{"report_id":"9d582001-3ba3-4523-a364-e5df535434b4","version":6,"status":"done","tags":[],"date":"2025-12-20T06:23:38Z","url":{"schema":"http","addr":"uatqwb.site/","fqdn":"uatqwb.site","domain":"uatqwb.site","tld":"site"},"ip":{"addr":"104.21.95.88","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"uatqwb.site/","fqdn":"uatqwb.site","domain":"uatqwb.site","tld":"site"},"title":"Bubble Pop Frenzy","dom":{"size":123213,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"deb8b164a542888dd051b87f34d7a767","sha1":"226077f46153f75030af1c5d8f614ead62a5f23c","sha256":"c09cff5e7de321d91809b2e4d279208234a7b191cf925ac126ae35f63943ced2","sha512":"bf3b862c256e860d0aed76945c98b0b7f552399b2d7fbe021a98ccba189fb836dd582fb0c8a05435a2c0fe3576f5ee0154edc4890918b0c8b98216d32b1952c5","ssdeep":"1536:DcSU/awBuLaYfCr++mbm+i2JM7hr6Rhnt/oARJhO4ypmkqVqWA7FWeFAuxyiC2Cm:uVBuLarGtilhm5/nRDyX+q9Ee3xC2Gsn","tlshash":"acc3bf31b2a4602fd60b52c8fb985bb6326e513ef5414898bfec2346d35addbd91b304","dom_hash":"domhash6712997d21b8aa3ee6059a36c4488cac","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"uatqwb.site/","fqdn":"uatqwb.site","domain":"uatqwb.site","tld":"site"},"ip":{"addr":"104.21.95.88","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-24T06:23:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"uatqwb.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-14T22:13:59.416786Z","alert_count":0,"request_count":3,"received_data":52757,"sent_data":1657,"comment":"","tags":null,"fingerprints":null},{"fqdn":"play-lh.googleusercontent.com","ip":{"addr":"142.250.74.54","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":3758,"first_seen":"2019-09-30T06:57:53Z","last_seen":"2025-12-15T11:04:57.75301Z","alert_count":0,"request_count":13,"received_data":3243577,"sent_data":6525,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-12-14T22:17:06.291076Z","alert_count":0,"request_count":1,"received_data":7263,"sent_data":464,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-12-14T22:20:12.666465Z","alert_count":0,"request_count":2,"received_data":35935,"sent_data":913,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"uatqwb.site","ip":{"addr":"172.67.170.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-21","domain_rank":0,"first_seen":"2025-12-20T06:23:39.63498Z","last_seen":"2025-12-20T06:23:39.634981Z","alert_count":3,"request_count":3,"received_data":124930,"sent_data":1758,"comment":"","tags":null,"fingerprints":[{"name":"Tiny Slider:2.9.2","description":"Tiny Slider is a vanilla javascript slider for all purposes.","website":"https://github.com/ganlanyuan/tiny-slider","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"necolas.github.io","ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-03-08","domain_rank":1371769,"first_seen":"2013-04-11T09:42:29Z","last_seen":"2025-12-15T22:32:50.020641Z","alert_count":0,"request_count":1,"received_data":6824,"sent_data":449,"comment":"","tags":null,"fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"uatqwb.site/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"uatqwb.site","domain":"uatqwb.site","tld":"site"},"ip":{"addr":"172.67.170.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-03T19:29:50.408549Z","times_seen":291399,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/tiny-slider/2.9.2/min/tiny-slider.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ed83b7fbb9a4a039267b521b742bb11","sha1":"6dea35181356547514ca65e3f779b5a8a54ab846","sha256":"080a485f94dee0e757572d6258ffb9faa1bf8876bef1aa5f60e15a81d54c4709","sha512":"f148dee75e4edaca76f0eb1d742b935ea57f5dcf5f80d66f4a709e7d4e017f10f4e9bd6703bcf4953e0ead74f9d08d282ea0a2e209b2c5fa8fd198d16cd5ab9a","ssdeep":"768:RMrxaUNtP6igcopb8aOvnwFoeR6LgQ21r+Jv:2rxrNFccodnWOpR6Lt21r+Jv","tlshash":"55e219c93114357342d721fa12af820ab3376469ee039a84d039fcd83dbd5a951afd6e","size":31738,"data":"","first_seen":"2023-03-07T01:35:21Z","last_seen":"2026-04-03T17:01:36.028681Z","times_seen":2548,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"uatqwb.site/","fqdn":"uatqwb.site","domain":"uatqwb.site","tld":"site"},"ip":{"addr":"172.67.170.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-20T06:23:15.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uatqwb.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 19:01:22 GMT","end":"Thu, 19 Mar 2026 19:57:34 GMT"},"fingerprint":{"sha1":"A0:48:31:7D:2B:F6:EC:E5:39:0C:0A:A1:AF:29:15:0D:76:56:1A:70","sha256":"19:90:A0:B2:99:FC:66:5B:AE:FB:2E:75:CA:FB:29:C5:8A:49:DB:87:8D:5D:2B:9B:EB:17:49:E2:79:97:2B:B2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: uatqwb.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 06:23:16 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\ncf-signal-fnrrx: b6ba8c7d-a79f-4aa6-9235-530de58d6de8\r\ncf-x-requguest-id: b6ba8c7d-a79f-4aa6-9235-530de58d6de8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L4fs6xufzvVLxgYHCiilHfPjjkhylL%2FnS4G%2BFRmwp2kRi%2FvLbYxgUovz2lJayje2H8PaZh6OXHfhGMg0vyZkYRZusW%2FF2b4Rqg%3D%3D\"}]}\r\nexpires: 0\r\nlast-modified: Mon, 15 Dec 2025 08:16:20 GMT\r\npragma: no-cache\r\nset-cookie: user_id=b6ba8c7d-a79f-4aa6-9235-530de58d6de8; Path=/; Domain=uatqwb.site; Max-Age=31536000\ncf-ew-wai=b6ba8c7d-a79f-4aa6-9235-530de58d6de8; Path=/; Domain=uatqwb.site; Max-Age=31536000\npwa_id=52bd3d5c-05cc-40a2-8301-1bdde6a0d8c2; Path=/; Domain=uatqwb.site; Max-Age=31536000\nva_app_id=6c40eda0-8976-4d52-a4fa-095da695329a; Path=/; Domain=uatqwb.site; Max-Age=31536000\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b0d0ccc5b63569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tiny Slider:2.9.2","description":"Tiny Slider is a vanilla javascript slider for all purposes.","website":"https://github.com/ganlanyuan/tiny-slider","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121067,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"cbbff3f01449df96dea1f9c0891c5a0d","sha1":"241c4f8a76320c041e1162d7cfc2d848cec847bf","sha256":"55609d13144b15d00c445cdb0d85d3942916b476ccfd32168307e2e503774f22","sha512":"cdede0455b468a6e20397ec9427f9061e4ad801ccd0d64c92f6e807c6b129b530a2e77ae8adbd8dbf198fd2ac9bbfd1ba89b155cf4d8c7dc1b9665b2e0870087","ssdeep":"1536:ScSU/awqkLaYfCr++mbm+i2JM7hr6Rbnt/oARJhO4ypmkqVqWA7FWeFAuxyiK29n:7VqkLarGtilhmP/nRDyX+q9Ee3xK23y0","tlshash":"c5c3bf31b2a4a02fd60b5298fb985bb6326e607ef501489cbfdc2346d359ddbd91b304","first_seen":"2025-12-20T06:23:43.260182Z","last_seen":"2025-12-20T06:23:43.260182Z","times_seen":1,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":58,"dns":33,"connect":1,"send":0,"wait":114,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"uatqwb.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"necolas.github.io/normalize.css/8.0.1/normalize.css","fqdn":"necolas.github.io","domain":"necolas.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://uatqwb.site/","date":"2025-12-20T06:23:16.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91","sha256":"7D:11:22:EA:96:98:52:34:1E:8D:D9:2B:CC:0C:7E:CC:00:96:30:D1:4D:A7:34:D7:CA:42:D5:B5:4A:2B:20:97"}}},"request":{"raw":"GET /normalize.css/8.0.1/normalize.css HTTP/1.1\r\nHost: necolas.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uatqwb.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: text/css; charset=utf-8\r\nx-origin-cache: HIT\r\nlast-modified: Mon, 05 Nov 2018 02:35:30 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"5bdfac72-17fa\"\r\nexpires: Wed, 17 Dec 2025 03:26:58 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 0D01:CEFC:345E92:351B55:694220AA\r\naccept-ranges: bytes\r\nage: 337\r\ndate: Sat, 20 Dec 2025 06:23:16 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410034-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1766211796.268153,VS0,VE1\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 64e31fe58569c285122d51eae7cf578a31f0968d\r\ncontent-length: 1738\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":6138,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"112272e51c80ffe5bd01becd2ce7d656","sha1":"7ffde343bdf10add1f052f3c4308a15180eb4404","sha256":"580818700724d42d7fcc4979b0197971fca1c6d2e0286769237a0ac897df5512","sha512":"a070c473c5de7788625ba0b10fbaa36e723e074eef0dd5fb8443d3be7f694993b56dc46a1e9f268fda72afef11542d869ad11f236062f4a7bd02cb346acfb3a6","ssdeep":"96:FIrs38+a1Dy8lDOhEg3p27oS5tdnCC5wBGeJxmnJnWHO11:FL38UEg527ogCdBRKRWHK","tlshash":"c1c141a117206f2282a60d38776f978a73040127867c3cddb4a262e9cf45b5dd769bce","first_seen":"2023-04-06T20:07:21Z","last_seen":"2026-04-03T16:17:01.571006Z","times_seen":3755,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":30,"dns":15,"connect":20,"send":0,"wait":15,"receive":1,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVn6iArmlw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://uatqwb.site/","date":"2025-12-20T06:23:16.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVn6iArmlw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://uatqwb.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 10576\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 16 Dec 2025 23:53:21 GMT\r\nexpires: Wed, 16 Dec 2026 23:53:21 GMT\r\ncache-control: public, max-age=31536000\r\nage: 282595\r\nlast-modified: Tue, 18 Nov 2025 19:00:15 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10576,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10576, version 1.0","md5":"67fbc9a89d34a66c10ce237de8543401","sha1":"9060b07f6600bd6cd8e4241843e8eec743e29264","sha256":"add79d702aef2d1f1cf4865df00911e05816d06bd271602cca2966951f4658c3","sha512":"2c1d1b6bb390a2b240c15aa11a9afd8cadc7cbd8d51db420df16ea110e13c3931b4156e36b61108048b9d368b795db2d5173a2cf48a43fa8f35455a9488df084","ssdeep":"192:cldROAUbBbpRSTbCP12p7TX4eIFKT4HMgJWLgf+k17zReBfKxXUg:clLupUTGdo3D+MgB+gFMCxXUg","tlshash":"5c22bf638500535eb96cd0bf054c895259ee0e7b1bd190ede2de9508c2e19ec921acdf","first_seen":"2025-01-09T13:04:45.291473Z","last_seen":"2026-04-01T15:52:09.014643Z","times_seen":4269,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":95,"dns":2,"connect":20,"send":0,"wait":21,"receive":10,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-lh.googleusercontent.com/ABnsMhxILMw_Uyg_heoCyVfZk9VHsOFOFjk0ssVHLhnuH2mHopXhCy415qskYN-IWdk","fqdn":"play-lh.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.54","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uatqwb.site/","date":"2025-12-20T06:23:16.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:24 GMT","end":"Wed, 25 Feb 2026 15:49:23 GMT"},"fingerprint":{"sha1":"F2:85:4A:9E:D7:A0:F3:81:B4:5E:A0:15:2F:CA:82:BC:99:C6:FD:3E","sha256":"29:0F:22:40:3F:9C:0D:DB:8B:2A:1F:57:89:30:09:80:17:D2:AD:57:1B:43:86:20:0B:39:B2:6D:50:81:8C:73"}}},"request":{"raw":"GET /ABnsMhxILMw_Uyg_heoCyVfZk9VHsOFOFjk0ssVHLhnuH2mHopXhCy415qskYN-IWdk HTTP/1.1\r\nHost: play-lh.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uatqwb.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\netag: \"v1\"\r\nexpires: Sun, 21 Dec 2025 06:23:16 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"unnamed.png\"\r\nx-content-type-options: nosniff\r\ndate: Sat, 20 Dec 2025 06:23:16 GMT\r\nserver: fife\r\ncontent-length: 234228\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":234228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 512, 8-bit/color RGB, non-interlaced","md5":"20640f911db41be0864329dc4e859e33","sha1":"98626f084bead2ae220d3d3a07541918f30e0dfd","sha256":"b5f12f2862468494219ceb335dc88c20cf5ee698284c293640094e5e08eab80e","sha512":"b4bed971cbd209ddb949affbb2ea8c1627f02c252acce5797f8bfe0bdb9a6976d5f519836792578f7c256f2660fcd153368ff3465feeea3180ec4549309880a2","ssdeep":"6144:wSrwCHc3T/QgS9JsJ9aScUcFf72TOz2a2GIaQK1FMwUxW:/rwCHCSvKnRcFf7Q/a2Z01FSY","tlshash":"f13423abd49de368c32cc99cbc62b53f0156a142cae23476f3d983506a7d41b7d82787","first_seen":"2025-12-20T06:23:43.262354Z","last_seen":"2025-12-20T06:23:43.262354Z","times_seen":1,"resource_available":false,"data":null}},"time_used":461,"timings":{"blocked":120,"dns":86,"connect":8,"send":0,"wait":64,"receive":67,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-lh.googleusercontent.com/tzQstvoa2SQfKKKQH-7XF7-V9C1ZGgHgGE5K7EoeQbQhskmWy_kfEXBXBNNcKvr1Hw","fqdn":"play-lh.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.54","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uatqwb.site/","date":"2025-12-20T06:23:16.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:24 GMT","end":"Wed, 25 Feb 2026 15:49:23 GMT"},"fingerprint":{"sha1":"F2:85:4A:9E:D7:A0:F3:81:B4:5E:A0:15:2F:CA:82:BC:99:C6:FD:3E","sha256":"29:0F:22:40:3F:9C:0D:DB:8B:2A:1F:57:89:30:09:80:17:D2:AD:57:1B:43:86:20:0B:39:B2:6D:50:81:8C:73"}}},"request":{"raw":"GET /tzQstvoa2SQfKKKQH-7XF7-V9C1ZGgHgGE5K7EoeQbQhskmWy_kfEXBXBNNcKvr1Hw HTTP/1.1\r\nHost: play-lh.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uatqwb.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\netag: \"v1\"\r\nexpires: Sun, 21 Dec 2025 06:23:17 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"unnamed.png\"\r\nx-content-type-options: nosniff\r\ndate: Sat, 20 Dec 2025 06:23:17 GMT\r\nserver: fife\r\ncontent-length: 242741\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":242741,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 512, 8-bit/color RGB, non-interlaced","md5":"cb59127a14241a30da7071da9523ce2e","sha1":"b91ebbb8f2a18f9db8a788308891ad430e1440b0","sha256":"1c863288511d5dc7c79da508935f9a11bdc996e1b4239f5732c76573b2ddd43b","sha512":"d9359b0c57e691906db2c4a35f1556aa772961ab1c14955bfe53930311a0935fe0be9bb56c23fa5ffad90e5ebf93ed107523987f2d436d3ec92960101b86ed4f","ssdeep":"6144:s3pvltc272mijk/puRoVMr7hWezJbz8weC3RV:Upr7AeYwMsxY","tlshash":"4e342374e1f4862139c786659c63ff1b31365368c887d9eab8c1924b25ebcfd1a07326","first_seen":"2025-12-20T06:23:43.263421Z","last_seen":"2025-12-20T06:23:43.263421Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1103,"timings":{"blocked":121,"dns":85,"connect":36,"send":0,"wait":748,"receive":22,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-lh.googleusercontent.com/RI9WVvAeS1scJr_3Y9pi93t8cuZp_tQTdI4uB3U0tCcBnRlTR25AbbbaDOae8MdVdqI","fqdn":"play-lh.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.54","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uatqwb.site/","date":"2025-12-20T06:23:16.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:24 GMT","end":"Wed, 25 Feb 2026 15:49:23 GMT"},"fingerprint":{"sha1":"F2:85:4A:9E:D7:A0:F3:81:B4:5E:A0:15:2F:CA:82:BC:99:C6:FD:3E","sha256":"29:0F:22:40:3F:9C:0D:DB:8B:2A:1F:57:89:30:09:80:17:D2:AD:57:1B:43:86:20:0B:39:B2:6D:50:81:8C:73"}}},"request":{"raw":"GET /RI9WVvAeS1scJr_3Y9pi93t8cuZp_tQTdI4uB3U0tCcBnRlTR25AbbbaDOae8MdVdqI HTTP/1.1\r\nHost: play-lh.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uatqwb.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\netag: \"v1\"\r\nexpires: Sun, 21 Dec 2025 06:23:17 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"unnamed.png\"\r\nx-content-type-options: nosniff\r\ndate: Sat, 20 Dec 2025 06:23:17 GMT\r\nserver: fife\r\ncontent-length: 239489\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":239489,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 512, 8-bit/color RGB, non-interlaced","md5":"22f6c36a48de510ff6a47eb962b43309","sha1":"df9dbcb31a43fdf249b5686db7aa1de14df5ae30","sha256":"470eb9f79b7e2cd990922cc51bbe84848427b00ad9ce44ec6087966a28c27274","sha512":"fba0ffa49d74ec88bfefef7276a498550f825c7df6b04ad7bd996def82f4379b48397ccefce289191802e26696b4d21f820f4c7a0d250520dbfed4c3815baca2","ssdeep":"6144:GoqtYz4Pg/FS7vE4lq11XfBMaKtppIJAo8KKRJRzUd+2tVmwaeBD:GkMS07I1lJMaKt9onqJBZ2tVgeBD","tlshash":"913423bbccbdc53e6647588f4c225fb085299463c26547bd9926acc08ce4f8c3e54b5e","first_seen":"2025-12-20T06:23:43.264183Z","last_seen":"2025-12-20T06:23:43.264183Z","times_seen":1,"resource_available":false,"data":null}},"time_used":639,"timings":{"blocked":111,"dns":0,"connect":0,"send":0,"wait":503,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiAo.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://uatqwb.site/","date":"2025-12-20T06:23:16.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiAo.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://uatqwb.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20612\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 16 Dec 2025 21:09:29 GMT\r\nexpires: Wed, 16 Dec 2026 21:09:29 GMT\r\ncache-control: public, max-age=31536000\r\nage: 292427\r\nlast-modified: Tue, 18 Nov 2025 19:00:10 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20612,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20612, version 1.0","md5":"b07da7aa3e4f363c5cdbc11312239e8c","sha1":"47bf5b2f24ea4a4caafccc89b9d2a6677ef9e3b8","sha256":"e44c11f4834bdd4d6b6da7b8ee5eaebc8acb41250cd6bce5cc82ea8262140eaa","sha512":"420729406b315d8af34b62b78f39e763f5cf33cbf94467457b393fde0573dd7ffc6a23f25680988f9b82a4a3b719876ff76f3e1db047ce82615f544fc3a82532","ssdeep":"384:k5Eu+yl5Y9RpwjjmD/8Qu+POP9w+oB7rezldH9W4EMs8qCr9WvS80M8T4PTEXPFw:YEu+/Jw3FF+WP9DC/ez79jcCrb8BK4Eq","tlshash":"8192df6bce71497ac711262c773917addb8b44f627f91f2ba0562411c7b8e015c2cc7a","first_seen":"2025-01-09T06:25:34.419113Z","last_seen":"2026-04-03T17:49:35.94302Z","times_seen":45602,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":21,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto\u0026family=Varela\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://uatqwb.site/","date":"2025-12-20T06:23:16.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=Roboto\u0026family=Varela\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uatqwb.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 20 Dec 2025 06:23:16 GMT\r\ndate: Sat, 20 Dec 2025 06:23:16 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6577,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"535b8d900b815bc226ce42cda69014e9","sha1":"fd9d69b467e74f50ecde84ef91bc35b02d26d3e9","sha256":"2a4f3281e0b9b0f443e9e740bf1b357862ee93db3d7894c021780a8f38824488","sha512":"a1c6f27c98ffbf04c693d6ac83d5c24b102247a7e480fc04f66427080eca9a4c6918a84d06aa3e5998b1f346e11a9a85733bbce782100eb92a835c13a2f0b8a3","ssdeep":"192:2NjmNGN/NXkNbqbNtbqGIwV4BNbNZwNwTuV:8jMsVSehJqY4XhM9","tlshash":"7ed11c91041b54009b834cd227cebf35fe1e92106045d0b9ebfd6baaeddbda6436835e","first_seen":"2025-11-20T12:59:53.524807Z","last_seen":"2026-02-16T05:43:15.465149Z","times_seen":8,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":157,"dns":1,"connect":8,"send":0,"wait":18,"receive":0,"ssl":184},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uatqwb.site/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"uatqwb.site","domain":"uatqwb.site","tld":"site"},"ip":{"addr":"172.67.170.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://uatqwb.site/","date":"2025-12-20T06:23:16.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uatqwb.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 19:01:22 GMT","end":"Thu, 19 Mar 2026 19:57:34 GMT"},"fingerprint":{"sha1":"A0:48:31:7D:2B:F6:EC:E5:39:0C:0A:A1:AF:29:15:0D:76:56:1A:70","sha256":"19:90:A0:B2:99:FC:66:5B:AE:FB:2E:75:CA:FB:29:C5:8A:49:DB:87:8D:5D:2B:9B:EB:17:49:E2:79:97:2B:B2"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: uatqwb.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uatqwb.site/\r\nCookie: user_id=b6ba8c7d-a79f-4aa6-9235-530de58d6de8; cf-ew-wai=b6ba8c7d-a79f-4aa6-9235-530de58d6de8; pwa_id=52bd3d5c-05cc-40a2-8301-1bdde6a0d8c2; va_app_id=6c40eda0-8976-4d52-a4fa-095da695329a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Sat, 20 Dec 2025 07:11:16 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ba%2BWa0AzW%2FVOnsCOKTTe215TGLHlM9oqFnfshKtalHWNRtNgK0paoqtOLsgIH%2BnbkglijvEkm1kJOhj83HACESsQ8JkI8OV5CfV2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 06:23:16 GMT\r\ncf-ray: 9b0d0cce88be723c-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-03T19:29:50.408549Z","times_seen":291399,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"uatqwb.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"play-lh.googleusercontent.com/FJLw_NeaqJ9WRsocwcEOtF7b_spPiQae9lSWXht1yrhAM4OPnqJWjQDRRrHRcH3kD2hP","fqdn":"play-lh.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.54","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uatqwb.site/","date":"2025-12-20T06:23:16.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:24 GMT","end":"Wed, 25 Feb 2026 15:49:23 GMT"},"fingerprint":{"sha1":"F2:85:4A:9E:D7:A0:F3:81:B4:5E:A0:15:2F:CA:82:BC:99:C6:FD:3E","sha256":"29:0F:22:40:3F:9C:0D:DB:8B:2A:1F:57:89:30:09:80:17:D2:AD:57:1B:43:86:20:0B:39:B2:6D:50:81:8C:73"}}},"request":{"raw":"GET /FJLw_NeaqJ9WRsocwcEOtF7b_spPiQae9lSWXht1yrhAM4OPnqJWjQDRRrHRcH3kD2hP HTTP/1.1\r\nHost: play-lh.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uatqwb.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\netag: \"v1\"\r\nexpires: Sun, 21 Dec 2025 06:23:17 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"unnamed.png\"\r\nx-content-type-options: nosniff\r\ndate: Sat, 20 Dec 2025 06:23:17 GMT\r\nserver: fife\r\ncontent-length: 242741\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":242741,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 512, 8-bit/color RGB, non-interlaced","md5":"cb59127a14241a30da7071da9523ce2e","sha1":"b91ebbb8f2a18f9db8a788308891ad430e1440b0","sha256":"1c863288511d5dc7c79da508935f9a11bdc996e1b4239f5732c76573b2ddd43b","sha512":"d9359b0c57e691906db2c4a35f1556aa772961ab1c14955bfe53930311a0935fe0be9bb56c23fa5ffad90e5ebf93ed107523987f2d436d3ec92960101b86ed4f","ssdeep":"6144:s3pvltc272mijk/puRoVMr7hWezJbz8weC3RV:Upr7AeYwMsxY","tlshash":"4e342374e1f4862139c786659c63ff1b31365368c887d9eab8c1924b25ebcfd1a07326","first_seen":"2025-12-20T06:23:43.263421Z","last_seen":"2025-12-20T06:23:43.263421Z","times_seen":1,"resource_available":false,"data":null}},"time_used":757,"timings":{"blocked":122,"dns":87,"connect":7,"send":0,"wait":398,"receive":24,"ssl":111},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-lh.googleusercontent.com/oNGALwTDdF8QzuqtdR0_tBf0A-L6v_wCi39cXbvDMMcDL9FqxV-6bRhBw0DUmULOuEU","fqdn":"play-lh.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.54","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uatqwb.site/","date":"2025-12-20T06:23:16.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:24 GMT","end":"Wed, 25 Feb 2026 15:49:23 GMT"},"fingerprint":{"sha1":"F2:85:4A:9E:D7:A0:F3:81:B4:5E:A0:15:2F:CA:82:BC:99:C6:FD:3E","sha256":"29:0F:22:40:3F:9C:0D:DB:8B:2A:1F:57:89:30:09:80:17:D2:AD:57:1B:43:86:20:0B:39:B2:6D:50:81:8C:73"}}},"request":{"raw":"GET /oNGALwTDdF8QzuqtdR0_tBf0A-L6v_wCi39cXbvDMMcDL9FqxV-6bRhBw0DUmULOuEU HTTP/1.1\r\nHost: play-lh.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uatqwb.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\netag: \"v1\"\r\nexpires: Sun, 21 Dec 2025 06:23:17 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"unnamed.png\"\r\nx-content-type-options: nosniff\r\ndate: Sat, 20 Dec 2025 06:23:17 GMT\r\nserver: fife\r\ncontent-length: 239489\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":239489,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 512, 8-bit/color RGB, non-interlaced","md5":"22f6c36a48de510ff6a47eb962b43309","sha1":"df9dbcb31a43fdf249b5686db7aa1de14df5ae30","sha256":"470eb9f79b7e2cd990922cc51bbe84848427b00ad9ce44ec6087966a28c27274","sha512":"fba0ffa49d74ec88bfefef7276a498550f825c7df6b04ad7bd996def82f4379b48397ccefce289191802e26696b4d21f820f4c7a0d250520dbfed4c3815baca2","ssdeep":"6144:GoqtYz4Pg/FS7vE4lq11XfBMaKtppIJAo8KKRJRzUd+2tVmwaeBD:GkMS07I1lJMaKt9onqJBZ2tVgeBD","tlshash":"913423bbccbdc53e6647588f4c225fb085299463c26547bd9926acc08ce4f8c3e54b5e","first_seen":"2025-12-20T06:23:43.264183Z","last_seen":"2025-12-20T06:23:43.264183Z","times_seen":1,"resource_available":false,"data":null}},"time_used":710,"timings":{"blocked":140,"dns":85,"connect":20,"send":0,"wait":317,"receive":23,"ssl":120},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-lh.googleusercontent.com/NXOZBb5l10mSF_I6K20FrLQZKrVjh3lXns0QUa5FhrwpWqetI_O0b5DlnbFPziik7Q","fqdn":"play-lh.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.54","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uatqwb.site/","date":"2025-12-20T06:23:16.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:24 GMT","end":"Wed, 25 Feb 2026 15:49:23 GMT"},"fingerprint":{"sha1":"F2:85:4A:9E:D7:A0:F3:81:B4:5E:A0:15:2F:CA:82:BC:99:C6:FD:3E","sha256":"29:0F:22:40:3F:9C:0D:DB:8B:2A:1F:57:89:30:09:80:17:D2:AD:57:1B:43:86:20:0B:39:B2:6D:50:81:8C:73"}}},"request":{"raw":"GET /NXOZBb5l10mSF_I6K20FrLQZKrVjh3lXns0QUa5FhrwpWqetI_O0b5DlnbFPziik7Q HTTP/1.1\r\nHost: play-lh.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uatqwb.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\netag: \"v1\"\r\nexpires: Sun, 21 Dec 2025 06:23:16 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"unnamed.png\"\r\nx-content-type-options: nosniff\r\ndate: Sat, 20 Dec 2025 06:23:16 GMT\r\nserver: fife\r\ncontent-length: 234228\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":234228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 512, 8-bit/color RGB, non-interlaced","md5":"20640f911db41be0864329dc4e859e33","sha1":"98626f084bead2ae220d3d3a07541918f30e0dfd","sha256":"b5f12f2862468494219ceb335dc88c20cf5ee698284c293640094e5e08eab80e","sha512":"b4bed971cbd209ddb949affbb2ea8c1627f02c252acce5797f8bfe0bdb9a6976d5f519836792578f7c256f2660fcd153368ff3465feeea3180ec4549309880a2","ssdeep":"6144:wSrwCHc3T/QgS9JsJ9aScUcFf72TOz2a2GIaQK1FMwUxW:/rwCHCSvKnRcFf7Q/a2Z01FSY","tlshash":"f13423abd49de368c32cc99cbc62b53f0156a142cae23476f3d983506a7d41b7d82787","first_seen":"2025-12-20T06:23:43.262354Z","last_seen":"2025-12-20T06:23:43.262354Z","times_seen":1,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":112,"dns":0,"connect":0,"send":0,"wait":192,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-lh.googleusercontent.com/4SSL8CLEIEfiiWShGdPNz9-snCFgjN1gPXmhxw-4Vrwdm1ahRW1u2v2IZlSmfTdOBa4","fqdn":"play-lh.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.54","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uatqwb.site/","date":"2025-12-20T06:23:16.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:24 GMT","end":"Wed, 25 Feb 2026 15:49:23 GMT"},"fingerprint":{"sha1":"F2:85:4A:9E:D7:A0:F3:81:B4:5E:A0:15:2F:CA:82:BC:99:C6:FD:3E","sha256":"29:0F:22:40:3F:9C:0D:DB:8B:2A:1F:57:89:30:09:80:17:D2:AD:57:1B:43:86:20:0B:39:B2:6D:50:81:8C:73"}}},"request":{"raw":"GET /4SSL8CLEIEfiiWShGdPNz9-snCFgjN1gPXmhxw-4Vrwdm1ahRW1u2v2IZlSmfTdOBa4 HTTP/1.1\r\nHost: play-lh.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uatqwb.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\netag: \"v1\"\r\nexpires: Sun, 21 Dec 2025 06:23:17 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"unnamed.png\"\r\nx-content-type-options: nosniff\r\ndate: Sat, 20 Dec 2025 06:23:17 GMT\r\nserver: fife\r\ncontent-length: 242741\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":242741,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 512, 8-bit/color RGB, non-interlaced","md5":"cb59127a14241a30da7071da9523ce2e","sha1":"b91ebbb8f2a18f9db8a788308891ad430e1440b0","sha256":"1c863288511d5dc7c79da508935f9a11bdc996e1b4239f5732c76573b2ddd43b","sha512":"d9359b0c57e691906db2c4a35f1556aa772961ab1c14955bfe53930311a0935fe0be9bb56c23fa5ffad90e5ebf93ed107523987f2d436d3ec92960101b86ed4f","ssdeep":"6144:s3pvltc272mijk/puRoVMr7hWezJbz8weC3RV:Upr7AeYwMsxY","tlshash":"4e342374e1f4862139c786659c63ff1b31365368c887d9eab8c1924b25ebcfd1a07326","first_seen":"2025-12-20T06:23:43.263421Z","last_seen":"2025-12-20T06:23:43.263421Z","times_seen":1,"resource_available":false,"data":null}},"time_used":646,"timings":{"blocked":111,"dns":0,"connect":0,"send":0,"wait":517,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-lh.googleusercontent.com/ImPtdbQjj1-YKHZtxknBjQeM5-50C17Q8cI9782qhh6gRFTJGX2PwUliWTydqDcDvKxg","fqdn":"play-lh.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.54","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uatqwb.site/","date":"2025-12-20T06:23:16.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:24 GMT","end":"Wed, 25 Feb 2026 15:49:23 GMT"},"fingerprint":{"sha1":"F2:85:4A:9E:D7:A0:F3:81:B4:5E:A0:15:2F:CA:82:BC:99:C6:FD:3E","sha256":"29:0F:22:40:3F:9C:0D:DB:8B:2A:1F:57:89:30:09:80:17:D2:AD:57:1B:43:86:20:0B:39:B2:6D:50:81:8C:73"}}},"request":{"raw":"GET /ImPtdbQjj1-YKHZtxknBjQeM5-50C17Q8cI9782qhh6gRFTJGX2PwUliWTydqDcDvKxg HTTP/1.1\r\nHost: play-lh.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uatqwb.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\netag: \"v1\"\r\nexpires: Sun, 21 Dec 2025 06:23:16 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"unnamed.png\"\r\nx-content-type-options: nosniff\r\ndate: Sat, 20 Dec 2025 06:23:16 GMT\r\nserver: fife\r\ncontent-length: 230990\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":230990,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 512, 8-bit/color RGB, non-interlaced","md5":"c267217672f6f03293a52dced058ba25","sha1":"218a5126afa0a93053abd9f7922f9024e1daf40a","sha256":"d8860cecde7374e08859c7036546f09e760280e8266d9aa98200372b49ba9d32","sha512":"7928beb652ecb6fc7936761b901e447fcbb2b47e04ba02e9d2143cafa7e36e1777e418018ac52b5089869242f6e6624e5d8150e5c6fa2161f3759ef597ee6678","ssdeep":"6144:1TM0+fXqUgJj7nFAwCiAWVkrEMsSHIZWn/R6tPyj0dP:Rfa6AF1WVkR8ItjG","tlshash":"6b3423e2efe02c7368bd391681a5a70751eb8c99d79721f51e486cc5b3ea74088c8d8d","first_seen":"2025-12-20T06:23:43.266929Z","last_seen":"2025-12-20T06:23:43.266929Z","times_seen":1,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":111,"dns":0,"connect":0,"send":0,"wait":183,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-lh.googleusercontent.com/OFNhPmdOg1kNJ3gKeKHF1fVcsGlInO7k8ggTBRz3CvVTWODkjWUhI9mhNWmtV5XbWg","fqdn":"play-lh.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.54","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uatqwb.site/","date":"2025-12-20T06:23:16.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:24 GMT","end":"Wed, 25 Feb 2026 15:49:23 GMT"},"fingerprint":{"sha1":"F2:85:4A:9E:D7:A0:F3:81:B4:5E:A0:15:2F:CA:82:BC:99:C6:FD:3E","sha256":"29:0F:22:40:3F:9C:0D:DB:8B:2A:1F:57:89:30:09:80:17:D2:AD:57:1B:43:86:20:0B:39:B2:6D:50:81:8C:73"}}},"request":{"raw":"GET /OFNhPmdOg1kNJ3gKeKHF1fVcsGlInO7k8ggTBRz3CvVTWODkjWUhI9mhNWmtV5XbWg HTTP/1.1\r\nHost: play-lh.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uatqwb.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\netag: \"v1\"\r\nexpires: Sun, 21 Dec 2025 06:23:16 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"unnamed.png\"\r\nx-content-type-options: nosniff\r\ndate: Sat, 20 Dec 2025 06:23:16 GMT\r\nserver: fife\r\ncontent-length: 234228\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":234228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 512, 8-bit/color RGB, non-interlaced","md5":"20640f911db41be0864329dc4e859e33","sha1":"98626f084bead2ae220d3d3a07541918f30e0dfd","sha256":"b5f12f2862468494219ceb335dc88c20cf5ee698284c293640094e5e08eab80e","sha512":"b4bed971cbd209ddb949affbb2ea8c1627f02c252acce5797f8bfe0bdb9a6976d5f519836792578f7c256f2660fcd153368ff3465feeea3180ec4549309880a2","ssdeep":"6144:wSrwCHc3T/QgS9JsJ9aScUcFf72TOz2a2GIaQK1FMwUxW:/rwCHCSvKnRcFf7Q/a2Z01FSY","tlshash":"f13423abd49de368c32cc99cbc62b53f0156a142cae23476f3d983506a7d41b7d82787","first_seen":"2025-12-20T06:23:43.262354Z","last_seen":"2025-12-20T06:23:43.262354Z","times_seen":1,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":111,"dns":0,"connect":0,"send":0,"wait":172,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/tiny-slider/2.9.2/min/tiny-slider.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://uatqwb.site/","date":"2025-12-20T06:23:16.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/tiny-slider/2.9.2/min/tiny-slider.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uatqwb.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 06:23:16 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 11404\r\ncf-ray: 9b0d0cce8fa2dfec-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ffd-7bfa\"\r\nlast-modified: Mon, 04 May 2020 16:17:01 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 265651\r\nexpires: Thu, 10 Dec 2026 06:23:16 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=YILmXwFcIzGT0HNbfytEbM7cAOTQnv7fXou0ZZQwG%2FxYt6MpopZP41oR7oXkMW7VEXTyXtkvOjsCHsz0d%2BwzyMe5LphuQzwsX7iSml7lNWNIOD937Bh6tW9Zry5uKmc%2F15LVc924\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31738,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (31683)","md5":"3ed83b7fbb9a4a039267b521b742bb11","sha1":"6dea35181356547514ca65e3f779b5a8a54ab846","sha256":"080a485f94dee0e757572d6258ffb9faa1bf8876bef1aa5f60e15a81d54c4709","sha512":"f148dee75e4edaca76f0eb1d742b935ea57f5dcf5f80d66f4a709e7d4e017f10f4e9bd6703bcf4953e0ead74f9d08d282ea0a2e209b2c5fa8fd198d16cd5ab9a","ssdeep":"768:RMrxaUNtP6igcopb8aOvnwFoeR6LgQ21r+Jv:2rxrNFccodnWOpR6Lt21r+Jv","tlshash":"55e219c93114357342d721fa12af820ab3376469ee039a84d039fcd83dbd5a951afd6e","first_seen":"2023-03-07T01:35:21Z","last_seen":"2026-04-03T17:01:36.028681Z","times_seen":2548,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-lh.googleusercontent.com/PxbrNIjdObz48tsjyTUSo6SG6l746cLMOQhFEwburis57Y95xtRJaYxyn8KC3z8Anzc","fqdn":"play-lh.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.54","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uatqwb.site/","date":"2025-12-20T06:23:16.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:24 GMT","end":"Wed, 25 Feb 2026 15:49:23 GMT"},"fingerprint":{"sha1":"F2:85:4A:9E:D7:A0:F3:81:B4:5E:A0:15:2F:CA:82:BC:99:C6:FD:3E","sha256":"29:0F:22:40:3F:9C:0D:DB:8B:2A:1F:57:89:30:09:80:17:D2:AD:57:1B:43:86:20:0B:39:B2:6D:50:81:8C:73"}}},"request":{"raw":"GET /PxbrNIjdObz48tsjyTUSo6SG6l746cLMOQhFEwburis57Y95xtRJaYxyn8KC3z8Anzc HTTP/1.1\r\nHost: play-lh.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uatqwb.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\netag: \"v1\"\r\nexpires: Sun, 21 Dec 2025 06:23:17 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"unnamed.png\"\r\nx-content-type-options: nosniff\r\ndate: Sat, 20 Dec 2025 06:23:17 GMT\r\nserver: fife\r\ncontent-length: 231000\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":231000,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 512, 8-bit/color RGB, non-interlaced","md5":"a2cc6e302bd6904a06733f9749d273fa","sha1":"e92b3bca766cc85b1f93b209e900218dc4cdac14","sha256":"017efa8700bd58b48e3ef8255cfc4dbfd0a85505b4a629adef786d25f8720667","sha512":"d9b1157262946f7fb01a46a747b6d31ef660e0ee5a8f7d5595dc13d13736428e2eb24ef4618a08b1a9a0421076cffde0cf661c5d9a0302f97c594560b5c3e7a9","ssdeep":"6144:1TM071hZdmTTZ05ULEW61XIZxvr9GwejVzbJ:RfjZMTTZLL97InjhF","tlshash":"593423fafbf4342562aa7323868517c217b4471d05c641e221c98c25b6ff3c6ea89d9f","first_seen":"2025-12-20T06:23:43.268386Z","last_seen":"2025-12-20T06:23:43.268386Z","times_seen":1,"resource_available":false,"data":null}},"time_used":716,"timings":{"blocked":195,"dns":86,"connect":8,"send":0,"wait":211,"receive":26,"ssl":184},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uatqwb.site/favicon.ico","fqdn":"uatqwb.site","domain":"uatqwb.site","tld":"site"},"ip":{"addr":"172.67.170.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uatqwb.site/","date":"2025-12-20T06:23:16.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uatqwb.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 19:01:22 GMT","end":"Thu, 19 Mar 2026 19:57:34 GMT"},"fingerprint":{"sha1":"A0:48:31:7D:2B:F6:EC:E5:39:0C:0A:A1:AF:29:15:0D:76:56:1A:70","sha256":"19:90:A0:B2:99:FC:66:5B:AE:FB:2E:75:CA:FB:29:C5:8A:49:DB:87:8D:5D:2B:9B:EB:17:49:E2:79:97:2B:B2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: uatqwb.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uatqwb.site/\r\nCookie: user_id=b6ba8c7d-a79f-4aa6-9235-530de58d6de8; cf-ew-wai=b6ba8c7d-a79f-4aa6-9235-530de58d6de8; pwa_id=52bd3d5c-05cc-40a2-8301-1bdde6a0d8c2; va_app_id=6c40eda0-8976-4d52-a4fa-095da695329a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ndate: Sat, 20 Dec 2025 06:23:16 GMT\r\ncontent-length: 23\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YvTs3zAAo9WhdeVSBbBr6ylFfLDpcCPYVqih4YcwvjayV47rXCvfaLHB%2FrjcSgv1amORszIUSqRzzgNgMCe%2Fy9qcbyUQXLmBLrUZ\"}]}\r\ncf-ray: 9b0d0cd178e4723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"uatqwb.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/tiny-slider/2.9.4/tiny-slider.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://uatqwb.site/","date":"2025-12-20T06:23:16.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/tiny-slider/2.9.4/tiny-slider.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uatqwb.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 06:23:16 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 573\r\ncf-ray: 9b0d0cce6f70dfec-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"61787428-23d\"\r\nlast-modified: Tue, 26 Oct 2021 21:33:28 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 5173\r\nexpires: Thu, 10 Dec 2026 06:23:16 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=2rXcA%2FuA%2BK9eychJs6kr0risWb9mPdy3b%2FZ05pNvbpVQBqPI%2BgxV6k5LpeL3eaOpFxAURirZhRZH8T7g9s9FpHxrw%2FsIgcGkmXq2A5284g8Gn6fgRWGaKSmv6OwPF3AMZ8RjP4Xw\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2178,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (2121)","md5":"afcf365e904cab0605984cb0e73114aa","sha1":"d362d2d6f372813e6e66009f005b459e40bbab1d","sha256":"e9b8906a8b7540b8accfd2a491c0821d6bd6d8ccbd4ab53a56da8906ff028423","sha512":"78cc5d6927f95d6dd95b5c190ab588b4eda367b03d161b997e355dcedafb66c28d3a6b7a4d43134207e9368551c9f3c4e52f410b4038b2e5f3b064ab00e59ca1","ssdeep":"","tlshash":"4841a82983603648d5e3d7207af89a298539fd95fe334cde264dbf024742b5a1012ed8","first_seen":"2023-04-07T01:27:14Z","last_seen":"2026-04-03T13:53:46.161611Z","times_seen":2387,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":14,"receive":1,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/varela/v17/DPEtYwqExx0AWHX5Ax4E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://uatqwb.site/","date":"2025-12-20T06:23:16.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/varela/v17/DPEtYwqExx0AWHX5Ax4E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://uatqwb.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 19064\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 13 Dec 2025 10:41:53 GMT\r\nexpires: Sun, 13 Dec 2026 10:41:53 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:37:47 GMT\r\ncontent-type: font/woff2\r\nage: 589283\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19064,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19064, version 1.0","md5":"8d1530ab2b6868da6523bcfdc0f630d6","sha1":"58dd4f2875510dd511f42d0422a052a36d7c4139","sha256":"92108735c6ac66271fcadb7b0d494cef736013313c7747ffc1a00256b644feea","sha512":"c50fa77adc47153c1e5c0a287bd82b8ed54ebb55a35631548c5b5ec683fdeebbb9167e8d7850aaaac1464b623dd023502855f3b6c6c50c3c87a62bfcd7888726","ssdeep":"384:D933bs/ftltzUZYnNrS+e6tllBSOa1GeORB+atqRrdnGOGMEYtjZqCupOt:D933eftltoGnTeE/BatOyKWrdnGOc2Nn","tlshash":"c682e1758d5a3700fb58790dfaba5727c9737f0a8900ef5af70ba885493054cb815ce9","first_seen":"2025-09-13T04:42:56.378638Z","last_seen":"2026-04-03T17:53:24.868831Z","times_seen":541,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":105,"dns":1,"connect":20,"send":0,"wait":21,"receive":6,"ssl":80},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-lh.googleusercontent.com/oXClTEFsXIL-Dc_VVyE6A-BFvAHaA0eS6-xXrKabNPRk15JMamITm3LXk3Ocai4yOKQ","fqdn":"play-lh.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.54","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uatqwb.site/","date":"2025-12-20T06:23:16.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:24 GMT","end":"Wed, 25 Feb 2026 15:49:23 GMT"},"fingerprint":{"sha1":"F2:85:4A:9E:D7:A0:F3:81:B4:5E:A0:15:2F:CA:82:BC:99:C6:FD:3E","sha256":"29:0F:22:40:3F:9C:0D:DB:8B:2A:1F:57:89:30:09:80:17:D2:AD:57:1B:43:86:20:0B:39:B2:6D:50:81:8C:73"}}},"request":{"raw":"GET /oXClTEFsXIL-Dc_VVyE6A-BFvAHaA0eS6-xXrKabNPRk15JMamITm3LXk3Ocai4yOKQ HTTP/1.1\r\nHost: play-lh.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uatqwb.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ncontent-disposition: inline;filename=\"unnamed.png\"\r\nx-content-type-options: nosniff\r\nserver: fife\r\ncontent-length: 394432\r\nx-xss-protection: 0\r\ndate: Sat, 20 Dec 2025 06:23:16 GMT\r\nexpires: Sun, 21 Dec 2025 06:23:16 GMT\r\ncache-control: public, max-age=86400, no-transform\r\netag: \"v1\"\r\ncontent-type: image/png\r\nvary: Origin\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":394432,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced","md5":"b32e1d032766c0f1b81f810f86867201","sha1":"e98094eb96100440f026965d5727806f88604448","sha256":"5007d344342d43e1df15dcf59455303a18d26731c5c99cf0debbfbba6b682fff","sha512":"060f4105c348f3721ab35881e3d589604fb2684cc1d8618e880166e61bd58231017ae0757da544cf37b3023393646c7b72785b66f99d9fe9a07fdd4dda2072d2","ssdeep":"12288:iqMsK5RryB5eG8KXjFksQ0btIRAU61r0Z:lz6XvKz+sQemY2Z","tlshash":"a28423e740e04de8374208846b7c48f3bbadd3ea76d3116178885650adcbdc5a6dfa63","first_seen":"2025-12-20T06:23:43.271059Z","last_seen":"2025-12-20T06:23:43.271059Z","times_seen":1,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":119,"dns":88,"connect":9,"send":0,"wait":27,"receive":40,"ssl":108},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-lh.googleusercontent.com/OnaTIsEXLFYhnvN7Z5Avxrra9YlcqLQTPYqu1cUaRZe-1O7NOpSRAq32Pn8CwADRd_4","fqdn":"play-lh.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.54","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uatqwb.site/","date":"2025-12-20T06:23:16.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:24 GMT","end":"Wed, 25 Feb 2026 15:49:23 GMT"},"fingerprint":{"sha1":"F2:85:4A:9E:D7:A0:F3:81:B4:5E:A0:15:2F:CA:82:BC:99:C6:FD:3E","sha256":"29:0F:22:40:3F:9C:0D:DB:8B:2A:1F:57:89:30:09:80:17:D2:AD:57:1B:43:86:20:0B:39:B2:6D:50:81:8C:73"}}},"request":{"raw":"GET /OnaTIsEXLFYhnvN7Z5Avxrra9YlcqLQTPYqu1cUaRZe-1O7NOpSRAq32Pn8CwADRd_4 HTTP/1.1\r\nHost: play-lh.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uatqwb.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\netag: \"v1\"\r\nexpires: Sun, 21 Dec 2025 06:23:17 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"unnamed.png\"\r\nx-content-type-options: nosniff\r\ndate: Sat, 20 Dec 2025 06:23:17 GMT\r\nserver: fife\r\ncontent-length: 231000\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":231000,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 512, 8-bit/color RGB, non-interlaced","md5":"a2cc6e302bd6904a06733f9749d273fa","sha1":"e92b3bca766cc85b1f93b209e900218dc4cdac14","sha256":"017efa8700bd58b48e3ef8255cfc4dbfd0a85505b4a629adef786d25f8720667","sha512":"d9b1157262946f7fb01a46a747b6d31ef660e0ee5a8f7d5595dc13d13736428e2eb24ef4618a08b1a9a0421076cffde0cf661c5d9a0302f97c594560b5c3e7a9","ssdeep":"6144:1TM071hZdmTTZ05ULEW61XIZxvr9GwejVzbJ:RfjZMTTZLL97InjhF","tlshash":"593423fafbf4342562aa7323868517c217b4471d05c641e221c98c25b6ff3c6ea89d9f","first_seen":"2025-12-20T06:23:43.268386Z","last_seen":"2025-12-20T06:23:43.268386Z","times_seen":1,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":113,"dns":0,"connect":0,"send":0,"wait":297,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-lh.googleusercontent.com/lx7Scd6DCl5Iz0v1m21BMxpCYu9ajElaM1jTha_6k1m02UMeNSD3KV7qlyFHFCDi4JE","fqdn":"play-lh.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.54","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uatqwb.site/","date":"2025-12-20T06:23:16.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:24 GMT","end":"Wed, 25 Feb 2026 15:49:23 GMT"},"fingerprint":{"sha1":"F2:85:4A:9E:D7:A0:F3:81:B4:5E:A0:15:2F:CA:82:BC:99:C6:FD:3E","sha256":"29:0F:22:40:3F:9C:0D:DB:8B:2A:1F:57:89:30:09:80:17:D2:AD:57:1B:43:86:20:0B:39:B2:6D:50:81:8C:73"}}},"request":{"raw":"GET /lx7Scd6DCl5Iz0v1m21BMxpCYu9ajElaM1jTha_6k1m02UMeNSD3KV7qlyFHFCDi4JE HTTP/1.1\r\nHost: play-lh.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uatqwb.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\netag: \"v1\"\r\nexpires: Sun, 21 Dec 2025 06:23:17 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"unnamed.png\"\r\nx-content-type-options: nosniff\r\ndate: Sat, 20 Dec 2025 06:23:17 GMT\r\nserver: fife\r\ncontent-length: 239489\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":239489,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 512, 8-bit/color RGB, non-interlaced","md5":"22f6c36a48de510ff6a47eb962b43309","sha1":"df9dbcb31a43fdf249b5686db7aa1de14df5ae30","sha256":"470eb9f79b7e2cd990922cc51bbe84848427b00ad9ce44ec6087966a28c27274","sha512":"fba0ffa49d74ec88bfefef7276a498550f825c7df6b04ad7bd996def82f4379b48397ccefce289191802e26696b4d21f820f4c7a0d250520dbfed4c3815baca2","ssdeep":"6144:GoqtYz4Pg/FS7vE4lq11XfBMaKtppIJAo8KKRJRzUd+2tVmwaeBD:GkMS07I1lJMaKt9onqJBZ2tVgeBD","tlshash":"913423bbccbdc53e6647588f4c225fb085299463c26547bd9926acc08ce4f8c3e54b5e","first_seen":"2025-12-20T06:23:43.264183Z","last_seen":"2025-12-20T06:23:43.264183Z","times_seen":1,"resource_available":false,"data":null}},"time_used":604,"timings":{"blocked":111,"dns":0,"connect":0,"send":0,"wait":458,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}