{"report_id":"a8659dc4-0107-4019-b16d-63b06c676845","version":6,"status":"done","tags":[],"date":"2026-05-12T22:04:44Z","url":{"schema":"https","addr":"q48r8.com","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"104.21.35.154","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"q48r8.com/m/index","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"title":"҉U҉Z҉U҉M҉","dom":{"size":81600,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (62297)","md5":"345b387aad96235a35db664428ea3b04","sha1":"dc992101ff0115bbd43428eab7958aee308adb13","sha256":"886f4df8fd9d348627de7c5a46da8c22a4654765c6c78b0282439b3f17b1ea2f","sha512":"f07106b9b0889f107dbd9644c8fcdaacbafd568182cf37dadf37207afad005b8b263800ddee906ff711ca70961da7f0316a88e67de73f0bfa73529442922790c","ssdeep":"1536:b9eC9IIIIXJGmnuepxaCvpHagBdA0YPkgc8lbeP/V9D37zMtJtcAfo+TumAO7TZ2:b9eC9IIII5GmnueraCvJagBdA0YPkgcd","tlshash":"67834a20a53318a78173c8e4e0603f4970e2fb8ac299e385e7ac4b565fcbd747c656e5","dom_hash":"domhashb7685d9b37bcd2f4d8d2da4b897ab8ea","first_seen":"2026-05-12T22:04:52.799752Z","last_seen":"2026-05-12T22:04:52.799752Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"q48r8.com","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"104.21.35.154","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-16T22:04:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"q48r8.com","ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-09","domain_rank":0,"first_seen":"2026-05-12T22:02:09.921003Z","last_seen":"2026-05-12T22:02:09.921003Z","alert_count":92,"request_count":92,"received_data":1964194,"sent_data":40732,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:1.11.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Vue.js:2.6.10","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"SockJS:1.3.0","description":"SockJS is a browser JavaScript library that provides a WebSocket-like object.","website":"https://sockjs.org","common_platform_enumeration":"","icon":"SockJS.png","categories":["Web frameworks","JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]}]},{"fqdn":"hf6d5.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-08","domain_rank":0,"first_seen":"2026-05-12T12:04:22.978652Z","last_seen":"2026-05-12T12:04:22.978652Z","alert_count":0,"request_count":107,"received_data":47080,"sent_data":50702,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-05-10T22:35:57.417067Z","alert_count":0,"request_count":16,"received_data":1879917,"sent_data":7114,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/core-js/2.6.9/core.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"622c4c9d5dc4b1ee29a2eb908186ec88","sha1":"491753a3f979f7d180af11e1929ffff85e30f921","sha256":"794d1c7ab27be77d366e0497e641488e50f5ae6581b4db51cc08de1e142eb47a","sha512":"2b2485006e3a36dbae0d0d8488ab63ae6085c34d5a6f72c3558c52b492294c157f67ce47c1c3b89498db9ff72f748485fedc04a881f1877f903cfa0df1c8be8e","ssdeep":"1536:PLFpwkiSucuVH8MBfaQQ979S17LMgRCSRjMbEjeb6Gt6UQ:PLbw1Sucu3Qw8gc3gk6Gt61","tlshash":"1f93618cbec6f06642636675413f900bb27a1a86745f89d0e12ed1e4bc7c98f413be6d","size":92050,"data":"","first_seen":"2023-04-06T20:58:39Z","last_seen":"2026-08-08T13:41:47.168862Z","times_seen":1563,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/axios/0.19.0-beta.1/axios.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"334149adf44476f28bfbf16c7b0382c2","sha1":"ad2ea246ebb53ed655ab50d44b33d4d6f942387d","sha256":"6d2c0a450a04b5d1492f77d7e512fe6af26e95c2feac596825f45e71b9ffa4d6","sha512":"0f9d66a68e400a2499cc1dbd79331892e9e62e278d8b4784e354b7a281c91fcc1401eedb0857ff6911d842ea853d39081b459fbdc0e30d927ee93b5ba1ecdbea","ssdeep":"384:hpI8XyWPbWeAExXqgxH7RqzGbcQdVzxbUm6HwT9eei:LbXdyGbcczx/6QT9e1","tlshash":"f25285ce7861b0a757e320f0805f4a0fb2b6552a754d84a0f660e9f66db542e8733f5c","size":13638,"data":"","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-08-08T13:41:47.205688Z","times_seen":1219,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/element-ui/2.15.7/index.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc6dfa2d326274455390160572856dce","sha1":"efd937a0eaa2f39487b612814c98c37a752c9a2a","sha256":"bc09e54472585388c0ef0b58e5818a448f03b5671df4120da425cd6cac70fb79","sha512":"d42e99eb85cefb310ba46cf4a5fd9514f6804d4fa95f312178b0b54723db60950908465b257cd7160e2a67e56b1b2855bada2e67f56c992f53fad520bb7a73f6","ssdeep":"6144:jlrTktiHOvAeyErnMb/KeG4tVhkiIAUYxRtS8islZST79eA:jNktiHOvAeyErnMb/0G1TUARQ79eA","tlshash":"e1c41a8d72c5b53147a36070103f250bb33b299ca40980dcb679d9ea6dbd909626ffbd","size":590640,"data":"","first_seen":"2023-03-11T09:11:20Z","last_seen":"2026-08-08T22:29:34.880423Z","times_seen":648,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/js/chunk-vendors.0959c18b.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"59718baba413ffce8af627b8a687fb33","sha1":"7ad82303fcd29efcdad03df36319183f8787d4c8","sha256":"95732ae511ea64b6041ef117de0b516f6523a1d657c809f3117a0c9fc42fdf0c","sha512":"9a8210c594b1ff6caec54315030f045a86dcc4d2fdc681a767730e524dac8240f6038b6ce225bce1b0415f7ebc802d7fc47102fb86069fc6baf6d037790e8dad","ssdeep":"768:WscXuLZN8ZzldBKOpNtWVw5iVJonYrQBOJJB2GfJbrCGVuZgdpGd+cH0iIWRiAVo:5cXub8Zzl7bD/YowQKL4+cHdIziAAg5l","tlshash":"4533c788f2e6f074479761a4402f600bf279ad55744e88a8f225e4d1bdb8dce847bf38","size":51996,"data":"","first_seen":"2024-06-11T23:26:00Z","last_seen":"2026-07-22T14:00:50.013109Z","times_seen":132,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2675fab97e66abb2dc482356efb999b7","sha1":"3311edff263714f305e1e345e152bbee777cc844","sha256":"bc87ac65daaf5582b0084af46d5f173f84e35b6b39733943e908fd9023cf3bb6","sha512":"6d1ed57e31ecba4fd8d5e5bad006be0928245259a0d0a57a6c99029dc00cb4d2e74f0ee31a7c4e198b51bef9c544d9a55c559aad033e38acf75be73bb53873bc","ssdeep":"","tlshash":"121180cb99618a6896e214ee36fe3750b573e052f9446130751fcd103d9c70f036aaeb","size":889,"data":"","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-08-08T13:41:47.257959Z","times_seen":1160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/js/chunk-55231503.ea120e5f.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae8154af92809047b6dd2d5d60eafad0","sha1":"cdcdda3b8fe33fb2d3969bc7a9831e39ceb0d788","sha256":"851adf4fe150b6ffc42487b66f677fff1462739f909a688c352153ab1419ba9f","sha512":"562d698304ce7e934a51647d1895cb4b2dcb3b35c1a095dae4be13955acb74d1ef4a4cedd97a9773c408a9da1bc45c81dfd0e6e66f755aa63c15cdbbeb2ff0a7","ssdeep":"96:hzOO/KhO/KPpaimmxQKhMEOGpGjBMdvSNbB3wgsq/rIBNlujujDj7hlSPitAMLcA:hUMKhMdMGtUcw40zcj2P2VWHl3Pg3W","tlshash":"03324409b4c7f16acc6aa021412f2535e17a7ec55422f141eb34c9f0a6b9c793b2df9e","size":11909,"data":"","first_seen":"2025-10-18T07:29:14.338877Z","last_seen":"2026-07-22T14:00:50.011197Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/js-cookie/2.2.1/js.cookie.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa93e8894edb6245ab03883633b12b6e","sha1":"e3ba4c7d1a8876090756fd31715b4f6af6fd649e","sha256":"3fc8d8f8c09ee97d9c8cd4a6178ad0bd921a9cbe55c14513e0c06738c9dc8d15","sha512":"263612833aa8f4ad08798184b25311604f1a3bdb6aecacb71103661159007ba0a9d7803094930b3276f47e980492bdd8c49f208508ab88ebd9c0875166278621","ssdeep":"","tlshash":"0c8124b0bb8d35ab0e0e21145b1f60cd927ce43a085949f6ec9df1321468c2e977ad6e","size":3883,"data":"","first_seen":"2023-03-07T12:01:36Z","last_seen":"2026-08-08T13:41:47.154699Z","times_seen":3508,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vue-router/3.0.7/vue-router.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"32e2eb91e6ed0512057b2ad1e6d1b242","sha1":"27809df1b99a4b81b6b82ba2985cdd4b1c8bebb6","sha256":"e8707a396dd2f8d74eaaeb2f784074a24d7a71cbe15dcc70297f726b31c160d5","sha512":"0ab7b445b586dd27a0aeb72396350982783129c9ba028ba1db847c9d2acc0de9c90c3c9636e76a21553fedf81031220f3676ea64bf7336644c04da33d744563d","ssdeep":"384:UUcnX3xpR5tumD+EaKGZRpqB1UdEPQFWmexTMCJ:7E3jXtuW+qGZK1UCP5mqMk","tlshash":"01b2c7ddb581b03547e326a0412f250bf27b358db44e8498f269e4d52cba85ec42bf79","size":24822,"data":"","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-08-08T13:41:47.16939Z","times_seen":1214,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vue-i18n/8.12.0/vue-i18n.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c019be63e713ce6f2aa221c0df8fa0cb","sha1":"e5471888945144f233714d470959059c010eb667","sha256":"87e6aba4bd25be4196ad7f269a62de823242abe105df538f218d4e6e268f74ce","sha512":"6ca3ae5fb17dc20a2c27d4008454feb7cefc626bf104252354c1abd0977f73a315001d94293a7d4379ecfda6ba21d3f49a992f243a6f9249c935195527d407be","ssdeep":"384:BPdUYakDlUGQrDQxMQ4rJaT30WCxQI1cg:DUYzhUGmUMQUX3","tlshash":"cea2b7c6f56270270a9260e5183f1107a33f241d648d855df2d6e8ee2ebdd8e91a3f39","size":22805,"data":"","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-08-08T13:41:47.254754Z","times_seen":1193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/js/app.2212e73d.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"457852577225ef8f55352ce0cab5ded9","sha1":"fe8f67f3f75a04cb437e77b94a45b19d7fb8cee6","sha256":"79d2edd40bd655f033e576e3af749b388aefb4edfc42527cd05f8a0538332089","sha512":"02426f41c08d4123228cdf2c6fac257657f1488e1857b4cc5eaaf332ce00e362d9ba4428c03f73feae9d7ab434d99c2824ac850b124bb5a059830b07441a7d5d","ssdeep":"12288:etFp6YfZIflEQrEf4oYYq25hn5g2xp2GFvA2A45BuoEkczSPACB2oaN9jzT0HWlB:ORjR55EuG3","tlshash":"c9355bd822eef7b515429109410f3b3c42191fb9f156d2916876e98839edff48233eba","size":1065007,"data":"","first_seen":"2026-03-23T02:52:10.102175Z","last_seen":"2026-07-22T14:00:50.072479Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vuex/3.1.1/vuex.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c66594705de51675f08e3b83b9b9b38c","sha1":"40fa40f722043957a56324174ec6f80389391971","sha256":"e973901e74ff65888bbe2e58b95cfb957d5db316bb185a106f543d99176d1d65","sha512":"3cb0d6b77ac49d3c6c5c5740efa2fd9e3e0c79158c88a9d4f0b709f4713a38a7b72109a2b4c636377c783effc3c6457c718d8cdc2e9c7577db9691562e95375f","ssdeep":"192:90DuIfY7JtjC5ydUypH82+H8urFLR7BD4GOUo1MQl+B2GHPpB3QE7WA+MWnBP:9guIw7JtWqmhfldD4Eo64UgH3nx","tlshash":"4f1261ccf661b0764a377460623f120fe276a46d200a4468f598e4ef6cbe14d94abf3c","size":9875,"data":"","first_seen":"2023-03-07T12:05:56Z","last_seen":"2026-08-08T13:41:47.156977Z","times_seen":1475,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vue/2.6.10/vue.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"17e942ea0854bd9dce2070bae6826937","sha1":"434cdec1669f2c6c7406297a72120936bc56ed52","sha256":"72194d152571dd375c4365e5c3b4af9db2c06af0102ced18fcb062597d38be26","sha512":"3f0439fa3817c71a6b34673cd32707137b29823e93b8389e1deff24e46c427e5396a897b753ba98bfe156f01c7ce54155bbed56f418b388b22622807802e6f72","ssdeep":"1536:1UXY7qLtpHt2Pqe1mZ8I6H82RaLiMBlo2VV2B/S/g:MYeJpN2yefjMBlPV00/g","tlshash":"529308dc7299b07157eb31f1107f140bf2365a19ac0ec194b222e4e67cb984d92abe7d","size":93675,"data":"","first_seen":"2023-03-07T01:18:07Z","last_seen":"2026-08-09T12:27:40.260201Z","times_seen":4452,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/Swiper/8.3.1/swiper-bundle.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"38ef180eaf570243775427085e2ea834","sha1":"e0d97d1c702c90dbb22a6294b3c1e4126ba1662a","sha256":"b624e1e378abe009ef0de69a698b0a3e734af47efcdbd6816d5fcb8fc64c8bfe","sha512":"9da1101bbe0870e2d0e8afc1d4f9a121c6788b7604d855ecdb39bad37135437b216eba27f8f9982e0e38feafb1032983fd1bec919d87f25d506bb239a842e5ae","ssdeep":"3072:NJvgjudkXhYnafpoy9v8cIWyUaV4y+oGeJhyEfrNK/MxF:NJvgidkXhYnafpl9v8cIWybV4y+oGMAQ","tlshash":"c0e3f8896360b1a552e3268b93a9c611e3b51400b409c4e871bd4c9b6d7ed9813ffffe","size":143070,"data":"","first_seen":"2023-03-07T01:27:55Z","last_seen":"2026-07-30T10:12:01.999867Z","times_seen":484,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0d75a045ada91e8b297dc25ca5080ebc","sha1":"5459c8d31303d82ae64e465707ea4c0b774a26f7","sha256":"3bbcd117f9c743158fa2c3e85837cada012be7f205946287fe8dd509c7a317ba","sha512":"7a44155e399fa84ca4f908072115d470b687598d9d35ccde28025515a3f312cc1bbcdc6bc8a464e278f28d3563ade49f32a6d0099033870d1bd61dad4beeede5","ssdeep":"","tlshash":"a3a002a363459b385cdd3ba65470cb9a3c385121bc16b445450d1920c5a8ec2445bd94","size":67,"data":"","first_seen":"2023-03-07T18:08:41Z","last_seen":"2026-07-22T14:00:50.216179Z","times_seen":270,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/lib/flexible.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2481028b2f8ae3f9f9c15d0899705aab","sha1":"175d394457b861cf64b9347d243fe3f179048faf","sha256":"5fc76e812ff59a1e0a2faecfb1db22cfa4af69efafef2f3bde03494d543acc1e","sha512":"7b48ed3af9b9330ccbff7a8a9b7dbb1eeadc4356acc22f68a821d435b8cd85e82bc453d489355ee0679cd5ef98feda4c0be8599a0568c1a20bd6d8901669e5f9","ssdeep":"","tlshash":"fb81322806e722361e2330348fbf210539728067055ace447d5ee79e6fe4a654ef6bf5","size":4071,"data":"","first_seen":"2023-03-08T08:46:29Z","last_seen":"2026-07-22T14:00:50.153132Z","times_seen":288,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/lib/jquery-1.11.2.min.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6355f3cc28006e33bad2e765cde30e0d","sha1":"909cd6318d5047f3c8e83528253b256981394414","sha256":"39eed2d24faf4985b922b64d078f106edba6b3b84d5385e483a5c7bd69201da7","sha512":"b22d3868a7b311f82bb149f8afccee03c68dcd5e7152a061b8e18d97aef794b106dd1cc081d49f4d638193924ffa5885239cf67152fc339ff0cf3cd1d194d175","ssdeep":"1536:0Hg1kz+hAmcGmVFnlkFybx+amELolY+30k1dml+BQZX6YPnrCtn8JkDnlwMxVW2:0HDdc2F3c2G7mIW2","tlshash":"13930add76c2b06387a720b9506f550bf276599e280c4440f268e8fabc7ca49a137f7d","size":96382,"data":"","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-08-09T05:30:21.726864Z","times_seen":1912,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/sockjs-client/1.3.0/sockjs.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0a01fa31e644ca44836356a172ba7c9","sha1":"e81438a79e8a7f34423168c70696cff2a820dbf1","sha256":"840ea076b43dbf564a909bb082dc287740a96f3c4483fcc024f7176306daecc7","sha512":"a18f9c600996f8f31c046e80334cc794efff550c2286bc822ba7bbc197d99e4ce5f032133866b18cb9743a717b76e578cdb2a9fb5f6ebe42614d08ea1ea2e47c","ssdeep":"1536:XFWQV1ZGORGWiB67hAHLY/IyYT3uu+OLFckh:XFW8tG967hAHM/IyYT/Law","tlshash":"5853e8c5f46134a213e7a2b582bf11032376953a640c85b4b798dcf98d7d98c532bf7a","size":62797,"data":"","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-08-08T13:41:47.193438Z","times_seen":1196,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs//Swiper/4.5.1/js/swiper.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ac19265b38d14235141d184bca54d9a","sha1":"c725eb5a33d093e331e25c3a5ef1272b0f1f648c","sha256":"e2c1132a1877692ca2e8d46203eaae9cf6936b0a9230341c6bfc4b5aedbb1e0e","sha512":"6476ae51cfef0724ba254cff1e5d68f2cda477840954b01b933f1c9608ed6ca5094fe006d5cef7e5a32d54b25fb4a418a3e2c3eb642bcafa0d6bebaacbeac21d","ssdeep":"1536:O/pPCitsufJthaK85kqzOAkRlojU6tU8r5MhkhGllpcXvH7WcWUKcOqylFE8BtOa:+JthJkOAkaRaaGl4fH7WcWUKcOqjtYD","tlshash":"2bc31849b35071e551e72256539ed601a3b66845b90ac0a831b2d8d7acbce8c03bfffd","size":128745,"data":"","first_seen":"2023-03-07T12:58:52Z","last_seen":"2026-08-09T17:04:39.446621Z","times_seen":2480,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vant/2.12.44/vant.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd964aefdd330a73c62c045d6b31e66c","sha1":"f7021d4ccab3188fc2c0f7ad8c51f88cda28172e","sha256":"4e685208d134a61fdf4e8fa18b054f5ca2b522813f9bf591db4ac4b42ef16598","sha512":"b9c22baff22e7711c36f2091e37825b9e865ce1d2ec8476f697712c62c51e4604a961e8182950a67cedd060d7ebb720784fecb4f4b46f8d98164badd580dac0c","ssdeep":"3072:RuhM/vLqNdJXyzFg0xnnx7XJ2pviRq4jtSr1GM6TyrfXc556SdryZMyR7:MhM/GU6KRBx+rRSPyR","tlshash":"be44e78ab1c5b425079770b5403f110ab237298cb81a84dcba79e4e66d7ca5ca13ff7d","size":278598,"data":"","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-08-05T23:28:05.531433Z","times_seen":241,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/element-ui/2.15.7/locale/en.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"05c65efd7ab47381eac414b929c80d11","sha1":"c0fbfd65eaf0a9a92dedbc93b1b1d7d8c55f8094","sha256":"d6361676df25451bfb74c691c9304ba709919cd4dd03d3c7bd5f999af7a6c597","sha512":"3ca05b333100d916cc783022dcc5b5d0210351e5ff8f184bf7e6450f63f919dc6c28e330d2f49de7a452a7cbee975a68872a3e2d3cbeb99e255e2827b59674ad","ssdeep":"","tlshash":"0a71fcff49b5406a4135dc19659f6407616180ab4e28bc397fad53a82f8cc1ca0feed5","size":3516,"data":"","first_seen":"2023-12-31T12:39:44Z","last_seen":"2026-07-22T14:00:50.173418Z","times_seen":416,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"q48r8.com/css/chunk-19e6f436.b313c630.css","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /css/chunk-19e6f436.b313c630.css HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-6e\"\r\ncontent-encoding: gzip\r\nage: 156\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ClXR5OSCM6IfhryG0qD6BTFPuduGBy%2BPaLeRqyUrOMo9j0m%2F3q6EblrZacnpDDZ5%2Fap%2BX35hQW7k5A22tFOuToQCvSgz%2F5TRr4ybPGWCXtxWhGo4%2Fj4madqq3c0%3D\"}]}\r\ncf-ray: 9facb8059e87c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":110,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"f9d9f82e65f7eff1cb8e131e0b71a4f0","sha1":"249cd39b95839347af6d8d0dbd1d4f80bf2d6bf9","sha256":"16a28002d833971b2c0ff5252e93461a84c69cb02e95be2ac634ceb9b7bca019","sha512":"cc6a5e790589789c4ea19bcb5cdd5b29d4d2196631d56765469d4c3d9746ce99a5f7b12df2203c97466957c52d4afe781e49a33998acb9ddab735953cfa64b22","ssdeep":"","tlshash":"9db01240f80c4c2f22e3d3c82064dec536103993cdc0939d3ca8c1228d231503512ca1","first_seen":"2025-06-30T02:18:00.800899Z","last_seen":"2026-06-01T10:56:00.202567Z","times_seen":80,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/js/chunk-2d21d44a.9e3c7a52.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /js/chunk-2d21d44a.9e3c7a52.js HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-550\"\r\ncontent-encoding: gzip\r\nage: 152\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a4yb714LRkz3MRmPclDuJeJQ5iVPpjJhZ%2BPs4Qxp%2FE7Dz8k79zuUZbyTqGY9rXZeKpAnk3KLgN7oq6FOoYeacZhM57hdZ1wGDlRrepFVcZHIy7U7Zvh5slnCqlg%3D\"}]}\r\ncf-ray: 9facb807ced6c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1360,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1332), with no line terminators","md5":"063b1dce058d78683019c57d4b6de853","sha1":"cd62098b12168ff32db1afe785da0db3a3568e38","sha256":"58023a2e105bf911f131610a55750ba7386fc39096133d727635186a98a6127c","sha512":"9523fb7f681f7abe0b168b735a1b904076e6e1cdfe3e57dc02b71fc22e1603445365362148588704b92dacf0d7670b64d862cdec5943502cf419cfcaa60ad03f","ssdeep":"","tlshash":"cd210f54f087d28dac7f8001a59e3234f0242fd84551a2c3abf8c56516d5cb90b0d75d","first_seen":"2025-04-09T11:39:56.010645Z","last_seen":"2026-06-01T10:56:00.198385Z","times_seen":110,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/js/chunk-44853638.a268897a.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /js/chunk-44853638.a268897a.js HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-598b\"\r\ncontent-encoding: gzip\r\nage: 152\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F89GwihcIzW9YVENOc4HK4qwYwzH0aBsE7HCB7550kWPTrrLesd1qvWWd6NNsnberbNL5el1xdxHK7Tpi6xxInwEppDg0kGy56svDzIvW8My5FF2jylSUm8cUL8%3D\"}]}\r\ncf-ray: 9facb8080edcc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22923,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22627), with no line terminators","md5":"079213fc155480bd62209dc4257cde1e","sha1":"8e5a547fe103f6f06dd800ff013f65fd6ffb6926","sha256":"6c94351db225214eedb9f5bb34717f1a1af329510f51d1c800804ca9da0ea672","sha512":"d905c6322a78faeedceed25940fa3bb7f2bad21ad53c959d75d6cef404eccbc2484ebf8f9d522fb12b124c9adde1b228284357601a2c3f8fa1ee17fc48c878b5","ssdeep":"384:8TOSwD92BtWlp+zp6iTu8xM0qP+dqA5raGJd:8iPE18Su8xMidLb","tlshash":"6ea2c748b1c3f16e8a7b9521811f1929e2396ac5e416d045fa3cc4d0b9a4c6d2b2fffd","first_seen":"2025-06-30T02:18:00.747245Z","last_seen":"2026-06-01T10:56:00.234817Z","times_seen":80,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/0d3008f40c504358adcd4d739d106903_.png","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:25.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/0d3008f40c504358adcd4d739d106903_.png HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:25 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb813fe930daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":270,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/236c00421e6344c3abd69e358d4dc793_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/236c00421e6344c3abd69e358d4dc793_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb817ca4f0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/css/chunk-20aa535d.7d892f1c.css","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /css/chunk-20aa535d.7d892f1c.css HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-45\"\r\ncontent-encoding: gzip\r\nage: 156\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rcRparTRNrHio%2BX5XxnGTXUe%2BeLBn2Mb315CBxtKAuWCl9dJ7%2Bp7PrW854ls9YWzN0yAeypwhuAFxbC0QtFNxTSDi5nuieYHh1TJabLR2ItrHAMEcvemV0ZaWdQ%3D\"}]}\r\ncf-ray: 9facb805fe97c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"24c94bdd51ac5c41571ed99206810c33","sha1":"080da262a6cef9cda0e3f1e9af67c230e5536d8b","sha256":"d39d41f904e10dc5c21717c0067df4f3906c163074210397fd695989d82e5536","sha512":"b09ad734773bb7423cdac225f237fc6c1da71b8a69ce98e8d8a15339901ecb527a5425d5c0f81d23f30a94bdea968b97cac08ed1a1f388b8c3f19c75622b679a","ssdeep":"","tlshash":"45a02220fa2eb83a8238fe002c00aac00080ab0200030030c2e2fcc80803a2338f0200","first_seen":"2025-06-30T02:18:00.788732Z","last_seen":"2026-06-01T10:56:00.257556Z","times_seen":80,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/css/chunk-55231503.7b381214.css","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /css/chunk-55231503.7b381214.css HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-7df\"\r\ncontent-encoding: gzip\r\nage: 155\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3BQHxi5qKW7nonxJZq2av1Q2yVRPCeIoiryLHQv0HBJywg9lqD6m%2BQDPs7myY40fK8e25%2F5fQ6hXs%2B1DmC5%2F7%2FAUJqzQ9pXopvNjibo07TMxIfPniNJkAmLzMFg%3D\"}]}\r\ncf-ray: 9facb8063e9fc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2015,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2015), with no line terminators","md5":"baed9f89708b3259796b03ce14a7c3e8","sha1":"2944a019faef359d13004fdea7dc3628e3efebda","sha256":"3c3e6bf1d30ed2f7f45ecccea34bc337164a6c2f50099773608d0ab21a7591fd","sha512":"f78d1e3fbc5f87b51317cd9e327e5c3c97018fbdbdfcbd1f1d1965d7ac8a236f1a825267928174ae63438f177bbfea3413a1a5da2aeed46a7fd54e6dc764df9f","ssdeep":"","tlshash":"d1414227f49c2d2c9137d852852c5dd54ba8ea63e50113e9d8ab2b21cfc39462cb31ce","first_seen":"2025-10-18T07:29:14.301628Z","last_seen":"2026-07-22T14:00:50.134427Z","times_seen":42,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/static/icons/ic_invite.png","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:25.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /static/icons/ic_invite.png HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 792\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\netag: \"68b800a6-318\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GNiH5fxy90E34AKDU1oV1JCR6rCr4uI51D7RgC%2FSy7j8k2xiWkvVxWPXg2pKyB5mKdymu1jjwZRljCNn1lICwjNjgAhD7asBcCz424wxd5HKGmdj9eQ6BYgJ8xE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb813e827c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":792,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced","md5":"ae9609f354c86c7572342b3465fb7df2","sha1":"9e3096deb064d95711813d6a0707b723f720b3c5","sha256":"581cfd62c526498c41d7fb2fa5091b6d11a15750cb4be622ba8bb5092467b706","sha512":"4e8e1dcd1be2903a55441b06191912db27a4d3b4f2ded175b9837a8a7a46e29ee2ab3eec8b7801443e5644643d1c5e54272147c19dfa3bb963b49ca260eec5e5","ssdeep":"","tlshash":"0f017590da270660d6ee934e8b871019dc7c70998384c34889488dff782f28dddf971b","first_seen":"2024-05-14T19:58:50Z","last_seen":"2026-07-22T14:00:49.999447Z","times_seen":92,"resource_available":false,"data":null}},"time_used":781,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":781,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/722e480fa0ba4562b322feb5c510d318_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/722e480fa0ba4562b322feb5c510d318_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8160d240daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/1cd162f6f78749c1a4fb16d4bbecb180_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/1cd162f6f78749c1a4fb16d4bbecb180_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8164e380daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/ea39dd9df5184d6bb1bedfb089ed5d50_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/ea39dd9df5184d6bb1bedfb089ed5d50_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8166ec00daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/element-ui/2.12.0/theme-chalk/index.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:22.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/element-ui/2.12.0/theme-chalk/index.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 22:04:22 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 27462\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03e43-38cf6\"\r\nlast-modified: Mon, 04 May 2020 16:09:39 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 961729\r\nexpires: Sun, 02 May 2027 22:04:22 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B6aWpIdsa6IF0cRzp5zBou8ydzHDE1muac9q%2FrorTT73C8nSakr4aGNM%2Bfe8L38BAWAw7QGHThBIWJvbSzC%2BFSufCWlb40Asd1Xx8O9cgBDH79ZhAxzTVOswQY1P6L2wkGvOY5P%2F\"}]}\r\ncf-ray: 9facb8000fc81525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232694,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b156c93b3792c208a43d643446f0d308","sha1":"1ee68ab3ff034e3553c779fe94079bbd43436f67","sha256":"913f0305e94e0c8cfea0ab62c4bbadbe86b52b5cd6893a1a3740d495a1005155","sha512":"671b1110d3c3f19b6c0ecb8e6a0771d05beefba8bfa8b3fde91e955df08c168477f23d526ca2eb355c7397dda5ef47e3f8196fef126c53d17cc4f8a236ff9c61","ssdeep":"1536:y28Y7SrW3YeWXA1u9w4HCe/l4ftg5fNME30e/8OaiZkW9YO8eQw4yG4tfNIc0yr6:Xbk0Z6fKyZL1dw","tlshash":"0a34a6219b07216b612bde6db6c0ba895f18c323d4725bbbfe55340dcbd34891263a4f","first_seen":"2023-04-06T21:01:19Z","last_seen":"2026-07-31T19:08:36.538561Z","times_seen":395,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":28,"dns":0,"connect":1,"send":0,"wait":23,"receive":1,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/css/chunk-4366d870.175bca26.css","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /css/chunk-4366d870.175bca26.css HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-9a\"\r\ncontent-encoding: gzip\r\nage: 156\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fk6UE7aQ6rjoJK%2Fww8f0rINm6AfXdfkVb28VTEYG7IBoowRpfsVTtBgaQ%2B73aDpDzn8DubIsmzWEBebwEElXWg516Jt5OQX78zfQFV0puhDMsdAJZbFaZAinR%2Fk%3D\"}]}\r\ncf-ray: 9facb805fe9ac272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":154,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"92893dd74bbde0d3b99f7961ddc49084","sha1":"a2c4ee22ad640829d660abe7a0e20974076d8312","sha256":"4e87e87645a3cade6841c4948041b6446bf2e4e228b949eb1aca5b568d4f04d0","sha512":"d7cd4cf323461034e2767502d1a37cf02de528d1a4b8bc0fb0905284a72df55b518e23080bd31783e39b330c7a273602fab58b4b5ca8ada4698620a9fe091bf7","ssdeep":"","tlshash":"fec04c76658d6b2bf16af2906e5b71e86314ba27a110611b5a514630ddc3e6160d8428","first_seen":"2024-04-28T18:22:38Z","last_seen":"2026-06-01T10:56:00.194368Z","times_seen":277,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/api/banner/5/list","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:24.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /api/banner/5/list HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: uz\r\nAccept-Encoding: gzip, deflate, br\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/m/index\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:25 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CPdgW6xevfq3qJWvCF9MPKt7J9dD6LKzztukIrPGpusPEchGondiUhUl5wXJTIjXXJIxQzijK938cnRIiC%2FkVTLzBsGeaCKX%2F7s6%2FSO6lBZQVqB4NIJcZLxf8FU%3D\"}]}\r\ncf-ray: 9facb80f2fb0c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1233,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e49554b07520491d3d423f71e28f7f9b","sha1":"d60625f425334ba8858c25c10bfc5a1ce056de58","sha256":"a2129d6a0bc1d6b96714a722924720aa8d674fc73f1f7e3607ef569c977289cd","sha512":"56ed838c5eb1fcd9554f95ce2967748af7d5f52e33197cca9cb49aaf3129e3ad533a012fadd7de980332b70ca2f6a6bd793abfcf4f96efef8f320f01c75bf4e9","ssdeep":"","tlshash":"07214c1a927af8f8996fc18648dfb885d4ad732ec4d51eac3481cc1cd58943eab4d81f","first_seen":"2025-04-23T13:47:12.020095Z","last_seen":"2026-05-12T22:04:52.808657Z","times_seen":19,"resource_available":false,"data":null}},"time_used":813,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":813,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/static/icons/ic_withdraw.png","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:25.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /static/icons/ic_withdraw.png HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 1020\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\netag: \"68b800a6-3fc\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kLH50LVe4eCLPHU6o8OhbvnLz4Wi0J3CVHTXdFsPHoGJbbiULiHP52ptXqedMqCQ7ACxZY640QMxgPalmd5i9jGgXH%2FZDAu5SZ6Sfpwc%2FDBupl9u0vJZaBvYsQs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb813e826c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1020,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced","md5":"70d1c13f7ac751ce09b753e3d955dcd9","sha1":"c968143931b9a22e7b6eb3f6a4bde6bf35f7154c","sha256":"6162c404f5ecd341bccec293364e418717a70e7bc69088f3539932283c9b9209","sha512":"120456706abe3cdee25d06462dcbfd3ae3c3b353b80f1c4c4ba0596e34ef19e7affed608afaa51a20c76f1382a9c78a3801de2cdc155c0870d6d6a5baa820610","ssdeep":"","tlshash":"9a110ce301519d22d95712fe8e340460b5472dd4031022c8bea39fe8eb14fe501c4339","first_seen":"2024-05-14T19:58:50Z","last_seen":"2026-07-22T14:00:50.041496Z","times_seen":92,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/a1b92c073490486c8a8764bbcdfcd3e1_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/a1b92c073490486c8a8764bbcdfcd3e1_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb816bf9a0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/lib/flexible.css","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:22.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /lib/flexible.css HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-409\"\r\ncontent-encoding: gzip\r\nage: 158\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YNIp0AN%2FXpYL6Rw9lvg0LBRfvm2Q%2BXleKq1HPsBLPNjAYY0VdhKVPK5Qv%2BachwYYqIWcBAxTQFRXEqgnGSJB4L%2F6%2FF865C0rXlSQw5Ra2Ru66aKA2GEaerfQ3Do%3D\"}]}\r\ncf-ray: 9facb7ffbddec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1033,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"ff3955ccaab30b6705c564ec20327213","sha1":"b6a9a1cd9cd27a7791f43758a360dad129ed2802","sha256":"1a61c02df0ce591e74ffac300f6c2e2ab3614ec95a9bb2f8d29aa6a9ae099deb","sha512":"a9fc65c1298158177afdf10a06e723b893187150ee4f73bdb16b842d140bd0881d53da1a109fa051c0eb44a419ccf27afc072515f23a632d3bf64a69c7cbcd1b","ssdeep":"","tlshash":"631175315350b490a4f78e33320d955865304352cc378a60f320f198d5e203b27a2b8d","first_seen":"2024-01-12T03:26:58Z","last_seen":"2026-07-22T14:00:50.052784Z","times_seen":275,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vue-i18n/8.12.0/vue-i18n.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:22.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/vue-i18n/8.12.0/vue-i18n.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 22:04:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 6201\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb0402b-5915\"\r\nlast-modified: Mon, 04 May 2020 16:17:47 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1823139\r\nexpires: Sun, 02 May 2027 22:04:22 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=onvgN4RuMchTWljIBJPrMqJF5Hfs%2F79YXh28pXFBynqFkvCg%2BELid2Zzfv15lRQEtEfT4Gj0Mdj75MuvFCymk0Mf7luC5YRQYkYlmWTFipA6i5QS66BUuHGCQdL5t1QrkILdY08k\"}]}\r\ncf-ray: 9facb8001fd11525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22805,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (22712)","md5":"c019be63e713ce6f2aa221c0df8fa0cb","sha1":"e5471888945144f233714d470959059c010eb667","sha256":"87e6aba4bd25be4196ad7f269a62de823242abe105df538f218d4e6e268f74ce","sha512":"6ca3ae5fb17dc20a2c27d4008454feb7cefc626bf104252354c1abd0977f73a315001d94293a7d4379ecfda6ba21d3f49a992f243a6f9249c935195527d407be","ssdeep":"384:BPdUYakDlUGQrDQxMQ4rJaT30WCxQI1cg:DUYzhUGmUMQUX3","tlshash":"cea2b7c6f56270270a9260e5183f1107a33f241d648d855df2d6e8ee2ebdd8e91a3f39","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-08-08T13:41:47.254754Z","times_seen":1193,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/css/chunk-1b5a0ff6.5bf61409.css","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /css/chunk-1b5a0ff6.5bf61409.css HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-c3\"\r\ncontent-encoding: gzip\r\nage: 156\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=onwajVA1ytphK0dddnNPCrTrSoNqjFXosH%2BJU488v%2Fgwaj8tm39hEUB2r9SF3C71fQeJazWHLBfLbJgNBnJHnQPUvpDS5WDWpM%2FlYCZGEc0q2eJS9hKEPmcDbbQ%3D\"}]}\r\ncf-ray: 9facb8059e88c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":195,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"3221fb067b1cde22f7a51f3e176d770f","sha1":"4cdf60b231ed45d5d22340945a519a1ff2d8a59c","sha256":"3262ab79ed69af173a45cf6ebe34046a3e5a5423c5a0b49fa001ceaf86324ebb","sha512":"034b963413d230db730001b883a237049a791f3a9ccf111ccdbb5f31d82c02de015f75f10e1b469e4464d788fb766c2a04d228d18e1ec7fcd90e0b4f53e1979d","ssdeep":"","tlshash":"37d002b1291de0bbe637c16501dcbc449165f626d2775a41c9c39b2819cb2033eb4398","first_seen":"2025-07-19T12:02:29.42352Z","last_seen":"2026-06-01T10:56:00.22532Z","times_seen":68,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/css/chunk-2d90c97c.245bb9cd.css","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /css/chunk-2d90c97c.245bb9cd.css HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-12ba\"\r\ncontent-encoding: gzip\r\nage: 155\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fPwsh%2FlRyO7BtVEqPjNyXi392ANMfJtTxRCk%2FtfI4dvnnG8V%2FP%2FalqmI38Pfbabb4oxp8jgpONWT3hD8h4JFrrBYUgPd0WfTDRiRKSigXBohBB7K2NHZGmV3ipg%3D\"}]}\r\ncf-ray: 9facb805fe99c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4794,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4794), with no line terminators","md5":"d81af9f0fed86f2336e72d4dbd27b0eb","sha1":"f7aaa56d9a8bd8ae249c346f868bf6a66e5c4d09","sha256":"93cd6c5726c486853f54f0522bad1d31d143d5ede3f3d41dacd43b1297cb0477","sha512":"b7220674ed2cd37383d4cd6840f0f7b9bb2e0301319a7c9fe9786dc2fb91bb94a3ba5d41d998b3dfbeae59ce2af1bf3156e12f11596711bb921471d799bcde7c","ssdeep":"96:RxU1M6UMqhM6pLxmA94d2+Wlfb3bP4PUKUez5:sM6UMqhM6Z4Q+gfb3bP43Uez5","tlshash":"2aa18fdfa4f68111f1f7de6217cc9445de326fe339a10ceab1da148d870aa85271b0e6","first_seen":"2024-09-19T21:03:31.100076Z","last_seen":"2026-06-01T10:56:00.239006Z","times_seen":250,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/js/chunk-4b346616.a149f580.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /js/chunk-4b346616.a149f580.js HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-e96\"\r\ncontent-encoding: gzip\r\nage: 152\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gFtbJ1LxiGCaqdQTcIDMvHBtmohue24rVj%2BcrrOnLOl6GlWVvR%2FMDVPTJs2eIBchZwBA0UO8koFrdlEusJYUcdTina%2FyYKq5w43N7rnlDE7SkMF1OVA5CYzdBhs%3D\"}]}\r\ncf-ray: 9facb8080edfc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3734,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3604), with no line terminators","md5":"8872ca58192b8763c01cde655e58a24e","sha1":"21d8cce695a7962fee9275c354c4bf996848a65c","sha256":"8c7be6935e5631fb25fe6dd1b8406b0db0b4c417e94d103a3843d2d0c1b172cb","sha512":"bed9a8fd258f9482f807c54952182dd4fc94e276c397a45822bb8002c12bfe913318552dba07c68b0836796a8a17da33e0adee9fb06eff7a38cae3789454dc80","ssdeep":"","tlshash":"3071fe04e8d7d29a9c7b8502915d1a70f0362fa0c921f043e3bccaa463e5db86b0e7dd","first_seen":"2025-06-30T02:18:00.899229Z","last_seen":"2026-06-01T10:56:00.200555Z","times_seen":80,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/static/tabbar/orders.png","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:24.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /static/tabbar/orders.png HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 906\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\netag: \"68b800a6-38a\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xHuhSIOIsv2xusA4FE2ZKNHcFO3TP0e5iH19kO9PF9qe2GvVh1acbOC7xcuBa6sMgTpEQh7akE7uLmA5bfuB5ReNcOXko8vT97aA08QRHNNouWwOUzRqtqY6Xys%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb80edfa5c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":906,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 45, 8-bit/color RGBA, non-interlaced","md5":"7158cc1ea0a5361d7da036a4ae236e7b","sha1":"f8b1761e2ae0d975005dfc59e0d8be65f2444ca3","sha256":"940f1ac824ebe17c2c94051bcece498bc54564c3fcd9a0a47c77184cd96f08b4","sha512":"237c5cdfafa2b358d9cb1ceb1ae6c4aa6229a3bd345172f38d5780a8231c1c6951ee08cba7ae002c643b1fe6687f4292d4333efdbaa7b750c4a7cc60c6a835b4","ssdeep":"","tlshash":"371163ce6379e8aca68c5b3c74cc053fdd72517e60ceb108a8105368ec7a745414a2e2","first_seen":"2024-05-14T19:58:50Z","last_seen":"2026-07-22T14:00:50.09654Z","times_seen":92,"resource_available":false,"data":null}},"time_used":767,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":763,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202604/15/f758248ec1dc4c23961504ea4b49fb22_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:25.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202604/15/f758248ec1dc4c23961504ea4b49fb22_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb815bc3e0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/182fe68f0c9c49e0a1a449df345e982c_.png","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/182fe68f0c9c49e0a1a449df345e982c_.png HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb817ba370daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/api/banner/4/list","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:24.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /api/banner/4/list HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: uz\r\nAccept-Encoding: gzip, deflate, br\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/m/index\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:25 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R0s8bMMmNB%2F1VfHkT4%2FuLCzHjVhLHHTj4vIeg0cGgzFTZ26Yx8g7PBGJIh%2FXGk%2F1RzE46%2Bgn6VqNn18kXqYvCHxoCU3tmxwscY%2FhXaDeuE17fqOZyetuv7uVdH0%3D\"}]}\r\ncf-ray: 9facb80f0fabc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b9e754add75d51d888ce7585dc9dfe41","sha1":"0fd53114199a1a46e887032b7efa05f1fd74c807","sha256":"7a97b9b4d758a3929b8a2be53fbe189c9ba9378d6fbb8190d37f7cc14f5cf5d3","sha512":"6ea97d926607e77cda3275af2c3ba966fd45c1d4b4aa97b53d63a718f0941d93c1d4e67939885740dc6bfd59a0021ed049073ddfc61cfd0e8a5553efb449b539","ssdeep":"","tlshash":"2f500000003c000300030000000c0000c33f00000c0000000c0c033000000000000030","first_seen":"2023-04-06T21:01:20Z","last_seen":"2026-08-08T13:41:47.156269Z","times_seen":5382,"resource_available":true,"data":null}},"time_used":766,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":766,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/static/icons/ic_recharge.png","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:25.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /static/icons/ic_recharge.png HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 1139\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\netag: \"68b800a6-473\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=REel0qA2B7ZmpDZlevy9ipdMUK7OyNbq9imuUQoVUXhBYRsxuc9hFQD0GxWJoegxXZ7mVCGyE0H8HFf%2F%2FMJddrSr1H4bFQm2H1fRkDBcV8pwMASWpH6kdTeb1Zg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb813e824c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1139,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 30 x 19, 8-bit/color RGBA, non-interlaced","md5":"1c2937ad9f59c2144856c7e17b022a65","sha1":"4c6e4fc1d9be48286e643da67f8e88b8612e0744","sha256":"9e4d52b130ee6457bc78db04c15c4f771820eb2b983259fdd606298f1e3e9f75","sha512":"894ea7b05ebd0efd11d9b79739fa3416d83302618e0c014a95c65bf396ba0cde03d1690dbb1851c73b1a267d6a0c2b5e9db5b2a3de26201fc8a3f4280f30c970","ssdeep":"","tlshash":"5321c6b50eff1ae2d378b339c412a4a2eb9732677514360a3d15c00b94b254c4483279","first_seen":"2024-05-14T19:58:50Z","last_seen":"2026-07-22T14:00:50.198199Z","times_seen":92,"resource_available":false,"data":null}},"time_used":768,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":768,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/2adbb60fe2ac4d00b360e12edc9c2d81_.png","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:25.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/2adbb60fe2ac4d00b360e12edc9c2d81_.png HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:25 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8140ead0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/d602a054dfa64fa18486fd4ba1ef3855_.png","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:25.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/d602a054dfa64fa18486fd4ba1ef3855_.png HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:25 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8141ee70daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202604/15/ea67b2901d0946b08ba1609a46e4a678_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:25.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202604/15/ea67b2901d0946b08ba1609a46e4a678_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb815cc940daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/4dc04a2ebdef4ddcafb359dda80db270_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/4dc04a2ebdef4ddcafb359dda80db270_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8164e3c0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/081207d30a55432598c268dc27e54aa8_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/081207d30a55432598c268dc27e54aa8_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb816af400daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/792352e1d8c24e5bbb4f3ba489320f2d_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/792352e1d8c24e5bbb4f3ba489320f2d_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb817ba3a0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vuex/3.1.1/vuex.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:22.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/vuex/3.1.1/vuex.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 22:04:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 2776\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb0402f-2693\"\r\nlast-modified: Mon, 04 May 2020 16:17:51 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 3057327\r\nexpires: Sun, 02 May 2027 22:04:22 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kbQNfqHy4pUuMqZVtwYG17UdTNjeOQWjn4LrTz7xXN%2B1Dlr7WKCBeTXl31tS3Lx9uKprsS2rcPiMnHwFA64VAE33jgvyhc%2BToIHZzFkoSMSeosqBb8Ui1Quw0rUvlOUeTSoGKhJK\"}]}\r\ncf-ray: 9facb800582f1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9875,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9815)","md5":"c66594705de51675f08e3b83b9b9b38c","sha1":"40fa40f722043957a56324174ec6f80389391971","sha256":"e973901e74ff65888bbe2e58b95cfb957d5db316bb185a106f543d99176d1d65","sha512":"3cb0d6b77ac49d3c6c5c5740efa2fd9e3e0c79158c88a9d4f0b709f4713a38a7b72109a2b4c636377c783effc3c6457c718d8cdc2e9c7577db9691562e95375f","ssdeep":"192:90DuIfY7JtjC5ydUypH82+H8urFLR7BD4GOUo1MQl+B2GHPpB3QE7WA+MWnBP:9guIw7JtWqmhfldD4Eo64UgH3nx","tlshash":"4f1261ccf661b0764a377460623f120fe276a46d200a4468f598e4ef6cbe14d94abf3c","first_seen":"2023-03-07T12:05:56Z","last_seen":"2026-08-08T13:41:47.156977Z","times_seen":1475,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":44,"dns":4,"connect":14,"send":0,"wait":9,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/css/chunk-1cbbb860.e43e04be.css","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /css/chunk-1cbbb860.e43e04be.css HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-2fd\"\r\ncontent-encoding: gzip\r\nage: 157\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vEt%2FszPiAVZ3buyx7k%2F5xB87JTz%2BNWsDo707QW4v7I6xIl409kMrt9kqImPT8n6PSb%2BU0MX2m0RhDQWuiBftMwcPSfu9Jvjh4%2BE5nQz9bul7C8xfyoLoNS1bIRk%3D\"}]}\r\ncf-ray: 9facb8059e89c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":765,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (765), with no line terminators","md5":"dedea350ecbc1691a0dbc8d699eafe18","sha1":"5875d960f2c96a25fa5e2a281882c9fab260f05e","sha256":"b4f4b8fac275a3e0d022c71e3f984c36e63f3abbdabc0d22b4ea662688bafc55","sha512":"abb6f62c9a3400fb24695359add398e1f219e57e466a1cf11d45f6d1764a44b6bd8481734fbb054addd438b713e2c5cad79ae38d8c8d692a52c9ecf0698f23b9","ssdeep":"","tlshash":"9301d2f530aa2814a73af62c719867912c20e333c543028a57d3d63e4fc73d515e4e87","first_seen":"2025-04-09T11:39:56.041244Z","last_seen":"2026-06-01T10:56:00.222011Z","times_seen":110,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/css/chunk-1d8200c0.68ff336f.css","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /css/chunk-1d8200c0.68ff336f.css HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-790\"\r\ncontent-encoding: gzip\r\nage: 156\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DoZ%2Bd1X5SohfrOrivGNuYvjyKNT3eNvfn%2BIUpS1HBIagV1QTge70BqMmcdqlvmzBfNehZ3Z%2Fpb8o3g7lKkdEX1wBBec6L1UIjVIIpm4wv%2FEwX2vEfOlj5oQAZ5g%3D\"}]}\r\ncf-ray: 9facb805ae8ac272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1936,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1936), with no line terminators","md5":"ae6b44f25ea0633abb1972fd12e58aca","sha1":"8c320c348eb188f35693c586e2e740a4ab377188","sha256":"71d36942dd08d28d0e673d926aa9313c31dae8e60e9da4d5d0ca2e66ec20cc5b","sha512":"5f97436344e6e7ee6f9d07bd777dbe87d7cdf1e4c16ad8302a7efa8f897e2659e5da69e4cb95cd4e79a4784ee75331a3793f1f396f8647703e3b04558a1aa55e","ssdeep":"","tlshash":"c64138b67e040016bd2bd81ecba410c771ba6532d12345963973bd24eba7af032ef791","first_seen":"2025-06-30T02:18:00.903678Z","last_seen":"2026-06-01T10:56:00.193536Z","times_seen":80,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202604/15/42d0bb8cb0134a43bde28d175c1e3e74_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:25.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202604/15/42d0bb8cb0134a43bde28d175c1e3e74_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8157b990daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/256e7e2e04904b78ad29f52ccf20f819_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/256e7e2e04904b78ad29f52ccf20f819_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8164e2a0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/5752d4259b534a1f9bd3232b831e8b86_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/5752d4259b534a1f9bd3232b831e8b86_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb816af4a0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/js/chunk-vendors.0959c18b.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:22.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /js/chunk-vendors.0959c18b.js HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-cb1c\"\r\ncontent-encoding: gzip\r\nage: 157\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=77uO6yjQgm6S8zQcx1eX5fGXnl6DjrzIS669l6XMTvNhxfpW3sJn9QJoGspfCpTdI12HYdTWBtWnYwEjJVsCWU%2FE2rjirQYgKJ2Q30RGXMcXBF07h2KpslyDYEs%3D\"}]}\r\ncf-ray: 9facb7ffcde6c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51996,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29775)","md5":"59718baba413ffce8af627b8a687fb33","sha1":"7ad82303fcd29efcdad03df36319183f8787d4c8","sha256":"95732ae511ea64b6041ef117de0b516f6523a1d657c809f3117a0c9fc42fdf0c","sha512":"9a8210c594b1ff6caec54315030f045a86dcc4d2fdc681a767730e524dac8240f6038b6ce225bce1b0415f7ebc802d7fc47102fb86069fc6baf6d037790e8dad","ssdeep":"768:WscXuLZN8ZzldBKOpNtWVw5iVJonYrQBOJJB2GfJbrCGVuZgdpGd+cH0iIWRiAVo:5cXub8Zzl7bD/YowQKL4+cHdIziAAg5l","tlshash":"4533c788f2e6f074479761a4402f600bf279ad55744e88a8f225e4d1bdb8dce847bf38","first_seen":"2024-06-11T23:26:00Z","last_seen":"2026-07-22T14:00:50.013109Z","times_seen":132,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/css/chunk-0ce41c5a.4006cc4e.css","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /css/chunk-0ce41c5a.4006cc4e.css HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-1292\"\r\ncontent-encoding: gzip\r\nage: 156\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3aNlza5y4gzVxtuBvRyiFb%2FQ7ivUPZtA4bd0dm3%2BtIacNbg2Fq9R42V0Ae4Ft8%2BCpW99q1P2x7tLMpECwkUR4w3rf15k7eBCX4H%2BfFVrEVYRhZfcUqLQ0BUc%2Fkc%3D\"}]}\r\ncf-ray: 9facb8059e85c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4754,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4754), with no line terminators","md5":"f2cf758791111fd2d848603463e99178","sha1":"6efa309eee6c7aebb25f7eb378ebb367680cea9f","sha256":"be18a5cd6c8dd5547446a18363472d5ee56a0d2008b3d187fda6f866ed32facc","sha512":"33df9c558a43f266d0231279d5d2c940a857326b2e9e6de968d1b17983e6a784938bc4de991b04007f737e16b67f475a7c1fbab4e82228b22ec105c37d238cb3","ssdeep":"96:92hnM63MqkM6uoSYbc+7fb3bDb9UKUea6:yM63MqkM65bc+7fb3bDblUea6","tlshash":"eea159db78d68112d277ea5216ccd51adf336be73ba10cea71d8284dd706a80631f0a7","first_seen":"2023-04-06T21:01:20Z","last_seen":"2026-06-07T01:38:16.110616Z","times_seen":1107,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/api/common/translation/list?lang=uz","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:24.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /api/common/translation/list?lang=uz HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: null\r\nAccept-Encoding: gzip, deflate, br\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:24 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q%2FOk4r8RPYRR%2BRDeloH%2BFdz6aTzgg7VGQwfPv4qn9jG28FMSfn8VRV%2BCaL1R%2Be1IlYMda%2BCsegY2QJR%2BVJQSR189g98pdlhltm%2BWs2wJsbztopYmYj5dCocF7E0%3D\"}]}\r\ncf-ray: 9facb80cdf74c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":184,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d621ec3673b1442889cef28d56722538","sha1":"8632caaf7624635c529e51e65783e9819b7ca2d0","sha256":"7dd61f94ab5da8495d6b8351874ca908a30c755ebc5c569a72df18a87ca28540","sha512":"619f2da5bba62a64853c148beb060fc72d830f4d063af01d6b0e067f9249224b1887228cb9d5a2efb987a1de00fbea203154fa713831ecc15bdb677f313eaffe","ssdeep":"","tlshash":"cac012212468bcaaa99356c38c1d721a19e89520990429188a684f34a9d9775c25d866","first_seen":"2026-03-23T02:52:10.069319Z","last_seen":"2026-07-22T14:00:50.126063Z","times_seen":37,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/static/tabbar/home-sel.png","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:24.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /static/tabbar/home-sel.png HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 884\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\netag: \"68b800a6-374\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i1Wx3eSscA7A4Qn8146ML3ncCpJ5j9FSEJPPkHSTFqzJF8XaLn0c2iHpa%2BHjVrFbPGUAkkehMmEcpqQOpJluChTY4oWeb6ZOuIXqYQ9JCdI12g1UyS1Bmn93hBE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb80ecf9ac272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":884,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 46, 8-bit/color RGBA, non-interlaced","md5":"d59d49d76d7ff3107fc82e2d48b06216","sha1":"2bfec006bc3a8a7c65ca34d3c3e92df5d488d1a9","sha256":"9572873a018cf0366633a07c9ec33192ad6180751c8f1c7396ae734f7ca46af4","sha512":"dab4a0283652f7b58bb2c082c5f30233b13f052e5aff041f44c10b092e68e94c4af73b0e1d31804fb9c1c77d2a7108910907bc1d0474e9072790af4a0b4bd04e","ssdeep":"","tlshash":"f611b3437b233c270ee2c1b3141510c46a63b232c1a6a5380554000ac1e70e0ebdf1ab","first_seen":"2024-05-14T19:58:50Z","last_seen":"2026-07-22T14:00:50.153791Z","times_seen":92,"resource_available":false,"data":null}},"time_used":778,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":778,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/29fa2cf558824e6eb45f92ae08a8014f_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:25.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/29fa2cf558824e6eb45f92ae08a8014f_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb815eccd0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/1a40669198d14258b748271bff89c6da_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/1a40669198d14258b748271bff89c6da_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8166ea30daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/1c290dc4d7134905b96e7ab415f91311_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/1c290dc4d7134905b96e7ab415f91311_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb817ca5b0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/js/chunk-2d0cf330.d3cb0e12.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /js/chunk-2d0cf330.d3cb0e12.js HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-893\"\r\ncontent-encoding: gzip\r\nage: 153\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BgwyIoztly%2BfcAic7fMYDtz64Vi0THnrsDU6v9iDpYez%2B3KXNDThvhWSBp0GxLY9%2FXerKxgysh6BbGICnYe%2FYqS6Aa1Z7pICTFL3APZ5tT3iTzv0LDPM8M5by9Q%3D\"}]}\r\ncf-ray: 9facb8078ec7c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2195,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2183), with no line terminators","md5":"940b7b1594fbb05b40ebad18fa7000e5","sha1":"ecd71236bc23c695c06da8ccfbc33e0eac2910e4","sha256":"ee1e38b7ad5206dea00e0f500875ae3bf88cef0f8fc8de8b9659f22ff1ae5a4d","sha512":"bb98d694a3cb128b1cd66ea613a39f919126c0287ab28e7c949dda94483c31fb96ffe7d09929e176b66ba97aa263c72d485a3833d40790492c63a413ffe508fc","ssdeep":"","tlshash":"c6411108f893d2bdcc7ea825562f1674e1709ed44504f151f63889b1a3e0c784b5ebed","first_seen":"2025-04-09T11:39:55.904569Z","last_seen":"2026-06-01T10:56:00.226407Z","times_seen":106,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/js/chunk-4366d870.60bd4013.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /js/chunk-4366d870.60bd4013.js HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-760\"\r\ncontent-encoding: gzip\r\nage: 152\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KaGXdVoiCoJ2cHitL5dpXdiR2Upef07Q%2Fji9eUfJ7HbOJEC0ZfpWj5dva9RCcaL%2B1yoVMGCBbP8smcKDcjg1KGJ%2BHa2PhoN%2BfJA%2F4FZNASllTF97V1qqKESuZ88%3D\"}]}\r\ncf-ray: 9facb807ced9c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1888,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1880), with no line terminators","md5":"1bad28d40532cfb347b325b0ab26b0f9","sha1":"98dae2768f84d8b9f58f044077dc33da68b9fbc4","sha256":"f25b13e2bc2f948a5c29f39814b304947a9fce6fccb7c2100591ce928a5f1ad8","sha512":"a1f3f37a9112509150cee74a267b8e43d6c83c0a09781ae4a6fd8265c154b78fbc801bd1140efca58e5a460e956bd062a12c93e7560fec587cb8acc739ed8a9f","ssdeep":"","tlshash":"bd41234cb183f0a907eaf126701f231ed2b56a95a81194795de0d1c0bf3266d2237aaf","first_seen":"2024-06-11T23:26:01Z","last_seen":"2026-06-01T10:56:00.261517Z","times_seen":119,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202604/15/3a0753ffed7448d4abbfa8ec1a3599c3_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:25.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202604/15/3a0753ffed7448d4abbfa8ec1a3599c3_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb815ac220daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/bc927c2274f44b0b8dba611654b1d3cb_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/bc927c2274f44b0b8dba611654b1d3cb_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb816af430daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/js/chunk-0a888720.79a39264.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /js/chunk-0a888720.79a39264.js HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-2d60\"\r\ncontent-encoding: gzip\r\nage: 154\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ek7Eiq5eieqUnuQFkkfkpRb%2F6WWRyOqhcSfOnea0n3TrWhfVd%2FCMbWhz62K98AO18FrH8iLE9yrJPYY9qeFcrjwhiFasnfeVkLhM6cncS%2Bnnig4s9hXEgQZqrkA%3D\"}]}\r\ncf-ray: 9facb8067eaac272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11616,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11540), with no line terminators","md5":"0b9e6201702e9ef11c5c3a4c3a1f64f9","sha1":"6a4748a1758daff2fd25b236cd246633e3873f7c","sha256":"6996d0a4d1e3559b00e7cbfcf627f6816a0a5a06d9e7be3c9226c3a68b95e459","sha512":"e44f5d8391c63c17a3a90119c8aedfd7a4120d0d3903b5a2b00219bfbcf65ab7339db503af7bfc071e39622dd50b34babce8fa8e3d2af596cb7975903d15e52d","ssdeep":"192:3ugiH+ttVS72rfDyFqINV2bYWqNVqV8tQhrqj44ACc51YZ0E:3uWfDQOb31atQJ4xARqZp","tlshash":"a832a88d72c7f01647a77331d01f100ae27aa998f4099185fb28d9e1b875859b32bfbd","first_seen":"2025-04-09T11:39:55.963244Z","last_seen":"2026-06-01T10:56:00.228919Z","times_seen":107,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/js/chunk-2d207f61.5777890d.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /js/chunk-2d207f61.5777890d.js HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-a3a\"\r\ncontent-encoding: gzip\r\nage: 152\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z2B3233NVy77%2Bd4EZhrL54fABhrrPbpAxZqARewlrVHC2K4vV0Iq2BtvRbtD1%2BSg3rjThGPREVQEDzNd315YLym%2B0aRoXDzUzMr26K3gXbslKyV7kc4ZZ1qZNhM%3D\"}]}\r\ncf-ray: 9facb8079ed0c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2618,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2576), with no line terminators","md5":"3a114186f6be942215aecba1a5e8f0bd","sha1":"b1fe4469917a7b0a5f948801440967c7e436c29e","sha256":"9dcf1dacc6bba72317f67d47f5ce5371d3b6c121a21988d7b1531915cfb66564","sha512":"18ac6131c93227b662390b292f14c10b04ec9e03be914ae28332ca3ddc457d61a6456ec057d6cc254e0724ab5a6d661bdfb2b257abaa7133e0e2805ab6153e38","ssdeep":"","tlshash":"db51770c70d3f09d4d9a8017b22f1a64b1b63ecb2515c1a9a778c6e15a58de13317ff9","first_seen":"2024-04-28T18:22:38Z","last_seen":"2026-06-01T10:56:00.217003Z","times_seen":257,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/static/icons/ic_notice.png","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:24.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /static/icons/ic_notice.png HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 402\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\netag: \"68b800a6-192\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y4z57N1MM%2BFz9B9ca5BOednLBVrVee4WJquzfv7LbFQ99RZtpQF%2BOhudBCS10fYvhQHD0A5G1TB06no8ltcaFARitA6TANT2bn0P%2FReu6ozAv6TUP%2FRn5BwWJRk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb80ebf98c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":402,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"abb53fe2e63bc5822dd24dee0403af75","sha1":"c8fa28643c580911924cfb5b4cf52386dcd8d1cf","sha256":"e380df313a08bbd6143377dcf272191cedba3d76a34e345b77f5935ad6481d94","sha512":"1d8f659b09f0dab32ceda5f7f5c1922b2d3c35ecbc0b7af5dcfa3138ac1fcb789e183ed601f60313bb5b91945eaeb5d164d4b6788def7d204d36710ac2463206","ssdeep":"","tlshash":"6ae08185f5238970efe6313e3c06290cc871a89c3a2482bc288e342c7a0740c47e0921","first_seen":"2024-05-14T19:58:50Z","last_seen":"2026-07-22T14:00:50.105533Z","times_seen":58,"resource_available":false,"data":null}},"time_used":1328,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1328,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/2f96a40f40304bf2b777394736ad5831_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/2f96a40f40304bf2b777394736ad5831_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb817ca610daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/css/app.d0b60b6f.css","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:22.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /css/app.d0b60b6f.css HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-2781a\"\r\ncontent-encoding: gzip\r\nage: 157\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=89Z%2BPnZ04jFvT%2BoXVHUXdBQeS0A15ee%2BBFz5UWZS2e8Zva2c9tI9GeyK1Etyid6RLeAypA%2FPaqEvKBSMnWxXYRWt0sr5RjeabjyX0UowDXyJ%2FFg%2FcIEJY80sRT4%3D\"}]}\r\ncf-ray: 9facb7ffcde4c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":161818,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (64370)","md5":"9c806df89d61e3e0efd1c1e9fc4500b2","sha1":"68dd2a4116cd8e54ffddbaf7ca938d07172c0543","sha256":"075ecb6cfec87e16daac1178a38a51715c60e16f1eaa2fb5462fa0f365371d7f","sha512":"992a0dd658cd74437eef21b957cb0ff4510223e1cfcacf4d7fa1ce6328ff92c4195c1b4fcfcb999e35ad82746a2630de3ec508b1687fbb6eea7f456870f85172","ssdeep":"3072:3kZYwo1OAPkuD336ya5hrCen0eTUIfS0QqX:3kZYwo1OAPkuD336ya5hrCen0eT0Y","tlshash":"60f39997bad5210cd8574e92c6cd7efcea3f491252928cd7b1433baa8b453db238501e","first_seen":"2025-06-30T02:18:00.921698Z","last_seen":"2026-07-22T14:00:50.209308Z","times_seen":81,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/static/box/bj.mp3","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /static/box/bj.mp3 HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X67Ii4wSN6z%2Fm376dOn0ZG%2Bj0cOkyTS9K0yDbb6H5%2B37MpBUmRogg%2FiqqKJ8GdBW88vG7RgRIVdIwzjywKfPml10mLw6Z0TgfG5eEXPOe%2Bx9WSyNWeZrZ4vJsA8%3D\"}]}\r\nage: 157\r\ncache-control: max-age=14400\r\ncf-ray: 9facb8054e81c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:1.11.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Vue.js:2.6.10","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"SockJS:1.3.0","description":"SockJS is a browser JavaScript library that provides a WebSocket-like object.","website":"https://sockjs.org","common_platform_enumeration":"","icon":"SockJS.png","categories":["Web frameworks","JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]}],"data":{"size":15417,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (11857)","md5":"0538f7ebda3424fe3f97304a0cca28ad","sha1":"f5b8b23251a85a9d18eb424365725721440f81d3","sha256":"1c8f2c126b548537ba0289e2db2d14c2b05939645d5624aeda7eefc455d099b1","sha512":"a3f57bc1f551cd40530c350126cf7a15845127035d06b9c310291dda5121e605c30b4b832fe0cb77c4619e06550a572b23ab842a9ec7dcadf0784a8b08ca69e5","ssdeep":"384:d1J0CizqU4TZh4p3Jsr4z21PLMEE4AJI7QntyztM4KaZ0W1nX:d1yJuCaRJkJI0ntyztM4KaZ0W1nX","tlshash":"6d6264a9d60008edf592ce8b5a75bb6994e77c773931e484f26d884bcf18fc4162608b","first_seen":"2026-03-23T02:52:10.066623Z","last_seen":"2026-07-22T14:00:50.172166Z","times_seen":38,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/js/chunk-1b5a0ff6.73cdd133.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /js/chunk-1b5a0ff6.73cdd133.js HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-af1\"\r\ncontent-encoding: gzip\r\nage: 154\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E8SJtktXHdb%2FSmxA%2FV4pPtskXgjZ%2Fbtcbe04bQiI3PAzRSmDEoptvhucVEJyAeOfoPcht1itlvG9sZe85iZKIngs8FdPbA8pkm1xFgzAHvcWBw5Ugtl2gtGrTpw%3D\"}]}\r\ncf-ray: 9facb806feb7c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2801,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2801), with no line terminators","md5":"f20fcc67b5bcdbf76d1fcaf70e39cc94","sha1":"fc9dd05191827fd72e5de36cd3a1b6e4512fcc7f","sha256":"ed307e364c733c0e394bad53e71b12208a2d289df7ea3e06c520a546740d85b3","sha512":"c0e601058a9b08c3c566f0b78676591257246a010aca294414fc3399ca847af9a76821f627962773b95f5188226b4be8917b1c3d01431f3fbf94c68632bca4c0","ssdeep":"","tlshash":"cd51842c7192f4bd4e67b1a1452f7216e13a36451035e881f760cdd0a7e5c5f523ab3a","first_seen":"2025-07-19T12:02:29.488808Z","last_seen":"2026-06-01T10:56:00.199979Z","times_seen":68,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/js/chunk-74757738.00ab3f07.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /js/chunk-74757738.00ab3f07.js HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-14ab\"\r\ncontent-encoding: gzip\r\nage: 152\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UD6PsOJtmUL34BwXcHFxLX9GYjSth2%2BUbsD6v8r8tC8aU14%2Bv2ldH4NKocqe4FBaZvWbRS6pouLLEqREUlKICeq8EHZTeoLoqsS5QC%2F6h1xL9hBrGvlnckyTx80%3D\"}]}\r\ncf-ray: 9facb8083eeac272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5291,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4975), with no line terminators","md5":"102639d3a47290757dc5ad3e5a49c7df","sha1":"98b8f6b16bddd9cdcb020c0892f30c9ffe374f21","sha256":"5b8eb0bc42f9affd0e3b34f9f47922122cf3f406d9ec27fad583bfaae5bfd87c","sha512":"38740c561378b07e338fe9b60a70404d22b7fa1380ab15cea5b587da87d84ce12c0fe9e3193e36c5092eda680f82da31bb087fa085b2b8adafce8f6fd8b8cca8","ssdeep":"96:VDu9208GaSVN7kCQfYpGjfwByP2pPhqqtPeVrWpI8Lsl0uS6sl0LDLSJRm5q:VB05aSVNWRFPHMIEuzLDLSv","tlshash":"dcb1fb98f5f7a9e81df68281b03d70195232f1249c03e1d5f77685ee49b6f10150fba2","first_seen":"2025-06-30T02:18:00.864288Z","last_seen":"2026-06-01T10:56:00.232456Z","times_seen":77,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/c4da1ba6573343f9bbf14fa3b14419da_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:25.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/c4da1ba6573343f9bbf14fa3b14419da_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb815dcba0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/7a9df6fbb8a643ab9a55400bf2392cb3_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/7a9df6fbb8a643ab9a55400bf2392cb3_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8160d220daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/caad0d9746df4f04b82bb66d204bce26_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/caad0d9746df4f04b82bb66d204bce26_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8163e1c0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/965f0ca778cc4761a7acdae3469cc5a1_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/965f0ca778cc4761a7acdae3469cc5a1_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8166eb70daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-12T22:04:21.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 22:04:22 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QlBg%2BrRPTec8y%2FG9T%2FRpJdaiyXkmrUxa9Ze6nj2AOR5ZTOravTTQ1ZpFJvlf%2FH3L1aCwcKN6qBj4b%2BZM8K7nE9b8GMYCaqvCwiiXlQwtN%2FjXzJhxpGGyyQ%2FiWNc%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9facb7f93d34b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:1.11.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Vue.js:2.6.10","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"SockJS:1.3.0","description":"SockJS is a browser JavaScript library that provides a WebSocket-like object.","website":"https://sockjs.org","common_platform_enumeration":"","icon":"SockJS.png","categories":["Web frameworks","JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]}],"data":{"size":15417,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (11857)","md5":"0538f7ebda3424fe3f97304a0cca28ad","sha1":"f5b8b23251a85a9d18eb424365725721440f81d3","sha256":"1c8f2c126b548537ba0289e2db2d14c2b05939645d5624aeda7eefc455d099b1","sha512":"a3f57bc1f551cd40530c350126cf7a15845127035d06b9c310291dda5121e605c30b4b832fe0cb77c4619e06550a572b23ab842a9ec7dcadf0784a8b08ca69e5","ssdeep":"384:d1J0CizqU4TZh4p3Jsr4z21PLMEE4AJI7QntyztM4KaZ0W1nX:d1yJuCaRJkJI0ntyztM4KaZ0W1nX","tlshash":"6d6264a9d60008edf592ce8b5a75bb6994e77c773931e484f26d884bcf18fc4162608b","first_seen":"2026-03-23T02:52:10.066623Z","last_seen":"2026-07-22T14:00:50.172166Z","times_seen":38,"resource_available":true,"data":null}},"time_used":812,"timings":{"blocked":15,"dns":1,"connect":1,"send":0,"wait":775,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/lib/mobiscroll/mobiscroll.custom-3.0.0-beta6.min.css","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:22.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /lib/mobiscroll/mobiscroll.custom-3.0.0-beta6.min.css HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:22 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P8ZKD%2BgD7VzbkoVQ25ONSP%2B8cE56w0H4u8EgAwCJLA%2BdpblpCSkRDDAregMCigeb1hz3LSdzj1Qaotn923RSpRGq%2BmoghgNiy%2FQWuurmLUMYsDjcY8fhgvIGBNI%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 158\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9facb7ffbddfc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:1.11.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Vue.js:2.6.10","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"SockJS:1.3.0","description":"SockJS is a browser JavaScript library that provides a WebSocket-like object.","website":"https://sockjs.org","common_platform_enumeration":"","icon":"SockJS.png","categories":["Web frameworks","JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]}],"data":{"size":15417,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (11857)","md5":"0538f7ebda3424fe3f97304a0cca28ad","sha1":"f5b8b23251a85a9d18eb424365725721440f81d3","sha256":"1c8f2c126b548537ba0289e2db2d14c2b05939645d5624aeda7eefc455d099b1","sha512":"a3f57bc1f551cd40530c350126cf7a15845127035d06b9c310291dda5121e605c30b4b832fe0cb77c4619e06550a572b23ab842a9ec7dcadf0784a8b08ca69e5","ssdeep":"384:d1J0CizqU4TZh4p3Jsr4z21PLMEE4AJI7QntyztM4KaZ0W1nX:d1yJuCaRJkJI0ntyztM4KaZ0W1nX","tlshash":"6d6264a9d60008edf592ce8b5a75bb6994e77c773931e484f26d884bcf18fc4162608b","first_seen":"2026-03-23T02:52:10.066623Z","last_seen":"2026-07-22T14:00:50.172166Z","times_seen":38,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/css/chunk-4b346616.5f36c1ce.css","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /css/chunk-4b346616.5f36c1ce.css HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-137\"\r\ncontent-encoding: gzip\r\nage: 156\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GGZ1akWaj4PYyx36hOZ1XSC3WQm1bLUBAJZ7IQQQPQLx9kXxmljxSCMwUvtPp5R7pp7ihdcmxe%2FZqo8CNtpaqIqbADgrYo4GDg5mA8JtG27brPJQh2Q0QgwBLJg%3D\"}]}\r\ncf-ray: 9facb8062e9ec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":311,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (311), with no line terminators","md5":"08d7468828b9d3af79f2beddd30ea454","sha1":"9d937dabc497e1d26fc72d16e44d6c38397ade66","sha256":"a5f727bac268f24c09680cef211f65c30cf1a3b5c7df78b2db92b215344f80d8","sha512":"810377a34e3b7d2e2c00123d4a43a72145cf349d9efde2914d6c7868318acc25b7a4082caae4d36b788f6104d4d709688062eaf0a57787cad6c5c62a302a87b7","ssdeep":"","tlshash":"c9e0c21a79ae20092b3fd3cbf4405fd894a06b12dc6847a3ec8247350f0f2f62b00a89","first_seen":"2025-06-30T02:18:00.922588Z","last_seen":"2026-06-01T10:56:00.183085Z","times_seen":80,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/js/chunk-2d0a35a2.c4556ea5.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /js/chunk-2d0a35a2.c4556ea5.js HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-4c8\"\r\ncontent-encoding: gzip\r\nage: 153\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q6SSpz7jy2MTk0%2FcLqn4AbxOrTs%2FqeYrnCeXd5BD7Kco227Bobq1tq7J%2Fi%2B6Jm00nGzvDllDmNga8X7fRW9xv%2FzMHtdGrT5kWwxWMFFwt3C7dScf3j4cSi0UARo%3D\"}]}\r\ncf-ray: 9facb8073ebec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1224,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1200), with no line terminators","md5":"65107d72da04c1cbca07ce7505dd52c9","sha1":"59f0aaf3238f3930dfeb8b72766c5c326a2173fb","sha256":"e5091d66e518dd0250dd6bf49ca20d18f926dc0d872419ade3ac72edb96746f9","sha512":"668adccd98e0602575b37f5d887dbd5be393853a6acb597f79fcc6fa31fbf434703707b9c328af41da6873378d98c26c234c71e0b058677f674bec95358f5d2f","ssdeep":"","tlshash":"74213514f053e9d4fc7f9445222c7334e062bec58946a1c1b9b8c69553c4c651b1e79d","first_seen":"2024-06-11T23:26:01Z","last_seen":"2026-06-01T10:56:00.234251Z","times_seen":259,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/js/chunk-7fa7af0e.e91d9701.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /js/chunk-7fa7af0e.e91d9701.js HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-d88\"\r\ncontent-encoding: gzip\r\nage: 151\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3E8iOQBBSOdve6VF2DHDo1fkPGTVoeLK653qkgdG%2BCuA8upxFYrQ8nRExRfrhQ0CSenRfXN7qJ8QP9%2F3YKjkmn8bn4wAyF8Lf7pcS1gd61zheC6K3WAPGOaaOqc%3D\"}]}\r\ncf-ray: 9facb8084eebc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3464,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3464), with no line terminators","md5":"14703ba2c4885d4136431727be3a424a","sha1":"d2cf20082b9d5e7b2c30cb3ac41e8b29530aba1e","sha256":"3aa3fce945d572a167eb8dcd64db9ce7138980e57e3e9fa9d7bfbc02fd3dd189","sha512":"b81dc1c4e01bca729b8b001122aae12bf5b562372d035d8a4e78a0bc911bc56c242d9cdcb6f6239ea82fc9f72b2e9dfcf590e20a8e8572a60f38dc036dd3020e","ssdeep":"","tlshash":"fb61a5093b5af4a9cca7c266401f1625f05c6a69b034d4c8f370dae0d5e4caa03aef1e","first_seen":"2024-06-22T16:59:38Z","last_seen":"2026-06-01T10:56:00.211035Z","times_seen":252,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/js/chunk-e19f796e.bd45e7d1.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /js/chunk-e19f796e.bd45e7d1.js HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-d01\"\r\ncontent-encoding: gzip\r\nage: 151\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=axESWGEbdBTg4ib72jRYqYR7a25AQT8b7j1EcgEHI4luK9A3GW2to1AW91sMtaeFdkhIRbGXg6eLbFcHnPfcqgV18DJRX3ZgBop%2B6JF1zPaAEGZTzsmXOedTaNI%3D\"}]}\r\ncf-ray: 9facb8084eeec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3329,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3329), with no line terminators","md5":"8816bb962321c72755013a3201eda331","sha1":"24fe5fe11c9f7672715ef5ed68c3fbaab0ee28bf","sha256":"372982eb6eaed682a071751397b7f9a9b25cbb881ded13f3e0b21e68355cc5f2","sha512":"0ea0dbbf50d0a3bb2736fd78f9f9e89eb86f69f0f344a742a645d72e76a201316d0b781dd1d527841c6afd796a23c2ef023313c41c2d793086652be415d852c2","ssdeep":"","tlshash":"a961646c71c3f4bd4eb7f161402f620ae13a36416035e841eb60c9c0aaa5c6f523af6b","first_seen":"2025-07-19T12:02:29.467043Z","last_seen":"2026-06-01T10:56:00.230752Z","times_seen":68,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/js/chunk-f438de52.b3979a8f.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /js/chunk-f438de52.b3979a8f.js HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-26b4\"\r\ncontent-encoding: gzip\r\nage: 151\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SyzRTBdBUmH5oqP9SxsTEBev6E7MDS165aMx%2FHJ8Ulh9bUMK7gUtlwJpxtKV1vrLcf7lbMMM7u3WJr7%2FeYCtNvK3mXhzPS%2FljaoLdeVH%2B3CX6QZhML%2Fl8FGeCfM%3D\"}]}\r\ncf-ray: 9facb8084eefc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9908,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9828), with no line terminators","md5":"5f3e3b3cbd0913dbe7a4059ba0b393b5","sha1":"0b3e152c57fb42963b1c4203ef3b660bd058dc9e","sha256":"b616c4e67a7ede46fd307a729f5770f2f7d90186720efd9c939e50a4d76006e1","sha512":"66296a292165096d152a5bfb42bbc36d6639cd205737583c263017e2f4683d22384bdd3459b9d08b39107e1f0c55570025e29dc4dc2217bfb1cb8acbb0adea78","ssdeep":"192:KoTYBNJHelxkoOt96Fbq/7bTIqNLq74GM1ql44kNWOwQ:KoTc/hb0bnWqxkUO/","tlshash":"3112948db2c7f15987676221d11f101af23a5999f409c085f328d9e1b8f486aa72ff7c","first_seen":"2024-06-22T16:59:38Z","last_seen":"2026-06-01T10:56:00.256356Z","times_seen":115,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/api/common/dict/allMap","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:24.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"POST /api/common/dict/allMap HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: null\r\nAccept-Encoding: gzip, deflate, br\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nOrigin: https://q48r8.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:24 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://q48r8.com\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lXz3DEaXRITok7Xeseden0%2BptxF7iUU0JuR2XjY8MHPiJonlx40RwyR7Vx3CdE3azzo5E3DwXQvyXe6uTdfYY6xlNQZQ8kymwEYiTnxrm9XJzW7rGqdqtW9BWzM%3D\"}]}\r\ncf-ray: 9facb80a2f4cc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11841,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"28783fed56b0f7b7395887607a20ceab","sha1":"d80467cbb58998ec464b590a2c59a786cc4ae644","sha256":"df8ce596f057dc0a8ed2cb9b4bdf6ae57660a6ccaeee62c26a7005c98fdbbb05","sha512":"57a36f9a00419ded86bf556ffdac775c6af33f2e576aade6e96de1eee51b859c828ebcc2db6aa17cb1b5ebcc1c7679f94b678aa0c8dcee5b52b5bfb145006759","ssdeep":"192:awc+IuwVYwWN3V7VBEHdMWk3LQR7MEjQLHkVV/q2VyfYo/QJLM2Gl3hAjaqxDQUy:awc+IzkN3V7HEHdMWmLQR7MEjQLHWq2O","tlshash":"c532008d664779f99d0fbc2452fc68ae90bd7f761e8dc2546e52b44430b0082aa25f3f","first_seen":"2026-05-12T12:04:29.442902Z","last_seen":"2026-05-12T22:04:52.827756Z","times_seen":5,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/js/chunk-19e6f436.122c28fc.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /js/chunk-19e6f436.122c28fc.js HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-1327\"\r\ncontent-encoding: gzip\r\nage: 154\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kvS3IQ3%2BcyjciHrmeuP8Gq2IwTW0GmIEXLQbLnwvWKoi1mOeJi4H2MaM4jcF1e18%2Fmcp3BjoWvfivvhM8UKV0MzDWwKSuvYDilaKx8p%2FtIql3p28MJxU5OR4N0U%3D\"}]}\r\ncf-ray: 9facb806feb6c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4903,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4877), with no line terminators","md5":"2e0bc0f3abefef3d980d12dd9a6107ef","sha1":"2de709a2db4ef69f18d8755645be6d72526ae01a","sha256":"42a00d5f218e022212b6487123dd5438ea64f9ee3da4323b8dd6870c03a8be1b","sha512":"3714d19b125886394875f97f6e36c7fa7a5952e080485931ad3ef459e72e493459481facbf242f4950ae19399c8a57de1ef3a3c1fb92ff1baa135a54f986f087","ssdeep":"96:WDHbbeN0BH8e6B/oNzGxNvFMM+ay61C96Du5HtjKy3VOUPb:CHuma9/oVwsMVy61CMSFvZPb","tlshash":"2ba1f969a3c8d1dcac1fc64fea1a1964222b06dd71115145a2adccb0a253dd88f1ffcd","first_seen":"2025-06-30T02:18:00.906349Z","last_seen":"2026-06-01T10:56:00.194951Z","times_seen":80,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/js/chunk-2d21d0c2.3f86d8ae.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /js/chunk-2d21d0c2.3f86d8ae.js HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-4eac\"\r\ncontent-encoding: gzip\r\nage: 152\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z1PUJq3rhoogdlylfmdUAr9fDLbLhkt1jv4Fmu1GLKVYXjiSD0QFFTRI8k2T9ushjycvG9IfYjIYjIrOowGVtaT9rkdd6VMS4c57F5Cx28%2Fdmv%2B1tbe4jygwU94%3D\"}]}\r\ncf-ray: 9facb807ced5c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20140,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20140), with no line terminators","md5":"98fc4f7d659f3ff5fe223a0005d30e5f","sha1":"8464c1b8138ce0a4b902c403fbbd61887b215a6f","sha256":"3b4fea3e5f45315e8243cf56781d0df5722e6133942671dc592ff479ba8213e5","sha512":"205b160455a2df2174059f4306d93b67d21c207f50caebf6006df72c501c954aaff7770273e5a68c9190e82251c6f62cdec564eaa28947bcb6143ed41b6029ff","ssdeep":"384:S3v3YBYcL1rAAdTRA7v0zwrmSHHHsglQFx+m1OPNtOVSLMyoLyUhyytGojYPFKp:9zwrmSPG8DOyZUoy2m","tlshash":"4f92e6e9f35542f6525d5cc5286f201ba4b0a4262c1a41acbfb5c0e7e8b8fd1787af70","first_seen":"2023-03-10T03:00:05Z","last_seen":"2026-07-20T21:55:16.775251Z","times_seen":1223,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/front/bbbfc7b99d884d7bb654e443a8195599_.png","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:24.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/front/bbbfc7b99d884d7bb654e443a8195599_.png HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:24 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb80e98060daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":195,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/static/tabbar/work.png","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:24.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /static/tabbar/work.png HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 1736\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\netag: \"68b800a6-6c8\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SSRWLhSBscBAt2l%2FPv1myyC54DpwV2GZVFKQHrE6X8VDE2c4uHaySXCftGxiYnVGycIi1yDnzUcUUnYq5lA%2F8pnez9r5NlMGsJwV0UNclinHVcIgqRCYctCBbVA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb80ecf9bc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1736,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 41 x 48, 8-bit/color RGBA, non-interlaced","md5":"bdbb6ff7b3a99d44d2b5d0a81bae3261","sha1":"117ad42cb03a00523864aef54bf83fe96292d401","sha256":"05c5c12d4f4cf615f695ab94b8ee03a2a62d4e560e930940d7f14e7b039bfc42","sha512":"c670cb3ad8b3b3da42d907738a701d6c2927728a00184925566bd906f1ca41e2a0acdae5573e5ceed8e158b7533c8f492c032033bfb6b90d8cd493c865b7f628","ssdeep":"","tlshash":"b731e96b29841c9c489055e943365ea88c2c2b9d3e3a7e24e1048aaf0a0d2f988ccc99","first_seen":"2024-05-14T19:58:50Z","last_seen":"2026-07-22T14:00:50.108117Z","times_seen":92,"resource_available":false,"data":null}},"time_used":783,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":782,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/static/country/uz.png","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:24.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /static/country/uz.png HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 1341\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\netag: \"68b800a6-53d\"\r\naccept-ranges: bytes\r\nage: 156\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xEvj3DnSXvUjWk80qhtrjt7%2BCtdqd4JQ5%2F3BKZ2XNLpZmp0YZ1ga7LHFrsa5ZSbOK7ED84zpv%2BKEz6iIM3cVAPu2tPHJSYyPm%2BSMOQKASBMLGj5uTfML3GWC2Mk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb80eaf97c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1341,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 100, 8-bit/color RGBA, non-interlaced","md5":"ca41cb18e955c2d0f06d6d9a04d23b07","sha1":"dfdcf9f6d6276d277ae737e794aab6c11f1e21ec","sha256":"fad6db29e5fe3c2abb8334cce95777f8c3c7bf2db59ae10e39834f9d02a87a29","sha512":"1651ad057d7e8e74ead9d2ce7f8730e3dee006bbad8a44047eb76fa93048f9815a891dc0c151085910e28316f70d6a14796a434778d883c88bb2fe9d66bba411","ssdeep":"","tlshash":"2221a8865be9a07dca27368b0c913f30a41c87bc706151a826b4a26eded6e49d52c464","first_seen":"2024-04-28T18:22:38Z","last_seen":"2026-07-22T14:00:50.182864Z","times_seen":47,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/api/poster/notice","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:24.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /api/poster/notice HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: uz\r\nAccept-Encoding: gzip, deflate, br\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/m/index\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:25 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z7ogWvmgCd68UeCNWptIZY2h%2BdGvx9DwImNouS0AwyVJWvqe9bZLmLQaMfxCDsHJqojJ4UTJERT8AJF%2F1XC2FBOpZKr9YJoV0mElBd7pGwll48I2JWkpB%2Fut4c8%3D\"}]}\r\ncf-ray: 9facb80f0fa8c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b9e754add75d51d888ce7585dc9dfe41","sha1":"0fd53114199a1a46e887032b7efa05f1fd74c807","sha256":"7a97b9b4d758a3929b8a2be53fbe189c9ba9378d6fbb8190d37f7cc14f5cf5d3","sha512":"6ea97d926607e77cda3275af2c3ba966fd45c1d4b4aa97b53d63a718f0941d93c1d4e67939885740dc6bfd59a0021ed049073ddfc61cfd0e8a5553efb449b539","ssdeep":"","tlshash":"2f500000003c000300030000000c0000c33f00000c0000000c0c033000000000000030","first_seen":"2023-04-06T21:01:20Z","last_seen":"2026-08-08T13:41:47.156269Z","times_seen":5382,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/api/banner/1/list","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:24.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /api/banner/1/list HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: uz\r\nAccept-Encoding: gzip, deflate, br\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/m/index\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:25 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CXSBHax2NaY%2BbcmDxZkiv5lkVXmav88fU6qLo4DGXixejYwnvZ8H%2BBSGJNhKfm2xInLpy1glOqBNW%2BoU4y9qB%2FuhQPNVwMVPU18a9Z75uaMoc%2B4BRCqjyGFr0OA%3D\"}]}\r\ncf-ray: 9facb80f0fa9c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1235,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"20c9188460c4742c32579095794ad57f","sha1":"0c0cb559a645d0e0444775824dee7ba974e468a4","sha256":"8cbf63f65d45617aba061bcb7c1c98e4020c8d2b810d8a1fb1a51d5f3a489dfb","sha512":"a256231100357593483bf1789aedbed521b091b071452444e044ebaf7c7306c337cf9623645f50a9daab01e9f11d443538cbfd5b1bd017be2effb37d9ced2241","ssdeep":"","tlshash":"9421f46ad17ae8fd950f41824adff885d49cb63fc5986ba42491cc0c84c887d6a0f41f","first_seen":"2025-04-23T13:47:12.082177Z","last_seen":"2026-05-12T22:04:52.831668Z","times_seen":19,"resource_available":false,"data":null}},"time_used":777,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":777,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202604/15/186717abd1ec41d1b41bfa1658a0efd5_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:25.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202604/15/186717abd1ec41d1b41bfa1658a0efd5_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8157bae0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/Swiper/8.3.1/swiper-bundle.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:22.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/Swiper/8.3.1/swiper-bundle.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 22:04:22 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 4219\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"62ceb414-107b\"\r\nlast-modified: Wed, 13 Jul 2022 12:01:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 318735\r\nexpires: Sun, 02 May 2027 22:04:22 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vy2DpxH7VxpomNZ3MWcbPPIZI5CqksP99BgCXgf3kSn%2Bf3DJtpXXEvMfBHcHlBpHiQsJDybcHywQ2puGFELp%2FGzwmnWROT7NaJb9OGZ1NxYOfdOpL1wznFkD8ZHMkDOWzY%2Fr8kWe\"}]}\r\ncf-ray: 9facb80048081525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19297,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (2240)","md5":"dc42cb727908d66cfc974a6f55cd237f","sha1":"18a5e51a20f48241f660c87214ca0d38c662fa63","sha256":"de3aa2bd1edb484896d8b84bb8aed72f913eb094961ee10277fd908158cbed00","sha512":"e531910a5de13e8aadaee84efa6b9b4eec921ce7dc101bf221f8961e808af300cb99fe82d54ef7394a0d094e99bf24fff2f7c27216b520d0c8a3c75a6c39908f","ssdeep":"192:XbaCmUJbiKnectoOJ4PQ6UpqWaJxYG6OdbG68FWPLF9FFDE4bRswwMclce7se6tS:XOUbecnOPjUpTlGrGATF9FFE4b2xlh","tlshash":"bb82029853b01c1326274e7a1a728774ebb854810b4bdd79e2c06d48dff99fc631f2a5","first_seen":"2023-07-11T11:12:19Z","last_seen":"2026-07-30T10:12:01.992807Z","times_seen":155,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/Swiper/8.3.1/swiper-bundle.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:22.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/Swiper/8.3.1/swiper-bundle.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 22:04:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 34443\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"62ceb414-868b\"\r\nlast-modified: Wed, 13 Jul 2022 12:01:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 589322\r\nexpires: Sun, 02 May 2027 22:04:22 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gkLoTvYDmFtdwu00xjuBlGXYr7pDjLNnn3IDvmTxwz4TJZ0apVBoL9sZ7qRCF3YEiHaQIdDw20DBi45Jiu5dty821VzIB8Zpmm53KxNtujC1E7c4EYgrdYSF%2F2Ks3YlUYRK04KZ5\"}]}\r\ncf-ray: 9facb80048181525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":143070,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65283)","md5":"38ef180eaf570243775427085e2ea834","sha1":"e0d97d1c702c90dbb22a6294b3c1e4126ba1662a","sha256":"b624e1e378abe009ef0de69a698b0a3e734af47efcdbd6816d5fcb8fc64c8bfe","sha512":"9da1101bbe0870e2d0e8afc1d4f9a121c6788b7604d855ecdb39bad37135437b216eba27f8f9982e0e38feafb1032983fd1bec919d87f25d506bb239a842e5ae","ssdeep":"3072:NJvgjudkXhYnafpoy9v8cIWyUaV4y+oGeJhyEfrNK/MxF:NJvgidkXhYnafpl9v8cIWybV4y+oGMAQ","tlshash":"c0e3f8896360b1a552e3268b93a9c611e3b51400b409c4e871bd4c9b6d7ed9813ffffe","first_seen":"2023-03-07T01:27:55Z","last_seen":"2026-07-30T10:12:01.999867Z","times_seen":484,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/js/chunk-55231503.ea120e5f.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /js/chunk-55231503.ea120e5f.js HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-2e85\"\r\ncontent-encoding: gzip\r\nage: 151\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lkyOlHGAauYArrdER6QajiJ4x0Xg92ZSdiXSzzb1bYM2eZ98cTn1RZTP%2BmgFPiY3hDJjwbbhN%2FFpu2pzZt%2F5BPM4zE9OnXPl0swNJ9dxMgtggV1uSFRmZXSOc0w%3D\"}]}\r\ncf-ray: 9facb8080ee0c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11909,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11773), with no line terminators","md5":"ae8154af92809047b6dd2d5d60eafad0","sha1":"cdcdda3b8fe33fb2d3969bc7a9831e39ceb0d788","sha256":"851adf4fe150b6ffc42487b66f677fff1462739f909a688c352153ab1419ba9f","sha512":"562d698304ce7e934a51647d1895cb4b2dcb3b35c1a095dae4be13955acb74d1ef4a4cedd97a9773c408a9da1bc45c81dfd0e6e66f755aa63c15cdbbeb2ff0a7","ssdeep":"96:hzOO/KhO/KPpaimmxQKhMEOGpGjBMdvSNbB3wgsq/rIBNlujujDj7hlSPitAMLcA:hUMKhMdMGtUcw40zcj2P2VWHl3Pg3W","tlshash":"03324409b4c7f16acc6aa021412f2535e17a7ec55422f141eb34c9f0a6b9c793b2df9e","first_seen":"2025-10-18T07:29:14.338877Z","last_seen":"2026-07-22T14:00:50.011197Z","times_seen":42,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/a3cfd3c17c6449afa98d9033d0e25c88_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:25.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/a3cfd3c17c6449afa98d9033d0e25c88_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb815dcb60daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":773,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":772,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/f9d964acb1f0420588cc06ac9cc28a0c_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:25.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/f9d964acb1f0420588cc06ac9cc28a0c_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb815ecd70daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/5f03540dcd554fc3b12b0d3eaf6dc4f3_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:25.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/5f03540dcd554fc3b12b0d3eaf6dc4f3_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb815fcfc0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/7d95d826d05d4983b9a2b7cc7be9a2ce_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/7d95d826d05d4983b9a2b7cc7be9a2ce_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8164e460daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/f7968762b5704d2fa2938f7d70e26e50_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/f7968762b5704d2fa2938f7d70e26e50_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8165e9a0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/css/chunk-11dc054a.dc0dff3a.css","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /css/chunk-11dc054a.dc0dff3a.css HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-225\"\r\ncontent-encoding: gzip\r\nage: 156\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=crxE9UQPlc9l5MAHEaoaY%2BRa5UOJVY%2Bqsv7dx2NEc1F86M0wXoO9BCcbP9%2B%2FrW13Ok9moOw4BFVi5kgHgguzcpB9qZZYLiW2uRKhA4XOvFj9GCBcNeoejNx%2FXjo%3D\"}]}\r\ncf-ray: 9facb8059e86c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":549,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (549), with no line terminators","md5":"543c20808701b85c34b0d28fd21db192","sha1":"daafd5e95b9657b6ca14c3481b43074dbeec6abd","sha256":"71c664f917edc7fa00c5aed7e33a9911bd8bb185cf72724db6fb464dd86c9927","sha512":"01768a531f71d3248377d09dae80481262a7a5d1e976d4b3c8839264eaedbab1c2d302280c2786bf3b8b45221a14092e6de16917204087913c120785dfb9a66d","ssdeep":"","tlshash":"b9f0ac36391d0025b02ff76ec45006f4813ce143a52b0ea63a0a33229a675da31996c5","first_seen":"2025-04-09T11:39:55.955972Z","last_seen":"2026-06-01T10:56:00.186142Z","times_seen":105,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/css/chunk-f438de52.856cb3a1.css","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /css/chunk-f438de52.856cb3a1.css HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-9e\"\r\ncontent-encoding: gzip\r\nage: 154\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GrTexVHwdE6ioIjOZX6%2FNZZ0ij%2FpTZ%2FcL7G8umn1ZoeCJ6DlJf7mxmWWYyGYo1Ni3mhrD3RPJeTlyCoYHBm5e0VcCDkN8V28QU6bQsS8Bm8ChPiyAiZ7k4B0dgw%3D\"}]}\r\ncf-ray: 9facb8066ea8c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":158,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"5e1d6e64b7b23b2bf5b9a0995dd513b1","sha1":"a8d6d9ea89023003eaceabe2a49c41d12381b3a2","sha256":"79a9a3357587daada819296af7ff82d5518704362c3f9e0aabc927fe2cf25377","sha512":"ec6c3a70751b4e512340e86fda978d40d0d11a0a99b640513a40c32ac22afbd0c1c9ed2d91ba2c2682eb86ce7ac67f259bf334d1b4ec9ef1b14bf11d21f5abb8","ssdeep":"","tlshash":"c9c08cfd2e8c409f3e2688a608bf0a844125e29a82cd797c4aa35bfcdc2a73a1520454","first_seen":"2024-04-28T18:22:37Z","last_seen":"2026-06-01T10:56:00.205807Z","times_seen":127,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202604/15/cc9b3f9002de480893f4c5146a16969e_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:25.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202604/15/cc9b3f9002de480893f4c5146a16969e_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb815cc780daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/daeb3e9ad3fb493e8cbfdbc0f0a87b77_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:25.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/daeb3e9ad3fb493e8cbfdbc0f0a87b77_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb815fd000daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/15cfb441d08442d197bdd6004ebf4a95_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/15cfb441d08442d197bdd6004ebf4a95_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb815fd0b0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/7f7d1ce755354c53b30e00e672074cb4_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/7f7d1ce755354c53b30e00e672074cb4_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8164e490daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/23320d1bbdd24b008ba94d680bf09f79_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/23320d1bbdd24b008ba94d680bf09f79_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8167ee30daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/87e4173946a14df988617ba9ce9ace9c_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/87e4173946a14df988617ba9ce9ace9c_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb816bfa40daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vant/2.12.44/vant.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:22.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/vant/2.12.44/vant.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 22:04:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 67557\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"620aa8ff-107e5\"\r\nlast-modified: Mon, 14 Feb 2022 19:09:51 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1050856\r\nexpires: Sun, 02 May 2027 22:04:22 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F7UGc4ljUYdGqCL51dNZvxrqdrXUmTiUbYNQXQMWK3n4iafn5WuMicdmKxNTTZSLVe3kILgjz8ZtK98xbjECvKGVKjuRF4TDrTNa0t60rz%2BEaltkaQH3PwLjMT9eAxoRMo%2FwmI9i\"}]}\r\ncf-ray: 9facb8000fca1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":278598,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (57307)","md5":"bd964aefdd330a73c62c045d6b31e66c","sha1":"f7021d4ccab3188fc2c0f7ad8c51f88cda28172e","sha256":"4e685208d134a61fdf4e8fa18b054f5ca2b522813f9bf591db4ac4b42ef16598","sha512":"b9c22baff22e7711c36f2091e37825b9e865ce1d2ec8476f697712c62c51e4604a961e8182950a67cedd060d7ebb720784fecb4f4b46f8d98164badd580dac0c","ssdeep":"3072:RuhM/vLqNdJXyzFg0xnnx7XJ2pviRq4jtSr1GM6TyrfXc556SdryZMyR7:MhM/GU6KRBx+rRSPyR","tlshash":"be44e78ab1c5b425079770b5403f110ab237298cb81a84dcba79e4e66d7ca5ca13ff7d","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-08-05T23:28:05.531433Z","times_seen":241,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vant/2.12.44/index.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:22.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/vant/2.12.44/index.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 22:04:22 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 38108\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"620aa8ff-94dc\"\r\nlast-modified: Mon, 14 Feb 2022 19:09:51 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 961729\r\nexpires: Sun, 02 May 2027 22:04:22 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X%2Feul3eJivBDMXdvrAcNoZz8svIkoF2mf9ssusiYHLTCHwPfm%2FE5gzhMo%2BNQ4s1ceb6TZtirvMvUvURNPiIiTarvHj1yra13MiWrV0XIcsde%2FEUQXrXQ%2FGUMthYlXlMu%2BG2pVN8S\"}]}\r\ncf-ray: 9facb8000fc91525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":143622,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9a547188fa485f8ca9b2cc7d6d2524ef","sha1":"7893335159a1f637eb24cd05aaba96ac156c7f65","sha256":"897e513fc70a4e1759ceb06ed3c9348d036b36b724dc60d815f9f3124de6f433","sha512":"23653fb8a5c2f4cbc15cb35f215f166150516d84b8bcc143aff2d9c73056ce8e33689ef0578010cad93ea2c2e04423d3cc9ee1f5535a6bcb1e2302e5d47da263","ssdeep":"1536:KUyCltWrqoK3U0iNEBVcZH5NHMja4drYaAfP1rz1jVLSV:KTeVc5HMjajXfNf/SV","tlshash":"e3e3c52756c0236cb31bcd219bc096c5e224c123f5121bfaf1517a2dcfdbb9616a2b5b","first_seen":"2023-04-06T21:01:20Z","last_seen":"2026-08-07T19:23:27.300031Z","times_seen":2231,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/css/chunk-e19f796e.ec38c8ad.css","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /css/chunk-e19f796e.ec38c8ad.css HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-94\"\r\ncontent-encoding: gzip\r\nage: 155\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yX4GB5ODziGps2YhOLj%2Fc7%2BU4yzn7MR5Qvuw1uBZIkO4mAdGG%2FptDTl%2BdzEE3%2F6yGhcmzb18%2F55Uc767z7%2B4gnTrxwa04jPMD%2BtxzpijzekoKn7ET4pIneZpZ%2Fk%3D\"}]}\r\ncf-ray: 9facb8066ea7c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":148,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"da5010df73283833c99259d2eed74202","sha1":"6dcf2fd4855c6ced3c3347bb87b782f709c4b966","sha256":"3a0957b91a0b8b9a578dfc7baacd10641eb25c7e8aefb040f8328b188e9509c4","sha512":"b5e28ceca999033b239829e616eb968fbd88cbba0713236212ec94de9288c76c0ba4986b32409261bc49c74156fc654bb939b4b92ad0d1a76e2a3b2033d8a873","ssdeep":"","tlshash":"79c04c71180890bd9137c23000deb5841425f22fd3f354814c06ba2419c6340387d358","first_seen":"2025-07-19T12:02:29.432859Z","last_seen":"2026-06-01T10:56:00.22835Z","times_seen":68,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/js/chunk-2d213517.1d9c21cc.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /js/chunk-2d213517.1d9c21cc.js HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-5e9f\"\r\ncontent-encoding: gzip\r\nage: 152\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FbJ6MpGtjSmqRjYKnziF4fDjmhqKD6r0dIn93N7MN5R3VndR2xdWFfo%2F2GnEpktAQt0zHni7R%2BAKykzUn09mHUwGKDcnQIJnP7JsmrPga8r0aQeFx4j1twXfLKQ%3D\"}]}\r\ncf-ray: 9facb807ced4c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24223,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (23849), with no line terminators","md5":"a7c08fe4876958637fb95af48340d03d","sha1":"6d8d46b389fce2058d06de9fc48855fb23bc139f","sha256":"d330977b223c5e5917914c4ebf2a603c3472927ce31e00918ba963aa9b13d1f9","sha512":"f00413356fd68992d5b47883c7db89b34a76c52e204db5441c4a4ddaf3fbeae5dc254b230fde5c6661e819b67e6502c1a9aa34a01588923bec918358a79a9f00","ssdeep":"384:NYoUhJhj5qaL0lV8/pE5TPLt+/NojvZuHoEBjptEC3:NYtPO+hoTjt+/Nojv7I5","tlshash":"79b2c98cb1c7f16a4e67a021416f1519e33d7e89e45cd044fb28d8e0a9b84596b3bf7c","first_seen":"2025-06-30T02:18:00.837564Z","last_seen":"2026-06-01T10:56:00.217659Z","times_seen":80,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202604/15/fb47ce5e6baf4be9b975ee846689fab5_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:25.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202604/15/fb47ce5e6baf4be9b975ee846689fab5_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8157b940daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/65e6159c7a8242cc8dc1b05fbb5c2f9f_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:25.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/65e6159c7a8242cc8dc1b05fbb5c2f9f_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb815dc990daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/ce83def00e254db09abeb9f63cb450cd_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/ce83def00e254db09abeb9f63cb450cd_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb815fd110daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/4d36e37d728d4f8d9b713fdbb03056ff_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/4d36e37d728d4f8d9b713fdbb03056ff_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8161d520daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/js/chunk-f8d706dc.d39875d5.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /js/chunk-f8d706dc.d39875d5.js HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-c06\"\r\ncontent-encoding: gzip\r\nage: 151\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ix8jVkJJ2YqyChF7yyw3t8xqXEoHeW0bHo%2BEGjVpwdmPA%2FxbJiWXPRz5JakuvZzZMV8XFqrV2bTMj0Plt5uzc4Ht%2FMn2O3%2BhqYsi4UlPzdLTLS5pqypBVUcw7R0%3D\"}]}\r\ncf-ray: 9facb8084ef0c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3078,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3070), with no line terminators","md5":"c0d65fb50ce143b5605c10d3e6e71b2f","sha1":"b63607f03ad005e13ba8130d6dfb3cb75a4c47eb","sha256":"b2c0c555e2214756afa19dcedd12893181ae941786d7535e3263d53f7495dab2","sha512":"9f6ac6e832e05b9b7921d9ad1b396d130ad3f66cab6beca11c0d3b2901cc79259ca37af1d6fb3e15958017b69463e8784d1cf5e9428d9adfad55ecab7927cda1","ssdeep":"","tlshash":"2851330d75c3f4689aeab161501f2239f22b6ec49006e910fe34d4d17f61e69332eaed","first_seen":"2024-06-11T23:26:02Z","last_seen":"2026-06-01T10:56:00.201167Z","times_seen":120,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/static/tabbar/grab.png","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:24.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /static/tabbar/grab.png HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 2181\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\netag: \"68b800a6-885\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UfYg9%2FFPaztQvuUkomuZlJCk3EI3gcHShQx5QZ%2FHevCINjNfSea7%2BBAl3Gyrvpt85S4saHBWo0GH5dN1BtqX7Hf0dO9KPxMElYe56vzA0B%2FgC9WnfQLOx7OhnPc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb80edf9cc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2181,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"473a27c1195489a54d77717d2745ecc8","sha1":"afff5e5e9c8252bdcb0d620510d00d6ebf1ba7f0","sha256":"564dc8a0df824a34af42659eeee924adb20dd4a21cdc71d58ce8ec21abb3a7f7","sha512":"072ccb3e27e200e3363a4fa9d86d012f0f388b906bdf6835bfb09782e27a277900fd6f785d350db60c79ab0222dda7c2d2320fab57b7b41601558ea2a26fd789","ssdeep":"","tlshash":"66413cf380630c7ead1bf45da5814a0da5256cd81e3b903c95291d7ae04b2f0b8294cd","first_seen":"2024-05-14T19:58:50Z","last_seen":"2026-07-22T14:00:50.012141Z","times_seen":92,"resource_available":false,"data":null}},"time_used":782,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":782,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/cc8595ea7c8e4ad5b06d147c038d97f4_.png","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:25.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/cc8595ea7c8e4ad5b06d147c038d97f4_.png HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:25 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8140ec90daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":195,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/c1c3f5d541c4444f97eacda6271b281d_.png","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:25.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/c1c3f5d541c4444f97eacda6271b281d_.png HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:25 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8141f220daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":196,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/797ba457705a40a6bbd2115657d040ee_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/797ba457705a40a6bbd2115657d040ee_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8161d490daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/87170f2eecae471da045580f7e1adbfb_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/87170f2eecae471da045580f7e1adbfb_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8163e180daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/0913d86cad4c4c53b5ba1b2e2af0598b_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/0913d86cad4c4c53b5ba1b2e2af0598b_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8164e350daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/758da4faa75c42479a87d6789960d3c9_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/758da4faa75c42479a87d6789960d3c9_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8165e660daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/lib/flexible.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:22.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /lib/flexible.js HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-fe7\"\r\ncontent-encoding: gzip\r\nage: 157\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X8IDofFgsXrXtU2idwWcBiI%2BYE9g4FQP%2BNhu2Eo2gQpWz4A0WQOK5l2gyKC8TDQLCC0%2BPRj%2FPEwPed3sns%2FJlUv2DyXLZgfGlPLcJ%2FFAP8CPO1PIKDrmE%2FLSpEg%3D\"}]}\r\ncf-ray: 9facb7ffbdddc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4071,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"2481028b2f8ae3f9f9c15d0899705aab","sha1":"175d394457b861cf64b9347d243fe3f179048faf","sha256":"5fc76e812ff59a1e0a2faecfb1db22cfa4af69efafef2f3bde03494d543acc1e","sha512":"7b48ed3af9b9330ccbff7a8a9b7dbb1eeadc4356acc22f68a821d435b8cd85e82bc453d489355ee0679cd5ef98feda4c0be8599a0568c1a20bd6d8901669e5f9","ssdeep":"","tlshash":"fb81322806e722361e2330348fbf210539728067055ace447d5ee79e6fe4a654ef6bf5","first_seen":"2023-03-08T08:46:29Z","last_seen":"2026-07-22T14:00:50.153132Z","times_seen":288,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/css/chunk-206d39cc.ca6a7c12.css","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /css/chunk-206d39cc.ca6a7c12.css HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-25d\"\r\ncontent-encoding: gzip\r\nage: 156\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yujqUV%2FCgZIpSzRtgXunjssdoHbxb%2BaVkSSpVTWelVqWPI30SoNtEeTTpQ9bEJCe0e5sicP2c28Qkr6yvzZlD%2FmX7qiUV2Wdj7W6KTgtE5hX4L7h%2F%2BBrNWSz7mM%3D\"}]}\r\ncf-ray: 9facb805fe96c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":605,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (605), with no line terminators","md5":"9859ac42814ba16915f4bbde321961d0","sha1":"6981964e0e7f875688afc8f3bc15607aad67c663","sha256":"7632b8d3825c45debf2fd39b10c62cbd2405f512e63d776bedfcd530ab2a0464","sha512":"659c8ee4eccfd3b98c54a9b721e9bf465190e8fcf2cfc8ac5cfbb66748fd7cd05dcb6ebe4b7ccb36fc9664da3db545df3d55fa5980ec2ec1a8967922ebf05cca","ssdeep":"","tlshash":"bff0dd36391d0029b42ff66ec4800af4813ce143a21b4aea3a0a7362af971da30586c5","first_seen":"2025-04-09T11:39:56.05907Z","last_seen":"2026-06-01T10:56:00.225873Z","times_seen":105,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/js/chunk-206d39cc.fe15a964.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /js/chunk-206d39cc.fe15a964.js HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-b5da\"\r\ncontent-encoding: gzip\r\nage: 153\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yc09V1hXkJNJ9bw7W01O%2FdyF2J7fOp3%2B%2FDyx%2BeQ3mIXnj1ZYYqGq%2Flhmgu7RRhDci8UuUCa9OoG6Hn7JiouzUj7LHd8TMhViGon6uMbdqI0PBdJ0ILWXDAAmBf0%3D\"}]}\r\ncf-ray: 9facb8073ebac272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46554,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (46076), with no line terminators","md5":"f47d5ab2779095fd9b3d8b4cb0ffdfd7","sha1":"a2b143ff76d0144efd84fd7119dc814318920430","sha256":"74234ede5e703da2bfd18185038c4667a57d1bdb0f4db870bc204012941da76d","sha512":"788f17fed5a83f265f8bb335de29cc7717d769367b394e7d4a3d9290a1c1242b40b7fe7e018a7164a393e4f8aa390c1c6aef2277e6487900bdc3563df7a2e70b","ssdeep":"768:viPESMntK2KxE8nGIO9ntK2KxE+aGw6MntK2KxEl:v9tI7n2tIf3otIk","tlshash":"9223c94cb1c7f06e4a7b5221851f1419e23a6a99e405c145fb3cc8e1b9a8c69772ffbc","first_seen":"2025-10-18T07:29:14.095009Z","last_seen":"2026-06-01T10:56:00.215755Z","times_seen":66,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202604/15/e13f1b411a6d46b58cf112e26fd2bbdb_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:25.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202604/15/e13f1b411a6d46b58cf112e26fd2bbdb_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8157b9d0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202604/15/91ecf20ba8ba409da246517a44a986c3_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:25.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202604/15/91ecf20ba8ba409da246517a44a986c3_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8159c050daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/e3da21f587b945e3b423c7c9e42103c5_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/e3da21f587b945e3b423c7c9e42103c5_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8163df80daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/8ba24459661247f8ac3dad87a1e6ecfc_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/8ba24459661247f8ac3dad87a1e6ecfc_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8169f1d0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/cb390c98c3924611b45dfbf99770e85e_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/cb390c98c3924611b45dfbf99770e85e_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb816af550daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/js-cookie/2.2.1/js.cookie.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:22.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/js-cookie/2.2.1/js.cookie.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 22:04:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 1299\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec5-f2b\"\r\nlast-modified: Mon, 04 May 2020 16:11:49 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1047152\r\nexpires: Sun, 02 May 2027 22:04:22 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oaJ7UhwNVxH7kv12uh27qx9ioCYzgT3NKQqVecfAyQtJuwSXHctpIHSTF1BtWXx2FCGHjBO8SZf5jNSUaJ6osfJwoKLylMTZxB9On4mSsBZpE%2Frwt6Z4KaRMSwbWwFVwlCEsesxN\"}]}\r\ncf-ray: 9facb8003ff71525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3883,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"fa93e8894edb6245ab03883633b12b6e","sha1":"e3ba4c7d1a8876090756fd31715b4f6af6fd649e","sha256":"3fc8d8f8c09ee97d9c8cd4a6178ad0bd921a9cbe55c14513e0c06738c9dc8d15","sha512":"263612833aa8f4ad08798184b25311604f1a3bdb6aecacb71103661159007ba0a9d7803094930b3276f47e980492bdd8c49f208508ab88ebd9c0875166278621","ssdeep":"","tlshash":"0c8124b0bb8d35ab0e0e21145b1f60cd927ce43a085949f6ec9df1321468c2e977ad6e","first_seen":"2023-03-07T12:01:36Z","last_seen":"2026-08-08T13:41:47.154699Z","times_seen":3508,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/css/chunk-4a224979.ae575bc3.css","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /css/chunk-4a224979.ae575bc3.css HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-45\"\r\ncontent-encoding: gzip\r\nage: 155\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c2KqeXhecZmzcJLmFPA6nX%2FIP%2BwzJ3tzsn7Q%2B2j8LLYoYUashdABLJAa1d9HGdjBPYtveXbJNbx%2Fbd%2FEWLjCtMSv%2FBht7pThNkpjrYRctcmpTS5uIJae3UD%2FEmk%3D\"}]}\r\ncf-ray: 9facb8062e9cc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"4324c2c9e4ae5d00fe133d21e732b33d","sha1":"f5dedb85e0037227dee83b560409ec1f9af860b6","sha256":"54f30efbaa5e7f8cd31950fe9b21c5501fb79789e9b6d78f5e6ba066db61560f","sha512":"4860bd919a0b2fab508bdc2efe107868262f3afc964437fd552a48facdbbb1f43056395fc36cb7b5f719141c6b8eb67e78ec72874c484d74294f763c3d7e0bc7","ssdeep":"","tlshash":"b0a002a4fb9f957a5139fe156a551dd04180a75244930114d7e3fd545803a23faf0254","first_seen":"2024-06-04T08:05:51Z","last_seen":"2026-06-01T10:56:00.196204Z","times_seen":124,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/js/chunk-11dc054a.b4f2d272.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /js/chunk-11dc054a.b4f2d272.js HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-5a10\"\r\ncontent-encoding: gzip\r\nage: 154\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gwk5pvyi6Wbs63R029d3Hrc%2B1fWA1aLG%2FVPH%2Bvu4crAaIiG6KWLrVwCTmCVztrnO91MnPGvhZjsDVCEUCTWUa%2FxMJ49As4HjNIt%2FdV%2FiTqvbMnIcMXeA8pJH0%2FE%3D\"}]}\r\ncf-ray: 9facb806eeb3c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23056,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22760), with no line terminators","md5":"ed50c6d644b682e17968288255bf7440","sha1":"e9a3328cd426b48be0900355e5228c4c94452709","sha256":"47b447d821f058f7fe0b1f222b77124d1edf46c0ed804cc148ee8d7fd041f9f2","sha512":"07b44194568d52c8cc3399f6367021333636fda2c1de5e0f8f1d99576d36a9b8ad009f219c293c0cf117e256f2f5071f0aa30fd8e5c8efb1e0f904f6a6b86d8c","ssdeep":"384:GTOSwD92BtWlp+zp6iTu8xM0qP+oqA5rYGJm:GiPE18Su8xMio5Q","tlshash":"dfa2b648b1c3f16e8a7b9521811f1929e2396ac9e415d045fa3cc4d0b9a4c6d2b2fffd","first_seen":"2025-04-09T11:39:55.960728Z","last_seen":"2026-06-01T10:56:00.258085Z","times_seen":104,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/js/chunk-2d0b33c0.76b45f33.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /js/chunk-2d0b33c0.76b45f33.js HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-8b3\"\r\ncontent-encoding: gzip\r\nage: 152\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6WjzaVQrdekvRO0%2B2NJHMv2nZVNWkcdG%2FqlW5DhAWrJ6%2BcOwbQO%2FIA5Y9reLapQ2G7natoxwmfGZW%2F3AzcLlPcsRSLpWAOZwMMK3EZJkp089HYuBLdlsa8u%2F9Kc%3D\"}]}\r\ncf-ray: 9facb8074ebfc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2227,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2157), with no line terminators","md5":"4d28200dc1a96e8ea942110d0de11fb3","sha1":"329c8686545c332b8042152343ac66d849239635","sha256":"1fda28079b6bf3c9de5280daebaa102756fe7d38e6e21bccfa3f7249cca0b1dd","sha512":"8c563dc451a1a62df20936018a4b2ae1fd9d2cff06f9eb0c4c40937dbcb4a1bf632e4de6a81042b75c4e92171c9aa34fbddcab287ebfea77af37f7204e42fd7c","ssdeep":"","tlshash":"a541668db087c29e4d3e9442151e3335e13a6bcd9d2198c2e771c4856296c5b632ff6d","first_seen":"2024-04-28T18:22:38Z","last_seen":"2026-06-01T10:56:00.237367Z","times_seen":123,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/css/chunk-55231503.7b381214.css","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:24.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /css/chunk-55231503.7b381214.css HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-7df\"\r\ncontent-encoding: gzip\r\nage: 156\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DN5yfMn5yWIjIduardEqb7P9q0Nt1xbNu4pcD2NKOd%2BOtfFhBp%2BbysyUTupeHQeDkNuaY3LyhXU4VoRj%2BrInMp3SbdfwXzQaDeAIh4dqiBMQXQBrc6Dos%2FGCVKM%3D\"}]}\r\ncf-ray: 9facb80e3f8bc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2015,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2015), with no line terminators","md5":"baed9f89708b3259796b03ce14a7c3e8","sha1":"2944a019faef359d13004fdea7dc3628e3efebda","sha256":"3c3e6bf1d30ed2f7f45ecccea34bc337164a6c2f50099773608d0ab21a7591fd","sha512":"f78d1e3fbc5f87b51317cd9e327e5c3c97018fbdbdfcbd1f1d1965d7ac8a236f1a825267928174ae63438f177bbfea3413a1a5da2aeed46a7fd54e6dc764df9f","ssdeep":"","tlshash":"d1414227f49c2d2c9137d852852c5dd54ba8ea63e50113e9d8ab2b21cfc39462cb31ce","first_seen":"2025-10-18T07:29:14.301628Z","last_seen":"2026-07-22T14:00:50.134427Z","times_seen":42,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/2056021d90414d918850f5a2ca8cb16f_.png","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:25.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/2056021d90414d918850f5a2ca8cb16f_.png HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:25 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8141ef30daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202604/15/6bbc29f7d02e4c2aae231c77e3f50228_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:25.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202604/15/6bbc29f7d02e4c2aae231c77e3f50228_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8157ba30daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202604/15/e0a81405adf74439abc19459a9c37231_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:25.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202604/15/e0a81405adf74439abc19459a9c37231_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb815ac180daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/css/chunk-23cea0af.f88be9a7.css","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /css/chunk-23cea0af.f88be9a7.css HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-95\"\r\ncontent-encoding: gzip\r\nage: 155\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f3ltD9ddNuVsikmu6a%2Fvd%2BVyjyR5Le93jTK5KALb2Ub2pRE5EvNMenIcJ%2F8P%2FRSKPJgr0y3ec%2FYnDtPX729Z2QTJjm5iAcayscLSXvK7vMZcbOqszZ0wGgZM7dE%3D\"}]}\r\ncf-ray: 9facb805fe98c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":149,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"8ff02eb123d7e9cc01a6e0a37a8e2421","sha1":"4f866a4cac5ea6d9c9b22a96aab46df2b1c76e17","sha256":"ce59cda2443069f2e9f0decfb33419d36a8a8c8066485b0dc283995ead3d5d4d","sha512":"de173bf58d2cb5837df3ad16d08ff842c87a0d05b365913da27d3b90409ef3b99b69128264d7849deaca9719c8b42f731af90a6e1d8e462c4943ac98d26651a7","ssdeep":"","tlshash":"07c02b03761a2026017f88fd217445c239dcaea3ddd1c1e058b3c4001c83a76370f12c","first_seen":"2024-04-28T18:22:38Z","last_seen":"2026-06-01T10:56:00.222673Z","times_seen":127,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/js/chunk-2d0d7fe4.7ea5bea3.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /js/chunk-2d0d7fe4.7ea5bea3.js HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-a38\"\r\ncontent-encoding: gzip\r\nage: 153\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RSCKdiA4L04UV4hS07cUElur02Wzgxph2tJqZsgOPkIF%2Bljo%2B3GBow%2BmpxHVNUevzc8GWiz7oFD%2BkFD2Ao5wWl7jAndut52rWr%2BQ%2Bq%2B7SeQ4xY92i8J4r4qtSeg%3D\"}]}\r\ncf-ray: 9facb8078ecbc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2616,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2574), with no line terminators","md5":"85e6c16abe67c57f69d2c8c7b7defc3f","sha1":"73ec895f2a50c863d8ea3ebe379b6cea63f830ac","sha256":"d4e3b729a67d406e2f89da70f5ba68c04b9bafae8ed779377aeacd854457ae9c","sha512":"3d09869add8668b7dc709514596a96fb70d857c61756aee7e31a840f591928511cb9b7488323094839f44f36c06f22448d9b09e14ea2b7a5278e4c2564606c4d","ssdeep":"","tlshash":"8051780cb0d3f08d5dda4017b26f2564a1763ec6151582aaab38c5e15a58cd1331b7e9","first_seen":"2025-06-30T02:18:00.839676Z","last_seen":"2026-06-01T10:56:00.209731Z","times_seen":80,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/js/chunk-2d22d99b.2e59ff44.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /js/chunk-2d22d99b.2e59ff44.js HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-f37\"\r\ncontent-encoding: gzip\r\nage: 156\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7adssI1dr5RvQvx5hPDo5f%2FXkUhUIpnZjOokHUdDnSqDnhoSqsZ06IuNDKTn5nvrG28wr%2Fwx284THpcjBxGB05KBWEuOvCr0iCZnjB2GJ7%2BQwca5rRkMd1S%2BW0k%3D\"}]}\r\ncf-ray: 9facb807ced7c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3895,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3771), with no line terminators","md5":"701547107e6c26359bf15b379ac81f45","sha1":"d1d973e5688a2cc6887a70fe0fb47c07511f4af8","sha256":"f3b58341aea10d657a2f81302aa3937756bc3e61f950a464753b71ae46503957","sha512":"ec483e4c2a2d0605ab020ac15e4d9ccb007bd05e9ee7857d6d1d4e428feab6009c2cfaafaad5519f8fc63f3f823dad234bacaaa4478ea11e3f11d360f259eb70","ssdeep":"","tlshash":"1181a79ad888fc287d22d141712f31f4e11ba92ea5545bd4f7f1c6ca0ad86680a0d73e","first_seen":"2025-04-09T11:39:56.053084Z","last_seen":"2026-06-01T10:56:00.207503Z","times_seen":107,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/js/chunk-4acb87b4.a96cc41b.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /js/chunk-4acb87b4.a96cc41b.js HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-134e\"\r\ncontent-encoding: gzip\r\nage: 152\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZASCsOvZUOKWxlsd86RSksWn1g7xNVE2Ld7M%2B8W9kCEeNsQA7ezCn3vnX9k9CSRSrSl2yqaKmsoo6ve4PpF6NCLr0mBcB9abqZak3d80drIsGqe%2BvmfoXrElc50%3D\"}]}\r\ncf-ray: 9facb8080edec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4942,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4916), with no line terminators","md5":"17a5e0892aeeaef5237292be71721624","sha1":"825cf59ca832baa56c55e8944f37879acea468f8","sha256":"e591ce5c01f71a639f47ea735de6402b56c44f04c2b664473a45b3ff3ff61972","sha512":"7d5eab5473d7065e336c0e4231e5a71bf66989b4d1bf0865c34031756a4e87235127ed10cf5863387c55d1b357110f179f781746e660683978d4238f1a2faf79","ssdeep":"96:PhDHbbeN0BH8e6B/oNzGxNvFMM+ay61C96Du5Htjpy3VQUbb:P5Huma9/oVwsMVy61CMSFaDbb","tlshash":"7ea1f969a3ccd1dcac1fc65bea1e2868222706dd71115145a2a9dcb0a253de88f1ffcd","first_seen":"2024-06-11T23:26:02Z","last_seen":"2026-06-01T10:56:00.223401Z","times_seen":251,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/de8f97c2ffd9480f9af8c7313e05364f_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/de8f97c2ffd9480f9af8c7313e05364f_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8163df40daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/b72ca9ad573145f5b3905a46b7c09a05_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/b72ca9ad573145f5b3905a46b7c09a05_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8164e320daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/20ddc22b068045429db6a71fdce91466_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/20ddc22b068045429db6a71fdce91466_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8164e370daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/498d50c7dc1b491aa78874e3a2c92f61_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/498d50c7dc1b491aa78874e3a2c92f61_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8165e690daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs//Swiper/4.5.1/js/swiper.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:22.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs//Swiper/4.5.1/js/swiper.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 22:04:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 28993\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03cf2-1f6e9\"\r\nlast-modified: Mon, 04 May 2020 16:04:02 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 407908\r\nexpires: Sun, 02 May 2027 22:04:22 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OHOnSCFRwb3R5uzaXqpB0V4FxFLHosZGHfufO17%2By2XnMUAW%2B6SKV%2FEQaTTTS87betMwLsawDJUoRHWibwJZugzGHDmWysp72lR7QG%2Flem5uNWLNavTY%2FitylIKWBMjofMsVSBDb\"}]}\r\ncf-ray: 9facb8002fe91525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":128745,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65269)","md5":"2ac19265b38d14235141d184bca54d9a","sha1":"c725eb5a33d093e331e25c3a5ef1272b0f1f648c","sha256":"e2c1132a1877692ca2e8d46203eaae9cf6936b0a9230341c6bfc4b5aedbb1e0e","sha512":"6476ae51cfef0724ba254cff1e5d68f2cda477840954b01b933f1c9608ed6ca5094fe006d5cef7e5a32d54b25fb4a418a3e2c3eb642bcafa0d6bebaacbeac21d","ssdeep":"1536:O/pPCitsufJthaK85kqzOAkRlojU6tU8r5MhkhGllpcXvH7WcWUKcOqylFE8BtOa:+JthJkOAkaRaaGl4fH7WcWUKcOqjtYD","tlshash":"2bc31849b35071e551e72256539ed601a3b66845b90ac0a831b2d8d7acbce8c03bfffd","first_seen":"2023-03-07T12:58:52Z","last_seen":"2026-08-09T17:04:39.446621Z","times_seen":2480,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/css/chunk-7fdaf070.c293b530.css","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /css/chunk-7fdaf070.c293b530.css HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-128\"\r\ncontent-encoding: gzip\r\nage: 155\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=azoQBLDcAFw9E1r2bCbwvWifOpoXZcEKnJG4VZ7a%2BZMZLkV4IRdBXdlCd1Hcu0e4RWA7CFN92dUMzadHRl5Qi3g23gRz8S2IPyQ2%2FhQc3LDvAltyj66EmX6wq1Q%3D\"}]}\r\ncf-ray: 9facb8066ea6c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":296,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"31409204b8266587230f69e8ebf6c469","sha1":"63184ae00e5a49abec4aa8747b7fa776146b4536","sha256":"c626f89a80a475d50efc020bb3502241a4b52fdad3e62fb5d4be32654cb6db77","sha512":"dde60faa565d1a20c70c621c70e501eaa31747b3aa4ffb72add3976d37dc9f07608e0ab0664619fe3a3c08f64712618e2e8c13bc0b3804c0209273699f675683","ssdeep":"","tlshash":"05e0726a3c8e220a28a3e06738845cc6c0a5238190104332b9b3bf296f57e2170a033b","first_seen":"2024-04-28T18:22:37Z","last_seen":"2026-06-01T10:56:00.255082Z","times_seen":128,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/api/poster/homeList","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:24.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"POST /api/poster/homeList HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: uz\r\nAccept-Encoding: gzip, deflate, br\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nOrigin: https://q48r8.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/m/index\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:25 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://q48r8.com\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UwcrkspepQ1LuVfAtWSGN3A4GQkq0q4ZZuHrl5C%2B700S78y1GLx9%2FESXHHShrtA%2BsZ81%2Bqj4LR1nCXCZdygocyfLdW9Hkgk%2B3JTrpDOPx778oqZ%2B1mCPyG0qUHU%3D\"}]}\r\ncf-ray: 9facb80f1faec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b9e754add75d51d888ce7585dc9dfe41","sha1":"0fd53114199a1a46e887032b7efa05f1fd74c807","sha256":"7a97b9b4d758a3929b8a2be53fbe189c9ba9378d6fbb8190d37f7cc14f5cf5d3","sha512":"6ea97d926607e77cda3275af2c3ba966fd45c1d4b4aa97b53d63a718f0941d93c1d4e67939885740dc6bfd59a0021ed049073ddfc61cfd0e8a5553efb449b539","ssdeep":"","tlshash":"2f500000003c000300030000000c0000c33f00000c0000000c0c033000000000000030","first_seen":"2023-04-06T21:01:20Z","last_seen":"2026-08-08T13:41:47.156269Z","times_seen":5382,"resource_available":true,"data":null}},"time_used":802,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":802,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202604/15/63d21f7521e74ad3aa956d782855e861_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:25.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202604/15/63d21f7521e74ad3aa956d782855e861_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8159bf40daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/527a248a2abd474ca480526aa417e31e_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/527a248a2abd474ca480526aa417e31e_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8164e2d0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/6fd802ca3c8e4a07a542a6770a9eabbf_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/6fd802ca3c8e4a07a542a6770a9eabbf_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8164e5c0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/6cf1e6f7b82141d498b31dd545a8e3eb_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/6cf1e6f7b82141d498b31dd545a8e3eb_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8169f330daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/ed0f1ec842ee43d9aad65aa378e5f65b_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/ed0f1ec842ee43d9aad65aa378e5f65b_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb816bf7b0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/api/country/list","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:24.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /api/country/list HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: null\r\nAccept-Encoding: gzip, deflate, br\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:24 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1EsdHXh%2B401vsT1Oj%2BAt6BHyt1dznU8Rqapu3487VcNFuwFojcHjpPVvji2GZ%2FVnD05kwxJHJCO5z%2BVr1CSA2Pi0gB3mF1OnBDdDud9qxPHg1oaiOQWiHnZUKG0%3D\"}]}\r\ncf-ray: 9facb80b7f62c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":663,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"290443b9ed87598307899913a4227be6","sha1":"a374ed5420f468d875537f318e2478e653087030","sha256":"ce3a6ecbdb37ce609f3431d529ed5b5aa4c8974d6ea6816a392fcc78ee131733","sha512":"e056365f2fb5f8726c941123cbb4c7e38107a062900398dac564bdaabf8a820cd8d06f3a58a49ca12a749abeb0b31b0bf0475148d8aac8cc947a990b53a9e53f","ssdeep":"","tlshash":"1701d69e250cecfdd980c510650fbb4e383d55aee0c96c6473ce8fac52839f1020d822","first_seen":"2026-03-23T02:52:10.091887Z","last_seen":"2026-07-22T14:00:50.17407Z","times_seen":37,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/js/chunk-55231503.ea120e5f.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:24.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /js/chunk-55231503.ea120e5f.js HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-2e85\"\r\ncontent-encoding: gzip\r\nage: 152\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oNgAVEAroxRhkdeB8zYDqDqF%2FzSAeOeX0bCoE0b3SkGqDe%2B4CL73cD9IA6aPU8W%2BPlet1bjAQ9ThFXIVX8iriAKxWVgxKaIKZwzgvqaQWMMHvrMUjnY7pmviLfw%3D\"}]}\r\ncf-ray: 9facb80e3f8cc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11909,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11773), with no line terminators","md5":"ae8154af92809047b6dd2d5d60eafad0","sha1":"cdcdda3b8fe33fb2d3969bc7a9831e39ceb0d788","sha256":"851adf4fe150b6ffc42487b66f677fff1462739f909a688c352153ab1419ba9f","sha512":"562d698304ce7e934a51647d1895cb4b2dcb3b35c1a095dae4be13955acb74d1ef4a4cedd97a9773c408a9da1bc45c81dfd0e6e66f755aa63c15cdbbeb2ff0a7","ssdeep":"96:hzOO/KhO/KPpaimmxQKhMEOGpGjBMdvSNbB3wgsq/rIBNlujujDj7hlSPitAMLcA:hUMKhMdMGtUcw40zcj2P2VWHl3Pg3W","tlshash":"03324409b4c7f16acc6aa021412f2535e17a7ec55422f141eb34c9f0a6b9c793b2df9e","first_seen":"2025-10-18T07:29:14.338877Z","last_seen":"2026-07-22T14:00:50.011197Z","times_seen":42,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/e8a509bad41743cc9e67d8a35a6c9c7c_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:25.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/e8a509bad41743cc9e67d8a35a6c9c7c_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb815dca90daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/0bdc390dab9b46ffaf7158d1c257999e_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/0bdc390dab9b46ffaf7158d1c257999e_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8167ecf0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/a0063eae789446618702a7c6fcf6014a_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/a0063eae789446618702a7c6fcf6014a_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb816af640daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/178fe02e95374e93a4b24a83cf61c733_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/178fe02e95374e93a4b24a83cf61c733_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb816bf8c0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/7772897cfbb34801879b268ed368e925_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/7772897cfbb34801879b268ed368e925_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb816bf9f0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/1804b8b1becb4181902993042efa4393_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/1804b8b1becb4181902993042efa4393_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb816cfa80daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/lib/jquery-1.11.2.min.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:22.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /lib/jquery-1.11.2.min.js HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-1787e\"\r\ncontent-encoding: gzip\r\nage: 157\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dDi%2BP54CPJou0jAeYTtllvS5nIbDUmkI4S%2Bc1OnE2m%2BPMG1kRoZBNh0grdu4OthOUL2wqd5mXh%2F85UKzZDFR2C5QPK9i%2B01cMNwaAL9y3yz7ySaTZ%2BCg6Os1Hg4%3D\"}]}\r\ncf-ray: 9facb7ffcde7c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96382,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6355f3cc28006e33bad2e765cde30e0d","sha1":"909cd6318d5047f3c8e83528253b256981394414","sha256":"39eed2d24faf4985b922b64d078f106edba6b3b84d5385e483a5c7bd69201da7","sha512":"b22d3868a7b311f82bb149f8afccee03c68dcd5e7152a061b8e18d97aef794b106dd1cc081d49f4d638193924ffa5885239cf67152fc339ff0cf3cd1d194d175","ssdeep":"1536:0Hg1kz+hAmcGmVFnlkFybx+amELolY+30k1dml+BQZX6YPnrCtn8JkDnlwMxVW2:0HDdc2F3c2G7mIW2","tlshash":"13930add76c2b06387a720b9506f550bf276599e280c4440f268e8fabc7ca49a137f7d","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-08-09T05:30:21.726864Z","times_seen":1912,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/js/chunk-13ee2c88.cfa5704c.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /js/chunk-13ee2c88.cfa5704c.js HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-5181\"\r\ncontent-encoding: gzip\r\nage: 154\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YPPpebxv0mSu9QEcqSTfx35JGOpzn0LaFDSLAM%2FRTTTehJWPScl4Q5MaQ0RR63P%2BQl7L%2Fm%2BmLGPF%2FpQKocceyoFZjuiAfoP88d7m7W42xZ8giRgUiTJsT56nvv0%3D\"}]}\r\ncf-ray: 9facb806eeb4c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20865,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (20535), with no line terminators","md5":"33c94d891c02fa7b1c1c79c7f0bb273c","sha1":"979c7ac6009966a8f7a1bf4a56f4af8b284a9156","sha256":"0b52197469cfc1a4b92594d515112f1db40f7b9edb2487e1b0e916bb739138db","sha512":"ab893d5df6acad9fe87a260ca1f846852ee413a5e9a6dea659bbb894ace369ca0cedb97719ee75371c5760209e02f987584753cfdf3cd4398ef3ed9863b80a55","ssdeep":"384:Ytz23MbmZeudvQILLLFZN1nxwL4pUxNhOo:YDmZYCJX1nxwMWnhOo","tlshash":"b192d88871c3f01606e37121902f2149f2797d89b809d55aff78d4e2b879959722bfbc","first_seen":"2025-04-21T10:41:38.078267Z","last_seen":"2026-06-01T10:56:00.197169Z","times_seen":87,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/api/virtual/commission/list","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:24.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /api/virtual/commission/list HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: uz\r\nAccept-Encoding: gzip, deflate, br\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/m/index\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:25 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bHhME5XoQ4cJnfx4fNwDh9Xvb8brMle4Kr%2F%2F4vlXmvZU0JmXO2ZH8O%2BWH3nkfyqj2MjBTGTLfaxKaEkOA7FVW%2B7bfNdf4fw2iH1p2z9n4SRl1K1Bzf%2B%2FLI6VEF0%3D\"}]}\r\ncf-ray: 9facb80f1fadc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21055,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d130120a2d0cc20dad8b43817d5f97cf","sha1":"4e96acc16bb3b612fbe879e823807be608f43804","sha256":"4b7a351305617a7ca6e2fc6797d147f4f2185f9ca09a013fcd105e1a42f5a26a","sha512":"06335e85fcbac0660510bf34ed9526fcab2415a492c1fef235c42b24a2fcfc2ab2b8d3f744fd8a0ef5b20a2dbee9d19d018f695e2c6e608d75e9a01ee086bece","ssdeep":"384:ercFK/b2YTUdHGnyKwCgqKp6JKSWhD95Ci6DEqWQCPUndY6j99V4bQxGat4Ie534:en+Qfv","tlshash":"c592b71f873aecbed44ac0835b5fb9f79088762fc4849e9439b16d2c844987a5a4f41e","first_seen":"2026-05-12T22:04:52.859113Z","last_seen":"2026-05-12T22:04:52.859113Z","times_seen":1,"resource_available":false,"data":null}},"time_used":790,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":790,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202604/15/7ffd3dc5f787425ba71b3a1bae2255e6_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:25.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202604/15/7ffd3dc5f787425ba71b3a1bae2255e6_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8156b8b0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/c0c534ea60394c7482fd5f63dcdb5b22_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/c0c534ea60394c7482fd5f63dcdb5b22_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8163dfc0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/861c935d20d344a2b75bf3cf10f39e65_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/861c935d20d344a2b75bf3cf10f39e65_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8163e060daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/037f877ad62146269db5b3bbecdca0ee_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/037f877ad62146269db5b3bbecdca0ee_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8165e7f0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/9e47572647094122acadedada3d09a8e_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/9e47572647094122acadedada3d09a8e_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb816af5c0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/css/chunk-680ea45c.4171287e.css","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /css/chunk-680ea45c.4171287e.css HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-c3\"\r\ncontent-encoding: gzip\r\nage: 155\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=njy8ncj%2FaTj93P9jcZklrAgOOcL0xZALQX2%2F%2FKheDDx8O2KF9FzeGzM3v5GgVBLSfa33Tlf8s3h0LltDG4zW%2BbRaW5WJB3YL1c0hxTPA7wh%2BxusqzwaDYL07HIA%3D\"}]}\r\ncf-ray: 9facb8063ea0c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":195,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"14ae3e0a5a74981b6393f7d242d8c426","sha1":"69078a1e59422308103d045e3e75cf6a1a9ebb01","sha256":"39f89b7568e1c1524ad50e77ea33015b12eb7dd5551aaaf7d85e97140ca82fe8","sha512":"b04ba20df584c0aef3249e0bc695478dd866b97b4ffa90b7d8aef3dea1dc2562d98871218da405704a56d55c2ca08712599508392a9c4caaed2adcd96124cd3f","ssdeep":"","tlshash":"32d002f13e9ef0b98637c2a580deed441ba6f626d17752814d429f2819c6201397c35c","first_seen":"2025-07-19T12:02:29.47376Z","last_seen":"2026-06-01T10:56:00.206977Z","times_seen":68,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/js/chunk-2d0d3e42.fb15c1a2.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /js/chunk-2d0d3e42.fb15c1a2.js HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-33af\"\r\ncontent-encoding: gzip\r\nage: 152\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HQ4G%2FqmaVmrborSkWywK4ZnA3irZjCocwI2%2FZXY6fFm%2FQZbzjzB2xa%2BcP257qotuYu93hUuSw2g%2BhuCbWDHmoEtV4UW6Zo4Pm8td6FAq%2Fd6VddeCssQo8uKfGgE%3D\"}]}\r\ncf-ray: 9facb8078ec9c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13231,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12985), with no line terminators","md5":"aff25d0edeb7ddd40d4f745cd32b75ed","sha1":"01b9b56947b295dd657541bef55a72c49f0d2456","sha256":"8a71b40b8413512d6716a7ffd4e998050c1c4172f45a7bb7af4cdf55ebf30516","sha512":"340ed47937e7de84c1a76ddc814478c66da15d5c483d5f8b520fbf9ed20f7811c567cc007f3572729a2a1cccd5f79a2bc9dbfa96ed16bf0a33705ac2de5f2456","ssdeep":"192:Ajt46CnVIZ5xHo9CBlWbY4XsjXYbQ3qNLqbpPtqI44PnC4QL0b/3Ps1I:AjC68VIZ5UlbKbN1nxPC4Ay3PsO","tlshash":"1c42c6ccb1d7f42946676231901f200af23e696ab40ac145f768c8e1e8b486e537bf7d","first_seen":"2025-04-17T22:27:18.820589Z","last_seen":"2026-06-01T10:56:00.204339Z","times_seen":204,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/js/chunk-2d0e923e.8d2e366b.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /js/chunk-2d0e923e.8d2e366b.js HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-e4a\"\r\ncontent-encoding: gzip\r\nage: 152\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qBdXZxYiLLoAK%2BRrAmVwMrNLiaxaUSByPCIR4d2QQNaN%2FiUCjNxEyjxCiLdY56uKKyJKUUyo62UVKwk5c4WMVm%2F5CbsyryRpr7%2FGUakBTu53aXMu4J8z0KIDHlo%3D\"}]}\r\ncf-ray: 9facb8078eccc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3658,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3488), with no line terminators","md5":"5cd88b23fc8f2931b4b8f4d7174fbe3f","sha1":"71e4990884653e12960999e9885d034b71a403d9","sha256":"20469603c96e56a4fe21c108bbc580962e51abd5920005f3e6cc12c0a77e96d6","sha512":"c3dd8dc3202c3fccd5cbb47a83a41b4164972fa459485b44483ebaf748a1a7722a855165d9ace5a417bcf5026ccd7cd7b7b376b7c575857da45d6e8adbed082f","ssdeep":"","tlshash":"6271c79688d3ff9cec266054104f316850313a8b6916e2e8f37855f2d7aab69070f72d","first_seen":"2024-04-28T18:22:38Z","last_seen":"2026-06-01T10:56:00.259299Z","times_seen":123,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/js/chunk-2d90c97c.170827b8.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /js/chunk-2d90c97c.170827b8.js HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-804\"\r\ncontent-encoding: gzip\r\nage: 152\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O3Ux5XpgAnrpWZYbB9u0V1QKDDJv%2FM0CwKGQenvSh%2FcuXmBQmqvn4EjMvrrkkJoGBQIVhZ6aDo804Cm43YIoYdICfrD48cpy2E4CAz35bDGsmwfHr1ZwOt9r34s%3D\"}]}\r\ncf-ray: 9facb807ced8c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2052,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2052), with no line terminators","md5":"38ff190d07bd2005e8eeed02e73e4202","sha1":"79e52f2f3e35d773b345238b68ee2813c2854e3e","sha256":"f8a1abb5115294689f2b203f819c2357aadd5e88027c261398eae26d4eac2118","sha512":"c13ec5283526197997540236a214eee9e4ef2cf7f8c99f8d84c09f0d956a35b29f524e39092671f0827ce88c9af414728f2a968383affbe6d544cffb3a3dcab9","ssdeep":"","tlshash":"77413468b096f17d9c32840a245e3230e15e1ff45920edc1f2b8cc97d2bae9d072e69c","first_seen":"2024-09-19T21:03:31.183439Z","last_seen":"2026-06-01T10:56:00.210457Z","times_seen":109,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/front/08d0e0aa6f7f4a1aa35c2a1f97eb763b_.png","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:24.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/front/08d0e0aa6f7f4a1aa35c2a1f97eb763b_.png HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:24 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb80b8f8f0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":208,"receive":1,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/c9532c36572b458ebaf6c2b4c114bde4_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/c9532c36572b458ebaf6c2b4c114bde4_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8169f300daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/js/app.2212e73d.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:22.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /js/app.2212e73d.js HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-10402f\"\r\ncontent-encoding: gzip\r\nage: 157\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xr0%2Bnb5Pvn9oqPlvnfdHf4FtysvZZv99g5yo%2B1mnP9XYsLhp8gMCv7kFYmKBhXZs3sBotzA6XlHZF7DmU8T8fO8Ic9qcuVfVLgTAHBVe9wwLdZ%2FKRTeIdrqDr8c%3D\"}]}\r\ncf-ray: 9facb7ffcde5c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1065007,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (52570), with no line terminators","md5":"7a6c224240e680229cf5755ffe893b39","sha1":"7cf14399e2427a4f0160811cbd09d19fde87d2cf","sha256":"8999dad7223f321bba5010c4823093ced287db52a4ff6a8a1bf6721f3c451a7c","sha512":"63d9dd4f3bab106a13ff4f6ec7b2a686f64416538026d45056fe0663b00d68674f7bbebbffa486c640d7f2a2a47e90eb154c6b7a88f31522ed2274a926792711","ssdeep":"12288:etFp6YfZIflEQrEf4oYYq25hn5g2xp2GFvA2A45BuoEkczSPACB2oaN9jzT0HWla:ORjR55EZcw4B","tlshash":"b6354dc422def7f40e95b1a4100b3a38c22b1efae189d19f4566e4d836debb48127d5d","first_seen":"2026-05-12T22:04:52.867987Z","last_seen":"2026-05-12T22:04:52.867987Z","times_seen":1,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/core-js/2.6.9/core.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:22.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/core-js/2.6.9/core.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 22:04:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27060\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03e2d-16793\"\r\nlast-modified: Mon, 04 May 2020 16:09:17 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 977111\r\nexpires: Sun, 02 May 2027 22:04:22 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ohy1TPtveBoAS1st8lGUxwEh6sd3UUnki9e%2F807QhQCzJkzWPuw9AfntKaaqQ5GMZkhuGUXtKQGlcp1tQMkgohoFGn8i%2FHrtIH4LohjnInpeXp%2B5%2BBuVYKSd0Uly%2F%2B7CZ4Nv6m%2Bb\"}]}\r\ncf-ray: 9facb80058291525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":92051,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32000), with LF, NEL line terminators","md5":"622c4c9d5dc4b1ee29a2eb908186ec88","sha1":"491753a3f979f7d180af11e1929ffff85e30f921","sha256":"794d1c7ab27be77d366e0497e641488e50f5ae6581b4db51cc08de1e142eb47a","sha512":"2b2485006e3a36dbae0d0d8488ab63ae6085c34d5a6f72c3558c52b492294c157f67ce47c1c3b89498db9ff72f748485fedc04a881f1877f903cfa0df1c8be8e","ssdeep":"1536:PLFpwkiSucuVH8MBfaQQ979S17LMgRCSRjMbEjeb6Gt6UQ:PLbw1Sucu3Qw8gc3gk6Gt61","tlshash":"1f93618cbec6f06642636675413f900bb27a1a86745f89d0e12ed1e4bc7c98f413be6d","first_seen":"2023-04-06T20:58:39Z","last_seen":"2026-08-08T13:41:47.168862Z","times_seen":1563,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":50,"dns":5,"connect":1,"send":0,"wait":6,"receive":1,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vue-router/3.0.7/vue-router.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:22.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/vue-router/3.0.7/vue-router.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 22:04:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 7869\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb0402b-60f6\"\r\nlast-modified: Mon, 04 May 2020 16:17:47 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1823139\r\nexpires: Sun, 02 May 2027 22:04:22 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wChJPSsgLYA2lMVU32m8t2Le1%2Byfd9dpyPH%2Bf3f9jXlWp9Lt2fyfz6tgHRaCUqrW4GlIWvjLISLZewxholUuNsZ%2FdzENyU49DgzbgcbWz0vBpIy1aprk4XmXVi%2BEkFECTzppZEUc\"}]}\r\ncf-ray: 9facb8001fd21525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24822,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (24752)","md5":"32e2eb91e6ed0512057b2ad1e6d1b242","sha1":"27809df1b99a4b81b6b82ba2985cdd4b1c8bebb6","sha256":"e8707a396dd2f8d74eaaeb2f784074a24d7a71cbe15dcc70297f726b31c160d5","sha512":"0ab7b445b586dd27a0aeb72396350982783129c9ba028ba1db847c9d2acc0de9c90c3c9636e76a21553fedf81031220f3676ea64bf7336644c04da33d744563d","ssdeep":"384:UUcnX3xpR5tumD+EaKGZRpqB1UdEPQFWmexTMCJ:7E3jXtuW+qGZK1UCP5mqMk","tlshash":"01b2c7ddb581b03547e326a0412f250bf27b358db44e8498f269e4d52cba85ec42bf79","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-08-08T13:41:47.16939Z","times_seen":1214,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/css/chunk-4acb87b4.1b8f641d.css","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /css/chunk-4acb87b4.1b8f641d.css HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-6e\"\r\ncontent-encoding: gzip\r\nage: 156\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EKO0FYg2yhsaEKlt0rSoX5sLF0hTQeOrXR%2BpIobQXSSBQJ2ZIeeblrwazAKMatS%2Fpsva9Ic%2FezblYPRsKCW3EkqQtBrOo8duDBOLksR6Y9gYB%2FSCXIK3HmvI7%2F0%3D\"}]}\r\ncf-ray: 9facb8062e9dc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":110,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"63a91d823ad0600516e8142070f73022","sha1":"3b0cab14963a46b974598c88d60091229973a527","sha256":"1c3f2cd35e863cff9028dc65811b7e2eed91c9780bf887d7ecb29ebc6bcf5565","sha512":"deb695cd0e1585216a1bfbb391af8b561d3019893fa06b2e833a36a002ccc0d1f1b59e6a10ba2fdacec64f38bdc3fff79224335606f53491f9ab6ff9290417ff","ssdeep":"","tlshash":"6cb01200bc0c0c0d0ee3d3482064da871410ab13c980339f3da1c9308f03170b403c89","first_seen":"2024-04-28T18:22:37Z","last_seen":"2026-06-01T10:56:00.236614Z","times_seen":265,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/js/chunk-1cbbb860.a57f141e.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /js/chunk-1cbbb860.a57f141e.js HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-166d\"\r\ncontent-encoding: gzip\r\nage: 153\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IZ9wmk%2F9Wn80IdgIulcjEjXORNRWw9LebPyEVRdnvFaKVU68MRGhRnN5EzqN04klnYyHxjtQatPPXiYh%2F1jqZJ75qxcRzAnk%2F3LGu9Hmp%2Ba5iymoUtKZDFN05Xk%3D\"}]}\r\ncf-ray: 9facb806feb9c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5741,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5419), with no line terminators","md5":"3a4c54ccf2f91c0f82848d2ddbec8961","sha1":"776d35e67a25b6d53cedd8c99228a7b53e693b5f","sha256":"ca99699952ee76b8244a575fd4397fe1bf2ca9424df1afb18ba6f461b5a29534","sha512":"637319aaaa6a3cba86ca7a50f5fe20f3af09cc695ee18db3ca039c22c65302fc8c883ddf35f4f007fb0dce7d26605f7e357ac22c1f5b48e0101fbddade9c055e","ssdeep":"96:uwh6S/u208GaSVN77UCQfYpxjfwByP2pAhqqtAeVf22I8rsl0uS0C0LDCS0zVr:u205aSVNKaFWyXIyu/LDCS4","tlshash":"5dc1e858f5e7a9ec1cb78281b03d7025a232f2249803e1c6e775c9de5ea7f14150fba5","first_seen":"2025-04-09T11:39:56.022377Z","last_seen":"2026-06-01T10:56:00.219569Z","times_seen":109,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/js/chunk-4a224979.246b7db2.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /js/chunk-4a224979.246b7db2.js HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-c61\"\r\ncontent-encoding: gzip\r\nage: 152\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yAEf%2BhWEYAET3JYPFyXVSclm6z3lw6ZgLqUE1%2FNqG0%2BkD1QbCf5Cy4IRYgqUUp%2FOdVFogDbGEv%2FFQk%2F02TUNUhLyN%2Fezwts61%2FLMjUL5gR350HUUKz%2BXJtKphMs%3D\"}]}\r\ncf-ray: 9facb8080eddc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3169,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3083), with no line terminators","md5":"b4792c42c75fef8ad3f1159ef3fdb587","sha1":"21aabf5cb8110e614dab5f8ecba0e13299d76b77","sha256":"156be5bc11c900d5ec8ce330e36aceb810a1a118a4442427ad028e6af93ad289","sha512":"e0c2ba5af9242e54f2771a0595fed02237726bedd33bf0e193c1650716017011392da1d3116c5311863e68c80767b05a59561ffb46210213b98a2c08c31a5dcf","ssdeep":"","tlshash":"0d511158a447d2aa9c9f9063e51d1731f1b57febc402d083e3b4ce805658db4372fa98","first_seen":"2024-06-11T23:26:01Z","last_seen":"2026-06-01T10:56:00.208381Z","times_seen":121,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202604/15/858f88967d974be0aa970118084baff5_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:25.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202604/15/858f88967d974be0aa970118084baff5_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8158bb80daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/46cb805e206e4ddab66791b26f66a8d4_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:25.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/46cb805e206e4ddab66791b26f66a8d4_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb815dc9d0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/css/chunk-7fa7af0e.ed1730e0.css","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /css/chunk-7fa7af0e.ed1730e0.css HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-af2\"\r\ncontent-encoding: gzip\r\nage: 155\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p%2FKwmM7DYpYqOuysEQIdAJS5a1bgc%2FPRM62TE5IsHngKY8HKtVOVoXBgwoK8PjckcXHR%2Fy8jeX%2BwmFj5BTX5HqyOnZXuQQr8mQkDPMgsy9y03BQ08PXvKIwko%2Fg%3D\"}]}\r\ncf-ray: 9facb8063ea1c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2802,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2802), with no line terminators","md5":"65777255c3090272e9fab78125aa99a5","sha1":"3f42ce9c251872515f26fc706d523518800f17e3","sha256":"ad5ecbf7349b2352cb01a3a3c8c928a0d469951ffc4ad485aa1bf62274e71aa8","sha512":"0478ec523a4888034e8840b209bfddc614f40eb8594523d7bd3e22075bdc49229a8cd9589498a27ebf48ecdf55dd38576a0fc66d208ffac76a103f6cdbbccd99","ssdeep":"","tlshash":"1051ee376214330ce427e91847dc0bae0229c22be11327ed1f626675cbd7b5e1abd19e","first_seen":"2024-04-28T18:22:37Z","last_seen":"2026-06-01T10:56:00.199073Z","times_seen":270,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/7390313652794bb495974887e914046b_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/7390313652794bb495974887e914046b_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8160d460daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/98814b15c54a4b439e4087e63dfb1bdc_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/98814b15c54a4b439e4087e63dfb1bdc_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8167ec70daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/007824734718494580471f46a168f26f_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/007824734718494580471f46a168f26f_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb816af6b0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/js/chunk-23cea0af.d3716593.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /js/chunk-23cea0af.d3716593.js HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-1c41\"\r\ncontent-encoding: gzip\r\nage: 153\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h2aQl%2FZlg445qpJUgC5%2Ba73wh6P%2Fgtd0zyWdRwBD3S45aylYw7Y0gyLzaxyeXcjeRJMWTZFgFXFroloRtQGG89wqmILa%2FAjf6%2B%2F992sMwLTtyPP7rQCFQ5m7FKY%3D\"}]}\r\ncf-ray: 9facb8073ebdc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7233,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7135), with no line terminators","md5":"ea08089fa610ee4411a8ffadfd6c7542","sha1":"01d887cf565cdf69f134e85e2e55bd35fc39f0c1","sha256":"9f3747769697cc7cb715fb2810c3cc3bd9836dbc0a35dacdc94b35dec37b969b","sha512":"b2cc246ba3764ee52094b7ac59bde685166b10d83e1b17624154f14c194e93accc3e3ac34085b7624490238fa0e4ac71670a6a81958a44dc910af8a9542ab14b","ssdeep":"96:QiuRksz9+gPPX3WZfWLbDY6zwCpAUUb4vh6pxlHTlaoI0BsJADJ:3ufkWHcCpAChOxlHTlariJ","tlshash":"03e11f14b0d3f1aeecbe9112415d2a39e1317be6a405d087ba38cdd02795d753b2ebb8","first_seen":"2024-06-22T16:59:37Z","last_seen":"2026-06-01T10:56:00.230043Z","times_seen":115,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202604/15/e9dce6ea43a3450aa9486f376121d6bc_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:25.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202604/15/e9dce6ea43a3450aa9486f376121d6bc_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb815bc2f0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/c90eda8401b142f18a63c01e1e796509_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/c90eda8401b142f18a63c01e1e796509_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb816af4c0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/a9f9a4f046354dfe970fd2ff90d17771_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/a9f9a4f046354dfe970fd2ff90d17771_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb816bf7e0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/6920a4b193b74f6ab59228af9a2a0a9c_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/6920a4b193b74f6ab59228af9a2a0a9c_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb816bf8a0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/d7d0852044ba41b78accb38ec8f0339a_.png","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/d7d0852044ba41b78accb38ec8f0339a_.png HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb817ba440daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/js/chunk-1d8200c0.151d881f.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /js/chunk-1d8200c0.151d881f.js HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-bb51\"\r\ncontent-encoding: gzip\r\nage: 153\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fa4wRaYz5XrXsfeKsXqzyaHhkiQzwfDckmcJr8fvHIKj7wkhfyY6zb2%2Bc1hsAItgYS5%2FUrgPwIRvNqgCkZcczhH3Rmj5u2h4WP%2BH77AIfbwdhXNY05dXY2L5xq8%3D\"}]}\r\ncf-ray: 9facb806feb8c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47953,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (47455), with no line terminators","md5":"636133671b750e8b58028c759390117a","sha1":"f46ef314ab5cb78e778312534dd4dfbcd5109029","sha256":"673b455052afbe5aafa1d630aefd8d6698c59797b5cf1e9e61370c69aff1ac53","sha512":"8ec3dc2fab8d1ffe32d80d8cd53dab2b9631703e6014a3a332b1d81e462f0af178a28e249b8b135ef471d8a4e43c8b6e8d9d62808ceddf0d667e866f755d702d","ssdeep":"768:uSJViW0ts2ZtK2Kx0GIg1udUZtK2mxMZYywuVZtK2Kx0S:ucGtIbIgNtsGYyhtIV","tlshash":"fc23d94cb1c3f06e4a6b5621851f1419e23a6a99f405d145fb3cc8e1b8a8c69772ffbc","first_seen":"2025-10-18T07:29:14.091517Z","last_seen":"2026-06-01T10:56:00.25875Z","times_seen":66,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/element-ui/2.15.7/index.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:22.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/element-ui/2.15.7/index.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 22:04:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 122414\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"619608ef-1de2e\"\r\nlast-modified: Thu, 18 Nov 2021 08:03:59 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 490831\r\nexpires: Sun, 02 May 2027 22:04:22 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mOiLWPmNfW%2B2IZtWaWq6TelbT6t6SQsj7baWmuoK%2B4ytApA%2BWBCYji4UTeZcLYP%2Fm7qK496tbkq%2B1PzSmO7d1HimMhYS9KYkupCXOE%2FAYP%2F3TG1x8M9YGIbHMW58ZzDFhp2MKD%2Bw\"}]}\r\ncf-ray: 9facb8001fd61525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":590640,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65105), with no line terminators","md5":"dc6dfa2d326274455390160572856dce","sha1":"efd937a0eaa2f39487b612814c98c37a752c9a2a","sha256":"bc09e54472585388c0ef0b58e5818a448f03b5671df4120da425cd6cac70fb79","sha512":"d42e99eb85cefb310ba46cf4a5fd9514f6804d4fa95f312178b0b54723db60950908465b257cd7160e2a67e56b1b2855bada2e67f56c992f53fad520bb7a73f6","ssdeep":"6144:jlrTktiHOvAeyErnMb/KeG4tVhkiIAUYxRtS8islZST79eA:jNktiHOvAeyErnMb/0G1TUARQ79eA","tlshash":"e1c41a8d72c5b53147a36070103f250bb33b299ca40980dcb679d9ea6dbd909626ffbd","first_seen":"2023-03-11T09:11:20Z","last_seen":"2026-08-08T22:29:34.880423Z","times_seen":648,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/css/chunk-44853638.dc0dff3a.css","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /css/chunk-44853638.dc0dff3a.css HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-225\"\r\ncontent-encoding: gzip\r\nage: 156\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FlfZ%2FMrCnUp%2BadJrR4vUh%2BMODirvpTDpHOf%2BqEJhBzcyceXZbJZm3Wjv3Knx1bsYF0TIzaj5ZoEgeqxjDX9t%2FvwOpJ%2FF%2BRjuCbVwhRUS6mcz6iDjVKLAQph4XYE%3D\"}]}\r\ncf-ray: 9facb805fe9bc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":549,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (549), with no line terminators","md5":"543c20808701b85c34b0d28fd21db192","sha1":"daafd5e95b9657b6ca14c3481b43074dbeec6abd","sha256":"71c664f917edc7fa00c5aed7e33a9911bd8bb185cf72724db6fb464dd86c9927","sha512":"01768a531f71d3248377d09dae80481262a7a5d1e976d4b3c8839264eaedbab1c2d302280c2786bf3b8b45221a14092e6de16917204087913c120785dfb9a66d","ssdeep":"","tlshash":"b9f0ac36391d0025b02ff76ec45006f4813ce143a52b0ea63a0a33229a675da31996c5","first_seen":"2025-04-09T11:39:55.955972Z","last_seen":"2026-06-01T10:56:00.186142Z","times_seen":105,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/js/chunk-20aa535d.40bcfaf4.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /js/chunk-20aa535d.40bcfaf4.js HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-b74\"\r\ncontent-encoding: gzip\r\nage: 153\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5UyvTgxEM795AhCqcHCSdzp3DxNxkz05r26GN2b5YRotiftdDotFxbhPhP66WlyqVonrTtsAmeRMo0IB5s%2FK0zdUVB%2FLCtoXdr1NkAYZNjXJLDEHKNL44iCTPqM%3D\"}]}\r\ncf-ray: 9facb8073ebbc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2932,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2856), with no line terminators","md5":"888b5de99e3cef6cebc5c2f13b53916d","sha1":"3621f5bed8bbee870a00f73057677428c59fdc86","sha256":"d72e761bb6039b8abff19aed95c65c5e451db014e5be6176eaafd65e210fad68","sha512":"80f6ae27245bd18aa699e6118637c70e8d71934718bc5066bf173ff66ec0651f23041c48b613bf246f0a3a903f9d503f1dea8a83e18f648e2195dec35cc45314","ssdeep":"","tlshash":"5e516658b003d1aaacaf9027e51d3630d0757bfad012d083e3b4cd805a58df9271faa4","first_seen":"2025-06-30T02:18:00.917868Z","last_seen":"2026-06-01T10:56:00.23347Z","times_seen":80,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/js/chunk-680ea45c.bb5af193.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /js/chunk-680ea45c.bb5af193.js HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-ab3\"\r\ncontent-encoding: gzip\r\nage: 152\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cChZv2M%2FlOW8cH1t9ajRo5pdzeZ%2Fg1ilU8ZU2nwe7%2BJ7iOPJ8VBEHKYuz332EOa0GLO4rdfrfHl31Objg7gAKAimWhOk%2B1mLbOE%2BDQRT44FE9XBAMKrboO8mu00%3D\"}]}\r\ncf-ray: 9facb8080ee1c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2739,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2739), with no line terminators","md5":"0229ad5705203b258375deccd035a1c5","sha1":"948a1c31b40b0944de3f6fedcbe1c4589685d082","sha256":"f0fdd44dae1197cb964f9ebdc26ad8beb30f7cb52591cf6c14caf22d551a00e8","sha512":"be231cbac8962637bdf3a64be6ba50c723475b656f1bc10ce79cefa9283b49a931a5088b08beaf1f35108f467f51472121bd92e85f4829bfaac4ed78e1d2b25a","ssdeep":"","tlshash":"7f51612c7142f5bd4ea7a161452f7216e13a35451075e881f760cdd097e589f823ab3a","first_seen":"2025-07-19T12:02:29.44903Z","last_seen":"2026-06-01T10:56:00.212728Z","times_seen":68,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/fb7633f1ff974bfab8984eeda40d69c9_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:25.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/fb7633f1ff974bfab8984eeda40d69c9_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb815eccb0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/44f891887c664566a106c837b9fbcdc8_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/44f891887c664566a106c837b9fbcdc8_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8163e1e0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/ce6c5e9144a042389c836b5f6e70ecdb_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/ce6c5e9144a042389c836b5f6e70ecdb_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8165e950daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/api/common/dict/allMap","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"POST /api/common/dict/allMap HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: null\r\nAccept-Encoding: gzip, deflate, br\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nOrigin: https://q48r8.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:24 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://q48r8.com\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7rW50txA9rbMlf4xyj61ijZbcjS6kkxvGp7ZIqlcKLLb%2F3oB9Udjx14ZQ9UzpMI1Xr8GfbhT6pVaGB93C%2BYXwp5ejJuCA%2BnQchmCEh8RKkqf09nnnbQl%2BH55kqE%3D\"}]}\r\ncf-ray: 9facb8052e6dc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11841,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"28783fed56b0f7b7395887607a20ceab","sha1":"d80467cbb58998ec464b590a2c59a786cc4ae644","sha256":"df8ce596f057dc0a8ed2cb9b4bdf6ae57660a6ccaeee62c26a7005c98fdbbb05","sha512":"57a36f9a00419ded86bf556ffdac775c6af33f2e576aade6e96de1eee51b859c828ebcc2db6aa17cb1b5ebcc1c7679f94b678aa0c8dcee5b52b5bfb145006759","ssdeep":"192:awc+IuwVYwWN3V7VBEHdMWk3LQR7MEjQLHkVV/q2VyfYo/QJLM2Gl3hAjaqxDQUy:awc+IzkN3V7HEHdMWmLQR7MEjQLHWq2O","tlshash":"c532008d664779f99d0fbc2452fc68ae90bd7f761e8dc2546e52b44430b0082aa25f3f","first_seen":"2026-05-12T12:04:29.442902Z","last_seen":"2026-05-12T22:04:52.827756Z","times_seen":5,"resource_available":false,"data":null}},"time_used":780,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":780,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/js/chunk-22e427f4.bc3938a7.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /js/chunk-22e427f4.bc3938a7.js HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-6e99\"\r\ncontent-encoding: gzip\r\nage: 153\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DmVFdXn0NTtCnUb3Fcy3j6RE0XLrW1iLrAjuysBLnDF8EToVSYugZlzaobiJqb0cO8zjZW0sKzCc0gKjBPS668p4BebU9YPRZFZC41lVlqsOg38ludAM58FGtIc%3D\"}]}\r\ncf-ray: 9facb8073ebcc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28313,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27447), with no line terminators","md5":"bb0d5f5f6b6e6620b7a30fec0845baf1","sha1":"6a6c470f3b6b9de62fb203d8009d26b499713adb","sha256":"97e4f4a870a8e947e1028f76e899eb89bd4dd43d143f017dc786554d339dd360","sha512":"00bb31208b9641b2aa8a31c9f0683b135fe23d6d8163e005e0cb81ee5f507cefc1417ff20ebc356b47bfb90afc598d91f27a0ea801f083a7373fafe667b7c931","ssdeep":"384:Fjz/yR8Vj16EDwF6Ey5pATBPEVxj8/pO9fToSWSJPrPUq3ZPVx7IyMtmjZx68dfX:FjTKCuUXNSDtmjZx66X","tlshash":"4ec2a7ccb1c7711a1cbb3062712f758db336b64c380ad19493a8d8e598ec9d89e67f94","first_seen":"2025-06-30T02:18:00.762509Z","last_seen":"2026-06-01T10:56:00.208983Z","times_seen":60,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/js/chunk-2d0d2ed4.404a1f79.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /js/chunk-2d0d2ed4.404a1f79.js HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-44d5\"\r\ncontent-encoding: gzip\r\nage: 153\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bfm33yAc%2FR0l7y55sQFpR%2B4rLiQOE8kvrPUWBxG4BQj%2Fscj3P1DriuMzVrcu28LoBGZ6QqpSjg9gGC29rtcLqLw0aRnkcrMlO0qrRpkLH7aVOuKm7WhSwVsbTB0%3D\"}]}\r\ncf-ray: 9facb8078ec8c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17621,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17135), with no line terminators","md5":"13c6928599f17d2ad708dd7f4bab9e3b","sha1":"7fd95ca1a3a3f1adb1600edce49ce83357614d9c","sha256":"86e552d551b2ed65a1b6d38021529ab378c6845716e6c3e98e3175a9d30f2409","sha512":"f647da8cca6a948d375bcead5b04e5b968d11fdf1d807bb87d9dbcb000c106c4d77ae3d4ef7965315d8e26781feebf20cf4cd202fa92617bc1260ddd8d1f631d","ssdeep":"384:LoGGUwbV6mRd8M4cLbubqk+1TYbr7+eYjMdjE2RJH1r7:LGuWk+1T4r7+eDdRn","tlshash":"b282a68dfacaf4270fe27325741f208ad22b546cf809455cf32cd9e679baa095117b78","first_seen":"2025-07-19T12:02:29.438221Z","last_seen":"2026-06-24T19:10:58.011156Z","times_seen":49,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/js/chunk-7fdaf070.0921470c.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /js/chunk-7fdaf070.0921470c.js HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-7bf\"\r\ncontent-encoding: gzip\r\nage: 151\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BTk6yXcN99LRzD%2Fk2d1ovDOFghYGNUt5XPn6dY6XtMhkB8%2B1qHIZLAdCYpB78oI9wxidcpnKn7F2bGfqcAgraIFQS2PP9%2FMxsAZ2PZbJmi0UsC2g2PozgLgAv%2B8%3D\"}]}\r\ncf-ray: 9facb8084eedc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1983,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1963), with no line terminators","md5":"03349f81e683a1fe231132512bb08a79","sha1":"12bcbba3a7079a3ffcd7a0dc910c1549d72d5e21","sha256":"2f77baa4e742cac2032d833ac32ebe0a3ceb321460c8913a7e2a9f72b1d5f33e","sha512":"4080f5a157d76550501adcc8b0781daa9730067d464583b6be7f0f6e908719e8f4ebe07ab0521d9267d282cc3c84f2f299982168873ebfb7a2d062229b0f784f","ssdeep":"","tlshash":"3041100db0c3f5984c7bf041912f222ae169bed0542869d0be74d0c56b61dbd232ea9f","first_seen":"2024-06-11T23:26:02Z","last_seen":"2026-06-01T10:56:00.227182Z","times_seen":119,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/431f5abbf75947e9b7ac3cf966632e8d_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/431f5abbf75947e9b7ac3cf966632e8d_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8164e450daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/6a00eab9cd6743b2bdf99143eca89fb3_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/6a00eab9cd6743b2bdf99143eca89fb3_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb816bf730daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vue/2.6.10/vue.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:22.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/vue/2.6.10/vue.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 22:04:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 30769\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb0402c-16deb\"\r\nlast-modified: Mon, 04 May 2020 16:17:48 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 497489\r\nexpires: Sun, 02 May 2027 22:04:22 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F2CuFoDCnO3357Cc7fogos3%2FDtgVb0hDCeYwq01b9jGmpcaWMZo26Af3J9rYip1YpnrgGRtykTE6Pk3RV5Bhx5XbcIIIAwG7L7yR7VhO9y3p4e2wtY228jLpj678oqO8bAUD1FkN\"}]}\r\ncf-ray: 9facb800582a1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93675,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65449)","md5":"17e942ea0854bd9dce2070bae6826937","sha1":"434cdec1669f2c6c7406297a72120936bc56ed52","sha256":"72194d152571dd375c4365e5c3b4af9db2c06af0102ced18fcb062597d38be26","sha512":"3f0439fa3817c71a6b34673cd32707137b29823e93b8389e1deff24e46c427e5396a897b753ba98bfe156f01c7ce54155bbed56f418b388b22622807802e6f72","ssdeep":"1536:1UXY7qLtpHt2Pqe1mZ8I6H82RaLiMBlo2VV2B/S/g:MYeJpN2yefjMBlPV00/g","tlshash":"529308dc7299b07157eb31f1107f140bf2365a19ac0ec194b222e4e67cb984d92abe7d","first_seen":"2023-03-07T01:18:07Z","last_seen":"2026-08-09T12:27:40.260201Z","times_seen":4452,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":47,"dns":7,"connect":1,"send":0,"wait":8,"receive":1,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/axios/0.19.0-beta.1/axios.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:22.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/axios/0.19.0-beta.1/axios.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 22:04:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 4213\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03d6a-3546\"\r\nlast-modified: Mon, 04 May 2020 16:06:02 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 961729\r\nexpires: Sun, 02 May 2027 22:04:22 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PCWGTr6AesxMq6EPHehEbqKIy1m1E20tEtaWDMh4hgulmBYCD5ojpDSCobHEmawb4zqmwmTp6Zf0U0vFhH%2F215g7Jkk4LMpbydX3Y8xxci1QU6R8MEiNCuVIJDaodqrc2y5KLEsS\"}]}\r\ncf-ray: 9facb800582c1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13638,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10313)","md5":"334149adf44476f28bfbf16c7b0382c2","sha1":"ad2ea246ebb53ed655ab50d44b33d4d6f942387d","sha256":"6d2c0a450a04b5d1492f77d7e512fe6af26e95c2feac596825f45e71b9ffa4d6","sha512":"0f9d66a68e400a2499cc1dbd79331892e9e62e278d8b4784e354b7a281c91fcc1401eedb0857ff6911d842ea853d39081b459fbdc0e30d927ee93b5ba1ecdbea","ssdeep":"384:hpI8XyWPbWeAExXqgxH7RqzGbcQdVzxbUm6HwT9eei:LbXdyGbcczx/6QT9e1","tlshash":"f25285ce7861b0a757e320f0805f4a0fb2b6552a754d84a0f660e9f66db542e8733f5c","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-08-08T13:41:47.205688Z","times_seen":1219,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":45,"dns":8,"connect":14,"send":0,"wait":9,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/sockjs-client/1.3.0/sockjs.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:22.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/sockjs-client/1.3.0/sockjs.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 22:04:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 16651\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03fd5-f54d\"\r\nlast-modified: Mon, 04 May 2020 16:16:21 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1771808\r\nexpires: Sun, 02 May 2027 22:04:22 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o0DRIHbEFyq6G8aHr1ltV%2BlwUudGZIc6NiZfKwzLJXZB%2FBPMsNfmikOjNCPpD8EYy0C33UWGSU80EYBW7GyNDxIiCZX8TMQhYIg47ui01ywgeKZf9XNREENPXaPWSJ4jZcIG1lI%2F\"}]}\r\ncf-ray: 9facb8001fd51525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62797,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (62696)","md5":"f0a01fa31e644ca44836356a172ba7c9","sha1":"e81438a79e8a7f34423168c70696cff2a820dbf1","sha256":"840ea076b43dbf564a909bb082dc287740a96f3c4483fcc024f7176306daecc7","sha512":"a18f9c600996f8f31c046e80334cc794efff550c2286bc822ba7bbc197d99e4ce5f032133866b18cb9743a717b76e578cdb2a9fb5f6ebe42614d08ea1ea2e47c","ssdeep":"1536:XFWQV1ZGORGWiB67hAHLY/IyYT3uu+OLFckh:XFW8tG967hAHM/IyYT/Law","tlshash":"5853e8c5f46134a213e7a2b582bf11032376953a640c85b4b798dcf98d7d98c532bf7a","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-08-08T13:41:47.193438Z","times_seen":1196,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/a38f0cf239d24adc94f2e636157a51a5_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:25.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/a38f0cf239d24adc94f2e636157a51a5_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb815dca50daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/0c722bf6e0934b8ea3c2906d1a7cbd29_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:25.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/0c722bf6e0934b8ea3c2906d1a7cbd29_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb815ece10daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/698f1efabaf84cdda0b051c6dfd77ae5_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/698f1efabaf84cdda0b051c6dfd77ae5_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8169f2f0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/element-ui/2.15.7/locale/en.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:22.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/element-ui/2.15.7/locale/en.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 22:04:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 988\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"619608ef-3dc\"\r\nlast-modified: Thu, 18 Nov 2021 08:03:59 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 686434\r\nexpires: Sun, 02 May 2027 22:04:22 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dEj1m0L0TSe56OxRRjUW5S54%2FcWVe6C9wXTFtbBs0T0YuwYXsMhOzNjMsj0QjgZq4yRsfa3UNnEOa%2B41o2U9tr2OkLxFZLS1pBFcH%2B%2BPaegnP%2BLeK5XvSDmBvaH8dEjQKPB9AJN3\"}]}\r\ncf-ray: 9facb8001fe01525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3516,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"05c65efd7ab47381eac414b929c80d11","sha1":"c0fbfd65eaf0a9a92dedbc93b1b1d7d8c55f8094","sha256":"d6361676df25451bfb74c691c9304ba709919cd4dd03d3c7bd5f999af7a6c597","sha512":"3ca05b333100d916cc783022dcc5b5d0210351e5ff8f184bf7e6450f63f919dc6c28e330d2f49de7a452a7cbee975a68872a3e2d3cbeb99e255e2827b59674ad","ssdeep":"","tlshash":"0a71fcff49b5406a4135dc19659f6407616180ab4e28bc397fad53a82f8cc1ca0feed5","first_seen":"2023-12-31T12:39:44Z","last_seen":"2026-07-22T14:00:50.173418Z","times_seen":416,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/js/chunk-0ce41c5a.36a8d6d5.js","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /js/chunk-0ce41c5a.36a8d6d5.js HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-4b6\"\r\ncontent-encoding: gzip\r\nage: 154\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=syyLoDrPFkdfjEm4MXIhkJM0zHhBqkicMFgBZ0vIPhrWLA0hd3oiX1SHgFFbBjJLg%2BNN1NbVbA9jE%2Bsntzxog2orhGvCmKx0C3XI1K78bNW25v8eiyIjP4X%2FMe0%3D\"}]}\r\ncf-ray: 9facb8067eabc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1206,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1094), with no line terminators","md5":"5e979cf4281f7ebde0d82b99cd25ba25","sha1":"1810e016d0dc79e815f84b4c21caca2e4be64352","sha256":"e265a6091249dd914b53d55a7c2a2711fd8813ddb7c38ca634dc4d02de49238a","sha512":"849df467f9db93783890c75d5e9dfb70f4742dcd0245dad279e9d4dd76ce362d4503685b25916dddaede4469f9696398a5d4f268c06b2dc0c98bd2bb9caaf58f","ssdeep":"","tlshash":"2521dd48b4d3e62dcc2f4406200f3371f0e23eae1410a8c2b2b4c99a5739ea5570f97d","first_seen":"2024-06-11T23:26:01Z","last_seen":"2026-06-01T10:56:00.189054Z","times_seen":267,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202604/15/8acd754e635943d0b35eab43626a61b9_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:25.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202604/15/8acd754e635943d0b35eab43626a61b9_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8159be30daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/72ab1f9e9b8e48e88457339fb397b909_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:25.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/72ab1f9e9b8e48e88457339fb397b909_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb815dcbd0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/356ddeeb8f4a4db6a2ffe6f4798498e3_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/356ddeeb8f4a4db6a2ffe6f4798498e3_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb815fd040daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/cfbb323aa73a4d01b950ab7339ca9030_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/cfbb323aa73a4d01b950ab7339ca9030_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8166eae0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/21c69280ea094b9db275bb736bf32cf3_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/21c69280ea094b9db275bb736bf32cf3_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb816bf960daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/css/chunk-f8d706dc.cbc27764.css","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /css/chunk-f8d706dc.cbc27764.css HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-70\"\r\ncontent-encoding: gzip\r\nage: 155\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=33RWozesnGBU64GyorM7FhTfpRxtfSsyQzfQGpazmSX08vwvP6UQkl6sRcS2ABgcwUIQkyybsQYxnoLKqE0xjEtLba%2FMeN44FLuayJzYHXudn8%2FOaKJm6UtkSE8%3D\"}]}\r\ncf-ray: 9facb8066ea9c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"356149ed230b9481a4b0a80bb6e9a27c","sha1":"ffdb151234ec2e972db2a4f2e79aaba15ddefb5c","sha256":"a27527c60ec70a58cb61e9aeaf0d134c94dd7e658d469bc2daaf965d466acf7c","sha512":"440c1034a95e5e6ed49eea04f26d84bb07075359217b31f6830c80c5f27cb4677443cfb707ec2f2ea1dbfea2aa6c3539cba6f42cdb2ac06a03dfaac69d7abc93","ssdeep":"","tlshash":"bab0920969072908141fba60a6380495c2e0c22a918a32978813572687d71da0bb4b0d","first_seen":"2024-04-28T18:22:37Z","last_seen":"2026-06-01T10:56:00.203747Z","times_seen":131,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/favicon.ico","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:23.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q48r8.com/static/tabbar/mine.png","fqdn":"q48r8.com","domain":"q48r8.com","tld":"com"},"ip":{"addr":"172.67.177.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:24.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"q48r8.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:05:11 GMT","end":"Fri, 07 Aug 2026 09:05:10 GMT"},"fingerprint":{"sha1":"86:5B:6C:DC:04:F0:D9:65:9D:4B:DF:AF:34:60:EB:43:AA:E7:8F:08","sha256":"0C:B5:00:09:17:20:89:D9:0F:28:52:86:71:6B:C8:71:82:FE:AF:AE:4F:CD:38:15:7C:9A:8F:9B:22:49:1D:9C"}}},"request":{"raw":"GET /static/tabbar/mine.png HTTP/1.1\r\nHost: q48r8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 12 May 2026 22:04:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 1848\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\netag: \"68b800a6-738\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MvHXo0zM4ISjGFzE2hWEp1Dq5jzOdoL%2BAgGpYgqu6rDBV2QK%2BNvU6M%2FATluF1wlh7i5e8X%2FAPx7y7x35u6i%2FTwaabEiz52MV5WCfZBZvyhKxvSuErU22yGDtV%2BM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb80edfa6c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1848,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 46, 8-bit/color RGBA, non-interlaced","md5":"feedd3f006c5e1f1faf22cf2ee250c39","sha1":"838e94489b8cac4da6b3eca3274dd25204bb70d7","sha256":"385b2888b16f8eb27611e9296b5d4ec60f4d75361603d51d6c8d54706f81331e","sha512":"c7656c033ad34733d8f8cdc3d64241c64b7a5ca3184a8a418f458b9c39967c7def37d7a34818c7aaa3f88628232f0d822ae06cf4fa891bd8a5ae48ffee94be6a","ssdeep":"","tlshash":"053109803b1ad87e32264f33e7723d9ad6341368ca10032610b12d80b1099fa06fd6ab","first_seen":"2024-05-14T19:58:50Z","last_seen":"2026-07-22T14:00:50.176003Z","times_seen":92,"resource_available":false,"data":null}},"time_used":789,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":779,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"q48r8.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202604/15/71849a7d211f498b8f5c7353bcfdcddd_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:25.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202604/15/71849a7d211f498b8f5c7353bcfdcddd_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb815cc810daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/6333e65ac13742998605f740fe495917_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/6333e65ac13742998605f740fe495917_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8163df90daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202604/15/c9125aedd74545ba93d53035c9c7106d_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:25.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202604/15/c9125aedd74545ba93d53035c9c7106d_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8158bc40daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/69d9061895a34aba973427b5dedd7045_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://q48r8.com/","date":"2026-05-12T22:04:26.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/69d9061895a34aba973427b5dedd7045_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://q48r8.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb8164e300daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}