{"report_id":"81d4c88a-e8f2-40d2-aba0-4593e55468bd","version":6,"status":"done","tags":[],"date":"2026-03-02T13:24:41Z","url":{"schema":"http","addr":"qurex.top","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"104.21.54.43","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"qurex.top/#/","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"title":"qurex.top/#/","dom":{"size":64801,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31794), with CRLF, LF line terminators","md5":"74b1bb12626e37a4739de681d2e09ca6","sha1":"c1e6653ff72e9e23bc09ae4a4f938037428961dc","sha256":"238786f27bfa82194e092ce3060fec4eebbc7e7739bfc52db24547cb14e01572","sha512":"7607389ebc8b2327e2b29c05389121a4555dc1ffd17512636a3acef57c86dbf42d0b0e7668ae9e2652f671c498ee7a90767a25f3a08d5df550780d5d87fe58f5","ssdeep":"1536:RiJ0PfxWyp8DSqmfV/8DSqmfjSJBQSJGQjrMyJUTo8cQxrSSJdjb8HHQaUJ6rmZY:RiJ0PfxWy8S87x7p","tlshash":"58533f3876433463057b98e0b0e45f09b2a39b3ac2254254b7fd236a77dacf16e563e4","dom_hash":"domhashd9bde8300da4554248c3bd419bd05167","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"qurex.top","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"104.21.54.43","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-06T13:24:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"qurex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"qurex.top","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-05","domain_rank":0,"first_seen":"2026-03-02T13:24:43.530736Z","last_seen":"2026-03-02T13:24:43.530736Z","alert_count":36,"request_count":36,"received_data":2310274,"sent_data":15964,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"huobicfg.s3.amazonaws.com","ip":{"addr":"3.5.159.87","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"domain_registered":"2005-08-18","domain_rank":5277579,"first_seen":"2021-11-22T07:40:25Z","last_seen":"2026-02-25T18:13:49.431367Z","alert_count":0,"request_count":14,"received_data":307365,"sent_data":6301,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-01T22:18:12.522658Z","alert_count":0,"request_count":5,"received_data":16053,"sent_data":2314,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"124.220.203.60","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-02-25T18:46:08.416376Z","alert_count":0,"request_count":1,"received_data":578,"sent_data":440,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"qurex.top/assets/pages-index-init.3a97d348.js","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9155427197270653478903d329677c0","sha1":"a2586b48de6fb64a0920d92919c26b3739437117","sha256":"6add3c61de8e4faae42e519630965b318ba05f7235aa069736122e3583971633","sha512":"df374713247dafe5cb79f04f1871b7b621634bae22631c46dcac027db84bd262f6069862e31dd1ee95dcdc5b119e2298de2213e679a0ca3dc4eb94609c353a27","ssdeep":"","tlshash":"ce3174572a7f6a7b6b220895b4ec1ccc43791f491832e9cd7d575c1b66b2d4908dc331","size":1490,"data":"","first_seen":"2026-01-07T04:34:13.771606Z","last_seen":"2026-03-29T15:54:21.086009Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/#/pages/index/init","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"1ca49f0e439cf34669924908e59b2897","sha1":"efea6ef6bd12f3ded99d07b429c6af21c23ed826","sha256":"9f9ee6011e8f88513c2761906180f430478c9d9835d4e74a211cafd3c79b955e","sha512":"f5dfd73abfc4c47819a1c10e68b974d2253a67fd9fb113e510809ee5ea650d5dd1f003dedcd6f88235e4e5b696f28c5e2f18526e794579f3b9f5a1d7db17bb21","ssdeep":"","tlshash":"fec08cc4b0c22d102602a91010af24e49024406770481b168c94dc882e224b09237e98","size":141,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-06-08T06:01:07.246399Z","times_seen":538,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/#/","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-06-08T11:27:23.68344Z","times_seen":5628,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/#/","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7c2bd803183c9eb6ccac9978d49fa819","sha1":"224d7d7beedd5b01f1cb107495ab1f2e5bf078d2","sha256":"7117536f358653602a49d94190c1371644f9cbfe936b0ad9dcedf867aec56daf","sha512":"718f3f630dd7beed360640387b56117d94ab54b03104530983d343c4ab6b02f51a4e1b399cd9532870bd4923c3f3247da65edb90185a7ee926e4b38e89f090f8","ssdeep":"","tlshash":"cec02bc5b0c33d002602a81021bf39e490344027704c1b43ccd4ec483e230f08233edc","size":135,"data":"","first_seen":"2023-05-08T20:49:31Z","last_seen":"2026-06-06T04:24:34.513111Z","times_seen":358,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/assets/tm-app.a1426a00.js","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3aaac02fbf9a4691a65db4ebf78bec62","sha1":"be9dfcd9c1ed3661670b9d63066ee174e0a591a5","sha256":"9dd91296adfb96c91ce36e4276ba97597364b7a8ff51ee0b47df549b286a9699","sha512":"e838d8d3867b92b6a2ccfbc71c99ec56c839ed5fdbcd40454876b05e67f37f55340fd868be2c15921466bb9362e126e1b884ddb814e40b44c730fdb9a60ad0d5","ssdeep":"","tlshash":"6451963c31e9b27c623746ce5476574c184bb76d4a326bf6d27a78303080c28725fb68","size":2643,"data":"","first_seen":"2026-01-07T04:34:13.791702Z","last_seen":"2026-03-29T15:54:21.093003Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/assets/tm-image.7b350d7e.js","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"5a33bfaf12262c3f9c2622cffc9de4ba","sha1":"51130cbeaaee9d42f5c31c49a2ca79deeb3dac0a","sha256":"fe8cd65eaf2e6462d3de8671af5f482bf7cf74b9cbd98ef92ff98eaceef2fed5","sha512":"e2b041994927faf4c931b782c6f37641811d0c5dd9d6e4624247b82ca29d3043577770be847514e7427cefaf5a28495aeb96bbe2da70779f7556814cd95b89c5","ssdeep":"96:gcFKkON2VYyRTzmxmMRSfzHmt4apODtUwfUNBAlAIgby1N:grkXmxmMROzMpOu6UNBAlAsN","tlshash":"6c91b53c31bdd93f69fb45e9a091994a54059f2ceb30b7d0bae140aad1aec840129f3c","size":4227,"data":"","first_seen":"2026-01-07T04:34:13.754429Z","last_seen":"2026-03-29T15:54:21.093798Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/assets/tm-segtab.922cbf07.js","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"1b57b84328cad18094b4da95a78e54b0","sha1":"ddd5d56789d5acbb164a0dc651cbeb877d36dc74","sha256":"f3e9b198b7ccaccdf24f848df80bb58e95df52b4643fa2b1f406218d1c1978c3","sha512":"a6a99f9a51ceb9e7a8bc8f30f665ce092889c47abe506409d3e95c06ed0ad2a0123b9050582a076559515c2aeab41c746285a9ac5c5ea1d09eb300be06d98f7a","ssdeep":"96:OvHXgKZgoBReFcJdnGW00LggbMiY4FCx/PLt+pixOwCCdcbILzJ3Cuq9:UXFZVwFc3HzcG4/PL2OyIJyuq9","tlshash":"94a1d878723ca83d37bb4965b07251815209c79fd739a0d271e8047552e2d805addf3d","size":4742,"data":"","first_seen":"2026-01-07T04:34:13.805133Z","last_seen":"2026-03-29T15:54:21.12021Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/#/","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7e98f35f23795ecb1a944bbefa9e40a7","sha1":"9f6826623e1d677abe50f4755523c8986d229bc3","sha256":"2f34fa8f7eea8ee00070214da3db09639f6d9b89111c8ca090fcf04954be6ed3","sha512":"7cf3f08fbd52f6a4f645721a24b3d1cabfe28d13473087fb0a98eb47438edcfe9fec95d4b4ee73b2f4199e8f896e8f161d1a10175c400ee88e1d2d030dfd17da","ssdeep":"","tlshash":"8ec08cc4b0c26e002602691415af28e4a024402671481b038ce4d8582e220b08233e9c","size":138,"data":"","first_seen":"2023-05-05T08:00:34Z","last_seen":"2026-06-08T06:01:07.244534Z","times_seen":469,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"437794e6e5838d19ff9019b684a23912","sha1":"015679bcf286fccdfdcc59157de255c052e75a69","sha256":"f7e92672b8004e2f40d7a0fb2d6ff907deeffacd4bf8bca53190d570a5ab35a5","sha512":"e6fa5cfdfd535613371d955b9b03b9a14c37e33a4b171c3d17f90adf917d0664961fb6ea9344bc27777eb9500083acab12a130551aa4277f55f219bdb17f0d8d","ssdeep":"","tlshash":"6be061c250a7295c0520816a355ec5131f6505739e818d513c8c6765cff9e4bc06d858","size":421,"data":"","first_seen":"2025-03-11T08:52:08.619783Z","last_seen":"2026-06-02T07:26:04.061512Z","times_seen":225,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/assets/tm-button.3c1b931c.js","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"cc16a3304f097fd6a154bea634079231","sha1":"7681311673e36ab8771ab40e204f2e09c4eb6840","sha256":"10b5081295f99911c4757f210a780dcd154435dce6078a234de5cbfddff94ef2","sha512":"c16132167f6d0384f20b61a682a981894860ff7ce5e157272ce956fe45c66a4e3bfe67c642d7fb8627add5fa3cc36155ec152de6da5820de374d50eb99f43950","ssdeep":"96:RgoKHUD//UusxzD9831y6MX6eA6l5+Vhc8/YFs2GXUx8TCZ8NAwNGgEknZ1Q3:u9m74Iq6ClEApYUSTCUAwNGonZ1Q3","tlshash":"4ba1f9143179cdbb6ecbefdc3054251221259b6ee53475d1fea4603613cb8e590ccb28","size":4763,"data":"","first_seen":"2026-01-07T04:34:13.742085Z","last_seen":"2026-03-29T15:54:21.053586Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/assets/activity.10f27a68.js","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"152af13d72552a5306e866dafdcb8f1b","sha1":"e9fb555a7aa29f7743af2460580350eef63f94ec","sha256":"84a8b69d0eb3474accf963cb649baa06e998a008a6f1fd56f67bea5420143656","sha512":"1aae11aa01be5d2ad4dc0b1b8d51ecb9d9eabb6b4e016d9ab1bbacf9181056f39d6bc1cbcce6e6bfdb2ca9f4bfee5e9b474663c437b335038af04a5838a3d64d","ssdeep":"","tlshash":"30e0201e2110b7b3850200a780995943a317edd01e0a86605e09130c75f519986fd47b","size":319,"data":"","first_seen":"2026-01-07T04:34:13.792577Z","last_seen":"2026-03-29T15:54:21.079655Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/assets/pages-index-index.9c3381f9.js","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e43766fa0051a29128bb72bd3deed516","sha1":"07ba8dcc7720b0ec5037ac4ee538bcac51713806","sha256":"5ab5ea68b1e55dd103fd34f42179d181e496bd977e3668bab926e4059fd8d7b4","sha512":"bd03255e746f60046dc1fcb4536fc8deb8ad172cf4c13b603d54b7524f6c552431b61b2a3377fea69ddbc836a1515821ec5fb86ae92435139806c5a4d3f62729","ssdeep":"768:wgiccc/+hx9++oqCQFRJOz5OAv5eq8DSqmfYTmJOfUXzC2jOiGcuH6ckrTdbqnI9:wU+o10e57B8DSqmfYSJxzC3ne9unkPfd","tlshash":"93137cb1f56d8a7e6313e98dc8604405259d9e8ea229f480bbfc9d353393940adfc778","size":44480,"data":"","first_seen":"2026-01-07T04:34:13.747329Z","last_seen":"2026-03-29T15:54:21.099569Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/#/pages/index/init","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"1d0663d39d873f0eb6f219b0801c983c","sha1":"2da20244f55d5a15a7a0695b8fd3dcedad9f3cd3","sha256":"67602cc36eb6e60ad520d10b21efd241ce5e573e9935a6901302dcca11f36ac5","sha512":"77e9b49e9a35d6d792ce3cb1b552b1c44ab4ae81a5ad37b9149421dfee57450e0346d0cfed0b1c131f2d050e3f69153fe1bc1da2848fd0351dfba6f15fd1e8c2","ssdeep":"","tlshash":"02c08cc8a0cb6e001a02665015bf25e4a034402a70489b038c94d8482e230b0a233ea8","size":143,"data":"","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-06-08T11:27:23.678066Z","times_seen":294,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/#/","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a15c447f08875de3100ed8997d5994ea","sha1":"b77d1c8bbbbcc5d0ac532e1362d796508029192f","sha256":"edd33609ab9f781e02fcf2c8e5ecd9f1e9b7bfdcbb576f01e9b2e78747b47e47","sha512":"55050de7b026795f86b16a8f6a67428555e9d05c394d87abf47b1bde43968be03e16569d97d1f38f6d37a1cc8b9bb5349cabe354e3def7dcbd5187640e3ac7ce","ssdeep":"","tlshash":"b8c02bc8b0c33d002602645010bf39e490344027718c1b43ccd4ec883e230f09233edc","size":139,"data":"","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-06-07T20:41:05.682835Z","times_seen":795,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/#/","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"6db6ac15339e58de97d8d22aec944a2b","sha1":"3b0ba47693be14f9a46402a4beb1c28940c20156","sha256":"53168f253d02b1350bf6325f97d206ed8a5ba3f13eb4deec32d0055bbbaaf629","sha512":"bdbd0f0317bafa782eaf1e3debc4ebc60248d3784840c1c12cda5b3ce7b9cec50be3a487fb81e1486e1dba36243e9a33a44d0f5a9ed10bb267e7f61349c0e5a2","ssdeep":"","tlshash":"16c08cc4a0c26d002606691010af34e49024402670485b028cd4e8592e330b08233ea8","size":138,"data":"","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-06-02T07:26:04.063096Z","times_seen":274,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/assets/index.94423f30.js","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"35ec31ddeec38edf927f29f4d60ead89","sha1":"407ca6415899064c70e37235e0b0268164b01b70","sha256":"c64a23e07a5e58479e4d9d125c732a913d53ae266d40f3e2afa8a6d1ca634881","sha512":"fbdc931d8db698206b1f62d875b76dda67d63aac99915bfe2223fe2b34e7020b3f496df2bc44b44cf30455f2514b2949801150610b0f86dfc1a43483ba135bb5","ssdeep":"49152:Xtj4tR8DEGp5gdlnZXSNf83BAdCyFITsY/FOkIQ24PrxG4hIt6uAUrbm+N2lZBb2:Xee","tlshash":"8d75c6c6dafa580e8be4f055f9783d8e1c4059c0e818c3baac7d59f7e7ca144969236c","size":1682414,"data":"","first_seen":"2026-01-07T04:34:13.820275Z","last_seen":"2026-03-29T15:54:21.138204Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/assets/tm-drawer.5d58d0eb.js","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"9828d6632e643aeac00841a9d29fc4cc","sha1":"6293bb62deadb6988e0342ffe7eed6ccf768a2c6","sha256":"5da17850b2737a433be36e8f17e7eb613991b2c1768c66d252fd7c54f4b4f6eb","sha512":"5cef8f54de4073c62872e4e24fed53fe6b9062c05485f32835c81bc2a48b291e346be3ae8cf1403c37c8f073996102dc0c56bfa766ee348f1d9ce623728d3b6c","ssdeep":"96:3OvXKw3F5RUtxr6SDZbCzQrcQw2D5IWW6iQ/IDu/PXmVWaNmz1Xl5o+H+g:SaemBNoQwoP3aNmz9g8+g","tlshash":"91c1b898746e2373a6b709b5c072480d133d1f5d957876c1f2e2193a36f6d484dd8bb8","size":5674,"data":"","first_seen":"2026-01-07T04:34:13.761339Z","last_seen":"2026-03-29T15:54:21.073458Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/assets/tm-tag.ef13b4a0.js","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"eb393e53f528c54b5077717c93601281","sha1":"0a8b6a76c3cd1ee79357a5ec08a03e5b525694a0","sha256":"ea49643a58db0ad65e3c4eaa51f07ef35e28eef1f61e9163595ddc831c931635","sha512":"c4d912e3ae23e129c44694541950e791b99e5f2306e4e53f2f715a23d28ed43da200165d1227e541f904d723950ea7d5b5469b296273ae5f18d9ac9cc0903135","ssdeep":"","tlshash":"198176b43d1448f696ff4acca172ae0d492a256eac357ff2f4a121245cf1915b04e73c","size":4006,"data":"","first_seen":"2026-01-07T04:34:13.753428Z","last_seen":"2026-03-29T15:54:21.07758Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/#/pages/index/init","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a75ab93c4db9073c13fb419ef7c2c46a","sha1":"856072c405dfaa708e23622cad35d78372e23f07","sha256":"da656c2f3889dfb9eaeecb26f30c2b5ff695b991d6c5fbdd8f8978fc0ed2907e","sha512":"0dd74743f8822d86d634c325d0f3f6148960d7c9ba0cc668fde3cfe6475b7a0ffa5ab23cc7f229fd0313dcf0d1d427c60df140423c158354408f96f86faba2bb","ssdeep":"","tlshash":"cec08cc4a0e62e601a02692418af28e8a0248026b45cab02add4d8482ee34f48233e98","size":149,"data":"","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-06-08T11:27:23.684046Z","times_seen":1002,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"3d5272693eb411e5b8b13a243f76c720","sha1":"6a586ab8e0a4bf12bbc60eea6ca9f2418625a22c","sha256":"9582f31f9eb892b8823a780e579d464d54e26d97d65dc327d2b2bdd92d47c4b8","sha512":"03fc5614f48fc9a2e3c4a30626fdbacde74c1fda09ffa9d1cde0393d31cd5fe1588e270c241f4cedb473c6e5cc224ff16c141468a29519ea6159accf3e3a18f1","ssdeep":"","tlshash":"a4c08c8350e2080c8210861b848880050b8808b04f9308a22cd85b7ecc9ae88c8f804c","size":148,"data":"","first_seen":"2023-03-07T01:10:06Z","last_seen":"2026-06-07T08:18:02.151537Z","times_seen":15899,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"qurex.top/assets/tm-button.ddf396b1.css","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:23.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qurex.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:34:21 GMT","end":"Sun, 05 Apr 2026 23:32:45 GMT"},"fingerprint":{"sha1":"2E:82:F9:BF:36:A0:22:B0:24:B6:D1:4E:7B:45:33:09:CA:8C:30:29","sha256":"A0:CF:D9:C0:99:34:D5:29:DE:FE:BA:5E:64:43:CE:BF:9D:1B:DA:B9:89:5E:6F:4D:B1:3A:D5:A2:21:44:75:F5"}}},"request":{"raw":"GET /assets/tm-button.ddf396b1.css HTTP/1.1\r\nHost: qurex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qurex.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:24:23 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 01 Jan 2026 15:59:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 03 Mar 2026 01:24:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9FM7EKkP9ooAfVZIcwCbagPNSxt9m2f0W4rucuZ8fz%2B0AslyF%2B7et5VeH%2F2qhBNCvKMXl%2F%2BqykvTlcoM7xFfY5sXKWnnZP%2FvtA%3D%3D\"}]}\r\netag: W/\"695699ed-12d\"\r\ncontent-encoding: br\r\ncf-ray: 9d60b8adbe824435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":301,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"0e9f614f6c6215d066c9fdcfa7645776","sha1":"2728ef74e26aa186fa6e3f87bf11cedaa46b42de","sha256":"0c7a24f6669840fcb16ab71c6c1b55d1c1f72dbc269ed86d96e21c5fabd21b55","sha512":"c0e93448c7e9834b782b41a6bdc249c9c5eb342c2111bdea2a1833fb39f3c93653442f0eed89f45a058633b1ecf2509e5bf1226ee4c21d771375eea8c8af080d","ssdeep":"","tlshash":"33e0c2f1398e408cb537e3c2e058c015aed02513b9542b291ee402c10e0209bb424f49","first_seen":"2023-04-30T07:16:13Z","last_seen":"2026-05-17T04:40:35.468398Z","times_seen":240,"resource_available":false,"data":null}},"time_used":603,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":603,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"qurex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/favicon.ico","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:24.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qurex.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:34:21 GMT","end":"Sun, 05 Apr 2026 23:32:45 GMT"},"fingerprint":{"sha1":"2E:82:F9:BF:36:A0:22:B0:24:B6:D1:4E:7B:45:33:09:CA:8C:30:29","sha256":"A0:CF:D9:C0:99:34:D5:29:DE:FE:BA:5E:64:43:CE:BF:9D:1B:DA:B9:89:5E:6F:4D:B1:3A:D5:A2:21:44:75:F5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: qurex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qurex.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Mon, 02 Mar 2026 13:24:25 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=32eC0wqeOh4SfLAMw%2B7lfPcrkop0MPKKO2nS%2FtUOwooX%2FoJa1IXHtcWAGHuG%2BcNZ2WXegAjLLA6uqlWVS%2FAUzEDQLguUaYnvUA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d60b8b47e5e4435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-06-08T11:35:06.96302Z","times_seen":524039,"resource_available":true,"data":null}},"time_used":623,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":623,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"qurex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/atm.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.159.87","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:24.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/atm.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qurex.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: XUMfT+aR8cvrg6y/Pw2v9WX7vcOJyKa99Mvnkxr2njoEuRjJu7OIqfhy3I3H+lXSHt8zuZbMdDd+fPGFHlLoaWAx8XKzQBmH\r\nx-amz-request-id: VEA5TX6GA1HPBXEM\r\nDate: Mon, 02 Mar 2026 13:24:26 GMT\r\nLast-Modified: Tue, 11 Mar 2025 07:26:30 GMT\r\nETag: \"0b936890c4705172570095a38a532012\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 57878\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":57878,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0b936890c4705172570095a38a532012","sha1":"f4daecdba818f6d7187901b7accd73d188057f15","sha256":"95038af84cf03b7daf573dbb74b594844a428d986aafaa2293b271cf4ffc7363","sha512":"03922b324bcd0a7a2a59b62cd834a9c4cee456065dcc0e1852243ea1574935e6bb31ada1b6611ccb97a562b8e3814f2d512f28ccea8a89117abf869f1960e45c","ssdeep":"1536:kAYRg7ma+y/kpJZ55TNGApnIPhb3t0TJqg+zYa9Li9NdKvg:BSa+y/IT5TNGAA2TggCY39Nr","tlshash":"5843f1f74dac9c5e083595c08aeceaa5ca80ec06135dd920adca9f5c0d50dcaf43a5bf","first_seen":"2025-03-11T08:52:08.557956Z","last_seen":"2026-06-01T14:39:22.725527Z","times_seen":174,"resource_available":false,"data":null}},"time_used":1474,"timings":{"blocked":898,"dns":0,"connect":0,"send":0,"wait":297,"receive":279,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/assets/tm-segtab.922cbf07.js","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:24.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qurex.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:34:21 GMT","end":"Sun, 05 Apr 2026 23:32:45 GMT"},"fingerprint":{"sha1":"2E:82:F9:BF:36:A0:22:B0:24:B6:D1:4E:7B:45:33:09:CA:8C:30:29","sha256":"A0:CF:D9:C0:99:34:D5:29:DE:FE:BA:5E:64:43:CE:BF:9D:1B:DA:B9:89:5E:6F:4D:B1:3A:D5:A2:21:44:75:F5"}}},"request":{"raw":"GET /assets/tm-segtab.922cbf07.js HTTP/1.1\r\nHost: qurex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qurex.top/assets/pages-index-index.9c3381f9.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:24:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 01 Jan 2026 15:59:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"695699ed-1286\"\r\nexpires: Tue, 03 Mar 2026 01:24:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vK3spYWQ6LlzTJuyBHvgvDG4FMe1w0IScYPovG4Z0Ax0MAtYv3leeq%2BkXHhMzCQlNAGgoRoQA29A2IwEyFjHtkpg%2Bw7ZJJCLyA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60b8b2ea934435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4742,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4741)","md5":"1b57b84328cad18094b4da95a78e54b0","sha1":"ddd5d56789d5acbb164a0dc651cbeb877d36dc74","sha256":"f3e9b198b7ccaccdf24f848df80bb58e95df52b4643fa2b1f406218d1c1978c3","sha512":"a6a99f9a51ceb9e7a8bc8f30f665ce092889c47abe506409d3e95c06ed0ad2a0123b9050582a076559515c2aeab41c746285a9ac5c5ea1d09eb300be06d98f7a","ssdeep":"96:OvHXgKZgoBReFcJdnGW00LggbMiY4FCx/PLt+pixOwCCdcbILzJ3Cuq9:UXFZVwFc3HzcG4/PL2OyIJyuq9","tlshash":"94a1d878723ca83d37bb4965b07251815209c79fd739a0d271e8047552e2d805addf3d","first_seen":"2026-01-07T04:34:13.805133Z","last_seen":"2026-03-29T15:54:21.12021Z","times_seen":14,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"qurex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/psg.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.159.87","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:24.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/psg.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qurex.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: JSme7K5mimjcAV9TwSreD/wpc+PEVPVGaf6Kk5alb01sBa0eY1eeDZ2xZKLoWeFb9MaplY3dTnE827NhV8nWTAzLxxXE3u7F\r\nx-amz-request-id: VEABXDVK5KW629KF\r\nDate: Mon, 02 Mar 2026 13:24:26 GMT\r\nLast-Modified: Tue, 11 Mar 2025 07:25:29 GMT\r\nETag: \"71d001dc16f522a80b0d27c28e947fc9\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 71831\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":71831,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"71d001dc16f522a80b0d27c28e947fc9","sha1":"8cb23ccb55c480a1c15df8b696d40bdb45b777bd","sha256":"c203f6e5b6457611be12973824aa99cc88659ef455d8a04a6902a0b21b2a9e4c","sha512":"eeb0b27e2651b05b0418ffc64df6be22e8e405127b9dda87451d1eed40cde4a672f5eb52498068add547f57a82b7183f075246eff6fe61483e058f79265c5ef4","ssdeep":"1536:EO81xrez0YhxU0vdAhTgZlIw4iaP/MEyyejB/CI3Ly5BBYXn:hixC0Yhx7vWhTG05/MEF8h3LgE3","tlshash":"4363026d71807b584740498870bb274c4f9ba9e14f11f66ad44d9e9f8ba0caf2c236b3","first_seen":"2025-03-11T08:52:08.6073Z","last_seen":"2026-06-01T14:39:22.727333Z","times_seen":171,"resource_available":false,"data":null}},"time_used":2070,"timings":{"blocked":601,"dns":0,"connect":284,"send":0,"wait":308,"receive":570,"ssl":297},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/ltc.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.159.87","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:24.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/ltc.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qurex.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: Y0MNKnv85E7z4Yjas384qFc6oYUDMpibqq/3tAH0dbN+QjEyihqePPDaWjgU+zT2esyZYmnMOmP3H1/+R+KQmPYa9OAdYy+R\r\nx-amz-request-id: VEABFQ658GW3B1C0\r\nDate: Mon, 02 Mar 2026 13:24:26 GMT\r\nLast-Modified: Tue, 27 Jul 2021 09:04:10 GMT\r\nETag: \"b772bf1738628de70f1b9304c3d669ff\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 479\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":479,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b772bf1738628de70f1b9304c3d669ff","sha1":"db4b8dbd617a80bc2b7efcafc1b93064eb9a08bf","sha256":"9afa8bc92c0b1ed443e1b75a05bbac5399cc3a6c95863765b0d68959faf089ed","sha512":"2c54b078c370b434455c91a7a61454bc4cbc3ab611793db68dc733087aa507a280108d53977a1a47983a7161b52cea75d097c6f6bee8c529774fde42ad2c7516","ssdeep":"","tlshash":"f8f02e7df6441b35980ed634663e2cb430352fa2f245805a21dd1a547a574ea5945363","first_seen":"2023-05-25T08:09:47Z","last_seen":"2026-06-02T07:26:04.057052Z","times_seen":506,"resource_available":false,"data":null}},"time_used":1198,"timings":{"blocked":896,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/eos.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.159.87","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:24.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/eos.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qurex.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 5vnhqldXca/peR4JBCQJwD5JkDM2D8WnltX4qxQjy9EDNmQJGD9SBzdOtva4/lo5R7TdgNE5Au8YhwAi0zFMusQZ0/ntrwQu\r\nx-amz-request-id: FZFRTJ845Q6HQA54\r\nDate: Mon, 02 Mar 2026 13:24:27 GMT\r\nLast-Modified: Tue, 27 Jul 2021 09:11:38 GMT\r\nETag: \"96364067a53dec3a858b9a41163133eb\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 2061\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2061,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"96364067a53dec3a858b9a41163133eb","sha1":"84fda0fcaa9604e7ab19b7d53cac1b05304876c9","sha256":"efb1d77085cfde506d7d144e7caeb706841c2f8224a4f09420ce64a7be0f9b36","sha512":"593547b9c282eac2dc54027c9c0ca2f1ca060f6e063ceedb49ec289113b615fa1a881f1337be2562081c593ef5be6d1ad424c8c85e1acf7a4cbdb2e769fee114","ssdeep":"","tlshash":"774155ccb280fa10fd0ca3f9125198f235361e67b2d3c27683e61d15e92446c96794e6","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-06-02T07:26:04.058686Z","times_seen":262,"resource_available":false,"data":null}},"time_used":1499,"timings":{"blocked":1190,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:22.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Inter:wght@600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qurex.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 02 Mar 2026 13:24:22 GMT\r\ndate: Mon, 02 Mar 2026 13:24:22 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5054,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"bfe3611cfd6eaa33321d7ef2e6040981","sha1":"ec890d6e69feaa28080a1fb0a205dc7b5a87714f","sha256":"f7a1adf3e107544e85325e212b9f2b7f9af3dc8f8077667fc4d0e5a4687e151b","sha512":"c3631473a78e91288b63c69703695ac8b6ffc17641e652fb18ba0d05da397888d9cf55e846aa5c90ba041c56dc89b492ae3900c9fb9b9a79bfd4869895f7ba72","ssdeep":"96:aOxMaNqOxMaXFZHOxMamOxMaO3vOxMaBOxMaBJc+uTOxMaNcNDOpaNqOpaXFZHOd:bNryfO3iExlONEhYO3RrxGx","tlshash":"eca18992002ba400ab971dc273cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-19T20:01:38.048041Z","last_seen":"2026-06-02T07:26:04.057931Z","times_seen":166,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":154,"dns":0,"connect":22,"send":0,"wait":34,"receive":0,"ssl":136},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/static/images/tabBar/home-on.png","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:23.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qurex.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:34:21 GMT","end":"Sun, 05 Apr 2026 23:32:45 GMT"},"fingerprint":{"sha1":"2E:82:F9:BF:36:A0:22:B0:24:B6:D1:4E:7B:45:33:09:CA:8C:30:29","sha256":"A0:CF:D9:C0:99:34:D5:29:DE:FE:BA:5E:64:43:CE:BF:9D:1B:DA:B9:89:5E:6F:4D:B1:3A:D5:A2:21:44:75:F5"}}},"request":{"raw":"GET /static/images/tabBar/home-on.png HTTP/1.1\r\nHost: qurex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qurex.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:24:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 605\r\nserver: cloudflare\r\nlast-modified: Thu, 01 Jan 2026 15:59:42 GMT\r\netag: \"695699ee-25d\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tj4GpBeW%2B%2BJtVgCXhHg1S%2BwoHbry0POIL7pE%2B6GsiihfMaSLwLEJMCf8gXO%2BsmQLQgq%2Fob%2Bxzcfi0SCbIh5F6uc4lRI%2Bek%2FR%2BA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60b8ad8e2b4435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":605,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"def19a0db24fe00a493b990c113b892e","sha1":"d61ec86b8f6d09170f76746cd9412b432d40fed5","sha256":"d279492339d20af5561086bafb7acf11427bf1b4a3a755a599bbb71192085056","sha512":"c7a7db8906c507fce94504fdfb2b14d4a470d62de1106e2ee0c4cdf1a78705d02177dd068e59ae354e92c1cc3a7779b9de3201a3107e8652cdb4547b5dac73aa","ssdeep":"","tlshash":"a1f047e668c1ff5eeff478a366a171f348b42537f3014f6750058111525c734697954b","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-06-04T16:39:28.025306Z","times_seen":278,"resource_available":false,"data":null}},"time_used":663,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":663,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"qurex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/assets/tm-button.3c1b931c.js","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:24.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qurex.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:34:21 GMT","end":"Sun, 05 Apr 2026 23:32:45 GMT"},"fingerprint":{"sha1":"2E:82:F9:BF:36:A0:22:B0:24:B6:D1:4E:7B:45:33:09:CA:8C:30:29","sha256":"A0:CF:D9:C0:99:34:D5:29:DE:FE:BA:5E:64:43:CE:BF:9D:1B:DA:B9:89:5E:6F:4D:B1:3A:D5:A2:21:44:75:F5"}}},"request":{"raw":"GET /assets/tm-button.3c1b931c.js HTTP/1.1\r\nHost: qurex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qurex.top/assets/pages-index-index.9c3381f9.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:24:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 01 Jan 2026 15:59:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"695699ed-129b\"\r\nexpires: Tue, 03 Mar 2026 01:24:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JJuHPppce9nJbBMJXA2W0BGzgF7fa%2FN7mhFHXCk23yNksnnD1yy6OzzyWvl3PXm0OQvfhPcuCUoBCiC2huaT9c%2FCjDMT4QXsRA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60b8b2ea994435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4763,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4762)","md5":"cc16a3304f097fd6a154bea634079231","sha1":"7681311673e36ab8771ab40e204f2e09c4eb6840","sha256":"10b5081295f99911c4757f210a780dcd154435dce6078a234de5cbfddff94ef2","sha512":"c16132167f6d0384f20b61a682a981894860ff7ce5e157272ce956fe45c66a4e3bfe67c642d7fb8627add5fa3cc36155ec152de6da5820de374d50eb99f43950","ssdeep":"96:RgoKHUD//UusxzD9831y6MX6eA6l5+Vhc8/YFs2GXUx8TCZ8NAwNGgEknZ1Q3:u9m74Iq6ClEApYUSTCUAwNGonZ1Q3","tlshash":"4ba1f9143179cdbb6ecbefdc3054251221259b6ee53475d1fea4603613cb8e590ccb28","first_seen":"2026-01-07T04:34:13.742085Z","last_seen":"2026-03-29T15:54:21.053586Z","times_seen":14,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"qurex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=SF+Pro+Text:wght@400\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:22.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=SF+Pro+Text:wght@400\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qurex.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 02 Mar 2026 13:24:22 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":475,"timings":{"blocked":218,"dns":6,"connect":7,"send":0,"wait":34,"receive":0,"ssl":208},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/assets/tm-segtab.206f8890.css","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:23.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qurex.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:34:21 GMT","end":"Sun, 05 Apr 2026 23:32:45 GMT"},"fingerprint":{"sha1":"2E:82:F9:BF:36:A0:22:B0:24:B6:D1:4E:7B:45:33:09:CA:8C:30:29","sha256":"A0:CF:D9:C0:99:34:D5:29:DE:FE:BA:5E:64:43:CE:BF:9D:1B:DA:B9:89:5E:6F:4D:B1:3A:D5:A2:21:44:75:F5"}}},"request":{"raw":"GET /assets/tm-segtab.206f8890.css HTTP/1.1\r\nHost: qurex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qurex.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:24:23 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 01 Jan 2026 15:59:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 03 Mar 2026 01:24:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lq8tULMfSU83pr0TXo4EPUxedhkM19vzwiO2k4YhW6or7sNc9O2V%2F8Cl0MBz4lZpIEO6XdEBl1K8UvsyrzTGoNN%2BqgI9esVBZg%3D%3D\"}]}\r\netag: W/\"695699ed-92\"\r\ncontent-encoding: br\r\ncf-ray: 9d60b8adae774435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"75ccb9822a43118d8c5e0206ff76969d","sha1":"a5ef88a98bc655e6a5ece65730b095a43ee36990","sha256":"b394ba56d52aa7ceeb7ba3fb6e93456d813751a536c69622f8c143e16e0a1bc1","sha512":"73ca6de779b6324af6b6b5043b58671da8947bdc578883bef3b5fe7ab9319dfaf053311bb001a85b4ab844944d2689db6a9f2bc17dd18ecd684deac1e2c93697","ssdeep":"","tlshash":"0cc08c54e31821100263871390c25c24c338ebc2ffa2a82db3404107080312d2263f92","first_seen":"2023-09-10T20:06:10Z","last_seen":"2026-04-08T04:13:12.963754Z","times_seen":200,"resource_available":false,"data":null}},"time_used":613,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":613,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"qurex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/assets/pages-index-index.9c3381f9.js","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:23.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qurex.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:34:21 GMT","end":"Sun, 05 Apr 2026 23:32:45 GMT"},"fingerprint":{"sha1":"2E:82:F9:BF:36:A0:22:B0:24:B6:D1:4E:7B:45:33:09:CA:8C:30:29","sha256":"A0:CF:D9:C0:99:34:D5:29:DE:FE:BA:5E:64:43:CE:BF:9D:1B:DA:B9:89:5E:6F:4D:B1:3A:D5:A2:21:44:75:F5"}}},"request":{"raw":"GET /assets/pages-index-index.9c3381f9.js HTTP/1.1\r\nHost: qurex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qurex.top/assets/index.94423f30.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:24:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 01 Jan 2026 15:59:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"695699ed-adc0\"\r\nexpires: Tue, 03 Mar 2026 01:24:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a8HUs20qrAhBNG6HXzS4c%2FitdAJJ3p1jELfKl3cr7Nngm8D7gfdtkExFiYuqdHJpQh86kDh1akC8jO9k0AzFOWQ4GFlTe6zT%2Fg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60b8b1bfe64435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44480,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (23566)","md5":"e43766fa0051a29128bb72bd3deed516","sha1":"07ba8dcc7720b0ec5037ac4ee538bcac51713806","sha256":"5ab5ea68b1e55dd103fd34f42179d181e496bd977e3668bab926e4059fd8d7b4","sha512":"bd03255e746f60046dc1fcb4536fc8deb8ad172cf4c13b603d54b7524f6c552431b61b2a3377fea69ddbc836a1515821ec5fb86ae92435139806c5a4d3f62729","ssdeep":"768:wgiccc/+hx9++oqCQFRJOz5OAv5eq8DSqmfYTmJOfUXzC2jOiGcuH6ckrTdbqnI9:wU+o10e57B8DSqmfYSJxzC3ne9unkPfd","tlshash":"93137cb1f56d8a7e6313e98dc8604405259d9e8ea229f480bbfc9d353393940adfc778","first_seen":"2026-01-07T04:34:13.747329Z","last_seen":"2026-03-29T15:54:21.099569Z","times_seen":14,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"qurex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/assets/tm-app.a1426a00.js","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:23.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qurex.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:34:21 GMT","end":"Sun, 05 Apr 2026 23:32:45 GMT"},"fingerprint":{"sha1":"2E:82:F9:BF:36:A0:22:B0:24:B6:D1:4E:7B:45:33:09:CA:8C:30:29","sha256":"A0:CF:D9:C0:99:34:D5:29:DE:FE:BA:5E:64:43:CE:BF:9D:1B:DA:B9:89:5E:6F:4D:B1:3A:D5:A2:21:44:75:F5"}}},"request":{"raw":"GET /assets/tm-app.a1426a00.js HTTP/1.1\r\nHost: qurex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qurex.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:24:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 01 Jan 2026 15:59:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"695699ed-a53\"\r\nexpires: Tue, 03 Mar 2026 01:24:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0tP47XbbKFj8kvXU39Xw4ZMajSw0npilNYIEziCH1fsdSf%2Baw2npIM65btKIyUjBtA75sY87JsH7re21io%2BfB9RxLrVwBnoQyw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60b8added94435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2643,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1999)","md5":"3aaac02fbf9a4691a65db4ebf78bec62","sha1":"be9dfcd9c1ed3661670b9d63066ee174e0a591a5","sha256":"9dd91296adfb96c91ce36e4276ba97597364b7a8ff51ee0b47df549b286a9699","sha512":"e838d8d3867b92b6a2ccfbc71c99ec56c839ed5fdbcd40454876b05e67f37f55340fd868be2c15921466bb9362e126e1b884ddb814e40b44c730fdb9a60ad0d5","ssdeep":"","tlshash":"6451963c31e9b27c623746ce5476574c184bb76d4a326bf6d27a78303080c28725fb68","first_seen":"2026-01-07T04:34:13.791702Z","last_seen":"2026-03-29T15:54:21.093003Z","times_seen":14,"resource_available":true,"data":null}},"time_used":615,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":615,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"qurex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/assets/tm-image.7b350d7e.js","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:24.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qurex.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:34:21 GMT","end":"Sun, 05 Apr 2026 23:32:45 GMT"},"fingerprint":{"sha1":"2E:82:F9:BF:36:A0:22:B0:24:B6:D1:4E:7B:45:33:09:CA:8C:30:29","sha256":"A0:CF:D9:C0:99:34:D5:29:DE:FE:BA:5E:64:43:CE:BF:9D:1B:DA:B9:89:5E:6F:4D:B1:3A:D5:A2:21:44:75:F5"}}},"request":{"raw":"GET /assets/tm-image.7b350d7e.js HTTP/1.1\r\nHost: qurex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qurex.top/assets/pages-index-index.9c3381f9.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:24:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 01 Jan 2026 15:59:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"695699ed-1083\"\r\nexpires: Tue, 03 Mar 2026 01:24:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lZ3uFsUjPyCohaM4FDTw91FakfLVsFtEFfgri9PYrY4Loue9uGLz8QmTQ4P7cUftv%2BfkY58Xl96n3mtTx46SXh3Fr8IMAxtqRA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60b8b2eaa24435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4227,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4226)","md5":"5a33bfaf12262c3f9c2622cffc9de4ba","sha1":"51130cbeaaee9d42f5c31c49a2ca79deeb3dac0a","sha256":"fe8cd65eaf2e6462d3de8671af5f482bf7cf74b9cbd98ef92ff98eaceef2fed5","sha512":"e2b041994927faf4c931b782c6f37641811d0c5dd9d6e4624247b82ca29d3043577770be847514e7427cefaf5a28495aeb96bbe2da70779f7556814cd95b89c5","ssdeep":"96:gcFKkON2VYyRTzmxmMRSfzHmt4apODtUwfUNBAlAIgby1N:grkXmxmMROzMpOu6UNBAlAsN","tlshash":"6c91b53c31bdd93f69fb45e9a091994a54059f2ceb30b7d0bae140aad1aec840129f3c","first_seen":"2026-01-07T04:34:13.754429Z","last_seen":"2026-03-29T15:54:21.093798Z","times_seen":14,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"qurex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/assets/init.58248a16.css","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:23.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qurex.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:34:21 GMT","end":"Sun, 05 Apr 2026 23:32:45 GMT"},"fingerprint":{"sha1":"2E:82:F9:BF:36:A0:22:B0:24:B6:D1:4E:7B:45:33:09:CA:8C:30:29","sha256":"A0:CF:D9:C0:99:34:D5:29:DE:FE:BA:5E:64:43:CE:BF:9D:1B:DA:B9:89:5E:6F:4D:B1:3A:D5:A2:21:44:75:F5"}}},"request":{"raw":"GET /assets/init.58248a16.css HTTP/1.1\r\nHost: qurex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qurex.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:24:23 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 01 Jan 2026 15:59:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 03 Mar 2026 01:24:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9WjfZ2xa9D9mGsnIfjVeuDHwLXiQQxfOCBIHsgGoSpncng10M1Pc6c6v0Kdd1smzw4iDRGX3hpLr2IU5qLQj1JwulQ3z%2FWHA8g%3D%3D\"}]}\r\netag: W/\"695699ed-9c\"\r\ncontent-encoding: br\r\ncf-ray: 9d60b8adff274435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":156,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"9a7e123fc535e6f63a40ed50a4952de5","sha1":"6d9309cd4bbcaf3e254e6f0e7ee375f9f0cae5f0","sha256":"dd7ebbbce1637185d736d72650adb7b576120caab2c484bea70ba9d4891cdad2","sha512":"759309347ccda6cff999071417239372b5a9bbb272f32b197d6d3a78eb96614e3507bb37750671fce0e15166bfc103e846e88e5838d71a18cea194ac78ff5b70","ssdeep":"","tlshash":"16c08020551b61508421d142f4cdcd95f3fdd546c771555f1d44d0864145c8778d4243","first_seen":"2026-01-07T04:34:13.78361Z","last_seen":"2026-03-29T15:54:21.078495Z","times_seen":16,"resource_available":false,"data":null}},"time_used":634,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":634,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"qurex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/ksm.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.159.87","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:24.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/ksm.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qurex.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: CwZUdIjvYEC+kry4WF8A+v7FYp4CEtwYJc7OMv+c0IL0k2HhLA8TgikzTSSNogJ1f2K/k2wA7bjVdqKpW8sfZAbMntgwCLs4\r\nx-amz-request-id: VEADPJ3KJX0ER1CX\r\nDate: Mon, 02 Mar 2026 13:24:26 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:56:32 GMT\r\nETag: \"87de3ee0fdebb621dabd4796598f6888\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 4490\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":4490,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"87de3ee0fdebb621dabd4796598f6888","sha1":"f8dd822f8f7b75fdb2b18ff10266deab9c397dcd","sha256":"64613bc4f18ed4f69a72222af826cb68733ad5ffd5990a2223ab689da62f1f56","sha512":"601584512d6d26a0488c0430ce4461fd9516fbffd408b04beaed4cdbfa123fdddb741f28b2a32694a1bc65d99013208e71b6b0a3e364a7f671f8a6b0b0b23bbf","ssdeep":"96:QRazcf7/YySPnq0HGo0GJc5pr/LEDwjc0RfEtcy/lB4X+:QYzI/Yfnqi8zEkjciMcy0X+","tlshash":"ee918818a32ecb7cf509f6dd4717c874e68bbe917812c48e5bab0847d2a142d48b78c3","first_seen":"2023-05-25T08:09:47Z","last_seen":"2026-06-02T07:26:04.044332Z","times_seen":213,"resource_available":false,"data":null}},"time_used":1206,"timings":{"blocked":901,"dns":0,"connect":0,"send":0,"wait":304,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@400\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:22.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Poppins:wght@400\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qurex.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 02 Mar 2026 13:24:22 GMT\r\ndate: Mon, 02 Mar 2026 13:24:22 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1189,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"70f6f56be7ff7ace3e1f9979aef5db75","sha1":"3247717a7c2321db34762076775f37f8adc1e6e1","sha256":"ce53fd6ea2c59a3106afb0cf49f27a403675291622352c323c04ab5cc642a321","sha512":"b2020165c0c7b5c32c97d6b62bac6666d9b7c895ab837dca8272334ac3cdf164030e1780f80461b602690075ada4f3e836a4bea1505532b3bd6f281cc110392b","ssdeep":"","tlshash":"2d219791087bd114ab871cc523ce6d37ee0e9251b810e5786bfe0c98adabc654362b2d","first_seen":"2025-09-17T08:48:26.697017Z","last_seen":"2026-06-08T10:57:55.261636Z","times_seen":5692,"resource_available":false,"data":null}},"time_used":474,"timings":{"blocked":213,"dns":1,"connect":21,"send":0,"wait":40,"receive":0,"ssl":194},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/assets/activity.10f27a68.js","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:24.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qurex.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:34:21 GMT","end":"Sun, 05 Apr 2026 23:32:45 GMT"},"fingerprint":{"sha1":"2E:82:F9:BF:36:A0:22:B0:24:B6:D1:4E:7B:45:33:09:CA:8C:30:29","sha256":"A0:CF:D9:C0:99:34:D5:29:DE:FE:BA:5E:64:43:CE:BF:9D:1B:DA:B9:89:5E:6F:4D:B1:3A:D5:A2:21:44:75:F5"}}},"request":{"raw":"GET /assets/activity.10f27a68.js HTTP/1.1\r\nHost: qurex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qurex.top/assets/pages-index-index.9c3381f9.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:24:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 01 Jan 2026 15:59:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 03 Mar 2026 01:24:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B1xXbsGYX2PZzFbMCSOVaF%2B56L3H%2FRLtTLcXohH92FOhZEt9A4%2BjMol889lAH6fcDrdvAE0Ev7w576hlowxqdwI4ZPmTRMZGNA%3D%3D\"}]}\r\netag: W/\"695699ed-13f\"\r\ncontent-encoding: br\r\ncf-ray: 9d60b8b2eaa74435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":319,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (318)","md5":"152af13d72552a5306e866dafdcb8f1b","sha1":"e9fb555a7aa29f7743af2460580350eef63f94ec","sha256":"84a8b69d0eb3474accf963cb649baa06e998a008a6f1fd56f67bea5420143656","sha512":"1aae11aa01be5d2ad4dc0b1b8d51ecb9d9eabb6b4e016d9ab1bbacf9181056f39d6bc1cbcce6e6bfdb2ca9f4bfee5e9b474663c437b335038af04a5838a3d64d","ssdeep":"","tlshash":"30e0201e2110b7b3850200a780995943a317edd01e0a86605e09130c75f519986fd47b","first_seen":"2026-01-07T04:34:13.792577Z","last_seen":"2026-03-29T15:54:21.079655Z","times_seen":14,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"qurex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/bts.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.159.87","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:24.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/bts.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qurex.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: t/lmIczY/7xVDwNP2gIrg87JpvzQXzb00TsqIr5SS55rELgdAqrD/aWqtjXggg2gZGYB0htHxpZ3lFiXbBESeLxd35CkCdx5\r\nx-amz-request-id: FZFG2Y5DP2S69S5W\r\nDate: Mon, 02 Mar 2026 13:24:27 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:40:04 GMT\r\nETag: \"a12001eba3f8b40d252d09e0d21f6884\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 1433\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1433,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a12001eba3f8b40d252d09e0d21f6884","sha1":"874702fd7e69b788e419bd5258c9a80a9edc486c","sha256":"c9c78d7bb49415d4816f380f883baff55ce5f88997875c36d8ea98846a191c5e","sha512":"891a2a6a3f995e8070e6a6f2c6b9922be3539cbc22347e05fd867ee4a49495a5a6d2f4a7db5bc641daa3c981d143d14d7526d018af2252ba3f7477f7e6afb931","ssdeep":"","tlshash":"0c217411b324a23c30087afc527ae473fe605ef2951150d4dbd90d80f95266dada2dd3","first_seen":"2023-09-10T20:06:11Z","last_seen":"2026-06-02T07:26:04.047103Z","times_seen":249,"resource_available":false,"data":null}},"time_used":1776,"timings":{"blocked":1468,"dns":0,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/static/images/tabBar/my.png","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:23.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qurex.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:34:21 GMT","end":"Sun, 05 Apr 2026 23:32:45 GMT"},"fingerprint":{"sha1":"2E:82:F9:BF:36:A0:22:B0:24:B6:D1:4E:7B:45:33:09:CA:8C:30:29","sha256":"A0:CF:D9:C0:99:34:D5:29:DE:FE:BA:5E:64:43:CE:BF:9D:1B:DA:B9:89:5E:6F:4D:B1:3A:D5:A2:21:44:75:F5"}}},"request":{"raw":"GET /static/images/tabBar/my.png HTTP/1.1\r\nHost: qurex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qurex.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:24:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 664\r\nserver: cloudflare\r\nlast-modified: Thu, 01 Jan 2026 15:59:42 GMT\r\netag: \"695699ee-298\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=linuF7Zz2eWUk7eV60C2iyq%2Fi0n%2BY9%2FIC21OvRYkIdagM5yt2NY%2FfVlS9J%2F%2BJZ4W58o9iaJDP1sO%2FlU%2BcLQgailmp%2B7iZkPxaw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60b8ad9e564435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":664,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"5fa0e8c8be776e0ad69b41eb29387ab1","sha1":"6a7dee6c2139d15e5fbe2f7a6ebabee07354710d","sha256":"eebdc7fce5c2de4f58a49db1cd4bce63341b14bcae199d396eb1ab5a2bea3807","sha512":"3e5432b58d865b134fe84a068a9ba7e01ba3dd19240f60e45d46bf5f3d727ece1a6e05350e467b63efebf0236304366bc4980d3dff4287354f03828c86fb18d9","ssdeep":"","tlshash":"3e0183e7bb204566c20c9a881801a8a9863790154ecbad49c564c1b82c2240656ff7d2","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-06-04T16:39:28.028304Z","times_seen":277,"resource_available":false,"data":null}},"time_used":616,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":616,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"qurex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/assets/index.5092425b.css","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:23.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qurex.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:34:21 GMT","end":"Sun, 05 Apr 2026 23:32:45 GMT"},"fingerprint":{"sha1":"2E:82:F9:BF:36:A0:22:B0:24:B6:D1:4E:7B:45:33:09:CA:8C:30:29","sha256":"A0:CF:D9:C0:99:34:D5:29:DE:FE:BA:5E:64:43:CE:BF:9D:1B:DA:B9:89:5E:6F:4D:B1:3A:D5:A2:21:44:75:F5"}}},"request":{"raw":"GET /assets/index.5092425b.css HTTP/1.1\r\nHost: qurex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qurex.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:24:23 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 01 Jan 2026 15:59:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"695699ed-52c9\"\r\nexpires: Tue, 03 Mar 2026 01:24:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2RfoH0pSjTPIY1b4k6TJEJZN%2FxkacF9f4znDKYPIPcQ%2F1CTh2Bmcp59rd7SR8gtDFbzTtmj%2FggXnXd0b8lt3Xcgr1LhLAPiIcg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60b8adae754435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21193,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (21192)","md5":"79aca5b87b637c393bbd44f6245b17d2","sha1":"765defaf7df15730eb8329050bf2957209390755","sha256":"d5d82bfd271d1c972961436d4b46ff567aa46a5381991cbf07b7a50184dc827a","sha512":"036e2d0e2a4387350329bb1bd2a7465a7623d5d5f7c7c330a89461885722a5e779ee1472b7a413ae36e0f99b6704280b1580cd92ac4f8984203d5e68e780b209","ssdeep":"192:4T7JNRIFu4puj8sR0sn830P7RNFo717jNf8Ggc7wNIytLQh27CNu+Jf7JNdsO7md:4WuPdjcMcP72Z5","tlshash":"bc922e38b80d6a16b137eb15a4c6176d6070b7bbb203472ca761a93d9e4b4c63f339d4","first_seen":"2025-11-22T16:52:18.238204Z","last_seen":"2026-04-05T23:41:16.024627Z","times_seen":36,"resource_available":false,"data":null}},"time_used":600,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":600,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"qurex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/assets/tm-drawer.5d58d0eb.js","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:23.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qurex.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:34:21 GMT","end":"Sun, 05 Apr 2026 23:32:45 GMT"},"fingerprint":{"sha1":"2E:82:F9:BF:36:A0:22:B0:24:B6:D1:4E:7B:45:33:09:CA:8C:30:29","sha256":"A0:CF:D9:C0:99:34:D5:29:DE:FE:BA:5E:64:43:CE:BF:9D:1B:DA:B9:89:5E:6F:4D:B1:3A:D5:A2:21:44:75:F5"}}},"request":{"raw":"GET /assets/tm-drawer.5d58d0eb.js HTTP/1.1\r\nHost: qurex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qurex.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:24:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 01 Jan 2026 15:59:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"695699ed-162a\"\r\nexpires: Tue, 03 Mar 2026 01:24:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bhZXpRMAvOSihNZ58tRWGN4QgOVyvo6YN9nkVGBINAjPwXSIPlkbJs4YcPTZJgnMRDb6zL7YmTsza7nTaxYctFKZfhQljZ9Vew%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60b8addecf4435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5674,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5673)","md5":"9828d6632e643aeac00841a9d29fc4cc","sha1":"6293bb62deadb6988e0342ffe7eed6ccf768a2c6","sha256":"5da17850b2737a433be36e8f17e7eb613991b2c1768c66d252fd7c54f4b4f6eb","sha512":"5cef8f54de4073c62872e4e24fed53fe6b9062c05485f32835c81bc2a48b291e346be3ae8cf1403c37c8f073996102dc0c56bfa766ee348f1d9ce623728d3b6c","ssdeep":"96:3OvXKw3F5RUtxr6SDZbCzQrcQw2D5IWW6iQ/IDu/PXmVWaNmz1Xl5o+H+g:SaemBNoQwoP3aNmz9g8+g","tlshash":"91c1b898746e2373a6b709b5c072480d133d1f5d957876c1f2e2193a36f6d484dd8bb8","first_seen":"2026-01-07T04:34:13.761339Z","last_seen":"2026-03-29T15:54:21.073458Z","times_seen":14,"resource_available":true,"data":null}},"time_used":600,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":600,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"qurex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/assets/tm-button.3c1b931c.js","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:23.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qurex.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:34:21 GMT","end":"Sun, 05 Apr 2026 23:32:45 GMT"},"fingerprint":{"sha1":"2E:82:F9:BF:36:A0:22:B0:24:B6:D1:4E:7B:45:33:09:CA:8C:30:29","sha256":"A0:CF:D9:C0:99:34:D5:29:DE:FE:BA:5E:64:43:CE:BF:9D:1B:DA:B9:89:5E:6F:4D:B1:3A:D5:A2:21:44:75:F5"}}},"request":{"raw":"GET /assets/tm-button.3c1b931c.js HTTP/1.1\r\nHost: qurex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qurex.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:24:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 01 Jan 2026 15:59:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"695699ed-129b\"\r\nexpires: Tue, 03 Mar 2026 01:24:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rIlBG3vcchTQPPjraLE259%2Fg9ElVVoiTgZ88cb7%2FHGF2iiTkgU0cGIOsLhm2%2B6GBrwKjkRTrsO7Zx%2Brff1LQFAib2StA3DAqCw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60b8added44435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4763,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4762)","md5":"cc16a3304f097fd6a154bea634079231","sha1":"7681311673e36ab8771ab40e204f2e09c4eb6840","sha256":"10b5081295f99911c4757f210a780dcd154435dce6078a234de5cbfddff94ef2","sha512":"c16132167f6d0384f20b61a682a981894860ff7ce5e157272ce956fe45c66a4e3bfe67c642d7fb8627add5fa3cc36155ec152de6da5820de374d50eb99f43950","ssdeep":"96:RgoKHUD//UusxzD9831y6MX6eA6l5+Vhc8/YFs2GXUx8TCZ8NAwNGgEknZ1Q3:u9m74Iq6ClEApYUSTCUAwNGonZ1Q3","tlshash":"4ba1f9143179cdbb6ecbefdc3054251221259b6ee53475d1fea4603613cb8e590ccb28","first_seen":"2026-01-07T04:34:13.742085Z","last_seen":"2026-03-29T15:54:21.053586Z","times_seen":14,"resource_available":true,"data":null}},"time_used":584,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":584,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"qurex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/assets/tm-tag.ef13b4a0.js","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:23.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qurex.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:34:21 GMT","end":"Sun, 05 Apr 2026 23:32:45 GMT"},"fingerprint":{"sha1":"2E:82:F9:BF:36:A0:22:B0:24:B6:D1:4E:7B:45:33:09:CA:8C:30:29","sha256":"A0:CF:D9:C0:99:34:D5:29:DE:FE:BA:5E:64:43:CE:BF:9D:1B:DA:B9:89:5E:6F:4D:B1:3A:D5:A2:21:44:75:F5"}}},"request":{"raw":"GET /assets/tm-tag.ef13b4a0.js HTTP/1.1\r\nHost: qurex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qurex.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:24:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 01 Jan 2026 15:59:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"695699ed-fa6\"\r\nexpires: Tue, 03 Mar 2026 01:24:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yz6uGq3bhdx5MBfXlYH4NgIMq2hRJzKqRR%2B0JCKfbc3OPyZ2Wh%2Fbd71RhwFFFDfhE0neeN2qxXpuWTn8HWktvowBCzUyUdBB2g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60b8addee04435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4006,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4005)","md5":"eb393e53f528c54b5077717c93601281","sha1":"0a8b6a76c3cd1ee79357a5ec08a03e5b525694a0","sha256":"ea49643a58db0ad65e3c4eaa51f07ef35e28eef1f61e9163595ddc831c931635","sha512":"c4d912e3ae23e129c44694541950e791b99e5f2306e4e53f2f715a23d28ed43da200165d1227e541f904d723950ea7d5b5469b296273ae5f18d9ac9cc0903135","ssdeep":"","tlshash":"198176b43d1448f696ff4acca172ae0d492a256eac357ff2f4a121245cf1915b04e73c","first_seen":"2026-01-07T04:34:13.753428Z","last_seen":"2026-03-29T15:54:21.07758Z","times_seen":14,"resource_available":true,"data":null}},"time_used":558,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":558,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"qurex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/uni.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.159.87","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:24.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/uni.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qurex.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: JyEANP3p4fNUWmHI7M+R2lHyxNLoG15w4CNzdwzwZmy7Pr2dgKkMMhKR+edsTYSDjUy7cjq/BID3WsU0vsJB9gYKwJnFBKgP\r\nx-amz-request-id: FZFW0J0QTW7MB73W\r\nDate: Mon, 02 Mar 2026 13:24:27 GMT\r\nLast-Modified: Tue, 14 Dec 2021 01:19:26 GMT\r\nETag: \"ca0493ee4bcd7c0c7801ec1f0f915f3c\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 7922\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":7922,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ca0493ee4bcd7c0c7801ec1f0f915f3c","sha1":"f210cabb3d69c47b8702fe98edd167077536ed4d","sha256":"36e52e07f68877eceeee2b2ac16ac4100269e3664309d0d660df7d83f817ab6c","sha512":"8938631143e6af6175436ea9c88217978fc4d5455313dc73cb60569fb3526bdca9c91d18c24a0b17bfec511c2c2b04c27a4e4e346af1e941ff19914c8daf6724","ssdeep":"192:LeMeH9bKXWe3oJJP85GbEEyrp2EG0kkpsFUHinY2kTm7:Lkx85iyrpxG0vpOvka7","tlshash":"0bf1b4c4b3ad62f8f501ebfc475a34b66e122cfa3922c19a87e21d45dd4485d4ca8cdb","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-06-01T14:39:22.756006Z","times_seen":96,"resource_available":false,"data":null}},"time_used":1768,"timings":{"blocked":1467,"dns":0,"connect":0,"send":0,"wait":300,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/v1/api/exchange/getSymbolConfig","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:24.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qurex.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:34:21 GMT","end":"Sun, 05 Apr 2026 23:32:45 GMT"},"fingerprint":{"sha1":"2E:82:F9:BF:36:A0:22:B0:24:B6:D1:4E:7B:45:33:09:CA:8C:30:29","sha256":"A0:CF:D9:C0:99:34:D5:29:DE:FE:BA:5E:64:43:CE:BF:9D:1B:DA:B9:89:5E:6F:4D:B1:3A:D5:A2:21:44:75:F5"}}},"request":{"raw":"GET /v1/api/exchange/getSymbolConfig HTTP/1.1\r\nHost: qurex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=UTF-8;\r\nlanguage: en-US\r\nauthorize: \r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qurex.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:24:24 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate, no-cache\r\npragma: no-cache\r\nexpires: 0\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BYadKaVmyAfJRYhiQoKxlfrY9gV1aVBXb23KWo4ZQIXv7xGY%2BPA3ANqbxvQRpqGXG2ulVXNq7CjvbJ0ykX2g5T%2FSKmv%2Bl3YPxg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d60b8b33b694435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6740,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"547b0e91df28810bc1c77b454aae3d3c","sha1":"8d30178e91d7df6698b6ece59781c875a9de9680","sha256":"1b7d4ac5a17a1f3156846930d784a00707587ce84d03256d07c74fb559530624","sha512":"cc0129d7555f0565b002ca3880378ce0b36fe433e9a42f55fa00ab55c9b0ca572a264dac759f29695c6f22317d7d2f66e9c6c3b17cac688062d758a20ad58814","ssdeep":"192:7PZr8N3Lrw62Z1tviC0M0/nIvrvvjyve0:LB8Rr1c1LcnSz0","tlshash":"2ad1a855336117afc26091c21ce23fdc196e16971cd70b51a6eece9e8310aef7523726","first_seen":"2026-03-02T13:24:47.587663Z","last_seen":"2026-03-02T13:24:47.587663Z","times_seen":1,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":380,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"qurex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/btc.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.159.87","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:24.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/btc.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qurex.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: NZkPENvzElxpZee3quVR7+a0dGXForb++JzP3/XwKMIgKF2NVqKXkG4giKpZqhlYBB/MJLoI895J2uG3y4KDNDvs1AcjyNsv\r\nx-amz-request-id: VEADDBQEB9P1FZYD\r\nDate: Mon, 02 Mar 2026 13:24:26 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:37:53 GMT\r\nETag: \"03c74454bc971a3437d588396a5e610e\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 1947\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1947,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"03c74454bc971a3437d588396a5e610e","sha1":"1a359cf1c14e757eaee1c5c807cf6c7732646b15","sha256":"733d0c0a99a79f263e8b548b8b1988ccfe80e156d36120371495955b4e51e382","sha512":"dede5e3cd5e0f080f4662e4e2df58482d19df970a2cc3f505eda82fb180a736a4c82523fe35b7a613293f572197e44c3bf963bcbaa32174c00d80b0b1e08bb2a","ssdeep":"","tlshash":"24419620d7bec18cf00196fcda29c87479971cc53e28d089d6e9485ab66405d1d72cff","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-06-02T07:26:04.034886Z","times_seen":471,"resource_available":false,"data":null}},"time_used":1527,"timings":{"blocked":610,"dns":26,"connect":277,"send":0,"wait":303,"receive":0,"ssl":307},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/chz.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.159.87","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:24.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/chz.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qurex.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: ja747AH0UAi55SsACPGyNQ1ijsVjMCwG+sDKJg0XIz4Skvzfd2ZUzbUyW3EIUuAEJfufqTqv+gxIlEoXNrNZ5HVlNaY44xn5\r\nx-amz-request-id: VEA47BNZV354JX2X\r\nDate: Mon, 02 Mar 2026 13:24:26 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:43:18 GMT\r\nETag: \"c07cc55bfc92d6bc8a1004e4dcf9185f\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 3619\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":3619,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c07cc55bfc92d6bc8a1004e4dcf9185f","sha1":"3a4265522a63bd41a2f494ceb1e3ec917d902761","sha256":"eb1f403bd3476588a1226280f4265767e987e010dd1b57edb1953abe09bcaac3","sha512":"7d03d560f133425709aa2eefec5279cfe24d6cd6ba49a39449f0b1ed61ca4839aab47f2fc9a4990c235ec311d8f93d06b5a5aa1f99f8d920ab8e22bf432c5990","ssdeep":"","tlshash":"a87161aab37892e8a504fbfd960748f46a6b2ce57612c55997e41d82f28000d05b98d3","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-06-02T07:26:04.008887Z","times_seen":242,"resource_available":false,"data":null}},"time_used":1515,"timings":{"blocked":603,"dns":15,"connect":284,"send":0,"wait":307,"receive":0,"ssl":299},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"124.220.203.60","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:25.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qurex.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 13:24:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Mon, 02 Mar 2026 15:24:26 GMT\r\ncache-control: max-age=7200\r\nset-cookie: __uni__uid=rBEQiWmlj4pthE8vA1nOAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-06-08T09:36:29.244254Z","times_seen":16212,"resource_available":false,"data":null}},"time_used":1337,"timings":{"blocked":542,"dns":1,"connect":254,"send":0,"wait":253,"receive":0,"ssl":285},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/assets/tm-app.a1426a00.js","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:24.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qurex.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:34:21 GMT","end":"Sun, 05 Apr 2026 23:32:45 GMT"},"fingerprint":{"sha1":"2E:82:F9:BF:36:A0:22:B0:24:B6:D1:4E:7B:45:33:09:CA:8C:30:29","sha256":"A0:CF:D9:C0:99:34:D5:29:DE:FE:BA:5E:64:43:CE:BF:9D:1B:DA:B9:89:5E:6F:4D:B1:3A:D5:A2:21:44:75:F5"}}},"request":{"raw":"GET /assets/tm-app.a1426a00.js HTTP/1.1\r\nHost: qurex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qurex.top/assets/pages-index-index.9c3381f9.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:24:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 01 Jan 2026 15:59:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"695699ed-a53\"\r\nexpires: Tue, 03 Mar 2026 01:24:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tF0JVMly6N%2F%2BFBKD9D%2BKZI0FkVCu7VEEb8H00wZNifGltSq2n%2BOovaWOGHuWVwk8%2FvYowWH%2FajYsSHjll7F%2BUXIlbjLmHPJuLQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60b8b2ea9e4435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2643,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1999)","md5":"3aaac02fbf9a4691a65db4ebf78bec62","sha1":"be9dfcd9c1ed3661670b9d63066ee174e0a591a5","sha256":"9dd91296adfb96c91ce36e4276ba97597364b7a8ff51ee0b47df549b286a9699","sha512":"e838d8d3867b92b6a2ccfbc71c99ec56c839ed5fdbcd40454876b05e67f37f55340fd868be2c15921466bb9362e126e1b884ddb814e40b44c730fdb9a60ad0d5","ssdeep":"","tlshash":"6451963c31e9b27c623746ce5476574c184bb76d4a326bf6d27a78303080c28725fb68","first_seen":"2026-01-07T04:34:13.791702Z","last_seen":"2026-03-29T15:54:21.093003Z","times_seen":14,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"qurex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/assets/pages-index-index.9c3381f9.js","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:23.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qurex.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:34:21 GMT","end":"Sun, 05 Apr 2026 23:32:45 GMT"},"fingerprint":{"sha1":"2E:82:F9:BF:36:A0:22:B0:24:B6:D1:4E:7B:45:33:09:CA:8C:30:29","sha256":"A0:CF:D9:C0:99:34:D5:29:DE:FE:BA:5E:64:43:CE:BF:9D:1B:DA:B9:89:5E:6F:4D:B1:3A:D5:A2:21:44:75:F5"}}},"request":{"raw":"GET /assets/pages-index-index.9c3381f9.js HTTP/1.1\r\nHost: qurex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qurex.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:24:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 01 Jan 2026 15:59:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"695699ed-adc0\"\r\nexpires: Tue, 03 Mar 2026 01:24:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H0%2Bd437eJYUKoKARrRyGXdeHYqWQXCj8mNs9md46LptBXxZnSPqvpGw3Kh68JOFbWJT4wmtTcjn79VclX%2FpMQ3bPa2hPf5Dkkg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60b8adcec44435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44480,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (23566)","md5":"e43766fa0051a29128bb72bd3deed516","sha1":"07ba8dcc7720b0ec5037ac4ee538bcac51713806","sha256":"5ab5ea68b1e55dd103fd34f42179d181e496bd977e3668bab926e4059fd8d7b4","sha512":"bd03255e746f60046dc1fcb4536fc8deb8ad172cf4c13b603d54b7524f6c552431b61b2a3377fea69ddbc836a1515821ec5fb86ae92435139806c5a4d3f62729","ssdeep":"768:wgiccc/+hx9++oqCQFRJOz5OAv5eq8DSqmfYTmJOfUXzC2jOiGcuH6ckrTdbqnI9:wU+o10e57B8DSqmfYSJxzC3ne9unkPfd","tlshash":"93137cb1f56d8a7e6313e98dc8604405259d9e8ea229f480bbfc9d353393940adfc778","first_seen":"2026-01-07T04:34:13.747329Z","last_seen":"2026-03-29T15:54:21.099569Z","times_seen":14,"resource_available":true,"data":null}},"time_used":798,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":798,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"qurex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/static/images/tabBar/jy.png","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:23.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qurex.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:34:21 GMT","end":"Sun, 05 Apr 2026 23:32:45 GMT"},"fingerprint":{"sha1":"2E:82:F9:BF:36:A0:22:B0:24:B6:D1:4E:7B:45:33:09:CA:8C:30:29","sha256":"A0:CF:D9:C0:99:34:D5:29:DE:FE:BA:5E:64:43:CE:BF:9D:1B:DA:B9:89:5E:6F:4D:B1:3A:D5:A2:21:44:75:F5"}}},"request":{"raw":"GET /static/images/tabBar/jy.png HTTP/1.1\r\nHost: qurex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qurex.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:24:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 1057\r\nserver: cloudflare\r\nlast-modified: Thu, 01 Jan 2026 15:59:42 GMT\r\netag: \"695699ee-421\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iDSwYytp8fODqHYBCbPmjg1U4HjtaAv4JIXmbqpKQI7JSF5UUNfmiIPB17CwWy97%2FugWF2MaV4QCbsGS57ikUKMrZQ3H0Jvqlg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60b8ad9e484435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1057,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"0eccebc7bf864ab6f6432b3940225365","sha1":"e5a941399606443f76e8ed05f26dca79c8888d52","sha256":"0dfc4fb9eaa75a6985df6fae71271d38bd8b267c5eff4db97238b5323dcd94bd","sha512":"b8398d20cb25a47d5790dde5eefb4dcf0f634d15bb6e6a4fe6655e8032d81e55a17b981e6b0ce74173a9c1f3a6e75d9844c76d04e376e10835a7dfc2c7b5646d","ssdeep":"","tlshash":"4b11bc911f6742e4cd1f551a28241760cca21df83c259f89d5b87e46b36f5f50f115f1","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-06-04T16:39:28.027653Z","times_seen":277,"resource_available":false,"data":null}},"time_used":609,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":609,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"qurex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-02T13:24:19.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qurex.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:34:21 GMT","end":"Sun, 05 Apr 2026 23:32:45 GMT"},"fingerprint":{"sha1":"2E:82:F9:BF:36:A0:22:B0:24:B6:D1:4E:7B:45:33:09:CA:8C:30:29","sha256":"A0:CF:D9:C0:99:34:D5:29:DE:FE:BA:5E:64:43:CE:BF:9D:1B:DA:B9:89:5E:6F:4D:B1:3A:D5:A2:21:44:75:F5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: qurex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 13:24:20 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Thu, 01 Jan 2026 15:59:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jd5j5RD5Do6ako%2BFJLPwhvo7wTGT53Yue3uQ%2F6xxCkW2LOxAAqDJ9eUeUGAgkYeMVpUkJ%2Fhw4iyZ%2BkgGEM%2FOiPiSkTnaRSmrSA%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d60b89ae9ff0b9c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":870,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"675b665ab0d35d0d4f92884987027c3d","sha1":"0d8f547640eacac4fc5f4539a8215cbf086b2910","sha256":"b920d04bada753bb713731e50d9578663fce6431a07883bd13ad7b08496e9a80","sha512":"cf5ca0aeec32fed5d0ffbcf395050996db1e4abff48837ab0293f4d9cb6e1f10e49e622ee589945eb3e7a553b63ffa9c4f3dde9942ea8637683e45496f99c800","ssdeep":"","tlshash":"4511468140f2590c121001552ad4f8573fa2cb638d4acd643c9d22648fec78dc89fc78","first_seen":"2026-01-07T04:34:13.785154Z","last_seen":"2026-03-29T15:54:21.118441Z","times_seen":13,"resource_available":true,"data":null}},"time_used":1318,"timings":{"blocked":351,"dns":316,"connect":8,"send":0,"wait":615,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"qurex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=SF+Pro+Display:wght@300\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:22.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=SF+Pro+Display:wght@300\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qurex.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 02 Mar 2026 13:24:22 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":291,"timings":{"blocked":126,"dns":1,"connect":20,"send":0,"wait":31,"receive":0,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/assets/pages-index-init.3a97d348.js","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:23.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qurex.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:34:21 GMT","end":"Sun, 05 Apr 2026 23:32:45 GMT"},"fingerprint":{"sha1":"2E:82:F9:BF:36:A0:22:B0:24:B6:D1:4E:7B:45:33:09:CA:8C:30:29","sha256":"A0:CF:D9:C0:99:34:D5:29:DE:FE:BA:5E:64:43:CE:BF:9D:1B:DA:B9:89:5E:6F:4D:B1:3A:D5:A2:21:44:75:F5"}}},"request":{"raw":"GET /assets/pages-index-init.3a97d348.js HTTP/1.1\r\nHost: qurex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qurex.top/assets/index.94423f30.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:24:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 01 Jan 2026 15:59:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"695699ed-5d2\"\r\nexpires: Tue, 03 Mar 2026 01:24:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ACMTdDszLKUd9MS0NC1Cun1lKtqrqNW8eHcHMr8Ttjh1aGFYZ2pfBlbLiYMrQeI8mx4%2BlNSVLA%2FGCsNNPbA6rfAE16RjZL0ysQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60b8b1f85d4435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1490,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1489)","md5":"f9155427197270653478903d329677c0","sha1":"a2586b48de6fb64a0920d92919c26b3739437117","sha256":"6add3c61de8e4faae42e519630965b318ba05f7235aa069736122e3583971633","sha512":"df374713247dafe5cb79f04f1871b7b621634bae22631c46dcac027db84bd262f6069862e31dd1ee95dcdc5b119e2298de2213e679a0ca3dc4eb94609c353a27","ssdeep":"","tlshash":"ce3174572a7f6a7b6b220895b4ec1ccc43791f491832e9cd7d575c1b66b2d4908dc331","first_seen":"2026-01-07T04:34:13.771606Z","last_seen":"2026-03-29T15:54:21.086009Z","times_seen":14,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"qurex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/static/images/tabBar/order.png","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:23.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qurex.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:34:21 GMT","end":"Sun, 05 Apr 2026 23:32:45 GMT"},"fingerprint":{"sha1":"2E:82:F9:BF:36:A0:22:B0:24:B6:D1:4E:7B:45:33:09:CA:8C:30:29","sha256":"A0:CF:D9:C0:99:34:D5:29:DE:FE:BA:5E:64:43:CE:BF:9D:1B:DA:B9:89:5E:6F:4D:B1:3A:D5:A2:21:44:75:F5"}}},"request":{"raw":"GET /static/images/tabBar/order.png HTTP/1.1\r\nHost: qurex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qurex.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:24:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 623\r\nserver: cloudflare\r\nlast-modified: Thu, 01 Jan 2026 15:59:42 GMT\r\netag: \"695699ee-26f\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rT6aERrIqAS3Efzfnj5ZEPinGR4FsxhTba3uTZlXP77W422bQou51NLQVw2QIUY2oPlDH%2FBjbc5KfFn7mVpATO3PycF0GSMOaw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60b8ad9e3f4435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":623,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"0897c7b0cb2bfbf9634a00807a6de57d","sha1":"29ba0909b568033163559a19b9d7f7325730622f","sha256":"3e8fee8f371d7d34ea9eb22d7597d2610ae85e333bd6231a625c2e72e7c9c349","sha512":"f1f720b73c149444d49e959cb95c650458a881f5670f52b59c8a34c2a069c0b706efe863b7ec1cce7f29364a234fc95766966b0545b373c7421cee186c0bb0a7","ssdeep":"","tlshash":"0bf0b7ea76a858a8ce3104fd15068c34890c15b03b8899ff2e793a144242a242c5011b","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-06-04T16:39:28.020392Z","times_seen":278,"resource_available":false,"data":null}},"time_used":618,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":618,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"qurex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/assets/tm-drawer.5d58d0eb.js","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:24.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qurex.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:34:21 GMT","end":"Sun, 05 Apr 2026 23:32:45 GMT"},"fingerprint":{"sha1":"2E:82:F9:BF:36:A0:22:B0:24:B6:D1:4E:7B:45:33:09:CA:8C:30:29","sha256":"A0:CF:D9:C0:99:34:D5:29:DE:FE:BA:5E:64:43:CE:BF:9D:1B:DA:B9:89:5E:6F:4D:B1:3A:D5:A2:21:44:75:F5"}}},"request":{"raw":"GET /assets/tm-drawer.5d58d0eb.js HTTP/1.1\r\nHost: qurex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qurex.top/assets/pages-index-index.9c3381f9.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:24:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 01 Jan 2026 15:59:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"695699ed-162a\"\r\nexpires: Tue, 03 Mar 2026 01:24:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GXip0oqHM9YNU6uCQXNHX90DgcyU0xoH0KHtkzr5vj%2FM1ZgT6bnagpUid5NMNuXCOiKg0%2FQdVBXXxlmjekxdIwSn3zjJ86bydw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60b8b2ea954435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5674,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5673)","md5":"9828d6632e643aeac00841a9d29fc4cc","sha1":"6293bb62deadb6988e0342ffe7eed6ccf768a2c6","sha256":"5da17850b2737a433be36e8f17e7eb613991b2c1768c66d252fd7c54f4b4f6eb","sha512":"5cef8f54de4073c62872e4e24fed53fe6b9062c05485f32835c81bc2a48b291e346be3ae8cf1403c37c8f073996102dc0c56bfa766ee348f1d9ce623728d3b6c","ssdeep":"96:3OvXKw3F5RUtxr6SDZbCzQrcQw2D5IWW6iQ/IDu/PXmVWaNmz1Xl5o+H+g:SaemBNoQwoP3aNmz9g8+g","tlshash":"91c1b898746e2373a6b709b5c072480d133d1f5d957876c1f2e2193a36f6d484dd8bb8","first_seen":"2026-01-07T04:34:13.761339Z","last_seen":"2026-03-29T15:54:21.073458Z","times_seen":14,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"qurex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/assets/tm-tag.ef13b4a0.js","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:24.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qurex.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:34:21 GMT","end":"Sun, 05 Apr 2026 23:32:45 GMT"},"fingerprint":{"sha1":"2E:82:F9:BF:36:A0:22:B0:24:B6:D1:4E:7B:45:33:09:CA:8C:30:29","sha256":"A0:CF:D9:C0:99:34:D5:29:DE:FE:BA:5E:64:43:CE:BF:9D:1B:DA:B9:89:5E:6F:4D:B1:3A:D5:A2:21:44:75:F5"}}},"request":{"raw":"GET /assets/tm-tag.ef13b4a0.js HTTP/1.1\r\nHost: qurex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qurex.top/assets/pages-index-index.9c3381f9.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:24:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 01 Jan 2026 15:59:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"695699ed-fa6\"\r\nexpires: Tue, 03 Mar 2026 01:24:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AZnl7ca5NDJAsQSfrPvnQM7YdGgwzJOd0V2zBW2aNhNx%2BHNi%2BzS408GEHRWbt38jrUDUNdGEE7UMM3Hl9o4I6%2BJJ0KsxrZpn9A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60b8b2eaa64435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4006,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4005)","md5":"eb393e53f528c54b5077717c93601281","sha1":"0a8b6a76c3cd1ee79357a5ec08a03e5b525694a0","sha256":"ea49643a58db0ad65e3c4eaa51f07ef35e28eef1f61e9163595ddc831c931635","sha512":"c4d912e3ae23e129c44694541950e791b99e5f2306e4e53f2f715a23d28ed43da200165d1227e541f904d723950ea7d5b5469b296273ae5f18d9ac9cc0903135","ssdeep":"","tlshash":"198176b43d1448f696ff4acca172ae0d492a256eac357ff2f4a121245cf1915b04e73c","first_seen":"2026-01-07T04:34:13.753428Z","last_seen":"2026-03-29T15:54:21.07758Z","times_seen":14,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"qurex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/assets/index.3f4f1a61.css","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:21.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qurex.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:34:21 GMT","end":"Sun, 05 Apr 2026 23:32:45 GMT"},"fingerprint":{"sha1":"2E:82:F9:BF:36:A0:22:B0:24:B6:D1:4E:7B:45:33:09:CA:8C:30:29","sha256":"A0:CF:D9:C0:99:34:D5:29:DE:FE:BA:5E:64:43:CE:BF:9D:1B:DA:B9:89:5E:6F:4D:B1:3A:D5:A2:21:44:75:F5"}}},"request":{"raw":"GET /assets/index.3f4f1a61.css HTTP/1.1\r\nHost: qurex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qurex.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:24:21 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 01 Jan 2026 15:59:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"695699ed-5c9e7\"\r\nexpires: Tue, 03 Mar 2026 01:24:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=172Shdm4%2FHF54bortNObDhrxuqc0IhISKr7zclWxfoa7tESMlhE60Xlpew3MCAMYo%2FCUHZFw6rJaYuVWsKya1Ply97Vlel4eAQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60b8a04e124435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":379367,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"bddf258f97b33b8b1ef1b9dde33d5140","sha1":"0889713fac40b5d90b6bae176b82a07073972288","sha256":"672205cfffeee945d0d0579e49312142a2e7b1be088bcb83530df0d8e950005e","sha512":"9f13389fcd0b4e02195910b786b0f779cb71e21aaf5bd115f8f723341f22db0cd18c7ae9d26f88ca37913267efa4e26bed55f996f3e632d479f020a0bd190a94","ssdeep":"3072:PDnvQTikh+GyK1ZDTasX+5w9szMZ9JVFr26L:7n3lGDd+WxZ9JP","tlshash":"db84b49e6e8411bcbf37d222d7a6a7ecb13cf560ee41c59af14325288ec37f60512598","first_seen":"2024-12-26T21:19:03.904115Z","last_seen":"2026-04-08T04:13:12.987175Z","times_seen":206,"resource_available":false,"data":null}},"time_used":1125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":751,"receive":374,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"qurex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Readex+Pro:wght@400;500;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:22.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Readex+Pro:wght@400;500;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qurex.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 02 Mar 2026 13:24:22 GMT\r\ndate: Mon, 02 Mar 2026 13:24:22 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6714,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (649)","md5":"b58a2b65d23adae432d6aede5f3a6bab","sha1":"194dfc8b1d63db1339585ff5c3a14cc6d8aa7d6d","sha256":"f47b4165cc9585373f8c546eefedc2df4e0ad1541865992c8dab1c2f7af09eff","sha512":"ff040a0aa6695698ce24e62c97f3905df671c9438646d083504cd94441c2e705e3ca213ddcb10cba401d79e7422c3a53b5bdcc869b1d26218bd05df5809e3cb6","ssdeep":"96:HOEawZA0Zl8DCK9cH0fOEa6dOEa0KJc+uDOEayMNsOXawZA0Zl8DCK9cH0fOXa6M:AfCl0obbdGfCl0v0beDfCl0S9b7i","tlshash":"86d1add5481f55487b471dc262cd7e23ad4da1642080d4689ffe278bacdfd22376839c","first_seen":"2025-09-19T20:01:38.034194Z","last_seen":"2026-06-02T07:26:04.03642Z","times_seen":131,"resource_available":false,"data":null}},"time_used":476,"timings":{"blocked":219,"dns":1,"connect":7,"send":0,"wait":34,"receive":0,"ssl":210},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/v1/api/config/platformConfig","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:24.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qurex.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:34:21 GMT","end":"Sun, 05 Apr 2026 23:32:45 GMT"},"fingerprint":{"sha1":"2E:82:F9:BF:36:A0:22:B0:24:B6:D1:4E:7B:45:33:09:CA:8C:30:29","sha256":"A0:CF:D9:C0:99:34:D5:29:DE:FE:BA:5E:64:43:CE:BF:9D:1B:DA:B9:89:5E:6F:4D:B1:3A:D5:A2:21:44:75:F5"}}},"request":{"raw":"GET /v1/api/config/platformConfig HTTP/1.1\r\nHost: qurex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=UTF-8;\r\nlanguage: en-US\r\nauthorize: \r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qurex.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:24:24 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate, no-cache\r\npragma: no-cache\r\nexpires: 0\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g3qtYfZI3Y59YcT2YpSW9RL4x51%2BaQwaMyIvR2VekQuZdgjcmOtiwYNvEJc1KoQCnjiLaB2lZsiklLhxIJvngXURVtBDMdD%2F4g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d60b8b228e54435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3205,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"579ddad932101a608d0172d449aca02d","sha1":"2e91cf6ab9604aaf5bafb17150b28aa1814405e6","sha256":"377087ed41995f6e3f4a462c0240962671e7cce8a71df0425c4b171d777d3b7a","sha512":"1a5130ace70d26f7adca8995b69b08f82cd6b7ad3429dbbc4aeb20a82ce72655a269c84b58e889d7731af893a07b50a15ee8d7b652e875da26d70495e068b1a5","ssdeep":"","tlshash":"7461fd8d2236a9f8caf415c7c8e614181f78a9d66949f50fc3a7ec613eeb4d07628207","first_seen":"2026-03-02T13:24:47.59978Z","last_seen":"2026-03-02T13:24:47.59978Z","times_seen":1,"resource_available":false,"data":null}},"time_used":413,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":413,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"qurex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/v1/api/config/getLanguage","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:24.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qurex.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:34:21 GMT","end":"Sun, 05 Apr 2026 23:32:45 GMT"},"fingerprint":{"sha1":"2E:82:F9:BF:36:A0:22:B0:24:B6:D1:4E:7B:45:33:09:CA:8C:30:29","sha256":"A0:CF:D9:C0:99:34:D5:29:DE:FE:BA:5E:64:43:CE:BF:9D:1B:DA:B9:89:5E:6F:4D:B1:3A:D5:A2:21:44:75:F5"}}},"request":{"raw":"GET /v1/api/config/getLanguage HTTP/1.1\r\nHost: qurex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=UTF-8;\r\nlanguage: en\r\nauthorize: \r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qurex.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:24:25 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate, no-cache\r\npragma: no-cache\r\nexpires: 0\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R4AotVww3ppvqESmem%2B0szvrWJsJSbunoYIksWJBv9FfiPMCgWOIitkVgM7u7LOOR3je0AYo2T0u8GL11MJBb71Iv%2F7STDruBA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d60b8b52fe04435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18408,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1fa2bc05766022a9724347b27938a249","sha1":"e6357c69dcd071f2c36fcaec330aabc7f6c84384","sha256":"43ccaeae31a6514273e467799ac5510f9a223aa396c8ac1da55313dd2b77721e","sha512":"c3c5acf2e07b8da2c351b6ab0dc688cfeb4f9eb3535e1c77bcd90c532f990a8fcdf62ae7d1da2764dd4ece0c028df31800c9352411c82642a2f64ab01fde62af","ssdeep":"384:2qaDztN2mQPf+Vi/bt5Y4QyS6GDg5x/L+vdiPaqHtKRq:29DPrQnTt5YC9GDgL+vk","tlshash":"0082964fa20a1cb64bc717d539df1e0936fc21c3529588598cdea91c03eeaacf26b51d","first_seen":"2026-03-02T13:24:47.601816Z","last_seen":"2026-03-02T13:24:47.601816Z","times_seen":1,"resource_available":false,"data":null}},"time_used":504,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":504,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"qurex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/assets/uni.4c9e3a45.css","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:21.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qurex.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:34:21 GMT","end":"Sun, 05 Apr 2026 23:32:45 GMT"},"fingerprint":{"sha1":"2E:82:F9:BF:36:A0:22:B0:24:B6:D1:4E:7B:45:33:09:CA:8C:30:29","sha256":"A0:CF:D9:C0:99:34:D5:29:DE:FE:BA:5E:64:43:CE:BF:9D:1B:DA:B9:89:5E:6F:4D:B1:3A:D5:A2:21:44:75:F5"}}},"request":{"raw":"GET /assets/uni.4c9e3a45.css HTTP/1.1\r\nHost: qurex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qurex.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:24:21 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 01 Jan 2026 15:59:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"695699ed-546d\"\r\nexpires: Tue, 03 Mar 2026 01:24:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FHrqMMQ2IONK27mg3LkI1xSuOS1bzRWOF5SfTMzONrXRYVqt8Pm78ITIAKf1R%2BqeXCXRVCrbFPHk8o5BgSjWfgCa0HmPt86wvw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60b8a04e044435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21613,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (21612)","md5":"1e6ccb1bfe225fe58eaa7f12e9c42da1","sha1":"320f3b9f1828dcb7fc22597cb29f401e41cd5210","sha256":"4c9e3a4503702afa1dd751b3d11517e1a7d69d06279a3d341ceadf59003d62e7","sha512":"c3483c6dc25519a00d8e633dc2c94dfdef3c247703168c413a12745fe59271334e5af47d467e97545ad6bf22f5821c4a69af90ec2722670b20009e71bd2fc248","ssdeep":"384:GRNHMXpmL+Lix8Nv15ZZVw70PfDcwp57fhy:WHMsorZIYnDcwpS","tlshash":"73a2a6316a012a3df867ca2969d1db8f2231c4b3d9a31f1deb7575248b9e4c9193e3c4","first_seen":"2026-01-07T04:34:13.777318Z","last_seen":"2026-03-29T15:54:21.092058Z","times_seen":13,"resource_available":false,"data":null}},"time_used":605,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":605,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"qurex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/assets/tm-image.7b350d7e.js","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:23.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qurex.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:34:21 GMT","end":"Sun, 05 Apr 2026 23:32:45 GMT"},"fingerprint":{"sha1":"2E:82:F9:BF:36:A0:22:B0:24:B6:D1:4E:7B:45:33:09:CA:8C:30:29","sha256":"A0:CF:D9:C0:99:34:D5:29:DE:FE:BA:5E:64:43:CE:BF:9D:1B:DA:B9:89:5E:6F:4D:B1:3A:D5:A2:21:44:75:F5"}}},"request":{"raw":"GET /assets/tm-image.7b350d7e.js HTTP/1.1\r\nHost: qurex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qurex.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:24:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 01 Jan 2026 15:59:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"695699ed-1083\"\r\nexpires: Tue, 03 Mar 2026 01:24:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ucABOBI%2BsOC%2FRIMHqz3Ri4uX6L1q5Xs4yWC6dCoXrOJICbLU9Y7wiozO%2Bhre7exvbCRUv8zPtUrxbo3IJGonbAEddOO1S0KySw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60b8addedb4435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4227,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4226)","md5":"5a33bfaf12262c3f9c2622cffc9de4ba","sha1":"51130cbeaaee9d42f5c31c49a2ca79deeb3dac0a","sha256":"fe8cd65eaf2e6462d3de8671af5f482bf7cf74b9cbd98ef92ff98eaceef2fed5","sha512":"e2b041994927faf4c931b782c6f37641811d0c5dd9d6e4624247b82ca29d3043577770be847514e7427cefaf5a28495aeb96bbe2da70779f7556814cd95b89c5","ssdeep":"96:gcFKkON2VYyRTzmxmMRSfzHmt4apODtUwfUNBAlAIgby1N:grkXmxmMROzMpOu6UNBAlAsN","tlshash":"6c91b53c31bdd93f69fb45e9a091994a54059f2ceb30b7d0bae140aad1aec840129f3c","first_seen":"2026-01-07T04:34:13.754429Z","last_seen":"2026-03-29T15:54:21.093798Z","times_seen":14,"resource_available":true,"data":null}},"time_used":595,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":595,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"qurex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/assets/activity.10f27a68.js","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:23.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qurex.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:34:21 GMT","end":"Sun, 05 Apr 2026 23:32:45 GMT"},"fingerprint":{"sha1":"2E:82:F9:BF:36:A0:22:B0:24:B6:D1:4E:7B:45:33:09:CA:8C:30:29","sha256":"A0:CF:D9:C0:99:34:D5:29:DE:FE:BA:5E:64:43:CE:BF:9D:1B:DA:B9:89:5E:6F:4D:B1:3A:D5:A2:21:44:75:F5"}}},"request":{"raw":"GET /assets/activity.10f27a68.js HTTP/1.1\r\nHost: qurex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qurex.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:24:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 01 Jan 2026 15:59:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 03 Mar 2026 01:24:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=17oR3wlWMVXZ5A7UWoad%2BT9UtAKvvp4uwgUGbc%2B9crhv2MDsfKBY8MLkfn5AptuAQCu2OJRa%2FVf%2B3RdpJB3VkxAIf4Z8xbiEvw%3D%3D\"}]}\r\netag: W/\"695699ed-13f\"\r\ncontent-encoding: br\r\ncf-ray: 9d60b8addee74435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":319,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (318)","md5":"152af13d72552a5306e866dafdcb8f1b","sha1":"e9fb555a7aa29f7743af2460580350eef63f94ec","sha256":"84a8b69d0eb3474accf963cb649baa06e998a008a6f1fd56f67bea5420143656","sha512":"1aae11aa01be5d2ad4dc0b1b8d51ecb9d9eabb6b4e016d9ab1bbacf9181056f39d6bc1cbcce6e6bfdb2ca9f4bfee5e9b474663c437b335038af04a5838a3d64d","ssdeep":"","tlshash":"30e0201e2110b7b3850200a780995943a317edd01e0a86605e09130c75f519986fd47b","first_seen":"2026-01-07T04:34:13.792577Z","last_seen":"2026-03-29T15:54:21.079655Z","times_seen":14,"resource_available":true,"data":null}},"time_used":593,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":593,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"qurex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/eth.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.159.87","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:24.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/eth.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qurex.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: uW+TP5MOMpV+fm5GIs/L2cWp6I+foM3JuM+Y0M6sf2zaHLMwouiCOLhqfVBvO36hpDuFr/l50k6/LdthTiNOpdQ5qBuMV6mx\r\nx-amz-request-id: VEA2Z2NQQ3DDM7GX\r\nDate: Mon, 02 Mar 2026 13:24:26 GMT\r\nLast-Modified: Wed, 23 Nov 2022 07:24:47 GMT\r\nETag: \"d8a57c2396575a058eb68a6c0e32caef\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 616\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":616,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d8a57c2396575a058eb68a6c0e32caef","sha1":"6495d31828866f3dbabc4aad7c77e02ff457cfb8","sha256":"b05bb6169930a076c463a15280a165560bd30972e2599f71ca62f44c023d666c","sha512":"7bf60d4e2903aa9f5be3e9268a3379da63feb8a312534d17c48686419a4fb52993c0c75b3686ca004145502266f58d9fa39cf59f19b7ab9dee6b503b877c3f58","ssdeep":"","tlshash":"f1f0a498354a14204804c77b1adead3a625329ecb7a6c0c5bfd91b0b79c48eb3cb55cd","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-06-02T07:26:04.035689Z","times_seen":494,"resource_available":false,"data":null}},"time_used":1518,"timings":{"blocked":607,"dns":19,"connect":280,"send":0,"wait":303,"receive":0,"ssl":304},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/assets/tm-drawer.83de1656.css","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:23.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qurex.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:34:21 GMT","end":"Sun, 05 Apr 2026 23:32:45 GMT"},"fingerprint":{"sha1":"2E:82:F9:BF:36:A0:22:B0:24:B6:D1:4E:7B:45:33:09:CA:8C:30:29","sha256":"A0:CF:D9:C0:99:34:D5:29:DE:FE:BA:5E:64:43:CE:BF:9D:1B:DA:B9:89:5E:6F:4D:B1:3A:D5:A2:21:44:75:F5"}}},"request":{"raw":"GET /assets/tm-drawer.83de1656.css HTTP/1.1\r\nHost: qurex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qurex.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:24:23 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 01 Jan 2026 15:59:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 03 Mar 2026 01:24:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B5A4blobjTo89Eo0TivId57IV3ZCANnmEo9yeFm2x6e7FbFpIvNU6jRxrFmHvZwKDcO6F%2FtahlOizvGm%2FGXpxCxEVstJZk5gWQ%3D%3D\"}]}\r\netag: W/\"695699ed-1f1\"\r\ncontent-encoding: br\r\ncf-ray: 9d60b8adbe7b4435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":497,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (496)","md5":"21760436a7a71a0a2257f1f0aeb3bcab","sha1":"88dc7eebea231f3ffeae69bee7dc7cc872ac69f2","sha256":"ed33f15247424f05f2338f5a2e9dd2199c8405afa9b3007b650ea9178c16dbc6","sha512":"631cfb7e0c813f298381f9c75372aa2a5fc4965294c54af7a36a97cf84a71c1cdb0d1038166e84c276e2134c5f08d7ad45ef4da11b0c5ed36b2a7c154b6ec941","ssdeep":"","tlshash":"f5f05445123e1f34dadbf9495c75270b8ca3e150cb1ba01c52a70a2e58efa855e609ec","first_seen":"2023-04-30T07:16:13Z","last_seen":"2026-05-17T04:40:35.482343Z","times_seen":233,"resource_available":false,"data":null}},"time_used":610,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":610,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"qurex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/static/images/tabBar/asset.png","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:23.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qurex.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:34:21 GMT","end":"Sun, 05 Apr 2026 23:32:45 GMT"},"fingerprint":{"sha1":"2E:82:F9:BF:36:A0:22:B0:24:B6:D1:4E:7B:45:33:09:CA:8C:30:29","sha256":"A0:CF:D9:C0:99:34:D5:29:DE:FE:BA:5E:64:43:CE:BF:9D:1B:DA:B9:89:5E:6F:4D:B1:3A:D5:A2:21:44:75:F5"}}},"request":{"raw":"GET /static/images/tabBar/asset.png HTTP/1.1\r\nHost: qurex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qurex.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:24:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 694\r\nserver: cloudflare\r\nlast-modified: Thu, 01 Jan 2026 15:59:42 GMT\r\netag: \"695699ee-2b6\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vITErF2K38GQr1XUlmVJWg%2FZt18B2GNElkwvF%2BdIz8RpfmWlkl1weIolIyCdUIzLQ7H2ZwLkvtCNQOKUOd0ceBK33POSo5YQew%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60b8ad9e534435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":694,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"c060f809b640e3037ff4b3acb5a80907","sha1":"f568594ca7b19224a846bd594f1c5e9e1002ba44","sha256":"9da1253a1c8a7153cb6568e7d3082dbb432e5a7662de8ee47507b0d7be9e32c6","sha512":"5ef880d1a924ce1474e6c1f68e7723ef4472fae08dbb4ed25561568f0af03cf89753648664315ecda8da9a173dcfe5dacf027f6f77b1ce810eae2b390f9bfa31","ssdeep":"","tlshash":"a90144dabcc2a0708aba3ca9595f7875ca92805811229f854b4998263a40b9cdd461c9","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-06-02T07:26:04.038787Z","times_seen":250,"resource_available":false,"data":null}},"time_used":633,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":633,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"qurex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/assets/index.94423f30.js","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:21.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qurex.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:34:21 GMT","end":"Sun, 05 Apr 2026 23:32:45 GMT"},"fingerprint":{"sha1":"2E:82:F9:BF:36:A0:22:B0:24:B6:D1:4E:7B:45:33:09:CA:8C:30:29","sha256":"A0:CF:D9:C0:99:34:D5:29:DE:FE:BA:5E:64:43:CE:BF:9D:1B:DA:B9:89:5E:6F:4D:B1:3A:D5:A2:21:44:75:F5"}}},"request":{"raw":"GET /assets/index.94423f30.js HTTP/1.1\r\nHost: qurex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qurex.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:24:21 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 01 Jan 2026 15:59:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"695699ed-19abee\"\r\nexpires: Tue, 03 Mar 2026 01:24:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4zHcaq12Gg%2FxFgRpUiAapTpQ4oc08wepBtwrkOffBjvoKH8HbGfPhxsY74RAdi2j7KnFvUAWyYrbY%2FhOeUiDdjw5E5cm8y%2B47g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60b8a04e084435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1682414,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (60832)","md5":"725688d4302407ff383b2c203b5138ac","sha1":"1db63d8afa00c39e311f8c55cda9e3b2c0e74f0d","sha256":"0ae84ec0b6777e44bb009f37c991bad003ef5d267c4b10de036cc21fbc6d31c1","sha512":"de18249c8b5f59910e496e142e3e2afcf01c690b3a679d0efb1d3f35fde6603bf4370cd4cc5f3c226244111752a62cf6330dde185a0ac58a97bd26cccf29caf6","ssdeep":"24576:Xtj4tR8DEGp5gdlnZXSNf83BAdCyFITsY/lg58H0fLYIQ24PrxG4hIt6uAUrbm+Y:Xtj4tR8DEGp5gdlnZXSNf83BAdCyFITT","tlshash":"402593c5d9fa640e8be4f046e8b82e9e1c445ac0ed14c376ac7d59f3d7cb184aa6136c","first_seen":"2026-01-07T04:34:13.748204Z","last_seen":"2026-03-29T15:54:21.096968Z","times_seen":16,"resource_available":false,"data":null}},"time_used":1942,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":806,"receive":1136,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"qurex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/juv.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.159.87","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:24.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/juv.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qurex.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: Xq+pPolylOl1mQMOxI9IW+GHzfaLIQrPgcjwsPeC4PHB3H7i4/4TKaYMV6Du8bCXiPftHSnzUDrgqsjv6lxGmCeeGoLiB6Uk\r\nx-amz-request-id: VEAAGBZTXG1376PA\r\nDate: Mon, 02 Mar 2026 13:24:26 GMT\r\nLast-Modified: Tue, 11 Mar 2025 07:26:15 GMT\r\nETag: \"fe957680ef81f353455d3aad7dac0fd4\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 51231\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":51231,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fe957680ef81f353455d3aad7dac0fd4","sha1":"8d4feb503bc45a3bc2ed2f7dc8f0be3ede52ade8","sha256":"fc4cacb9287e561349c5ec9bd89d977c1eb5877ac251589164dd20a300aa9ef1","sha512":"6c3098256b8dcc6d9d374db969a0253ab782d6fbb465a98e7ba4644ccd64059ce072e04ecbd3172bc44df17dc99cba6f4f0f1931e301d7b7b1028b3385d9d01c","ssdeep":"768:rqSpyH2cUwSzH3C3xqNPNvvV2Y8tH4dce1gWNUgIUxG8Mva6sP1wP37YZmRaKliL:rpJPNl25Hje6hUeaTPOP37wkAV3Y/W","tlshash":"9533023c3e697c1f4b688328f839ae0c38c044fa9f4641297696ac65241eb45ff95b57","first_seen":"2025-03-11T08:52:08.587629Z","last_seen":"2026-06-01T14:39:22.755179Z","times_seen":164,"resource_available":false,"data":null}},"time_used":1789,"timings":{"blocked":601,"dns":0,"connect":294,"send":0,"wait":309,"receive":287,"ssl":294},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/link.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.159.87","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:24.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/link.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qurex.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: mfyz1y96eotxXxe6lnqh5o4/z6DO/LnLgmbR03gUwgWG2pX3Bp3suwQ2VOkRDaUn6z1GY4gbn4yrSxQNJj6b3DmdpE9Ap+aE\r\nx-amz-request-id: FZFY8R8R9QAFK4M0\r\nDate: Mon, 02 Mar 2026 13:24:27 GMT\r\nLast-Modified: Tue, 27 Jul 2021 09:01:11 GMT\r\nETag: \"3cfdbc8f3e987bcf7862cba68cb369cc\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 681\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":681,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3cfdbc8f3e987bcf7862cba68cb369cc","sha1":"56d54bea22c25a2d43176ca784f3b0e8561e9be0","sha256":"d1abda5be2eca6511387d52e50be65c444b1e39cd5451d9fb601ad28424e3761","sha512":"23e769c4ea1911a0f0d77a0932d769c2a9e3ddfc4f71451b904338962b3310be4f3a36964fa4c31ffc98aa19f06e3e8a82226a640a1f4f222cecd5080ab0e4c7","ssdeep":"","tlshash":"fe01f47b75886af1fc0ee335621808773eb13f9af567c00109d12e40720b811871d29a","first_seen":"2023-06-07T09:48:40Z","last_seen":"2026-06-02T07:26:04.02244Z","times_seen":387,"resource_available":false,"data":null}},"time_used":1495,"timings":{"blocked":1196,"dns":0,"connect":0,"send":0,"wait":299,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/assets/tm-segtab.922cbf07.js","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:23.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qurex.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:34:21 GMT","end":"Sun, 05 Apr 2026 23:32:45 GMT"},"fingerprint":{"sha1":"2E:82:F9:BF:36:A0:22:B0:24:B6:D1:4E:7B:45:33:09:CA:8C:30:29","sha256":"A0:CF:D9:C0:99:34:D5:29:DE:FE:BA:5E:64:43:CE:BF:9D:1B:DA:B9:89:5E:6F:4D:B1:3A:D5:A2:21:44:75:F5"}}},"request":{"raw":"GET /assets/tm-segtab.922cbf07.js HTTP/1.1\r\nHost: qurex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qurex.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:24:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 01 Jan 2026 15:59:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"695699ed-1286\"\r\nexpires: Tue, 03 Mar 2026 01:24:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BoOBT63Xk7BwGwFgOLG5L0CD7%2FDokA9kjCCWz%2BCGkzcE8Q1zYfzppHzjE1Yzd2z0A0vGbUykhr48JjVgBObGs%2BMkUrJy%2FkF3TA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60b8adcec84435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4742,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4741)","md5":"1b57b84328cad18094b4da95a78e54b0","sha1":"ddd5d56789d5acbb164a0dc651cbeb877d36dc74","sha256":"f3e9b198b7ccaccdf24f848df80bb58e95df52b4643fa2b1f406218d1c1978c3","sha512":"a6a99f9a51ceb9e7a8bc8f30f665ce092889c47abe506409d3e95c06ed0ad2a0123b9050582a076559515c2aeab41c746285a9ac5c5ea1d09eb300be06d98f7a","ssdeep":"96:OvHXgKZgoBReFcJdnGW00LggbMiY4FCx/PLt+pixOwCCdcbILzJ3Cuq9:UXFZVwFc3HzcG4/PL2OyIJyuq9","tlshash":"94a1d878723ca83d37bb4965b07251815209c79fd739a0d271e8047552e2d805addf3d","first_seen":"2026-01-07T04:34:13.805133Z","last_seen":"2026-03-29T15:54:21.12021Z","times_seen":14,"resource_available":true,"data":null}},"time_used":614,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":614,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"qurex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qurex.top/assets/pages-index-init.3a97d348.js","fqdn":"qurex.top","domain":"qurex.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:23.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qurex.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 22:34:21 GMT","end":"Sun, 05 Apr 2026 23:32:45 GMT"},"fingerprint":{"sha1":"2E:82:F9:BF:36:A0:22:B0:24:B6:D1:4E:7B:45:33:09:CA:8C:30:29","sha256":"A0:CF:D9:C0:99:34:D5:29:DE:FE:BA:5E:64:43:CE:BF:9D:1B:DA:B9:89:5E:6F:4D:B1:3A:D5:A2:21:44:75:F5"}}},"request":{"raw":"GET /assets/pages-index-init.3a97d348.js HTTP/1.1\r\nHost: qurex.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qurex.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:24:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 01 Jan 2026 15:59:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"695699ed-5d2\"\r\nexpires: Tue, 03 Mar 2026 01:24:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bR692UJ19r3ST%2FZQCRkK%2FdV2zFudCRqBKY2B0ojr5rmsjQ4Dqw%2BlcMniSju0Fenk2qxB%2B6uaUzLJgbxzmozeqog%2F98O2G5JAHA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60b8adff294435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1490,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1489)","md5":"f9155427197270653478903d329677c0","sha1":"a2586b48de6fb64a0920d92919c26b3739437117","sha256":"6add3c61de8e4faae42e519630965b318ba05f7235aa069736122e3583971633","sha512":"df374713247dafe5cb79f04f1871b7b621634bae22631c46dcac027db84bd262f6069862e31dd1ee95dcdc5b119e2298de2213e679a0ca3dc4eb94609c353a27","ssdeep":"","tlshash":"ce3174572a7f6a7b6b220895b4ec1ccc43791f491832e9cd7d575c1b66b2d4908dc331","first_seen":"2026-01-07T04:34:13.771606Z","last_seen":"2026-03-29T15:54:21.086009Z","times_seen":14,"resource_available":true,"data":null}},"time_used":572,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":572,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"qurex.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/doge.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.159.87","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:24.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/doge.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qurex.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: fELN7G5jRwdLs74/bnkOS1UM8tYV216lAVJChIkQVpEe8Z1w9TxnyKrm/XYyXsLc+Od0bm2kJvnl6Z/+KhJ4zdlcFeb+TYFx\r\nx-amz-request-id: VEA79KVDV25V6AZQ\r\nDate: Mon, 02 Mar 2026 13:24:26 GMT\r\nLast-Modified: Thu, 14 Nov 2024 02:02:53 GMT\r\nETag: \"85a9905c5ded19678ea5c2a0e3eb5b92\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 95699\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":95699,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"85a9905c5ded19678ea5c2a0e3eb5b92","sha1":"758fd685e61ce28ddab9bcebfc60f62f1f2c150f","sha256":"83785fe3ab9c29b35a4884d93864038593ac03e6f605a5cb6bf9f7567e338abb","sha512":"a88cb74309d3fca02ce1fc32c81f0d78c387a4936c0f2924c603037201d14b26a5fa715723f40d01868d2a41361e26e2a2abb315e32332970ce15a186d8043dd","ssdeep":"1536:LEpYE8EXjfWGPQcIhSWQnGQBMDPla2zoW1:f","tlshash":"da9394d5b7e5e2e8f005e3fc872a98f53a632cfa3922c95893e52c15e95102d489dcd3","first_seen":"2024-12-15T14:02:10.456974Z","last_seen":"2026-06-02T07:26:04.026839Z","times_seen":314,"resource_available":false,"data":null}},"time_used":2104,"timings":{"blocked":613,"dns":14,"connect":284,"send":0,"wait":313,"receive":569,"ssl":308},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/ht.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.159.87","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qurex.top/","date":"2026-03-02T13:24:24.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/ht.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qurex.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: DlECF440HrWrv6EDAQxLd21A2mtnn0IlxT8xUVPpLlTlFOiDRIzJc0N2u+FX2kdE6T4+VNPEHSAHvaLx5JfddylUoaBCQnlf\r\nx-amz-request-id: FZFY0SDP1R3SAYHQ\r\nDate: Mon, 02 Mar 2026 13:24:27 GMT\r\nLast-Modified: Mon, 25 Oct 2021 03:09:57 GMT\r\nETag: \"80e500afa84f18399d56e65b94005aac\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 1991\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1991,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"80e500afa84f18399d56e65b94005aac","sha1":"374e04f26b691c0652197ad6f32d108b6a47e291","sha256":"4da8fea2e80ffa1543e86524a0127c052a3746d5d49b2ec9a613df58f78246f4","sha512":"d1f46b2989d02ff4fa201553b2aba323499c7b68bd11c306c02cb899182ae1ab350eb0bfc25f48bf1502b131a7e2625e10f76f72a6ccb8a12dbeefd3f3c3acf2","ssdeep":"","tlshash":"9c41ee1fb3153668f510b2e026769c313a492f92b922f07313fc1e01a96b45c1b3ac5b","first_seen":"2023-05-25T08:09:48Z","last_seen":"2026-06-01T14:39:22.770616Z","times_seen":59,"resource_available":false,"data":null}},"time_used":1506,"timings":{"blocked":1203,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}