2eb5fa16","sha512":"b9a105129320fb8ac6e1cb043c3a68ddbcdbfa46dde219a68ba907b772cfcb5006b8212c5db5011ef42372dba5ea76d189469d7e25214c842ad735eb96361c84","ssdeep":"3:N/BKL1X0RPe:eL1ERPe","tlshash":"675504c4544034701410cc00f754151fd40d740133154403705d54d41f300000154540","size":1337359,"data":"","first_seen":"2025-11-18T04:50:50.677467Z","last_seen":"2025-11-18T04:50:50.677467Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f7a4fab4617a18604eebf1383470f40b","sha1":"18c4f4dcb36d8ec4dfedf3150b99e11b5030ca0b","sha256":"2d33e721d5b6ee2981c0c89681ab46198383ab40de3bd9e1279be50d84292de1","sha512":"c934e8db0b8532482632ad8815025938d233aabb8bbf9a67669bb3af4b31e9ed3175036f7d3b006c80315e48199659ecb9b5cd50d3ad38836fe5dc359fe02b3a","ssdeep":"3:N/BKL1X0RIWn:eL1ERXn","tlshash":"0f5504c4544030701410cf40f1543d1fd00d54105315c443705d44d417310000554550","size":1337359,"data":"","first_seen":"2025-11-18T04:50:50.678903Z","last_seen":"2025-11-18T04:50:50.678903Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-07T02:10:36.210875Z","times_seen":732561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-07T02:10:36.210875Z","times_seen":732561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-07T02:10:36.210875Z","times_seen":732561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e3b6ada6bdc546321a9cd6f011eb410f","sha1":"06190c8c07ae501bfdd1ad852c298b58b8513416","sha256":"c955a225dd3e3e861b7197c24a7b68af1d79c65676736c991614ecd1aa1289b6","sha512":"928cfce73ef3ff45885ee4f2d47956d180648065606e6b1fe1b49d40a53764c22eb3f728c55423266eec0506b007617ca62c71fb687ae765a4bc9e7a6c8be417","ssdeep":"3:N/BKL1X0RH:eL1ERH","tlshash":"dc5504c4545030741510cd40f150151dd40d541051154443705d44fc17340044554550","size":1337359,"data":"","first_seen":"2025-11-18T04:50:50.691126Z","last_seen":"2025-11-18T04:50:50.691126Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1074ea961722a0d83117f1eeacfe78af","sha1":"90d02736b562937c6405767eb3a163c440c353fa","sha256":"263b353e54ad2a826d7ef5beffc4437e69bc5f47492c51673f17a0a3df118868","sha512":"3a902ba3a7b1ae74b0372a650bbf991e8d520da3a1913c2102bc2dde23508a66fc766927bc4a3c1a08d87a00d65a5b604688045da9062e7199d3880a405e5010","ssdeep":"3:N/BKL1X0Rw:eL1ERw","tlshash":"145504c4544030701470cc00f150151dd40d5c0051154413705d44f4173000005555c0","size":1337359,"data":"","first_seen":"2025-11-18T04:50:50.693505Z","last_seen":"2025-11-18T04:50:50.693505Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u","fqdn":"www3-vpass.dqhew.cn","domain":"dqhew.cn","tld":"cn"},"ip":{"addr":"172.67.172.218","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"88a6e06b205e81aab7977159b4ba8f8f","sha1":"56968369e7ec8df0b57a29a5d4b68332c342f3ac","sha256":"e512d990dcc8d9f13d20b50988d499b9aae59a9df158fca74aacee8fb0e3f284","sha512":"9f370142a80fd5ee40bfad2ee010b844b58b96f8742a81825d130ee427f5cf7ef6e4d613105b3e154af63e8a176a7376f859f13ee3d6f4c52fb5cef017fc0256","ssdeep":"3:N/BKL1X0RILSn:eL1ERD","tlshash":"965504c4744030701410cc00f15c151dd00d54001355c403705f44d417310010154540","size":1337359,"data":"","first_seen":"2025-11-18T04:50:50.694742Z","last_seen":"2025-11-18T04:50:50.694742Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-07T02:10:36.210875Z","times_seen":732561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-07T02:10:36.210875Z","times_seen":732561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u","fqdn":"www3-vpass.dqhew.cn","domain":"dqhew.cn","tld":"cn"},"ip":{"addr":"172.67.172.218","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"44a46c90eb1a21e519a6d9931be5c3da","sha1":"218251a4e68fc0079f5a0420a53815989c1deed8","sha256":"8793cbef9099bfb4c4e53c422a09c64bfbf366fbeea826ec74f650610a664c11","sha512":"4e740652a2f2531e4d0abeb35162e3a4452f2d3818e775524ef1fec56748b7f5908214a220888d25677f5d2859a227b2a14701041f871ce58bec812ca45eb91d","ssdeep":"3:N/BKL1X0RFPQ:eL1ERFo","tlshash":"b75504c4544030703410cc40f354351df10d540433154403f45dc4d41f301001554540","size":1337359,"data":"","first_seen":"2025-11-18T04:50:50.696209Z","last_seen":"2025-11-18T04:50:50.696209Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u","fqdn":"www3-vpass.dqhew.cn","domain":"dqhew.cn","tld":"cn"},"ip":{"addr":"172.67.172.218","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4d49d415688368d29b0b381847dda00e","sha1":"95978d0a896ed2abed6c2caaa03f681936d40d89","sha256":"96fefd569303e4e1b2078fd874c8e127f817ab73f7e893b76f4558b5cb402ad7","sha512":"822d06157148f43b2b6ade4e78dbbab8479a44b4b91156b2c27b2daf800b6ad104df7a6d5bcf5f06ca1677c8e248738627bb0ce7edf69dd5d1a9e397148d4db5","ssdeep":"3:N/BKL1X0RKc:eL1ERv","tlshash":"355504c45c4034701450cc00f1541d1dd04d540013154c13705dc4d4173040441545c0","size":1337359,"data":"","first_seen":"2025-11-18T04:50:50.697591Z","last_seen":"2025-11-18T04:50:50.697591Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u","fqdn":"www3-vpass.dqhew.cn","domain":"dqhew.cn","tld":"cn"},"ip":{"addr":"172.67.172.218","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0176cccaeb903d8dec933f9c82d81ff7","sha1":"8b8cafcbba2f17ba2c229a426433ebfd08ff52c5","sha256":"d1f564b0f350f21b7dc5ba261120183f0360fa0b5c6e1bdd34b521f04a3835c9","sha512":"437138303adcfb00dcbd80958b9fc22fcffd8fdfcf2e80b297c886084249dc973bf00d7779d31ead44b576c32c8957b338a195c62ff853e7eda5347c41bef2de","ssdeep":"3:N/BKL1X0RKW:eL1ERx","tlshash":"455504c45d4070711450cc14f3541d1dd01d540013154403705d44d537304044154540","size":1337359,"data":"","first_seen":"2025-11-18T04:50:50.704036Z","last_seen":"2025-11-18T04:50:50.704036Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u","fqdn":"www3-vpass.dqhew.cn","domain":"dqhew.cn","tld":"cn"},"ip":{"addr":"172.67.172.218","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b4c00c5d0691ff20187aa228353d3906","sha1":"fecdc26f40b0567cf3ff97e892a24620eb8882e6","sha256":"4211e671cfd274ed52a9047a7fce6021cd75abf1d865c5f9e97b57761e39de93","sha512":"d46e9df5d5dedde0e4714e6a192733de65ecf100e378d378c88ffb5c3e3a1bfaa5f83ad2cedfe1927ce324e24e40889cd432d9850ef9794005c46333ed2081bb","ssdeep":"","tlshash":"a5712bc7c6860991dfaf23c805bbb760b72a01a3174592522695cd4de32fe0bd26d091","size":3592,"data":"","first_seen":"2025-11-18T04:50:50.706763Z","last_seen":"2025-11-18T04:50:50.706763Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6e824f25f7c82413126a06c79586289d","sha1":"9598411d37219b0bf857642a2719358214bb6f1c","sha256":"c4226aa62f5d9af55839f0b3e7b4ad7049fb3fcb4bd1b5fa2bbb8fa8db83f016","sha512":"057e36b6ddcb691548cce3c2f2f72464e93deb1df511c130a7297df7566a4c2144ae199225bbc94dd54f0aa2d3e2b0e3b9cdf5fa66a57984a78b691c593a1b55","ssdeep":"","tlshash":"a7b0125026f23000c327d034884b8804f109034221980504745e53305f0041b45799a8","size":87,"data":"","first_seen":"2025-06-14T22:40:38.733601Z","last_seen":"2026-05-01T00:35:45.059873Z","times_seen":5087,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-07T02:10:36.210875Z","times_seen":732561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u","fqdn":"www3-vpass.dqhew.cn","domain":"dqhew.cn","tld":"cn"},"ip":{"addr":"172.67.172.218","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"16fa0fc9c49d7bdf016baea2468299e5","sha1":"6eacaf38528d25328f8d0e4351ea8637ead927ae","sha256":"7c0fa35558c0ac536738ea2e73499020baea76c5693ae3ecd28a0810cc687b12","sha512":"b05df75faf10b719085a5a835c0b3d0cc729c38ddc9a572cd236342d633e9d402de870b299151ee8d1897e23b9942852a3b70ebb1941ff1ffd186f242eefd0aa","ssdeep":"3:N/BKL1X0RF1n:eL1ERF1n","tlshash":"655504c45c4130701410cc40f154351dd00d740013154443745dc4d41f30100415c550","size":1337359,"data":"","first_seen":"2025-11-18T04:50:50.708604Z","last_seen":"2025-11-18T04:50:50.708604Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u","fqdn":"www3-vpass.dqhew.cn","domain":"dqhew.cn","tld":"cn"},"ip":{"addr":"172.67.172.218","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e9d2074b8ef4247d3a2a0a6e92a25870","sha1":"3105326d18221ad219ea2e7d45a7c47324ea6369","sha256":"89507370ed5b6ae66ef67f35bf4afcc6b98aee5f609e423d01af10abaf142cd1","sha512":"5e64d6d32823b4c892a2b32c95474f04a534989aed2af7db887225050cac7387102d06c3b3d5be11dc687d7c3ec9f6c2d8d4ac9a306105e4eac9bc17efcb1e03","ssdeep":"3:N/BKL1X0ROTn:eL1ER4n","tlshash":"d25504c4544030f01414cc00f1d4551df00d540017174403705d7cdc57300000154540","size":1337359,"data":"","first_seen":"2025-11-18T04:50:50.709776Z","last_seen":"2025-11-18T04:50:50.709776Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"98cbef30987bb6bb955770e6fa3a662c","sha1":"0368ba827b59d4b041a6dfd12d98daaa1b7a73fa","sha256":"5ce133ca9aee68a55bdd582bb6dd22d396d76765360d3eb99757d3bdb2acb3a9","sha512":"c4ca387a20b9e258d67eef92a5400822ba4b18067d105af65cd0722a52814506a05d61f05be0a91da0a29679d5a6d560838a2149ea60e3d390ad03b624b99792","ssdeep":"","tlshash":"1b21df9ebfb470f42349b4fc596f720442a7fd456c00660485c081e83c6de08871bbbc","size":1215,"data":"","first_seen":"2025-11-18T04:43:12.385512Z","last_seen":"2025-11-18T05:44:43.682933Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fceea52b5d5fb7561cf735dbfa96a530","sha1":"c545e8aad576aef9a718fa24cde9f74382c6af19","sha256":"ed0a635d1d5672a21035daa6c500b9e8c39ff30cb498d463cf2c649dde45cfad","sha512":"b52189405859a53f25fb17839ee68bc9af96379a1d90cea2e62ff5fd6cdf2f9791f7898fafb5b90e014a4bff9f45377cc259e5eb767e3c19c7096b37b57958d8","ssdeep":"3:N/BKL1X0RPl:eL1ERPl","tlshash":"725504c4544030f01c30cd00f354151dd00d750173154443745dc4d417300000154540","size":1337359,"data":"","first_seen":"2025-11-18T04:50:50.713174Z","last_seen":"2025-11-18T04:50:50.713174Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"33ff6022e88df59f8dfc9eb546435e9c","sha1":"7f2ad96c0a1276fbc858c652a6e2d0b3c9d4d3e4","sha256":"a1c845cab782ea7dec04543ec72e0b354cb8e9aae23acc02ee02b1832e3acd9a","sha512":"99820974c649620d8dfd487054edee4863ca41025de5a87fcd6fddfafbecb53668799fdde6f7b809112fec178b18f28a9ff8e190d298aff5a29c6795ad639c25","ssdeep":"","tlshash":"0c600000c0303003000f3000f00000033cc000f0cccc3003030c00f000c000c0cc000c","size":14,"data":"","first_seen":"2024-12-12T23:50:40.556614Z","last_seen":"2026-05-01T12:56:58.96029Z","times_seen":264119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-07T02:10:36.210875Z","times_seen":732561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6934d9d33cd2d0c005994e7d96d2e0d9","sha1":"96d89030c1473585f16ec7a52050b410e44dd332","sha256":"08c9b52f61fadf1eff6fb89169f1735fbae7bb583b23cb119d0e1a0151bac952","sha512":"64ff1127cfca45f7ab820ffa481a3af55570ab2d7b1b7e9d3c0309bd3b6783f6b8d10c8eb2224bc517613f82372722a443dc221398cd2e5b24594ebef1bf4359","ssdeep":"","tlshash":"cd1100000000000000000000000000000000000000000000300c000003000000000000","size":1000,"data":"","first_seen":"2025-03-02T18:12:34.22932Z","last_seen":"2026-06-07T00:57:44.258013Z","times_seen":143787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u","fqdn":"www3-vpass.dqhew.cn","domain":"dqhew.cn","tld":"cn"},"ip":{"addr":"172.67.172.218","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"66ba9a7fc37ec73432f461ab0a0961f3","sha1":"792837d84cfbb98ea122f998acd01077d7d496e6","sha256":"49513d2d2427d129790f88c3d092acb64c764eefb116f3effa8ecfea487e6104","sha512":"abe21746e2ae8c7edebb39502dec8955de03ef22372a62516b1307f4acb216ee32edcf2b4f9c3e7226575cba26759004707946e5e33466a270a224ee13fbf203","ssdeep":"3:N/BKL1X0REtn:eL1ERMn","tlshash":"815504c45c4035701410cd01f154151dd00d541037154443715d44d41f300000154540","size":1337359,"data":"","first_seen":"2025-11-18T04:50:50.71539Z","last_seen":"2025-11-18T04:50:50.71539Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www3-vpass.dqhew.cn/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=9a04d87b2b8249c5","fqdn":"www3-vpass.dqhew.cn","domain":"dqhew.cn","tld":"cn"},"ip":{"addr":"172.67.172.218","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"af49f67c5028ac60a8ba376e29c05fb3","sha1":"223e7dfa6cf657347dda850c5c73a0302b8baf78","sha256":"801d0d1a9f6584a4d3690a4dc0ce95ba4498ed86329f347ab4ec6665d1fa2798","sha512":"46b01e9adaf476ffbbd230d0390fc9c5d09a0a7dd5591800190f5ab4f8eb6267ff53b5cd9e77e13baee16d5597ac8d13a8f241c9cc53cd97646ca092f9db38c8","ssdeep":"3072:igL7T+pNlJpQRfbzVLCicdcebd0mViLQkip9sq0gn5J1:lXyp9Ggf1","tlshash":"b4c3c88e38ca75465332746c456b39ceb17a6c8425180d3df62099f074e9b3a72a7ff8","size":122910,"data":"","first_seen":"2025-11-18T04:50:50.662258Z","last_seen":"2025-11-18T04:50:50.662258Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"690551352c220eb35e15178f45a2b14c","sha1":"7fdfb63cc5a7fe2b8703e5d9182cd76e4a9456f2","sha256":"866bcadd1c629ff1925b91b310ece61eab78c6051c230779d42783d6b21a888a","sha512":"6a9503176eebf69662977ad037f439835e5627bba4a8e21fd1ee62364e00548dc280940743fe629830b7631d128d3214e79054ff8ef6974e41172fb5b9c9dfc3","ssdeep":"3072:cB9peGmjIADdIwMg4zBUJ42S3xC+x+jBw5iqqdfbhdN/jzuERcxVBiaNRF3rkaaa:cYfjIADnMk+2S3xC+x+jBwsqUfbhdN/U","tlshash":"09d3d8cb65d9b98243626065087b3dcbb1be6dac201c4d6cf7145ce038f6b3866a3d79","size":140395,"data":"","first_seen":"2025-11-18T04:50:50.716443Z","last_seen":"2025-11-18T04:50:50.716443Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-07T02:10:36.210875Z","times_seen":732561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-07T02:10:36.210875Z","times_seen":732561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1e4f65e9a74e4aef9a681899cad1fb47","sha1":"729a6b4ca36af142da9e16312a4df0ea4db49fd1","sha256":"09073645af7a3c166662ad94fbdcda35cde96fa39373544db02f1414e64c12b6","sha512":"0b393d20a693f4231920adffa07ddd1dedb3375bde48fce84f0a3949b45563034abf733e0479cad611cd974338df219efa0f46df5aee6b9b46eb9b79f1bd42be","ssdeep":"3:N/BKL1X0RLv:eL1ERLv","tlshash":"de5504c45c4070701410cd00f155151dd00d540013154403745d44d417300000154540","size":1337359,"data":"","first_seen":"2025-11-18T04:50:50.71801Z","last_seen":"2025-11-18T04:50:50.71801Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u","fqdn":"www3-vpass.dqhew.cn","domain":"dqhew.cn","tld":"cn"},"ip":{"addr":"172.67.172.218","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d9b27ec7c74f3b8e4dc58a8d3eb06d0e","sha1":"a66bb2577084019a6d64439a19b66d2118120495","sha256":"ff837a5d36a4feb15ec63b2ec127d672e57bca8404942354659b86cf273c347c","sha512":"d58e7f1910c1d7cbd284cad8064ee4e0a43cc7cc60a7e9f337b92717faf03ba69489d6d5c2ddc7af415bdfdd8a9f09cc60dbfc688b7e952921ed809bbee5c51d","ssdeep":"3:N/BKL1X0REA:eL1ERx","tlshash":"7a5504dc5c4435741410cc00f3d4151dd00d55003315740370dd44d417300000154540","size":1337359,"data":"","first_seen":"2025-11-18T04:50:50.719827Z","last_seen":"2025-11-18T04:50:50.719827Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u","fqdn":"www3-vpass.dqhew.cn","domain":"dqhew.cn","tld":"cn"},"ip":{"addr":"172.67.172.218","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b8a9b097ce60329caca36fcac9950f66","sha1":"86aa7b797defda1736e53bb9d0eacf0543379dd6","sha256":"a5d3b0156e2aae764b62ab019c000b17a3e3d65e17e6374f61de134d24ed36ab","sha512":"ce6deb17ffb7dc7a273964440aa99dc3b762696090ce8ccee180a12c395823962eff1fbc409152f955b5214eada4ae9e45657e26a004a6bd39ae134abde9f66e","ssdeep":"3:N/BKL1X0Rjn:eL1ERjn","tlshash":"1b5504c4554034741410cc00f150151dd40d5c0051154403705d44f4173000005545c4","size":1337359,"data":"","first_seen":"2025-11-18T04:50:50.72169Z","last_seen":"2025-11-18T04:50:50.72169Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-07T02:10:36.210875Z","times_seen":732561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-07T02:10:36.210875Z","times_seen":732561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u","fqdn":"www3-vpass.dqhew.cn","domain":"dqhew.cn","tld":"cn"},"ip":{"addr":"172.67.172.218","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0a5d6b789f07a24e26ad75bec4a29960","sha1":"8346493d21eaf38a026619835b1e6d8b4a246f9e","sha256":"b67d326ddb47cd85e1ece8045eed3799d6fad65601b020a673034fa2a472a62d","sha512":"77572eef8c41991b867e87158893b77b8b57d10aed425b9838c1b51ddd0377c164f3520f2ffee645bbf90f367ab77e13ff40a8d637c203f414fe1b0325df17b0","ssdeep":"3:N/BKL1X0RZXn:eL1ERpn","tlshash":"f35504c4544030703410ccc0f150151dd01f540451154403705d45d417310000554540","size":1337359,"data":"","first_seen":"2025-11-18T04:50:50.723554Z","last_seen":"2025-11-18T04:50:50.723554Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-07T02:10:36.210875Z","times_seen":732561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-07T02:10:36.210875Z","times_seen":732561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-07T02:10:36.210875Z","times_seen":732561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"435c7d9dfe17d45c3b6ffca53cd4b800","sha1":"419b7fb1759ce7eb4d42e02dff36469b32a1b8b0","sha256":"49df1eae296732e8cf5538f5fef3376d97aa8ea779fc1091293d8936148c28c3","sha512":"d561c5420144c2bc2916d152b50d4f927f74103298257f24ad21e907546ad89c9024669dd28e406c39f1b3104e83ecc2b8f1325791a16e8c245357fdc19852a1","ssdeep":"3:N/BKL1X0RHn:eL1ERH","tlshash":"9b5504cc544030707410cc41f1d0151dd00d540451174407705d44d4173140005745c0","size":1337359,"data":"","first_seen":"2025-11-18T04:50:50.725511Z","last_seen":"2025-11-18T04:50:50.725511Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u","fqdn":"www3-vpass.dqhew.cn","domain":"dqhew.cn","tld":"cn"},"ip":{"addr":"172.67.172.218","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-07T02:10:36.210875Z","times_seen":732561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6751bb1f32c9c4c9d5ecbbaae9768411","sha1":"2c22e69790fa6a1037a992ef66ab7ebca766ad94","sha256":"b0530596dfd2d872cbebf39c301ca0fe0526ec2e87c54d2fc845b78db80bd1f9","sha512":"758a1c59f6482e1b3c5fd3667dbd135d2239e6a065e265f614573ba9a8e66e3c74b50ff28322d0b961a641469ba2a0275d8d77be384e473fb7dd3a91721b6833","ssdeep":"3:N/BKL1X0RFC:eL1ERFC","tlshash":"275504c4544030701414cc40f1d4351dd00d740013154443745dc4d41f30000415c551","size":1337359,"data":"","first_seen":"2025-11-18T04:50:50.727126Z","last_seen":"2025-11-18T04:50:50.727126Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6934d9d33cd2d0c005994e7d96d2e0d9","sha1":"96d89030c1473585f16ec7a52050b410e44dd332","sha256":"08c9b52f61fadf1eff6fb89169f1735fbae7bb583b23cb119d0e1a0151bac952","sha512":"64ff1127cfca45f7ab820ffa481a3af55570ab2d7b1b7e9d3c0309bd3b6783f6b8d10c8eb2224bc517613f82372722a443dc221398cd2e5b24594ebef1bf4359","ssdeep":"","tlshash":"cd1100000000000000000000000000000000000000000000300c000003000000000000","size":1000,"data":"","first_seen":"2025-03-02T18:12:34.22932Z","last_seen":"2026-06-07T00:57:44.258013Z","times_seen":143787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-07T02:10:36.210875Z","times_seen":732561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u","fqdn":"www3-vpass.dqhew.cn","domain":"dqhew.cn","tld":"cn"},"ip":{"addr":"172.67.172.218","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d73919d504fa9f51095a4b7cabcc1e9e","sha1":"07ddb97a98dfd687033ce7711687ebd9b2afe6a4","sha256":"a2a0d3e0729888cbc7567897baaa5fc035e53fbd60038e1fb176dccfe9442036","sha512":"f65e2b22f473550f9be21a0cf0136d0e1b174e6591c047b5474eb496870cd054e4c31540695ead9ad0d609924d34dc1f4ff04e2b7f54f542f09a9c5fb1159cfd","ssdeep":"3:N/BKL1X0RJUUn:eL1ERJUUn","tlshash":"c95504c4544030701450cc00f3541d1dd10d54141315450370dd44d417300040354540","size":1337359,"data":"","first_seen":"2025-11-18T04:50:50.728405Z","last_seen":"2025-11-18T04:50:50.728405Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"958a3a8a1c68a62505898d9dd041db8c","sha1":"db819c4796ac548f36aaf7da6accb4c3ea82825b","sha256":"3a35325ad173687cedc52357271b701f51a7c1419b56e0a3c22f2e3a7c0b873d","sha512":"3455e38fe9b07fb18b931dffca7b77c943821d8e2c4082f7f7a57b292fd92faeca7ac952963eaf1319144dcfe11b026bbd262e202bbc2fbfb5da2c80c3448388","ssdeep":"3:N/BKL1X0RPcn:eL1ERPc","tlshash":"0a5504cc544030701414cd00f354151dd40d540177154403745d44d41f300000154540","size":1337359,"data":"","first_seen":"2025-11-18T04:50:50.729387Z","last_seen":"2025-11-18T04:50:50.729387Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u","fqdn":"www3-vpass.dqhew.cn","domain":"dqhew.cn","tld":"cn"},"ip":{"addr":"172.67.172.218","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d7f8ffd77166d0305622806c6e3f35d4","sha1":"8da48aab4dc46da358f0e2c79f0ce623ad16c2f8","sha256":"f5e19094ee230f8531a39190a3577d2cb66caeda11c95870a4e41f8aaf5b77ce","sha512":"8c23ccaf0e5a1bb2c7f0153e516debc6da6ef43ef7d3773f2db17049d5ac22bee39edc6b56a4e997941bd77cf7008826b715f77dd52b58f67966a246d09aacf6","ssdeep":"3:N/BKL1X0RP3n:eL1ERP3n","tlshash":"565504c4544030701430cc00f354151ff00d540133155443705dc4d417304004154740","size":1337359,"data":"","first_seen":"2025-11-18T04:50:50.730739Z","last_seen":"2025-11-18T04:50:50.730739Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-07T02:10:36.210875Z","times_seen":732561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u","fqdn":"www3-vpass.dqhew.cn","domain":"dqhew.cn","tld":"cn"},"ip":{"addr":"172.67.172.218","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"49aff1542c79dbb4dc9cab31dc4d27bd","sha1":"56cb46f5efc5a76a266943954b4dc9166ef3dec8","sha256":"406d2f2b850cef0299aae2a65adeeaee5e5366de86e66e97d3f2a2f1b3d07c0c","sha512":"34730f40a3ecc3e5186c0b0b8f13eee4dee19f758bbe496e8bb1623d3f18338638edbf1b3db201abd414ff5b61fa4f38d081bb736c33594a48c9007ffcc11b6f","ssdeep":"3:N/BKL1X0RLS:eL1ERLS","tlshash":"e65504c45c4034701510cc40f154155dd00d540013154403705d44d437300400154540","size":1337359,"data":"","first_seen":"2025-11-18T04:50:50.732133Z","last_seen":"2025-11-18T04:50:50.732133Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u\u0026__cf_chl_tk=DqMLP90OxhSbcXFozfLalnKtoatj8optjriWt9udTKA-1763441412-1.0.1.1-Pgzx0adslSsr_Z_g1GQ.Clbl3lkrAhu5xZxd7c0Eqtk","fqdn":"www3-vpass.dqhew.cn","domain":"dqhew.cn","tld":"cn"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"af2bc17ff44ad78458cd7785b10e3f0d","sha1":"08fc7c519acfa2a1cb86aae0640f720b59124c1d","sha256":"64b92965455cd1219b23108cef211bce4a1ce0a9971a941fcd0a7ddf6eeba8fd","sha512":"dbac6019563d30f0ac3ddcf354b58c0a437fc1cc48b150ff130abe1805bfe3a93990d210952c97166eafe56692205ccf457de057c4d329e436eaafcc0c697e4f","ssdeep":"3:N/BKL1X0R9Wn:eL1ER0n","tlshash":"7f5504c4544030701c30cc00f350151dd14d54415117c403705dd4f517300044554541","size":1337359,"data":"","first_seen":"2025-11-18T04:50:50.733461Z","last_seen":"2025-11-18T04:50:50.733461Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-07T02:10:36.210875Z","times_seen":732561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-07T02:10:36.210875Z","times_seen":732561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-07T02:10:36.210875Z","times_seen":732561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-07T02:10:36.210875Z","times_seen":732561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-07T02:10:36.210875Z","times_seen":732561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-07T02:10:36.210875Z","times_seen":732561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"424b12d67f687a5515912a2d437b6d90","sha1":"4f954f68a61a16e767338eb7a55b66b9f7a33ff8","sha256":"442a1350bc569281e2f5f97eb7e086b2880b659ea29fa4f36e83d26a891f7a60","sha512":"aea1b7c30e517833afee567603405988d62e83f386384d3bf6907ec77e60520abb9be422280266d6209fdf37c5a41c8f83a0f02c2cdac11a16b72a8295cb247f","ssdeep":"3:N/BKL1X0REx:eL1ERQ","tlshash":"b45504c45c4031701410cc00f1d4151fd00d5400331d4c03705d44d41f300000154544","size":1337359,"data":"","first_seen":"2025-11-18T04:50:50.734758Z","last_seen":"2025-11-18T04:50:50.734758Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u","fqdn":"www3-vpass.dqhew.cn","domain":"dqhew.cn","tld":"cn"},"ip":{"addr":"172.67.172.218","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"dbb757794826bdd8935e9552275fed23","sha1":"e3364ad684bc6d26437ba1ae4c1993778dfd91a7","sha256":"ef587e68319cd2954e59d2f30d7f67495d404b00bf3cd4c8aac4745d1164027d","sha512":"08c8821b4742fc578f28f9ad6c2546eb931eee5a502f93e2174f3b87217b7ec0a7e35b937ad0f1121dcee702e58deea505deb9e5dc682cdbbb516e8ad18eec42","ssdeep":"3:N/BKL1X0RB:eL1ERB","tlshash":"085504c4544430701410cc00f150551df10d5401551d4443705d44dc1730000055c540","size":1337359,"data":"","first_seen":"2025-11-18T04:50:50.736021Z","last_seen":"2025-11-18T04:50:50.736021Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-07T02:10:36.210875Z","times_seen":732561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ff03fc8f0c3179fb4dcf4389f88a1c16","sha1":"05ff911d7ddf2d7c14b4316a87fd08f42c618f9f","sha256":"025229ec6bb50e915572750c5045d22c5fe16851fd077f1411f41b19aa1dfece","sha512":"4acb3551ec49556a2a64f4a47e480df29f611f67d0ef4b2474e90f7b86caed3dedb0b56eba12e577f1401d4d701c9a4f0898a06eee8f6d7dbe3b4b5283a854e8","ssdeep":"","tlshash":"4f60000000c000000000030cc00300003cc0003300fc0300c30c003000cf3cc0000000","size":14,"data":"","first_seen":"2024-12-12T23:50:40.182598Z","last_seen":"2026-05-01T12:56:58.912641Z","times_seen":262850,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ca897fb253cc8807c5aafc947eb02fb6","sha1":"25137d68712ada7d3ad424c80bc0d688a696f7bb","sha256":"57f9c536daa79c4d770534dbafbe2e7b2b2aa48b9eb2617b4e670b8a78a4a4ce","sha512":"187200763128b83b777932b28834f8a21adf5824c5b9f8635249168aaefcc2451885b26da07411ccd56a52146f9b8cc2524647ebf2df4c1474f80d219d893f64","ssdeep":"","tlshash":"d96000030c00cc300033000c0003003f30f00c3003cc300c033003f003c030c0000030","size":16,"data":"","first_seen":"2024-12-12T23:50:40.144885Z","last_seen":"2026-05-01T12:56:59.005936Z","times_seen":261656,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-07T02:10:36.210875Z","times_seen":732561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u","fqdn":"www3-vpass.dqhew.cn","domain":"dqhew.cn","tld":"cn"},"ip":{"addr":"172.67.172.218","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c7246b9b25680ac057d2442fa8550eed","sha1":"5784a79d6b572ac7287f25619974afb286c7ba43","sha256":"b22268e019b6d673edfcee5d0e59eff9109ae59cde15af24abbb72f523b837c3","sha512":"d02837ceb373a830269c7ddf2b7a20e69a96af642d4976ee49861273352d6bbbe3ab2174519a83dc20cc59a75af235c041c4cae4956dc4493e7a09e40ad960bd","ssdeep":"3:N/BKL1X0RIkc:eL1ERPc","tlshash":"005504c4744030701410cc00f154551df00d54005315c403705f44dc17310000154540","size":1337359,"data":"","first_seen":"2025-11-18T04:50:50.740994Z","last_seen":"2025-11-18T04:50:50.740994Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u","fqdn":"www3-vpass.dqhew.cn","domain":"dqhew.cn","tld":"cn"},"ip":{"addr":"172.67.172.218","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a5aad4ace8ecece2425af28391807d12","sha1":"335ecb04cdef089878be98117afdbd1e2ed303e2","sha256":"ed50cc12e084c0573a47feb170f560458e3f1b46e0fa6351a0704ce9b8d2a0f9","sha512":"54bcddf829f323e765486d1a68c523d7ad160689522c4959468addb3efd1d012d80fd1a8961a0c66289552629353d2f53b484b65b428b654323facb2991e6b53","ssdeep":"3:N/BKL1X0RJNV:eL1ERJH","tlshash":"8d5504c55c4030701410cd40f1541d1dd40d541013154403715d44d417300400154d40","size":1337359,"data":"","first_seen":"2025-11-18T04:50:50.742241Z","last_seen":"2025-11-18T04:50:50.742241Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"de61d626dca0044cc0814cd628e2fb62","sha1":"1c4022049c5d828db4e7f1bc557e174e3b743559","sha256":"225541b5b36042efafa44126adbd0430b8d2b672ed47b9766e5bd75a08f4fc23","sha512":"14d354383fa07eade58cbaa7572727676114fdcb8dce58314e77305fc52b48e9e5a163d1c96cd03eebd8f4720101d59f2e1a026d72728cb4ed66d9c83b3913f2","ssdeep":"3:N/BKL1X0RE0n:eL1ERBn","tlshash":"1e5504c45c4035701410cc00f154151df01d540033157403705d44d437304000154540","size":1337359,"data":"","first_seen":"2025-11-18T04:50:50.745496Z","last_seen":"2025-11-18T04:50:50.745496Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-07T02:10:36.210875Z","times_seen":732561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a7aff752a781a9629216afd68f45e2b6","sha1":"55bd2d56e3e7c925330207b9a1ba9f341a6db1d3","sha256":"d3d0644d595ad0c83ab39ad554b625f2551ce6ffeb5c621a364c4ad497cc51dc","sha512":"6981bc08c34a4a45d5a2d5f032b1bce183b3afbafc765d07920e5d3dcbacf9a41a4c3e8cff0b5af75fa5903b843de6463cc734ab3df1bf828d7c85d0acedce7f","ssdeep":"3:N/BKL1X0RFOS:eL1ERFOS","tlshash":"d75504c4544030703414dc40f154353df00d540013174403f45d44d41f310010554540","size":1337359,"data":"","first_seen":"2025-11-18T04:50:50.747625Z","last_seen":"2025-11-18T04:50:50.747625Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u","fqdn":"www3-vpass.dqhew.cn","domain":"dqhew.cn","tld":"cn"},"ip":{"addr":"172.67.172.218","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"28ba0ee8f2b9d2233fa4882e8e582a24","sha1":"095bad2b8101702b5606b937090a6f35fdab359c","sha256":"a8231e521adfd43c138ce2772859507d3d30221bfe5898c1536725945d5ca06c","sha512":"70ae866fedf401277f4e1e8ec64ceacd010bd957d170b8c978974f8a5eadf44e577e5c6519c419c592a2774c6fa24f3d17f037437b144cf24fdc91c8d690da22","ssdeep":"3:N/BKL1X0RUn:eL1ERUn","tlshash":"245504c4544130701410cf00f150151dd40d541051154403705d44fc17300004554551","size":1337359,"data":"","first_seen":"2025-11-18T04:50:50.748897Z","last_seen":"2025-11-18T04:50:50.748897Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u\u0026__cf_chl_rt_tk=DqMLP90OxhSbcXFozfLalnKtoatj8optjriWt9udTKA-1763441412-1.0.1.1-Pgzx0adslSsr_Z_g1GQ.Clbl3lkrAhu5xZxd7c0Eqtk","fqdn":"www3-vpass.dqhew.cn","domain":"dqhew.cn","tld":"cn"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-07T02:10:36.210875Z","times_seen":732561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f47389d2f1abd47dbebeef3e2d3ae8a7","sha1":"dde5aa75f9a647e73d3e2d3fdda68898f850f72d","sha256":"30893b81b3c71cdbd5cf34b54fb52f8eef50b27d8a3f2498a28d2b89bd987fda","sha512":"3524a8ed2b83fe9d62a0708424707959d6cc8e89a918407da7c46540b5982fea9230792acffc47517cf5d009231375b00d5ec2ff5689bfb74ea6a3c926653318","ssdeep":"","tlshash":"56b0028869e5a404e21975a5495fd144f12cc802148a0515658885515f114294167868","size":94,"data":"","first_seen":"2024-12-12T23:50:40.522517Z","last_seen":"2026-05-01T12:56:59.043697Z","times_seen":261167,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-07T02:10:36.210875Z","times_seen":732561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-07T02:10:36.210875Z","times_seen":732561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u","fqdn":"www3-vpass.dqhew.cn","domain":"dqhew.cn","tld":"cn"},"ip":{"addr":"172.67.172.218","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1eb224373018ef173d5735dcdcb10ba2","sha1":"97ca71e712d86d39e7ca98e6b6c3d5438c2e1a30","sha256":"110c563e34942cff0ac6cead5adf5c8597d340dbb528e81e9478a78ca32621f6","sha512":"398ed5966370463e73eaa105682ce1d5a04629d2c2dd88848d5a53c592a76389af97766154012f31c419d815e7229511134a1967c28c51fa1a49a1b29d97d782","ssdeep":"3:N/BKL1X0RMn:eL1ERMn","tlshash":"ed5504c4544030701410cc50f1d0153dd00d54045115440370dd44f517314000554544","size":1337359,"data":"","first_seen":"2025-11-18T04:50:50.750791Z","last_seen":"2025-11-18T04:50:50.750791Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","size":39,"data":"","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-06-07T02:11:17.737089Z","times_seen":1010683,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"http","addr":"www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u","fqdn":"www3-vpass.dqhew.cn","domain":"dqhew.cn","tld":"cn"},"ip":{"addr":"172.67.172.218","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-18T04:50:12.344Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /?convert=ZQGduhen9qVfvIAhyRLK4m3u HTTP/1.1\r\nHost: www3-vpass.dqhew.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Tue, 18 Nov 2025 04:50:12 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xU42du20R%2BgX3%2FPxkKpKn8lQV%2FbE1%2FablY5%2B3Zg7KF3Jb%2FVep7GKN02ldFK1fAP8oHRH%2FQ2KY5IL%2FdA6FnQAAsHuwCZdlyqt0KCihVO7OFXST7pS8IfUj0qcCPzv%2BN5twpJZDSnK\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9a04d87b2b8249c5-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: chlray;desc=\"9a04d87b2b8249c5\", cfL4;desc=\"?proto=TCP\u0026rtt=512\u0026min_rtt=512\u0026rtt_var=256\u0026sent=1\u0026recv=3\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=437\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5594,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5594), with no line terminators","md5":"826b991ac16817ec0ee07d3f9c50d2fd","sha1":"fd8302416a2d756e078b8e1c08f1bdd09204401c","sha256":"abed4d3d347107d73639151c390ed00cb37a8890bbb92bb089e2a88132a9dc3c","sha512":"a9bd7480653b4f4200ed5d65c60afb4aea7effad0e0406d08a030c7caccdabaa21cf37ad96008e29bcead2c53b65bbb11091c547251d0200759ffc977dcd9374","ssdeep":"96:PNybXZtIEb0EFW87IF6jMVxK+VdR9+3tcc/04+jfpXD2DMd/wbpqYzueh8nVdmw:PNadBmKIqCc/04QD2DM5wbp3yQw","tlshash":"1eb13bd39646202be77f1be500fbf364931991926701c656e6e2de9cc3dee0bc16e150","first_seen":"2025-11-18T04:50:50.644288Z","last_seen":"2025-11-18T04:50:50.644288Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":1,"dns":1,"connect":1,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"www3-vpass.dqhew.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-18","alert":"Phishing Block","trigger":"www3-vpass.dqhew.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1413822615:1763440286:kQ0_HTTZV59rbHToRRNdQfWdcMfhDGJPZ3qDd6BDLGk/9a04d87e2f344e4c/kem_s1S.5rYJZKedpsO4Sk0jvKTogG9boGN6JcJZXVM-1763441412-1.2.1.1-p2kjc6fyfE5HAazoUZi7itWF_93_aQ5w3PMwfhIZA6q9FHBVzDlfHlVZ6.XNQSdF","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","date":"2025-11-18T04:50:13.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 18:59:09 GMT","end":"Wed, 21 Jan 2026 19:59:05 GMT"},"fingerprint":{"sha1":"62:5E:2A:E5:F4:DE:73:E8:94:15:72:65:28:EB:70:25:A8:D2:E7:61","sha256":"2D:41:D6:2B:6A:BB:89:80:01:28:9F:35:0B:2B:F4:6C:0D:B6:B1:E4:7E:E4:AC:35:2A:E0:69:DB:94:45:F7:D3"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1413822615:1763440286:kQ0_HTTZV59rbHToRRNdQfWdcMfhDGJPZ3qDd6BDLGk/9a04d87e2f344e4c/kem_s1S.5rYJZKedpsO4Sk0jvKTogG9boGN6JcJZXVM-1763441412-1.2.1.1-p2kjc6fyfE5HAazoUZi7itWF_93_aQ5w3PMwfhIZA6q9FHBVzDlfHlVZ6.XNQSdF HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto\r\ncf-chl: kem_s1S.5rYJZKedpsO4Sk0jvKTogG9boGN6JcJZXVM-1763441412-1.2.1.1-p2kjc6fyfE5HAazoUZi7itWF_93_aQ5w3PMwfhIZA6q9FHBVzDlfHlVZ6.XNQSdF\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 4119\r\nOrigin: https://challenges.cloudflare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 18 Nov 2025 04:50:13 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: br\r\ncf-chl-gen: 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$PbQcSQxCQPQJ1ZzvPUED8g==\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9a04d880c8fb4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":214684,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"eacf8200009f32d54ab9248488acc896","sha1":"5cf7cc5ee8dfb69568931f46d61515c3edcf6d52","sha256":"47708dee53f7630acf234b02b80b245066f46a69db3892646ad41bc26df8cc76","sha512":"8da37df7606399f7d120787da03ba7fb8f088d2fc4bebe5afd0f8fad72aa6a9553b04983fc94bc678861f5413195b2ad7f935a683fd4c2e7346a14ba0033fb02","ssdeep":"6144:J80xDFtgCEH7OPvvYHxja8n97Ih9Ri5Na612aVYIBZhp:CajEbO/YHN9eRGI61BVjHp","tlshash":"d22412823fb5271ecafd0a25c5b3eb63f8959fc6146348b095e9768b440ec69503c1be","first_seen":"2025-11-18T04:50:50.648326Z","last_seen":"2025-11-18T04:50:50.648326Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/9a04d87e2f344e4c/1763441413250/kuCYE9KQJbZCVnC","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","date":"2025-11-18T04:50:14.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 18:59:09 GMT","end":"Wed, 21 Jan 2026 19:59:05 GMT"},"fingerprint":{"sha1":"62:5E:2A:E5:F4:DE:73:E8:94:15:72:65:28:EB:70:25:A8:D2:E7:61","sha256":"2D:41:D6:2B:6A:BB:89:80:01:28:9F:35:0B:2B:F4:6C:0D:B6:B1:E4:7E:E4:AC:35:2A:E0:69:DB:94:45:F7:D3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/d/9a04d87e2f344e4c/1763441413250/kuCYE9KQJbZCVnC HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 18 Nov 2025 04:50:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 463\r\ncf-ray: 9a04d8868d144e4c-OSL\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":463,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 94 x 77, 8-bit/color RGBA, non-interlaced","md5":"f2dd329c07e75e7b661ab64e8dd8beda","sha1":"48410d85af92237fcfb0609c39e0591ddd5a8dc7","sha256":"cff289682facead5e8a8111666534623228c0391173f74a6550d6be7331dfa8f","sha512":"f15c413117a35883006b801f34372ccb95590d988014bf15c6b7b32125be15c176da55c891162250e3c092f5dbb103f69c0a51b39709b5f97605a87d2fe4e2d1","ssdeep":"","tlshash":"a8f08cc0b654a424ca0f3c2e16708ffb8420023000d304ec823e512133cd8c84087de0","first_seen":"2025-05-16T01:53:56.389556Z","last_seen":"2026-04-01T18:44:14.04045Z","times_seen":112,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www3-vpass.dqhew.cn/cdn-cgi/images/cf-icon-browser.png","fqdn":"www3-vpass.dqhew.cn","domain":"dqhew.cn","tld":"cn"},"ip":{"addr":"172.67.172.218","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u","date":"2025-11-18T04:50:24.554Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/images/cf-icon-browser.png HTTP/1.1\r\nHost: www3-vpass.dqhew.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www3-vpass.dqhew.cn/cdn-cgi/styles/main.css\r\nCookie: cf_clearance=S99SkvMEj0HcWjyL4_2R.WVA3T6GKIw0WkTnfYwqVxc-1763441423-1.2.1.1-OWgvWiJu0J3sTny2t59xZ..ZeDT_jqhMuWdPXFjAahyC5dQ1FLSXtJh0ykCvddsDRwwQBu0nJ2cFA5C.HL.nqy0CUDTaS5JRMeRhQi07SE9Bp0TcoBsI6MLmYN.DFfNaBB.7Egu3j1n723wVHVnQDFluYynU21CRFT2meudMsFy0OAhJ47WN0Pu8zNbikrb0JUZZQqKTLswGvukwPY4c.Pm9t5baMEMeo0CzKdf4ETE\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 18 Nov 2025 04:50:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 484\r\nConnection: keep-alive\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QHHbMUU2hxxpkYZiKugEtLA1k9VIGP6%2BRfC3kPsYGtjUGr7Yc47GfJgTy6iZUMF35GhRhWHu9y4HGdBNem2OxrUbWerO3wgU%2BZnB%2Bsi9AyFJJwU%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9a04d8c77bfac759-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":484,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 80, 8-bit colormap, non-interlaced","md5":"59caf3c7eb63af78f12db37f41433779","sha1":"8024e688e78e910ae1ea3bc25be7a7ab65444b02","sha256":"78a7d8b29cabf16831417dba1b9bbe36fae0d060a35a495e8f10e9663b3c9e65","sha512":"25fb9595a28fa5c793453cffead70f3a15f64538e45330595981b81fc5935438d7cfcc45a2092563d4d57a1cae166f06f0ea57573988ac497e58ee6210258b2e","ssdeep":"","tlshash":"58f0a31a976cdaf4a7840234769cf425e7205e365d90f11a361a54621c610cd438e74b","first_seen":"2023-04-16T05:42:45Z","last_seen":"2026-06-07T01:31:46.410944Z","times_seen":45013,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"www3-vpass.dqhew.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-18","alert":"Phishing Block","trigger":"www3-vpass.dqhew.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u","date":"2025-11-18T04:50:12.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 18:59:09 GMT","end":"Wed, 21 Jan 2026 19:59:05 GMT"},"fingerprint":{"sha1":"62:5E:2A:E5:F4:DE:73:E8:94:15:72:65:28:EB:70:25:A8:D2:E7:61","sha256":"2D:41:D6:2B:6A:BB:89:80:01:28:9F:35:0B:2B:F4:6C:0D:B6:B1:E4:7E:E4:AC:35:2A:E0:69:DB:94:45:F7:D3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 18 Nov 2025 04:50:12 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-LMvV8PXvuYJlfqFL' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nreferrer-policy: same-origin\r\ndocument-policy: js-profiling\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9a04d87e2f344e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":163807,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"0c28eb3c5f36f2edca26c6dceb80aedb","sha1":"c83e697b4a0736216ea9ca42c2e0a9900fbff9b2","sha256":"d615c6ab9a7863d31fa490310e761ef3a53a94cc7f15a3732c3104afd83700eb","sha512":"a8de8e8054007827e716640b3e3c301d670fb14e05d371702f5e34af91b584d2e71f255ae9da1d56d22a2a678064d42f17a831579d5fee212476fb47652877fa","ssdeep":"3072:/ZqB9peGmjIADdIwMg4zBUJ42S3xC+x+jBw5iqqdfbhdN/jzuERcxVBiaNRF3rky:/EYfjIADnMk+2S3xC+x+jBwsqUfbhdNs","tlshash":"10f3188b69d579864363606805773ccbb27e2dac241c686df71458e03cfa73836a3e79","first_seen":"2025-11-18T04:50:50.65134Z","last_seen":"2025-11-18T04:50:50.65134Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www3-vpass.dqhew.cn/cdn-cgi/styles/main.css","fqdn":"www3-vpass.dqhew.cn","domain":"dqhew.cn","tld":"cn"},"ip":{"addr":"172.67.172.218","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u","date":"2025-11-18T04:50:24.540Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/styles/main.css HTTP/1.1\r\nHost: www3-vpass.dqhew.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=S99SkvMEj0HcWjyL4_2R.WVA3T6GKIw0WkTnfYwqVxc-1763441423-1.2.1.1-OWgvWiJu0J3sTny2t59xZ..ZeDT_jqhMuWdPXFjAahyC5dQ1FLSXtJh0ykCvddsDRwwQBu0nJ2cFA5C.HL.nqy0CUDTaS5JRMeRhQi07SE9Bp0TcoBsI6MLmYN.DFfNaBB.7Egu3j1n723wVHVnQDFluYynU21CRFT2meudMsFy0OAhJ47WN0Pu8zNbikrb0JUZZQqKTLswGvukwPY4c.Pm9t5baMEMeo0CzKdf4ETE\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 18 Nov 2025 04:50:24 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hjp0YAd7twDZZ8nv%2FTP%2B8YIuXyFRcY4pbDxoshWeCAefRGvEx1pWgT9sD4IGiG9qZFMQzIFWpTC89G6c1Q9A2TjvXWkzb3RdvC3PrlujZV9ahyo%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nContent-Encoding: gzip\r\nServer: cloudflare\r\nCF-RAY: 9a04d8c75bf5c759-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8013,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8012)","md5":"ff26f59e28a5fe6ea4ab23586415696b","sha1":"4182675484d175e363cd34b43041b7b1af93d0cd","sha256":"d30b4ea6f68456672f5abb35e9dcf7d54226372b66e9d60a7ee26b7a52568e74","sha512":"92c58eef6d1f885806450acd2927c57ebea2e8762c98b0826192555674bd4478e42add192834285d5934c0a76db8eac5eee1a65dc34b6f69246fad6c91a5fba4","ssdeep":"96:1jMh3JNJinvaE5TQRGxfldudududEtCbnaimpSpIplDO6bU6b16bE6bb6bNdkd94:1jMFJiva655dimwqjlP0/mGTZxRbC","tlshash":"75f1851bbf49104e3023886ae2c5a78d912dd282ee535bfff7173561cbc52fa1552b24","first_seen":"2023-04-05T04:39:40Z","last_seen":"2026-06-07T01:22:46.505265Z","times_seen":86197,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-18","alert":"Phishing Block","trigger":"www3-vpass.dqhew.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"www3-vpass.dqhew.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www3-vpass.dqhew.cn/cdn-cgi/images/cf-icon-cloud.png","fqdn":"www3-vpass.dqhew.cn","domain":"dqhew.cn","tld":"cn"},"ip":{"addr":"172.67.172.218","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u","date":"2025-11-18T04:50:24.562Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/images/cf-icon-cloud.png HTTP/1.1\r\nHost: www3-vpass.dqhew.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www3-vpass.dqhew.cn/cdn-cgi/styles/main.css\r\nCookie: cf_clearance=S99SkvMEj0HcWjyL4_2R.WVA3T6GKIw0WkTnfYwqVxc-1763441423-1.2.1.1-OWgvWiJu0J3sTny2t59xZ..ZeDT_jqhMuWdPXFjAahyC5dQ1FLSXtJh0ykCvddsDRwwQBu0nJ2cFA5C.HL.nqy0CUDTaS5JRMeRhQi07SE9Bp0TcoBsI6MLmYN.DFfNaBB.7Egu3j1n723wVHVnQDFluYynU21CRFT2meudMsFy0OAhJ47WN0Pu8zNbikrb0JUZZQqKTLswGvukwPY4c.Pm9t5baMEMeo0CzKdf4ETE\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 18 Nov 2025 04:50:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 1484\r\nConnection: keep-alive\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JyNbg%2Bk0FD8u%2FRCMpFF2HC53JF55A85xH%2FdVoRnEnXHBH3VUgkpGGSxl3D6xBHyuvuR2EOjcKhVUYQP4ot06nlTX2cwSCN4309D1indlZemG\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9a04d8c77e87b51b-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1484,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 152 x 77, 8-bit colormap, non-interlaced","md5":"3ec81e5e3a4de9fec46ce9e6999b9e27","sha1":"8f03b6857ab8d31feb65f97b1ae6b678efdc2ddd","sha256":"3a223426c67a0a33ff57af68a57fb589fea36af2a6e8f9dae7798c77471e0e58","sha512":"4bb5f094aa9d735e7ecf307edb66cffd0a196663f4d7e05134ebe62b5ebb87843b2ba652356a141de4185e50404c929e184d84adeba1c0ae3900df64a0d9a24a","ssdeep":"","tlshash":"a1316260685cfcc06bd668483aacb82dd07180b37c245063f7015cb6ae331ed71b7786","first_seen":"2023-04-09T13:50:47Z","last_seen":"2026-06-07T01:31:46.413381Z","times_seen":45049,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-18","alert":"Phishing Block","trigger":"www3-vpass.dqhew.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"www3-vpass.dqhew.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www3-vpass.dqhew.cn/cdn-cgi/images/cf-icon-server.png","fqdn":"www3-vpass.dqhew.cn","domain":"dqhew.cn","tld":"cn"},"ip":{"addr":"172.67.172.218","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u","date":"2025-11-18T04:50:24.564Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/images/cf-icon-server.png HTTP/1.1\r\nHost: www3-vpass.dqhew.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www3-vpass.dqhew.cn/cdn-cgi/styles/main.css\r\nCookie: cf_clearance=S99SkvMEj0HcWjyL4_2R.WVA3T6GKIw0WkTnfYwqVxc-1763441423-1.2.1.1-OWgvWiJu0J3sTny2t59xZ..ZeDT_jqhMuWdPXFjAahyC5dQ1FLSXtJh0ykCvddsDRwwQBu0nJ2cFA5C.HL.nqy0CUDTaS5JRMeRhQi07SE9Bp0TcoBsI6MLmYN.DFfNaBB.7Egu3j1n723wVHVnQDFluYynU21CRFT2meudMsFy0OAhJ47WN0Pu8zNbikrb0JUZZQqKTLswGvukwPY4c.Pm9t5baMEMeo0CzKdf4ETE\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 18 Nov 2025 04:50:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 1384\r\nConnection: keep-alive\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5%2Be4FJ3L25s%2F1FL78zkzuK0tt0Mlu1xngfE4Ddet8BuRL%2BYejcHHtnBFXSuqgA6I1HN2GqU%2FjVzr1%2F4hQ5G6pP9MOr9NBPbslNqQOPOA4gBxO18%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9a04d8c77c00c759-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1384,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 95 x 75, 8-bit colormap, non-interlaced","md5":"2c11e67182601007f577f8bf2c72fee8","sha1":"01dc915d4745f00632021c05d3eef634747a9c3d","sha256":"41553a537f85839927155af093b7bfa1987215f474ed038714609cc48812ea3b","sha512":"888ba6bfffff934ab1af236a77da5b6786266561b21294ea8f265e89c565c5a4f5701eab1cf3a5b440df830bd5584bc9f53f210e9613f6aca8762fcd90f49a00","ssdeep":"","tlshash":"9c216399952cd8d8ab4869d0a67eb643c531c5325c60051f7632daa05d102efaba73c9","first_seen":"2023-04-16T05:42:45Z","last_seen":"2026-06-07T01:31:46.408624Z","times_seen":45050,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"www3-vpass.dqhew.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-18","alert":"Phishing Block","trigger":"www3-vpass.dqhew.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www3-vpass.dqhew.cn/cdn-cgi/images/cf-icon-error.png","fqdn":"www3-vpass.dqhew.cn","domain":"dqhew.cn","tld":"cn"},"ip":{"addr":"172.67.172.218","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u","date":"2025-11-18T04:50:24.567Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/images/cf-icon-error.png HTTP/1.1\r\nHost: www3-vpass.dqhew.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www3-vpass.dqhew.cn/cdn-cgi/styles/main.css\r\nCookie: cf_clearance=S99SkvMEj0HcWjyL4_2R.WVA3T6GKIw0WkTnfYwqVxc-1763441423-1.2.1.1-OWgvWiJu0J3sTny2t59xZ..ZeDT_jqhMuWdPXFjAahyC5dQ1FLSXtJh0ykCvddsDRwwQBu0nJ2cFA5C.HL.nqy0CUDTaS5JRMeRhQi07SE9Bp0TcoBsI6MLmYN.DFfNaBB.7Egu3j1n723wVHVnQDFluYynU21CRFT2meudMsFy0OAhJ47WN0Pu8zNbikrb0JUZZQqKTLswGvukwPY4c.Pm9t5baMEMeo0CzKdf4ETE\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 18 Nov 2025 04:50:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 854\r\nConnection: keep-alive\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D16XNRvpkZYd5Jxufsb5aO5xdeHZqt3gRp9fP2mXhfxhyQErgQeIQQ46fMjDFYUzw2mjpRXldKx5fqItE5eI26rBwKDyUpZyHPu7iHoN9jal\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9a04d8c77a39568d-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":854,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit colormap, non-interlaced","md5":"e5577f04b6d92590410e26bd2292933b","sha1":"16946b2c99d98a57f83eac170ce94b012b7d1a7b","sha256":"67f70597a183fbca7fac55d609fbaac5c34bb4d4d32a0530bbbbb42591f2de2f","sha512":"e7ee8db81b1787271aff8ebad8738468e4b019a794d9a2cf78cf286a2557e37c6a1caed9e25c073be7d1073e53f3703e63ef306fd1063829e2a445d6f8cc2fe2","ssdeep":"","tlshash":"d401165525083526dff35e0983fc871a98061ad462370dcfe697953088ff4391397a75","first_seen":"2023-04-21T15:51:04Z","last_seen":"2026-06-07T01:31:46.412739Z","times_seen":45073,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":1,"connect":3,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-18","alert":"Phishing Block","trigger":"www3-vpass.dqhew.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"www3-vpass.dqhew.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www3-vpass.dqhew.cn/favicon.ico","fqdn":"www3-vpass.dqhew.cn","domain":"dqhew.cn","tld":"cn"},"ip":{"addr":"172.67.172.218","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u","date":"2025-11-18T04:50:24.583Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www3-vpass.dqhew.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=S99SkvMEj0HcWjyL4_2R.WVA3T6GKIw0WkTnfYwqVxc-1763441423-1.2.1.1-OWgvWiJu0J3sTny2t59xZ..ZeDT_jqhMuWdPXFjAahyC5dQ1FLSXtJh0ykCvddsDRwwQBu0nJ2cFA5C.HL.nqy0CUDTaS5JRMeRhQi07SE9Bp0TcoBsI6MLmYN.DFfNaBB.7Egu3j1n723wVHVnQDFluYynU21CRFT2meudMsFy0OAhJ47WN0Pu8zNbikrb0JUZZQqKTLswGvukwPY4c.Pm9t5baMEMeo0CzKdf4ETE\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nDate: Tue, 18 Nov 2025 04:50:25 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 6350\r\nConnection: keep-alive\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=e%2FC%2BhYxTMFsjRitHlswYOoED9V43mZHa%2BRi0CrJ58momFRUXswoUaux7Lcstrh0usjwRr0HocdqLePsK6CqHXVibuTWBWWdCZ4eoXh4lXUd6T7qKUg5ZzzblcVzfzOtZA%2FxFbJ6T\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: same-origin\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nServer: cloudflare\r\nCF-RAY: 9a04d8c7ac1ec759-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=633\u0026min_rtt=439\u0026rtt_var=194\u0026sent=38\u0026recv=46\u0026lost=0\u0026retrans=0\u0026sent_bytes=32844\u0026recv_bytes=15692\u0026delivery_rate=21265687\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6350,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (394)","md5":"8e41529ea319252931bf841044522d81","sha1":"81e06e8f6c77dcaf3fd24f0fc695858cf143afc5","sha256":"2ea66710dddd3c193c35b5b8507d746a82cb5b02361f5c6039595a46372fabce","sha512":"7de82975984ee1e6f172d3f4ae41dec2ee57bb78b39ef3a286405798103c8cd32a3b508c8ee1c4c2c3066aa488d29dca99ae39d0bb032d7188cef70af464e796","ssdeep":"96:1j9jwIjYjODK/DpKUBGcG4Fh2TG4FY9JFU24FdfAokKmtmnazrR79ZWaQxR:1j9jhjYj6K/d91wGXKFVMvzrl9ZxeR","tlshash":"5fd14371b1b5027a10b3c2a27595eb1ab9e0c613cbef4494b3dcc2631f9ee82a943194","first_seen":"2025-11-18T04:50:50.656063Z","last_seen":"2025-11-18T04:50:50.656063Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1030,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1029,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-18","alert":"Phishing Block","trigger":"www3-vpass.dqhew.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"www3-vpass.dqhew.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/93954b626b88/api.js?onload=cwlZd3\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u","date":"2025-11-18T04:50:12.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 18:59:09 GMT","end":"Wed, 21 Jan 2026 19:59:05 GMT"},"fingerprint":{"sha1":"62:5E:2A:E5:F4:DE:73:E8:94:15:72:65:28:EB:70:25:A8:D2:E7:61","sha256":"2D:41:D6:2B:6A:BB:89:80:01:28:9F:35:0B:2B:F4:6C:0D:B6:B1:E4:7E:E4:AC:35:2A:E0:69:DB:94:45:F7:D3"}}},"request":{"raw":"GET /turnstile/v0/b/93954b626b88/api.js?onload=cwlZd3\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://www3-vpass.dqhew.cn\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 18 Nov 2025 04:50:12 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: br\r\nlast-modified: Tue, 11 Nov 2025 16:01:18 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nset-cookie: _cfuvid=GcJ.mAfjmYdJ.fYugdAzHKaCL.wTjQ3FZxWDmzRg_yA-1763441412541-0.0.1.1-604800000; path=/; domain=.challenges.cloudflare.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 9a04d87c59745a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49559,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (49558)","md5":"a9d82640b55b86321c027701e0ceb0cd","sha1":"80c36def1db4274f5dd45171c3e707de83797e72","sha256":"6cadddf1717be85c3467494943718b22cc3b75cfdfc4b972d5fdafc0a659f529","sha512":"3b7fca2af25c467c952ace012edceeaed7514287ef2f61e8521929f26a1fe73cd524df190650a1620d4736d9c37226d0de278e2a4f9312c2728cc2c9325227a6","ssdeep":"768:/C6j02IMgj8LUU6FObbgFZsuAz7Ww5jMSmLLNY1d9V9tGcpfBgQf3MVuY8t:42Jgj8LUU6FKXuS7Xm2Dt","tlshash":"89232a583256797226d980e1a17b63437326753ae94ccc50e423d836367cecad233fba","first_seen":"2025-11-12T10:24:47.538879Z","last_seen":"2025-11-22T14:46:39.317283Z","times_seen":5703,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":16,"dns":4,"connect":1,"send":0,"wait":9,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www3-vpass.dqhew.cn/cdn-cgi/challenge-platform/h/b/flow/ov1/1382940965:1763440286:_zLqIFg0DeAZ9MvxmHDEWckP8ec0MrNR8Qqf1x5WX3I/9a04d87b2b8249c5/H8Tp.dQqmDCX9L9DuHTWSMKjB7TUWlGCEjFGJ1k3MsU-1763441412-1.2.1.1-Zoqkc1wNfETzRMcsPmqHYjN7fHw8kEkWq2p8gtVb6L7.k4V0RpzZb8U_IbPKUSdn","fqdn":"www3-vpass.dqhew.cn","domain":"dqhew.cn","tld":"cn"},"ip":{"addr":"172.67.172.218","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u","date":"2025-11-18T04:50:12.709Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1382940965:1763440286:_zLqIFg0DeAZ9MvxmHDEWckP8ec0MrNR8Qqf1x5WX3I/9a04d87b2b8249c5/H8Tp.dQqmDCX9L9DuHTWSMKjB7TUWlGCEjFGJ1k3MsU-1763441412-1.2.1.1-Zoqkc1wNfETzRMcsPmqHYjN7fHw8kEkWq2p8gtVb6L7.k4V0RpzZb8U_IbPKUSdn HTTP/1.1\r\nHost: www3-vpass.dqhew.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u\r\ncf-chl: H8Tp.dQqmDCX9L9DuHTWSMKjB7TUWlGCEjFGJ1k3MsU-1763441412-1.2.1.1-Zoqkc1wNfETzRMcsPmqHYjN7fHw8kEkWq2p8gtVb6L7.k4V0RpzZb8U_IbPKUSdn\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2242\r\nOrigin: http://www3-vpass.dqhew.cn\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 18 Nov 2025 04:50:12 GMT\r\nContent-Type: text/plain; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\ncf-chl-gen: hk5qNxHO9iZMwlak4QmVsjp1ENAxB7qvD+ief5V+0m4=$Z7N8dVJc3eCPreAhqsowvA==\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=YHTm53PGfgX1dCIbSP31ifCAqLjcKzVTwYCQGzZnyIW8gvk3elTQ7IEhYbOMpejk8brK2OOlIwS8OoFwnCWGoChjUY0wrWbkUdaBVGKEJujvxuWGCeYxdMpaB3C66Pjr5uRXKd2O\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9a04d87d7fcec759-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=439\u0026min_rtt=439\u0026rtt_var=219\u0026sent=3\u0026recv=5\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=3105\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16728,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (16728), with no line terminators","md5":"4d0c83405cb430ac8e975b3036fecaaf","sha1":"ea4f79e339f91c08d6213a00e06db222c9e95c0f","sha256":"a53812a5a6f4f0dac1ca7a52980bbb6563828811076e2c85f166651ee97e9600","sha512":"8b22e7a78cc40f819de3452d94dd1bc00900ad24c90e0af4e33cc2c00e30f44d411fb620ed7cab4ef098936c98ac8879a4aace2fb8f358da06d309137a50a689","ssdeep":"384:Hp9YwQeoNrpF9FvOpag5DHXtqmfT+ei7Z2CFZe/vn5mClsmY87:UFNrpF9F2Eg5T9qGT+ey2CFEn5xl9YE","tlshash":"5372d12f8a9d75f5945c32a5307af936373e3ad31b6b70207304867d09c88d93679108","first_seen":"2025-11-18T04:50:50.657814Z","last_seen":"2025-11-18T04:50:50.657814Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":2,"dns":1,"connect":1,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-18","alert":"Phishing Block","trigger":"www3-vpass.dqhew.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"www3-vpass.dqhew.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u","fqdn":"www3-vpass.dqhew.cn","domain":"dqhew.cn","tld":"cn"},"ip":{"addr":"172.67.172.218","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-18T04:50:23.542Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /?convert=ZQGduhen9qVfvIAhyRLK4m3u HTTP/1.1\r\nHost: www3-vpass.dqhew.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u\u0026__cf_chl_tk=DqMLP90OxhSbcXFozfLalnKtoatj8optjriWt9udTKA-1763441412-1.0.1.1-Pgzx0adslSsr_Z_g1GQ.Clbl3lkrAhu5xZxd7c0Eqtk\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 2478\r\nOrigin: http://www3-vpass.dqhew.cn\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=S99SkvMEj0HcWjyL4_2R.WVA3T6GKIw0WkTnfYwqVxc-1763441423-1.2.1.1-OWgvWiJu0J3sTny2t59xZ..ZeDT_jqhMuWdPXFjAahyC5dQ1FLSXtJh0ykCvddsDRwwQBu0nJ2cFA5C.HL.nqy0CUDTaS5JRMeRhQi07SE9Bp0TcoBsI6MLmYN.DFfNaBB.7Egu3j1n723wVHVnQDFluYynU21CRFT2meudMsFy0OAhJ47WN0Pu8zNbikrb0JUZZQqKTLswGvukwPY4c.Pm9t5baMEMeo0CzKdf4ETE\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nDate: Tue, 18 Nov 2025 04:50:24 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 6350\r\nConnection: keep-alive\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=zb6V8QUAepSxdVVcxYpSt0CtoeOX9rErb4VXxJGU1wm%2F0A6jcV5Px2Rf%2FwBFVUWcUPEvZ30o0aRrr6bFPxPR03kbz5FSC%2FRXqLbPwp5VR2LGYM7o0%2BYvDck5Kv2fDW2c4M3qIZyW\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: same-origin\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nServer: cloudflare\r\nCF-RAY: 9a04d8c12ea8c759-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=562\u0026min_rtt=439\u0026rtt_var=26\u0026sent=23\u0026recv=30\u0026lost=0\u0026retrans=0\u0026sent_bytes=18478\u0026recv_bytes=12069\u0026delivery_rate=21265687\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6350,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (394)","md5":"18dd5f15f0601f92d8d4a1d4234bebcc","sha1":"8ff97cd411d200c8461a79ea5e224971eee049e1","sha256":"593813714b6335749d150d52ff735718a91bcac9b893bdffb95ff71b9b766838","sha512":"a83cc9760a7c9b48c69c85187d254a92613ec1d7731d7952b6cc056192fa29f25282f463896f3118b675a0d4f14319ee8b65a34986b925f6923e89c4d61d20be","ssdeep":"96:1j9jwIjYjODK/DpKUB8G4Fh2TG4FY9JFU24FdfAokKmtmnaLHrR79ZWaQxR:1j9jhjYj6K/d98wGXKFVMvTrl9ZxeR","tlshash":"86d13471b1b5027a10b3c2a27595fb1ab9e4c613cbef4494b3ddc2631f9ee82a9431d4","first_seen":"2025-11-18T04:50:50.658915Z","last_seen":"2025-11-18T04:50:50.658915Z","times_seen":1,"resource_available":false,"data":null}},"time_used":954,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":953,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-18","alert":"Phishing Block","trigger":"www3-vpass.dqhew.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"www3-vpass.dqhew.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www3-vpass.dqhew.cn/cdn-cgi/images/cf-icon-ok.png","fqdn":"www3-vpass.dqhew.cn","domain":"dqhew.cn","tld":"cn"},"ip":{"addr":"172.67.172.218","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u","date":"2025-11-18T04:50:24.557Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/images/cf-icon-ok.png HTTP/1.1\r\nHost: www3-vpass.dqhew.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www3-vpass.dqhew.cn/cdn-cgi/styles/main.css\r\nCookie: cf_clearance=S99SkvMEj0HcWjyL4_2R.WVA3T6GKIw0WkTnfYwqVxc-1763441423-1.2.1.1-OWgvWiJu0J3sTny2t59xZ..ZeDT_jqhMuWdPXFjAahyC5dQ1FLSXtJh0ykCvddsDRwwQBu0nJ2cFA5C.HL.nqy0CUDTaS5JRMeRhQi07SE9Bp0TcoBsI6MLmYN.DFfNaBB.7Egu3j1n723wVHVnQDFluYynU21CRFT2meudMsFy0OAhJ47WN0Pu8zNbikrb0JUZZQqKTLswGvukwPY4c.Pm9t5baMEMeo0CzKdf4ETE\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 18 Nov 2025 04:50:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 946\r\nConnection: keep-alive\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YrJSiL93jKC%2FwpGsXoUyCj4PhM4wAoQP4phX1KRUH3KuyqfKL%2BgPEI9mCNWCvY%2FKO3r7O%2FSgLnBqnyUdRKElqndeDBZLQATuw9A6%2BqYyRGsiQKI%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9a04d8c77bfcc759-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":946,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit colormap, non-interlaced","md5":"dfaf0fbb758c874be231335db178381d","sha1":"8f2597eb7ba4c89892aac0559816db3f5280b23e","sha256":"ed732380ee3ff0f2d841784da213c8c05d2b5ae187a5217b419d21cae5cedb1b","sha512":"aa390c353731b29b57276cd0f8fd9ffa8e9f8aa31989e6fdbb961ef9e56bb7da17ac1fe017f2e8d345d7cb32a04b27e8dab76496264bda057023d0624854dd9b","ssdeep":"","tlshash":"f21180a063644d6ed192557f64dcc683182f010c0a7cb11b18de88170f968d317ddf7a","first_seen":"2023-04-16T05:42:45Z","last_seen":"2026-06-07T01:31:46.41156Z","times_seen":45084,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-18","alert":"Phishing Block","trigger":"www3-vpass.dqhew.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"www3-vpass.dqhew.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u","fqdn":"www3-vpass.dqhew.cn","domain":"dqhew.cn","tld":"cn"},"ip":{"addr":"172.67.172.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-18T04:50:12.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dqhew.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 00:00:24 GMT","end":"Sun, 08 Feb 2026 00:58:09 GMT"},"fingerprint":{"sha1":"18:CF:60:08:1B:F1:AE:E6:79:86:2B:A4:0E:38:F4:1D:71:37:74:5F","sha256":"9E:8B:1B:E1:FB:9A:C8:A6:FA:72:AC:5F:84:1D:2E:1C:1B:44:DA:C0:8E:77:10:58:5C:04:09:E3:C3:75:30:FA"}}},"request":{"raw":"GET /?convert=ZQGduhen9qVfvIAhyRLK4m3u HTTP/1.1\r\nHost: www3-vpass.dqhew.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Tue, 18 Nov 2025 04:50:12 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=nk0t0k9gIB7er7w4dRfWV2iow%2B4c%2BpFZTh8Vo3hxATMr4vxSovwUMuE%2F3204y1ilWzgrhAEiMU2dJXk9vqLvQnXwcHiUfoQOPs33DX%2BeF9TStwcMl2eZOJ2K%2F%2F%2FsiPYe98sIJIX9\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9a04d87a4dd5569f-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: chlray;desc=\"9a04d87a4dd5569f\", cfL4;desc=\"?proto=TCP\u0026rtt=493\u0026min_rtt=460\u0026rtt_var=117\u0026sent=7\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=3186\u0026recv_bytes=1155\u0026delivery_rate=7240000\u0026cwnd=253\u0026unsent_bytes=0\u0026cid=18539cadfe933d6c\u0026ts=32\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7450,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (7450), with no line terminators","md5":"27b107ff5a4124037e0770a5049b7979","sha1":"474c6df7feff31d7711095118f562f6f8ec410a2","sha256":"c3b1f898593f5657915ade4e3f6fac251fc534b1e3877cd888e0ba0ec2a922b4","sha512":"d28aa48bfef07fcb14845386ab667f1814d008037251d1767577bf993f65abc3eac931fc9f5474d87647fd1f4ffdebb19a81cad8ac7d4823609192c908ce4df0","ssdeep":"192:PNadBaIk0m76EJwLpF64bUHfaTss3aboO5tUPiyXw:0g0Cp024kfaTsPjfUP5w","tlshash":"19e18deaf5097027636b1ae25c3ef34c93987181a10a97f0a6e0ec6cd3f9e0e415c65d","first_seen":"2025-11-18T04:50:50.660914Z","last_seen":"2025-11-18T04:50:50.660914Z","times_seen":1,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":27,"dns":8,"connect":1,"send":0,"wait":18,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-18","alert":"Phishing Block","trigger":"www3-vpass.dqhew.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"www3-vpass.dqhew.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www3-vpass.dqhew.cn/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=9a04d87b2b8249c5","fqdn":"www3-vpass.dqhew.cn","domain":"dqhew.cn","tld":"cn"},"ip":{"addr":"172.67.172.218","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u","date":"2025-11-18T04:50:12.443Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=9a04d87b2b8249c5 HTTP/1.1\r\nHost: www3-vpass.dqhew.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u\u0026__cf_chl_rt_tk=DqMLP90OxhSbcXFozfLalnKtoatj8optjriWt9udTKA-1763441412-1.0.1.1-Pgzx0adslSsr_Z_g1GQ.Clbl3lkrAhu5xZxd7c0Eqtk\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 18 Nov 2025 04:50:12 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=BWArkNvq%2FkmTuWTikxjRxRCGuQD%2F0QnR3V4Ci5JkTgo1Iq91RzhKahwig1GDvP5wRfN7PG2lZF7sBGBZVgPFwW1i6DXL3R4MsmwVymC%2BMFrPNJgO8Dc0hvW8DElj3qk8uR9Q%2BXef\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9a04d87bcc855688-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=522\u0026min_rtt=522\u0026rtt_var=261\u0026sent=1\u0026recv=3\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=560\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":122910,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"af49f67c5028ac60a8ba376e29c05fb3","sha1":"223e7dfa6cf657347dda850c5c73a0302b8baf78","sha256":"801d0d1a9f6584a4d3690a4dc0ce95ba4498ed86329f347ab4ec6665d1fa2798","sha512":"46b01e9adaf476ffbbd230d0390fc9c5d09a0a7dd5591800190f5ab4f8eb6267ff53b5cd9e77e13baee16d5597ac8d13a8f241c9cc53cd97646ca092f9db38c8","ssdeep":"3072:igL7T+pNlJpQRfbzVLCicdcebd0mViLQkip9sq0gn5J1:lXyp9Ggf1","tlshash":"b4c3c88e38ca75465332746c456b39ceb17a6c8425180d3df62099f074e9b3a72a7ff8","first_seen":"2025-11-18T04:50:50.662258Z","last_seen":"2025-11-18T04:50:50.662258Z","times_seen":1,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":1,"dns":1,"connect":1,"send":0,"wait":23,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-18","alert":"Phishing Block","trigger":"www3-vpass.dqhew.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"www3-vpass.dqhew.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www3-vpass.dqhew.cn/favicon.ico","fqdn":"www3-vpass.dqhew.cn","domain":"dqhew.cn","tld":"cn"},"ip":{"addr":"172.67.172.218","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u","date":"2025-11-18T04:50:12.477Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www3-vpass.dqhew.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u\u0026__cf_chl_rt_tk=DqMLP90OxhSbcXFozfLalnKtoatj8optjriWt9udTKA-1763441412-1.0.1.1-Pgzx0adslSsr_Z_g1GQ.Clbl3lkrAhu5xZxd7c0Eqtk\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Tue, 18 Nov 2025 04:50:12 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=QEoWIzI5%2B8wNRgjn%2F5Hz3aEqDRCWTHQhOs5AnAxsV1skAJDMIY8%2FkfmrP%2BxAjPy%2FsRHeBDr84CNufys%2F5YgevlP5yeAw13ImS71ft%2BG9t%2FqnlprW5a%2BMsydwM45ZuXE7CBho6sDx\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9a04d87bfc955688-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: chlray;desc=\"9a04d87bfc955688\", cfL4;desc=\"?proto=TCP\u0026rtt=1003\u0026min_rtt=522\u0026rtt_var=155\u0026sent=36\u0026recv=22\u0026lost=0\u0026retrans=0\u0026sent_bytes=49122\u0026recv_bytes=1078\u0026delivery_rate=37696784\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5655,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5655), with no line terminators","md5":"3cef324a9c5b0a0de7f2a9dbf2783316","sha1":"cbcc5a7640dbfa098117fcda779514f18c942bf8","sha256":"7a0198e3d0120917b639509e447965ed27d785abbcf4a067c827febb34e69bf7","sha512":"83b8590b9825bb3947f6f29a924343c679330464074a124fc54b5fd1b15b36243489ecb8baebd892e7fe6966938af4c9883e8a18d8f83c7d6dea4f8fe2a64107","ssdeep":"96:PNybXZtIEb0EFW87IB8I3+sBhsMfcDI/VvEm2I2T/NNumq5zYJYzueh8pnmw:PNadBN1whRc6VvEm2hFNfszY+yWw","tlshash":"c1c15dfbab412033e3fe0ba5447bb36460146192c70358d4e091e93cd3eee07465e2d5","first_seen":"2025-11-18T04:50:50.663574Z","last_seen":"2025-11-18T04:50:50.663574Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"www3-vpass.dqhew.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-18","alert":"Phishing Block","trigger":"www3-vpass.dqhew.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www3-vpass.dqhew.cn/favicon.ico","fqdn":"www3-vpass.dqhew.cn","domain":"dqhew.cn","tld":"cn"},"ip":{"addr":"172.67.172.218","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u","date":"2025-11-18T04:50:12.506Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www3-vpass.dqhew.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Tue, 18 Nov 2025 04:50:12 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=A9LDAd6zYvcWoAD8kYah2hUZD%2BU95creqiMFyDCjCeTf1PRjvzrRPiYxwbAkRT%2BdLfp7NANm4aFfESvVzwLCtz7gT8PZ26q%2BBpUAvAJY0%2BPdU3t6NSqkp3MBG613KhwAwLxRFaW%2F\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9a04d87c2cde4c11-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: chlray;desc=\"9a04d87c2cde4c11\", cfL4;desc=\"?proto=TCP\u0026rtt=417\u0026min_rtt=417\u0026rtt_var=208\u0026sent=1\u0026recv=3\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=396\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5506,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5506), with no line terminators","md5":"eed38d42f7ab3eca63410a9a2ba9ee4e","sha1":"dc5ef8ddfb54b97c5d339708832720ec82906395","sha256":"3be725c8cbef7cad2239e48ed7119f5ebfc982cf8f25778fc3aa9c794908f87f","sha512":"130d1049c31e2960001b31427426564a518397871e8ec03ce681fcb0e9c23e3428266bb371f3c08d5366e9365036aeeec68dc10477e37c36050a61bde614fe76","ssdeep":"96:PNybXZtIEb0EFW87IWDpQyhYypzWpyJWZIzBrBMPxYZTYzueh8Tyyhmw:PNadBtVlQpyXzMaZMylkw","tlshash":"39b15befa503100fa7ff4be9887fb304d251e095cb07a19af551e64ca2ded06826d348","first_seen":"2025-11-18T04:50:50.66473Z","last_seen":"2025-11-18T04:50:50.66473Z","times_seen":1,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":1,"dns":1,"connect":1,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-18","alert":"Phishing Block","trigger":"www3-vpass.dqhew.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"www3-vpass.dqhew.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1413822615:1763440286:kQ0_HTTZV59rbHToRRNdQfWdcMfhDGJPZ3qDd6BDLGk/9a04d87e2f344e4c/kem_s1S.5rYJZKedpsO4Sk0jvKTogG9boGN6JcJZXVM-1763441412-1.2.1.1-p2kjc6fyfE5HAazoUZi7itWF_93_aQ5w3PMwfhIZA6q9FHBVzDlfHlVZ6.XNQSdF","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto","date":"2025-11-18T04:50:17.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 18:59:09 GMT","end":"Wed, 21 Jan 2026 19:59:05 GMT"},"fingerprint":{"sha1":"62:5E:2A:E5:F4:DE:73:E8:94:15:72:65:28:EB:70:25:A8:D2:E7:61","sha256":"2D:41:D6:2B:6A:BB:89:80:01:28:9F:35:0B:2B:F4:6C:0D:B6:B1:E4:7E:E4:AC:35:2A:E0:69:DB:94:45:F7:D3"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1413822615:1763440286:kQ0_HTTZV59rbHToRRNdQfWdcMfhDGJPZ3qDd6BDLGk/9a04d87e2f344e4c/kem_s1S.5rYJZKedpsO4Sk0jvKTogG9boGN6JcJZXVM-1763441412-1.2.1.1-p2kjc6fyfE5HAazoUZi7itWF_93_aQ5w3PMwfhIZA6q9FHBVzDlfHlVZ6.XNQSdF HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/wrw7c/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal?lang=auto\r\ncf-chl: kem_s1S.5rYJZKedpsO4Sk0jvKTogG9boGN6JcJZXVM-1763441412-1.2.1.1-p2kjc6fyfE5HAazoUZi7itWF_93_aQ5w3PMwfhIZA6q9FHBVzDlfHlVZ6.XNQSdF\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 33164\r\nOrigin: https://challenges.cloudflare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 18 Nov 2025 04:50:17 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: br\r\ncf-chl-gen: hZW/F2uMtoBNWo1IrtI3JXfTCrj0KED49YedaA/p0T6ReNPcMElsCRxWqAGjiWsh$F4VNZGv0J13UJkucd/zjYQ==\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9a04d89bbbf64e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28796,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (28796), with no line terminators","md5":"3d2a209885d17fa711325f7232bad31e","sha1":"cc39f1f70b9c7ff60af120ce14d376507b9fbc1c","sha256":"2f6cc7ada7483198a474d4ccd0dcbafe3d760185975506951b6b09a41ed13278","sha512":"975549229ee4f4990219105effb9b15cb561f9ed599fd14bb246c11beae393163de7226620e825d8b15bbde23950fdc34bf1330df0d450d81d87be6368c11f00","ssdeep":"768:Gb9UHyze9lJd+UwNyUhLZuIfediN9HdmQ3:hHyiv/+VyuL8hdiNpEQ3","tlshash":"72d2f173f4de0e83a5dc43e6d7365097a62b0c9b0c7076e6b3c5b08494cb0656e25a7e","first_seen":"2025-11-18T04:50:50.666728Z","last_seen":"2025-11-18T04:50:50.666728Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www3-vpass.dqhew.cn/cdn-cgi/challenge-platform/h/b/flow/ov1/1382940965:1763440286:_zLqIFg0DeAZ9MvxmHDEWckP8ec0MrNR8Qqf1x5WX3I/9a04d87b2b8249c5/H8Tp.dQqmDCX9L9DuHTWSMKjB7TUWlGCEjFGJ1k3MsU-1763441412-1.2.1.1-Zoqkc1wNfETzRMcsPmqHYjN7fHw8kEkWq2p8gtVb6L7.k4V0RpzZb8U_IbPKUSdn","fqdn":"www3-vpass.dqhew.cn","domain":"dqhew.cn","tld":"cn"},"ip":{"addr":"172.67.172.218","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u","date":"2025-11-18T04:50:23.438Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1382940965:1763440286:_zLqIFg0DeAZ9MvxmHDEWckP8ec0MrNR8Qqf1x5WX3I/9a04d87b2b8249c5/H8Tp.dQqmDCX9L9DuHTWSMKjB7TUWlGCEjFGJ1k3MsU-1763441412-1.2.1.1-Zoqkc1wNfETzRMcsPmqHYjN7fHw8kEkWq2p8gtVb6L7.k4V0RpzZb8U_IbPKUSdn HTTP/1.1\r\nHost: www3-vpass.dqhew.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www3-vpass.dqhew.cn/?convert=ZQGduhen9qVfvIAhyRLK4m3u\r\ncf-chl: H8Tp.dQqmDCX9L9DuHTWSMKjB7TUWlGCEjFGJ1k3MsU-1763441412-1.2.1.1-Zoqkc1wNfETzRMcsPmqHYjN7fHw8kEkWq2p8gtVb6L7.k4V0RpzZb8U_IbPKUSdn\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 4567\r\nOrigin: http://www3-vpass.dqhew.cn\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 18 Nov 2025 04:50:23 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nset-cookie: cf_clearance=S99SkvMEj0HcWjyL4_2R.WVA3T6GKIw0WkTnfYwqVxc-1763441423-1.2.1.1-OWgvWiJu0J3sTny2t59xZ..ZeDT_jqhMuWdPXFjAahyC5dQ1FLSXtJh0ykCvddsDRwwQBu0nJ2cFA5C.HL.nqy0CUDTaS5JRMeRhQi07SE9Bp0TcoBsI6MLmYN.DFfNaBB.7Egu3j1n723wVHVnQDFluYynU21CRFT2meudMsFy0OAhJ47WN0Pu8zNbikrb0JUZZQqKTLswGvukwPY4c.Pm9t5baMEMeo0CzKdf4ETE; HttpOnly; SameSite=Strict; Path=/; Domain=dqhew.cn; Expires=Wed, 18 Nov 2026 04:50:23 GMT\r\ncf-chl-out: MtxLLPXEqFxun9DWH+pJRxNX3gmw3UvP2UP4bJcWcymyTBsSKA7OtHmcgfXVsQS8ElIju+oT8mGx7wI3L4zF0w==$XEn7S0j6KTfSdLUSFhPxaw==\r\ncf-chl-out-s: It+flkxNLGAcFwTusN33MWhHs0uGvML0YLQUDxW0a7K/iti6dDuEks6LaGnaoOfZoBpoSIjTvSP35ggZ7qdVeGoiIDbCtXoaUSRKuN/JP+NPydssGzMdUm/g8GdtFNnpvyTun6YzbKBzFbI04towhBmx3pm/6gDpcvutpVaflPNYumzoREmCBEEou48xt59jX0cjKAg4kWqyaBJJcpS5QZwtESyjkQnj/prpCBtxkq13ehMS6Z9/RCKGqglTjGQzfFbUgJ9dJ12jNvLR27BSmZgewUv7JSNGxwYEd39K0zNpXVbtuBdd92NlRVpI33TOn7cvM3utT9pLUYUeHu+1RHqlL3DRFw/AvbAlW8WAGmURo459cYr5d8qhdnuS6gZb$80WJe/68yOicmhSEuol7Zw==\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=soRVTTRoMixbhC9qz3ReMfWCdne5oozr%2FuVSCPfQgihCAnnfEPmxxXhmLWYvLBHyXNrzwYbsBnMGDKMj2zFPfWt8bhS%2BpaiCF0Hrm4uMnYJwZNzLgKkU8IYBEScKw0CnGq4ORb1T\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9a04d8c07e30c759-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=564\u0026min_rtt=439\u0026rtt_var=122\u0026sent=16\u0026recv=21\u0026lost=0\u0026retrans=0\u0026sent_bytes=13512\u0026recv_bytes=8535\u0026delivery_rate=21265687\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4168,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (4168), with no line terminators","md5":"b58b1d0e0f3c7f43c018e128e2d1ef86","sha1":"8a00afa29b55e13aaee55fd90839151f3d03f18f","sha256":"f042c8784820a7c04548398327afcc51c16d75d00ecf881a74a127be4efeb775","sha512":"f9635867f3e959919b37ed942a6b80a282efddeef9f681ea9b06a4c70609a11b07f553de00c61a78ee1018054c132b9d70e7ce3398909de6a183f7ca723efdda","ssdeep":"96:OUa+KIMaVK44mpWBBOSQZKrUz0bRE4WBv2sMP4bO2LYgbHDHn:jKjB4GUSQX0bmB+sG8O20AjH","tlshash":"ae818efaaa6ee69a1172721a79cb53fc2a0c80d5b4d3e961f9cd684b4d9f4001c3d0e4","first_seen":"2025-11-18T04:50:50.673891Z","last_seen":"2025-11-18T04:50:50.673891Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-18","alert":"Phishing Block","trigger":"www3-vpass.dqhew.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"www3-vpass.dqhew.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}}]}