{"report_id":"adea76c2-8e97-49bf-9bb1-1844b83078f3","version":6,"status":"done","tags":[],"date":"2026-06-01T01:37:06Z","url":{"schema":"https","addr":"qatebixun.live/","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"104.21.59.11","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"qatebixun.live/","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"title":"Qatebixun | Official Platform for AI Assisted Trading","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"qatebixun.live/","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"104.21.59.11","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-06T01:37:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-06-01T01:36:45Z","timestamp":1780277805,"ip_dst":{"addr":"34.117.59.81","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":60014,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET POLICY Possible External IP Lookup Domain Observed in SNI (ipinfo. io)","source":"{\"timestamp\":\"2026-06-01T01:36:45.695047+0000\",\"flow_id\":142738442797244,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":60014,\"dest_ip\":\"34.117.59.81\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2025331,\"rev\":5,\"signature\":\"ET POLICY Possible External IP Lookup Domain Observed in SNI (ipinfo. io)\",\"category\":\"Device Retrieving External IP Address Detected\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Linux\",\"Mac_OSX\",\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2018_02_07\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0043\"],\"mitre_tactic_name\":[\"Reconnaissance\"],\"mitre_technique_id\":[\"T1590\"],\"mitre_technique_name\":[\"Gather_Victim_Network_Information\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_09_19\"]}},\"tls\":{\"sni\":\"ipinfo.io\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":911,\"bytes_toclient\":3413,\"start\":\"2026-06-01T01:36:45.573628+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-31T22:21:48.210615Z","alert_count":0,"request_count":1,"received_data":7013,"sent_data":496,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"vumbnail.com","ip":{"addr":"104.26.8.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-06-18","domain_rank":182936,"first_seen":"2020-06-18T18:16:57Z","last_seen":"2026-05-29T16:52:52.512147Z","alert_count":0,"request_count":1,"received_data":2369,"sent_data":441,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-05-25T07:23:13.533444Z","alert_count":0,"request_count":1,"received_data":18800,"sent_data":468,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-31T22:18:21.058888Z","alert_count":0,"request_count":5,"received_data":183558,"sent_data":2706,"comment":"","tags":null,"fingerprints":null},{"fqdn":"qatebixun.live","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-31T23:04:44.009434Z","last_seen":"2026-05-31T23:04:44.009434Z","alert_count":50,"request_count":50,"received_data":919743,"sent_data":57703,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.1.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"ipinfo.io","ip":{"addr":"34.117.59.81","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2013-04-23","domain_rank":1327,"first_seen":"2013-12-16T07:25:53Z","last_seen":"2026-05-27T18:05:04.167221Z","alert_count":0,"request_count":1,"received_data":930,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-05-31T22:42:17.707694Z","alert_count":0,"request_count":4,"received_data":375222,"sent_data":1898,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"qatebixun.live/","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-07-05T08:36:24.819921Z","times_seen":177102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/frontend/assets/en/js/config.js","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d4b19fc39d88043bdbb9c096f385843","sha1":"6f41533a8c20e52830c28f9d4cc62e354fc29969","sha256":"ac1a70193e1bc0e8a7ba774ccfbb01a2b0906ec4478d3c94b8dd49eba94b34d8","sha512":"cab9965c797644d298334f1c0bc6a51f5fe22286f97b038839ce5e29777d97ec56bd89466b361f4193466d0b1b76ba997b9943b8b7821bb42b9295e2e34d6e01","ssdeep":"","tlshash":"c401d06fc17488032df2129eba462b29f512423f076cc06a71bd516c2f7a26fd6471c1","size":782,"data":"","first_seen":"2026-05-03T18:32:03.512014Z","last_seen":"2026-06-16T05:28:50.813945Z","times_seen":794,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/frontend/assets/en/js/scripts.js?v=20260329-card-hover-fix","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5027dd34bbabb7baf24a353d73d95dc4","sha1":"069b7ab6533d9ce490e3562f383c3787f4193b04","sha256":"11f21fea558292de4502dd467e89d84ae0e998fa53aa3eb75f5599302463d617","sha512":"c471a8a425b49565ed9c8f106466d01f754ec9e61a994dd441f452a61800a742cd485b334a6b004354b78eacd802c7f7cbb01b3a30993718fe06d02379b2983b","ssdeep":"192:5vaUOUNrDeAHVSx8x70XkyEeiK6cthSiQGfkDf9Idm:5rOjAHKX1TFxtyGod","tlshash":"1d022f6a65b61436403311af9bcf825a2b1530c7ba05eead3f0c83042fc976c59f1be9","size":8260,"data":"","first_seen":"2026-05-06T05:56:06.68471Z","last_seen":"2026-06-16T05:28:50.797201Z","times_seen":585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0733d27936b2268c438fca0a4036c669","sha1":"0fc529cc94742f9d1bf232ffe86906c44760973d","sha256":"70fb42735b09d42cc6b42a6c122c8a9b899e03770906e504e9a69ba57cb95de1","sha512":"3c90eee4777b5560fc447d24d1f1fa03b12d6ed48cfc54c916df221a2af86629be88045d9c5830971a79e9f7ab698b92f0e254a59530fcebb9a5cb22cc3834ee","ssdeep":"96:LmruN9WnLBfRanrYzTcy7uSQbUMjBnz0xyxCi0ZyqtXpaS2ciTJQkayZP/+T:Lmi7WnLNR+RTbSxDi0ZyqorTBayZP/+T","tlshash":"af123f8e2af6175da973313e3bcfa105651650271848ed42be9c0ba01fc88a977e27c9","size":9192,"data":"","first_seen":"2026-05-31T23:04:48.303208Z","last_seen":"2026-06-01T01:37:09.028369Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipinfo.io/?callback=jQuery31109323082604174002_1780277805285\u0026_=1780277805286","fqdn":"ipinfo.io","domain":"ipinfo.io","tld":"io"},"ip":{"addr":"34.117.59.81","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8101d4337db9f4867dc24f6ecd0f044a","sha1":"3b82847cc344112f8292055ec61ef9fd11f1468f","sha256":"7ad51250b4bc83575931c36db74b3978b3857785ad8e14887c983fd86ef94ee0","sha512":"94987126e0055463db32c3a2d68774286e529c109520093e9eb50c390cc8823a2384269f81aa597a82df4bcc97b5459b563624c0e22a8520e3d816a9384a51e3","ssdeep":"","tlshash":"6b01706720781f36e9ba4558c40b8f0a335ca91f018166aa4ea25b5c10449b7a06167e","size":672,"data":"","first_seen":"2026-06-01T01:37:08.994536Z","last_seen":"2026-06-01T01:37:08.994536Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/embla-carousel@8.6.0/embla-carousel.umd.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ccc433e7e2ed8017b86837389e278027","sha1":"ac157e8dec8dddbd9b768674968422d629d59bd9","sha256":"f05b5dbfe37d79b636b9db74ad04ed5e99b4bce369d781b0fb38b0b2ac619e66","sha512":"a62638d1120d541d148cb4714759538c9fa838a93009f3dfa1b840bdd731b3fdb2b201c677ead9c177c5f33af1dfd60ad34bdca57d41bdef2ee957fdfd3a7482","ssdeep":"384:pW3WT2X/jBbU6N/LHq0GFZGPow0Ov7NijEUE2Uy1s2B4fUXH9y0ApP:E3SmrRU6N/LHq0WZGPdzSEGKssAAP","tlshash":"c782b7ec70c2b062639724f9503f9109f37b1881384e9550e678e9e63cb606e9677f9e","size":17946,"data":"","first_seen":"2025-04-09T07:37:23.81801Z","last_seen":"2026-07-05T04:07:53.33149Z","times_seen":1519,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/frontend/assets/en/js/lazyload.min.js","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"02904458ba58d516134326a81c45c920","sha1":"bdbef500dae9927c7018801285d8b07d4aaef92d","sha256":"482427969bb13fb83dd24449a53868f8f51239ad684606639991592972bdd234","sha512":"3198a5ad2e3bb2f4814916b73f0a7316dd070184e201a40b8c53eb98473b3d791b71fb2c399e6f8f3ae6be8045532dc6659ff9cf590cd62bedb61345721e8ec4","ssdeep":"192:Wrr573s4TW1IDJTspjUAEA/UcdvM5khyLPkO21RnaUhklOx0dek7jQMiZtjpSNju:Wrrps4TW1IDqUAEEM5WeUaQFlbtN7","tlshash":"bc52cb8ba2f22438531bf024692bcd097315608f5899ae923d1d626b5f49b39f7f4fc4","size":13751,"data":"","first_seen":"2026-05-03T18:32:03.559102Z","last_seen":"2026-07-04T12:30:40.630538Z","times_seen":993,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@25.12.5/build/js/utils.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e654fbae22a0762fa384b61fd03f1679","sha1":"3f2dc491443ab4d9dbf6abee895d8140196f0aab","sha256":"93c8dd85421914d3c09fdacc4b77730595202004a1d8c9ef7639c7551157bda6","sha512":"af44d0ca2f0ca731ecb7e535963c694710a3e887c8bbdfc95066f1fab72d5c5da66313e9097498d246b93a04a1b642fd65d591e80d325a72bb0f7bf5a5f8da6e","ssdeep":"3072:TklM0tDKjFs3OwPss3MwPky0zOt62xFMfM+dhvo4sUifhNyf4LtXKtofQVkmDmVu:TklMmDOW0IxFMfM+dMGou","tlshash":"fe44f0ebd63c973ba1d87b35968eb3cd5a8cbca3c858567826c3b54f52784e0706c205","size":268720,"data":"","first_seen":"2026-02-13T03:24:00.128548Z","last_seen":"2026-07-05T03:34:22.255193Z","times_seen":992,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/frontend/assets/en/js/geo.js","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b9c760269aeea47905f4d33aaf740c3a","sha1":"14120a6947ffad92c5f9e886b485ec65b3bed3ee","sha256":"556384cb09c3f07d6576faea9d370459e288fbfbe44b1c5e847b2db9dab5690c","sha512":"b594df48a2e062a0618a0443ca35e4b7bcdf55eb2599b8fe782016f29b198210ab39b46e017121f150e27fa14918c37ec05c62c00752e61914b095aa1c087946","ssdeep":"","tlshash":"fd01496552b6466040e771cada6fa2601435e40b374dd8ea7a9f43480f8991dc2b27dd","size":825,"data":"","first_seen":"2026-05-03T18:34:41.313902Z","last_seen":"2026-06-16T05:28:50.816995Z","times_seen":789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/frontend/assets/en/js/sliders.js","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"67dd1e2333e167a77697aca034eb3df6","sha1":"306594dfb8433db362be7a689933e0eeca162f48","sha256":"eede0d06ab82379d31524d842f64e1ac779e3b3e5b0b57c026290af86649b706","sha512":"7fc94d65c296988603ad1d10539e40a52db78e8ddea794bc22ecd118084675d2fb7fb3ee16aeac57a10443e95af4db7a2a55ce5b0bbe1d2b425163bcfb553f07","ssdeep":"96:hWrrPGI8yDdWTAAOxlfWG0eTnCa9JeUW7Y:hWvPG/eeA5xlZCa2M","tlshash":"ec910366303223358a6742edae0bcc41e2dad0477905d581f58e471a8fc6faca6e5dfc","size":4454,"data":"","first_seen":"2026-05-03T18:34:41.351704Z","last_seen":"2026-06-16T05:28:50.76667Z","times_seen":736,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@25.12.5/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"584b32aaa35c260a3b4ddacfce274a42","sha1":"324ecf2536f3781db1f77ed454bf3c271594454f","sha256":"990fdaa51ed5c86f92d670ab5a79dbf7415f34900dc2f443c5a03dca94479475","sha512":"bca5c9cdfd2562a5a1d31e26c974022172e14ebd599e30d3daf091d27a266a820a025b2ea1e1329bf18be3489c51aafca5025db638631452fee03afedd8f8a26","ssdeep":"768:mYJ0FRsgH7XpwJxK6jk4ixVDQtwnixrUT2PXIh+vH/kvzas:mcgHl6Q4ixVDQAsrcGgmHMas","tlshash":"f603b52d6316672babfd8155f4e4a582de6f7a460944886c3dac8fcb0098dc379b3734","size":40669,"data":"","first_seen":"2025-11-18T18:36:54.272556Z","last_seen":"2026-07-05T03:34:22.244563Z","times_seen":1013,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/frontend/assets/en/js/loader.js","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7495dbde5ab60ac459b25cc5c0217b0f","sha1":"a3915023aa8e39ab95d7417eef6bdcdedefde3ca","sha256":"80da25369b4c34a14b7deac6d1ca96b307bb42e738f41aea491ccf993ac946a1","sha512":"d95ed327c8180538a84de3b5b3a5fe5d2d261d32db8ceccfd978ecbd999f1ff24cc81955ca6e6482746dc8e951df3019f84457874652e13fff3454458d03c23c","ssdeep":"","tlshash":"aaf0d11a231749a48bf6c66ba3718381febe6133e445d486359f74c07f709d45065cd8","size":656,"data":"","first_seen":"2026-05-03T18:32:03.601612Z","last_seen":"2026-07-04T12:30:40.621326Z","times_seen":994,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/dashboard-assets/js/disclaimer.js","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d31bf8a0967d5a38631c38691e66540c","sha1":"f4e654b84b034023b5e3db513087dd9205bd49ba","sha256":"d6712b0ff373f0cf02d1c81ff5a6fb945b47d5d173f02e41d1da28eee52b39d5","sha512":"3d4f2750a27f99297636d2e655b9d157d70113d304085e8ff716a907a7abd01252fbbc7ea521f695b6ec31bcb7a9198e0fc378ee71480a52abe2ab83f94b8181","ssdeep":"","tlshash":"58014c9e79e236b1a2c7eb7c19ab530566314003d11c85053d2c6262afa4f6816b3bc9","size":854,"data":"","first_seen":"2026-05-03T18:32:03.521288Z","last_seen":"2026-07-04T12:30:40.633433Z","times_seen":995,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/frontend/assets/en/js/deferred-imports.js","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0ec5ae2cf2a7a7043133c1d9301fadb","sha1":"518d372d4fc783df627d3c5789284ecfca8dbeab","sha256":"b13200f905e155b75d81e059633d6c2bfc45cfe4f1b2199c0970ddc15b5a1d75","sha512":"e22cac350e50d88ea6fffa67e9ebd404fef4c79b0ff7e9c9ad01015e09676c39af37788927916e947d7b49fe0b2131873f43adad6799340d6ee2b3c186b18e20","ssdeep":"","tlshash":"6511493a09078a5544304166ecb7a72df073072323d182a27ebd32486f314175a56b9d","size":892,"data":"","first_seen":"2026-05-03T18:32:03.612818Z","last_seen":"2026-06-16T05:28:50.775147Z","times_seen":794,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/frontend/assets/en/js/jquery-3.1.1.min.js","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e071abda8fe61194711cfc2ab99fe104","sha1":"f647a6d37dc4ca055ced3cf64bbc1f490070acba","sha256":"85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf","sha512":"53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65","ssdeep":"1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5","tlshash":"3183d5d9b2c670529b7730b850bf450bb17a98dab44c8d60f058c5d57eb8a8e507bf2c","size":86709,"data":"","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-07-05T08:28:23.715292Z","times_seen":144495,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@25.8.3/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7657299ef4e0a3abdc478c0b9d7075aa","sha1":"25138af863e2ad69bb09af4e93009449f2e75ccb","sha256":"8e184485db8b6a8a741dd831f7bae84644eedf8f0c371172e69721e1236a7cd1","sha512":"eb5e7ae63fb48ea7b543f7339625284b3cc5477b6c8be03667714ebab1eb7c493a1445bae46348d992a4477a2080634c532b16c7b6ae4102e1524e51ab142b6b","ssdeep":"768:U+h03XVqC/iPIqXpwJxsyysdjx2nmY249lHGIw:UiPIsy/tWHG","tlshash":"c0f2f9aeb3646637abfd82a270e54403ae6f79444604043d78bc8ede1399dd171f6b38","size":34586,"data":"","first_seen":"2025-10-21T03:51:56.40324Z","last_seen":"2026-07-05T03:39:18.669517Z","times_seen":1665,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lexenddeca/v25/K2F1fZFYk-dHSE0UPPuwQ5qnJy8.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:45.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/lexenddeca/v25/K2F1fZFYk-dHSE0UPPuwQ5qnJy8.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://qatebixun.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39680\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 31 May 2026 10:59:25 GMT\r\nexpires: Mon, 31 May 2027 10:59:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 52640\r\nlast-modified: Tue, 16 Sep 2025 03:41:06 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39680,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39680, version 1.0","md5":"4f40f9c745b49a141e612eff59f3a917","sha1":"f19c314aad546b6a3ade9ff335318dec6e7a6d37","sha256":"3cad1d144b870d6083c79131c4817b2bcf3b4d76fc4aaeaba2eec295fbaa5cb1","sha512":"63bd4fb636d150b58801a6bfa7b5e9499fe8012c9cbaeaa5313fa4662f6d4fba8eed252b4c9ae24f22dfc72225c9fdbb43236b76096850f391d4494230b1e0a2","ssdeep":"768:nH89JOAPM5r9V1tqir40IKkgqy1g9HbSMPCVGyaalG2:H8fOltjU0IKqy1+GV0yaaz","tlshash":"a703019b60d5afa3c6db1060d74de6538820016e9831e3693c55be1b7cba688f2448ef","first_seen":"2025-09-17T17:21:05.707315Z","last_seen":"2026-07-04T23:31:53.03628Z","times_seen":2508,"resource_available":false,"data":null}},"time_used":622,"timings":{"blocked":249,"dns":24,"connect":50,"send":0,"wait":111,"receive":12,"ssl":169},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/frontend/assets/en/js/lazyload.min.js","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:44.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /frontend/assets/en/js/lazyload.min.js HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9qUitpNHljMC9xVXlOajkwd2ZoK0E9PSIsInZhbHVlIjoiWGVjQW51c3laQ1QvbEhJQ1I2MFRrWHNtNEl6cVRoOWg4ZGNmaDJKcWxGMTRkcFFhRU5XcFBMSC9qbGgzSzNXVVdKWUZNeDlwaVVoOFUranZaR3pGSEFYMlJMSGFsb3lYK09oTHVONDlrYy9SR1ZjTjB6SkdCaWJhWHZ3QzFld3IiLCJtYWMiOiI1MDA5NjNjYzc0MGU0NTdhYWMzNTRmZWVlOTY4NWM3YTU4Y2MzZWIxZTkwMzc2NmJiOWZkOTBiMTZmMmU2NTYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iis5TzVWcWt1M01yRkl0WGEvQTk1OUE9PSIsInZhbHVlIjoiRG54V2lCODQ0djVvMmJVZE5GbWFpK3M3NzRlMG9TdXdPa3h4bmxkVU0xcSt1MWRaUmcyZ3pTY0w4dXBTd1Q1djhJZnN0OXhOQ3A5UXRWSjRjVElEV0VucldkVmp0UE12Y3dYc21sVlhuVzlteEVQTGZQRmI4M1dvQzJ3Z3oyb1AiLCJtYWMiOiJjY2M5ZWI5ZTVjZjBiOTE3ZDI2OWE2ZDgwNjc1MDhhNDQwMGMxZmY4MzZjNDQ4OGE4OWQ3YzE3NTI2ZGM2NzdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:44 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding,User-Agent\r\nlast-modified: Fri, 13 Mar 2026 05:05:58 GMT\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rdi%2BiItYgjf%2BSWrMVa8OsBIrK6r8UHGZg4rVbN5RA1X8kMgngpzJEJmX%2FZyaS028TgwL1PY3Uv%2FedupM6ZJgTZyC8XhTbNFfi1rNLe%2FUYNovVfzBwYfVf9t6W%2FfmxwunKQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a04a7d3658adb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13751,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"02904458ba58d516134326a81c45c920","sha1":"bdbef500dae9927c7018801285d8b07d4aaef92d","sha256":"482427969bb13fb83dd24449a53868f8f51239ad684606639991592972bdd234","sha512":"3198a5ad2e3bb2f4814916b73f0a7316dd070184e201a40b8c53eb98473b3d791b71fb2c399e6f8f3ae6be8045532dc6659ff9cf590cd62bedb61345721e8ec4","ssdeep":"192:Wrr573s4TW1IDJTspjUAEA/UcdvM5khyLPkO21RnaUhklOx0dek7jQMiZtjpSNju:Wrrps4TW1IDqUAEEM5WeUaQFlbtN7","tlshash":"bc52cb8ba2f22438531bf024692bcd097315608f5899ae923d1d626b5f49b39f7f4fc4","first_seen":"2026-05-03T18:32:03.559102Z","last_seen":"2026-07-04T12:30:40.630538Z","times_seen":993,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/frontend/assets/en/js/deferred-imports.js","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:44.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /frontend/assets/en/js/deferred-imports.js HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9qUitpNHljMC9xVXlOajkwd2ZoK0E9PSIsInZhbHVlIjoiWGVjQW51c3laQ1QvbEhJQ1I2MFRrWHNtNEl6cVRoOWg4ZGNmaDJKcWxGMTRkcFFhRU5XcFBMSC9qbGgzSzNXVVdKWUZNeDlwaVVoOFUranZaR3pGSEFYMlJMSGFsb3lYK09oTHVONDlrYy9SR1ZjTjB6SkdCaWJhWHZ3QzFld3IiLCJtYWMiOiI1MDA5NjNjYzc0MGU0NTdhYWMzNTRmZWVlOTY4NWM3YTU4Y2MzZWIxZTkwMzc2NmJiOWZkOTBiMTZmMmU2NTYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iis5TzVWcWt1M01yRkl0WGEvQTk1OUE9PSIsInZhbHVlIjoiRG54V2lCODQ0djVvMmJVZE5GbWFpK3M3NzRlMG9TdXdPa3h4bmxkVU0xcSt1MWRaUmcyZ3pTY0w4dXBTd1Q1djhJZnN0OXhOQ3A5UXRWSjRjVElEV0VucldkVmp0UE12Y3dYc21sVlhuVzlteEVQTGZQRmI4M1dvQzJ3Z3oyb1AiLCJtYWMiOiJjY2M5ZWI5ZTVjZjBiOTE3ZDI2OWE2ZDgwNjc1MDhhNDQwMGMxZmY4MzZjNDQ4OGE4OWQ3YzE3NTI2ZGM2NzdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:44 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Sat, 14 Mar 2026 21:28:22 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hm%2B299x3hpHkBBwWcW77xOrWO33fhmwa2btQ72HpAxN5knnsjODcrRoAWqOeGPKHemQcoSPYWSelbfTPhqxZCN73VftItB1EkhIPkV6rP1qPE7iW8YyatVZTOpVaHCnydg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a04a7d3658b5b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":892,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"b0ec5ae2cf2a7a7043133c1d9301fadb","sha1":"518d372d4fc783df627d3c5789284ecfca8dbeab","sha256":"b13200f905e155b75d81e059633d6c2bfc45cfe4f1b2199c0970ddc15b5a1d75","sha512":"e22cac350e50d88ea6fffa67e9ebd404fef4c79b0ff7e9c9ad01015e09676c39af37788927916e947d7b49fe0b2131873f43adad6799340d6ee2b3c186b18e20","ssdeep":"","tlshash":"6511493a09078a5544304166ecb7a72df073072323d182a27ebd32486f314175a56b9d","first_seen":"2026-05-03T18:32:03.612818Z","last_seen":"2026-06-16T05:28:50.775147Z","times_seen":794,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/flags/ru.svg","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:44.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /flags/ru.svg HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9qUitpNHljMC9xVXlOajkwd2ZoK0E9PSIsInZhbHVlIjoiWGVjQW51c3laQ1QvbEhJQ1I2MFRrWHNtNEl6cVRoOWg4ZGNmaDJKcWxGMTRkcFFhRU5XcFBMSC9qbGgzSzNXVVdKWUZNeDlwaVVoOFUranZaR3pGSEFYMlJMSGFsb3lYK09oTHVONDlrYy9SR1ZjTjB6SkdCaWJhWHZ3QzFld3IiLCJtYWMiOiI1MDA5NjNjYzc0MGU0NTdhYWMzNTRmZWVlOTY4NWM3YTU4Y2MzZWIxZTkwMzc2NmJiOWZkOTBiMTZmMmU2NTYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iis5TzVWcWt1M01yRkl0WGEvQTk1OUE9PSIsInZhbHVlIjoiRG54V2lCODQ0djVvMmJVZE5GbWFpK3M3NzRlMG9TdXdPa3h4bmxkVU0xcSt1MWRaUmcyZ3pTY0w4dXBTd1Q1djhJZnN0OXhOQ3A5UXRWSjRjVElEV0VucldkVmp0UE12Y3dYc21sVlhuVzlteEVQTGZQRmI4M1dvQzJ3Z3oyb1AiLCJtYWMiOiJjY2M5ZWI5ZTVjZjBiOTE3ZDI2OWE2ZDgwNjc1MDhhNDQwMGMxZmY4MzZjNDQ4OGE4OWQ3YzE3NTI2ZGM2NzdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:44 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IEElWCVHpEmTvpT%2Fwe73%2BzAK61oz%2Bhifv1zMwn2I2UjIWpNG%2FAgb0Z7ILdfDgE3TQaWxLSaHwK26cmVuBvwl2bSa8nm1qzLyhUf4SbO9iWW9S%2FK%2F7DSVuiuyt22Hx5BGZQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a04a7d3688dfb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":355,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"42103243a1d4c3f2e823e99f3c00aaa4","sha1":"1d95a227efb867c8b3dfa2902ea8a803f3fd3519","sha256":"0a720bc83f72d17849bd213570ed808ae6b430fa5f3d50dc7fdb32413f7ade01","sha512":"752fcf59700e20bed16831a684eef542a1fd525d73078c97894a6e7b3e2009296af1f4b31f2da100aa8403b3aebf3fff464cd8c1c6330a3b6da36796e2b70cd7","ssdeep":"","tlshash":"39e0d886a4e989095a1947694eec71d6406270ce218d01fd70853529fe4d3db2451aa8","first_seen":"2023-05-24T00:34:39Z","last_seen":"2026-07-05T04:52:57.806616Z","times_seen":5501,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/flags/th.svg","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:44.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /flags/th.svg HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9qUitpNHljMC9xVXlOajkwd2ZoK0E9PSIsInZhbHVlIjoiWGVjQW51c3laQ1QvbEhJQ1I2MFRrWHNtNEl6cVRoOWg4ZGNmaDJKcWxGMTRkcFFhRU5XcFBMSC9qbGgzSzNXVVdKWUZNeDlwaVVoOFUranZaR3pGSEFYMlJMSGFsb3lYK09oTHVONDlrYy9SR1ZjTjB6SkdCaWJhWHZ3QzFld3IiLCJtYWMiOiI1MDA5NjNjYzc0MGU0NTdhYWMzNTRmZWVlOTY4NWM3YTU4Y2MzZWIxZTkwMzc2NmJiOWZkOTBiMTZmMmU2NTYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iis5TzVWcWt1M01yRkl0WGEvQTk1OUE9PSIsInZhbHVlIjoiRG54V2lCODQ0djVvMmJVZE5GbWFpK3M3NzRlMG9TdXdPa3h4bmxkVU0xcSt1MWRaUmcyZ3pTY0w4dXBTd1Q1djhJZnN0OXhOQ3A5UXRWSjRjVElEV0VucldkVmp0UE12Y3dYc21sVlhuVzlteEVQTGZQRmI4M1dvQzJ3Z3oyb1AiLCJtYWMiOiJjY2M5ZWI5ZTVjZjBiOTE3ZDI2OWE2ZDgwNjc1MDhhNDQwMGMxZmY4MzZjNDQ4OGE4OWQ3YzE3NTI2ZGM2NzdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:44 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dMN0Gy%2Bm8qv67%2FuTjDdXwNQbfae2G3Gba8RRZA%2BjwYlhUR6cwL51%2Fqq3lW9IeNyp%2F0cRP43sGrJoieZttrsx1tV74b5YFEFVtbitOVViN0BJZe5h662%2BVwBzBjoM%2FzhHvw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a04a7d3688e4b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":367,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"756f64249f1f943e61bff54780b49cd8","sha1":"e4beba68e98c966f57a6cca0e40915ba60500e23","sha256":"cf1c5911962ac51db0ff4e36a6a91f5ff42c1ba40246ada4067b3b5a846f21b4","sha512":"d8d34a3b82cba3a38c9f4025440e7177ca7ad6347bdff81f1691e88ff0f7e8a58fe3491e2d53e9d433cf685af00af37193c07afd2799fa12aefb54d53ff30498","ssdeep":"","tlshash":"c2e0d8c6a869890e1e140f754dbc75ed5136b0cf214d41fcb1c12629aa4a39f2541a68","first_seen":"2023-05-07T18:03:13Z","last_seen":"2026-07-04T12:30:40.619277Z","times_seen":4375,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/flags/hr.png","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:44.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /flags/hr.png HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9qUitpNHljMC9xVXlOajkwd2ZoK0E9PSIsInZhbHVlIjoiWGVjQW51c3laQ1QvbEhJQ1I2MFRrWHNtNEl6cVRoOWg4ZGNmaDJKcWxGMTRkcFFhRU5XcFBMSC9qbGgzSzNXVVdKWUZNeDlwaVVoOFUranZaR3pGSEFYMlJMSGFsb3lYK09oTHVONDlrYy9SR1ZjTjB6SkdCaWJhWHZ3QzFld3IiLCJtYWMiOiI1MDA5NjNjYzc0MGU0NTdhYWMzNTRmZWVlOTY4NWM3YTU4Y2MzZWIxZTkwMzc2NmJiOWZkOTBiMTZmMmU2NTYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iis5TzVWcWt1M01yRkl0WGEvQTk1OUE9PSIsInZhbHVlIjoiRG54V2lCODQ0djVvMmJVZE5GbWFpK3M3NzRlMG9TdXdPa3h4bmxkVU0xcSt1MWRaUmcyZ3pTY0w4dXBTd1Q1djhJZnN0OXhOQ3A5UXRWSjRjVElEV0VucldkVmp0UE12Y3dYc21sVlhuVzlteEVQTGZQRmI4M1dvQzJ3Z3oyb1AiLCJtYWMiOiJjY2M5ZWI5ZTVjZjBiOTE3ZDI2OWE2ZDgwNjc1MDhhNDQwMGMxZmY4MzZjNDQ4OGE4OWQ3YzE3NTI2ZGM2NzdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 982\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\ncache-control: max-age=31536000\r\nexpires: Mon, 31 May 2027 23:04:21 GMT\r\nvary: User-Agent\r\naccept-ranges: bytes\r\nage: 9143\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YSTg5g174iOisfeU6H5e%2B06X3cMJnzOA3dl3OeSzmk13X4lhMMkoEZMZWsH4uLIJ8yPbNAHq1QSiN%2FeXc65aFkEvqxpsAN4ad201AH5SajKec8Tm%2FVxUkF9jpbbU7w4ZlQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a04a7d3678c9b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":982,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"41a7b90f600ed32eefb5e620a4f653fc","sha1":"7a6ab7cfc55a1239de75e073430c9634d5c18746","sha256":"63e36970eea32e52849d7b4d3a15d1da36be12ad3078df8c2b848aa7e9baa19b","sha512":"004bddcda655838947c0922be1f74ac3833ca444f3c872c9432232e5660f7ca9288c87acf2d1df19a21a768ae8a04e3f67278f7b6be4998a5e0355f279ba92dd","ssdeep":"","tlshash":"261165dec411043c410b39e6ae9b0bd989b767ac43520a45906db49abc795043ee49a5","first_seen":"2023-06-13T00:33:19Z","last_seen":"2026-07-04T12:30:40.626707Z","times_seen":5154,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/flags/tr.svg","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:44.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /flags/tr.svg HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9qUitpNHljMC9xVXlOajkwd2ZoK0E9PSIsInZhbHVlIjoiWGVjQW51c3laQ1QvbEhJQ1I2MFRrWHNtNEl6cVRoOWg4ZGNmaDJKcWxGMTRkcFFhRU5XcFBMSC9qbGgzSzNXVVdKWUZNeDlwaVVoOFUranZaR3pGSEFYMlJMSGFsb3lYK09oTHVONDlrYy9SR1ZjTjB6SkdCaWJhWHZ3QzFld3IiLCJtYWMiOiI1MDA5NjNjYzc0MGU0NTdhYWMzNTRmZWVlOTY4NWM3YTU4Y2MzZWIxZTkwMzc2NmJiOWZkOTBiMTZmMmU2NTYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iis5TzVWcWt1M01yRkl0WGEvQTk1OUE9PSIsInZhbHVlIjoiRG54V2lCODQ0djVvMmJVZE5GbWFpK3M3NzRlMG9TdXdPa3h4bmxkVU0xcSt1MWRaUmcyZ3pTY0w4dXBTd1Q1djhJZnN0OXhOQ3A5UXRWSjRjVElEV0VucldkVmp0UE12Y3dYc21sVlhuVzlteEVQTGZQRmI4M1dvQzJ3Z3oyb1AiLCJtYWMiOiJjY2M5ZWI5ZTVjZjBiOTE3ZDI2OWE2ZDgwNjc1MDhhNDQwMGMxZmY4MzZjNDQ4OGE4OWQ3YzE3NTI2ZGM2NzdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:44 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pLW77%2BtHI09CE95r44X8aBJdwwEk4Kt6mVyP%2FynJ3XZ1pZhuIPUMtWt5d8UYqTM%2F8ryWleoI%2BqbmLYoxtI5KpwTpXiV%2Bq2x0rR093XU5fGJBhYuZ%2B%2Bv1xNXzLeum3z9IuQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a04a7d3688e3b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7af14a6fd5253f05724502662d478fac","sha1":"df6f03167492046dd2f02e3e005e66201f80ceb9","sha256":"f101fe5cf7c2fe25bb1d2c7efcacb8acb52c90561497576f2f16be8a5d628315","sha512":"a1b4e0fca3d92adf4b6bd1473bfaceb5d1877c682378f84bd862e54927c9bea34b0781cb4e1cc5d44ce637887ac93a30465496e63b94169ac15cd1c155396802","ssdeep":"","tlshash":"c2f0c0d91a78c4ddbf4647314d3db0d92639209f399900b830c96529ea6a24b2401904","first_seen":"2023-05-07T18:03:13Z","last_seen":"2026-07-05T04:52:57.846326Z","times_seen":5372,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ipinfo.io/?callback=jQuery31109323082604174002_1780277805285\u0026_=1780277805286","fqdn":"ipinfo.io","domain":"ipinfo.io","tld":"io"},"ip":{"addr":"34.117.59.81","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:45.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipinfo.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 16:36:00 GMT","end":"Sat, 01 Aug 2026 16:35:59 GMT"},"fingerprint":{"sha1":"06:75:C4:FB:38:6E:E1:2E:FA:EB:1F:53:64:D4:A8:68:81:AA:9A:4A","sha256":"74:4A:07:24:C9:DA:4C:BA:4E:1D:C1:1D:2D:9D:6B:AD:65:55:3E:08:89:78:B2:E0:36:DF:14:3D:B1:7E:BD:21"}}},"request":{"raw":"GET /?callback=jQuery31109323082604174002_1780277805285\u0026_=1780277805286 HTTP/1.1\r\nHost: ipinfo.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\ndate: Mon, 01 Jun 2026 01:36:45 GMT\r\nvary: accept-encoding\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":672,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (391)","md5":"8101d4337db9f4867dc24f6ecd0f044a","sha1":"3b82847cc344112f8292055ec61ef9fd11f1468f","sha256":"7ad51250b4bc83575931c36db74b3978b3857785ad8e14887c983fd86ef94ee0","sha512":"94987126e0055463db32c3a2d68774286e529c109520093e9eb50c390cc8823a2384269f81aa597a82df4bcc97b5459b563624c0e22a8520e3d816a9384a51e3","ssdeep":"","tlshash":"6b01706720781f36e9ba4558c40b8f0a335ca91f018166aa4ea25b5c10449b7a06167e","first_seen":"2026-06-01T01:37:08.994536Z","last_seen":"2026-06-01T01:37:08.994536Z","times_seen":1,"resource_available":true,"data":null}},"time_used":441,"timings":{"blocked":129,"dns":2,"connect":58,"send":0,"wait":183,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/flags/is.png","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:44.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /flags/is.png HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9qUitpNHljMC9xVXlOajkwd2ZoK0E9PSIsInZhbHVlIjoiWGVjQW51c3laQ1QvbEhJQ1I2MFRrWHNtNEl6cVRoOWg4ZGNmaDJKcWxGMTRkcFFhRU5XcFBMSC9qbGgzSzNXVVdKWUZNeDlwaVVoOFUranZaR3pGSEFYMlJMSGFsb3lYK09oTHVONDlrYy9SR1ZjTjB6SkdCaWJhWHZ3QzFld3IiLCJtYWMiOiI1MDA5NjNjYzc0MGU0NTdhYWMzNTRmZWVlOTY4NWM3YTU4Y2MzZWIxZTkwMzc2NmJiOWZkOTBiMTZmMmU2NTYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iis5TzVWcWt1M01yRkl0WGEvQTk1OUE9PSIsInZhbHVlIjoiRG54V2lCODQ0djVvMmJVZE5GbWFpK3M3NzRlMG9TdXdPa3h4bmxkVU0xcSt1MWRaUmcyZ3pTY0w4dXBTd1Q1djhJZnN0OXhOQ3A5UXRWSjRjVElEV0VucldkVmp0UE12Y3dYc21sVlhuVzlteEVQTGZQRmI4M1dvQzJ3Z3oyb1AiLCJtYWMiOiJjY2M5ZWI5ZTVjZjBiOTE3ZDI2OWE2ZDgwNjc1MDhhNDQwMGMxZmY4MzZjNDQ4OGE4OWQ3YzE3NTI2ZGM2NzdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 3691\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\ncache-control: max-age=31536000\r\nexpires: Mon, 31 May 2027 23:04:21 GMT\r\nvary: User-Agent\r\naccept-ranges: bytes\r\nage: 9143\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gSFKaJ%2F%2BW9g1UH2gvgSXVvSdTEwu1G7T3rd%2Fl4zcy5ogFsGi8XW7nop0EkxvhroEeOtxQfxrfF08sUfuYF%2Fp9bqAwMw3l5QkplRC0qljm3jzUQO2CXQ%2FCq39%2FnsXzChskA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a04a7d3688d8b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3691,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"49e6492e69d8e5d94a9ba3dad3d5f6dc","sha1":"48fe4fa67e8180002566572f346ad45118103fa5","sha256":"be6b2aff9deb6971c3a30c41eb4480a30a0feb25196052a646362c10ecdbd6ef","sha512":"bda45925b0bd84baed7fd41faa8136fc1d8d94eeec6d7518328f657695c1dab45570867f722cb52952b7d5cbb5cd1b6071f6e436ef1a091d89247a422981b6d6","ssdeep":"","tlshash":"eb71a5fa191ee567a4d52a9dd67b28c6cd618431c019edc28f30d114ae6e04f8acb5c9","first_seen":"2025-08-21T23:09:42.451261Z","last_seen":"2026-07-04T12:30:40.627702Z","times_seen":1722,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/flags/el.svg","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:44.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /flags/el.svg HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9qUitpNHljMC9xVXlOajkwd2ZoK0E9PSIsInZhbHVlIjoiWGVjQW51c3laQ1QvbEhJQ1I2MFRrWHNtNEl6cVRoOWg4ZGNmaDJKcWxGMTRkcFFhRU5XcFBMSC9qbGgzSzNXVVdKWUZNeDlwaVVoOFUranZaR3pGSEFYMlJMSGFsb3lYK09oTHVONDlrYy9SR1ZjTjB6SkdCaWJhWHZ3QzFld3IiLCJtYWMiOiI1MDA5NjNjYzc0MGU0NTdhYWMzNTRmZWVlOTY4NWM3YTU4Y2MzZWIxZTkwMzc2NmJiOWZkOTBiMTZmMmU2NTYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iis5TzVWcWt1M01yRkl0WGEvQTk1OUE9PSIsInZhbHVlIjoiRG54V2lCODQ0djVvMmJVZE5GbWFpK3M3NzRlMG9TdXdPa3h4bmxkVU0xcSt1MWRaUmcyZ3pTY0w4dXBTd1Q1djhJZnN0OXhOQ3A5UXRWSjRjVElEV0VucldkVmp0UE12Y3dYc21sVlhuVzlteEVQTGZQRmI4M1dvQzJ3Z3oyb1AiLCJtYWMiOiJjY2M5ZWI5ZTVjZjBiOTE3ZDI2OWE2ZDgwNjc1MDhhNDQwMGMxZmY4MzZjNDQ4OGE4OWQ3YzE3NTI2ZGM2NzdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:44 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yiBN1rwKnK6tflHvxOz1B39UK%2F6oO0ujo15EWZU8SwaJu7hSGpPP531eekHGLNlLtdeAZJZqgJnMIVSfLGP%2BHaZpQPJZ5oFhjMFaPpWEgSg9PVkAqfDZYvxaicbfSumU%2Bg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a04a7d3698e7b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":509,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ad2d06f8e09051f574083a3d00b0d3c4","sha1":"278327ff2ba9f9ff2075e69635576298e083a56f","sha256":"855ef79130c430a08f89dad91b7206b3d31b42a1b509000029c60b9336856e45","sha512":"741f41770f7a55e36f6b436b2518986a01a587236f08461c94bfd30a92004c6736b4844a99b46ab6363a95779d9470bc8b374e539a5858c6baae661eccbf884f","ssdeep":"","tlshash":"caf0599496e588c80f2f4e75c97c76d1103224cd6048c8aca0b43819f9053ff11a16be","first_seen":"2023-05-07T18:02:32Z","last_seen":"2026-07-05T08:28:03.164886Z","times_seen":2542,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/frontend/assets/en/images/responsive/green/hero-mobile-320.avif","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:44.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /frontend/assets/en/images/responsive/green/hero-mobile-320.avif HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9qUitpNHljMC9xVXlOajkwd2ZoK0E9PSIsInZhbHVlIjoiWGVjQW51c3laQ1QvbEhJQ1I2MFRrWHNtNEl6cVRoOWg4ZGNmaDJKcWxGMTRkcFFhRU5XcFBMSC9qbGgzSzNXVVdKWUZNeDlwaVVoOFUranZaR3pGSEFYMlJMSGFsb3lYK09oTHVONDlrYy9SR1ZjTjB6SkdCaWJhWHZ3QzFld3IiLCJtYWMiOiI1MDA5NjNjYzc0MGU0NTdhYWMzNTRmZWVlOTY4NWM3YTU4Y2MzZWIxZTkwMzc2NmJiOWZkOTBiMTZmMmU2NTYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iis5TzVWcWt1M01yRkl0WGEvQTk1OUE9PSIsInZhbHVlIjoiRG54V2lCODQ0djVvMmJVZE5GbWFpK3M3NzRlMG9TdXdPa3h4bmxkVU0xcSt1MWRaUmcyZ3pTY0w4dXBTd1Q1djhJZnN0OXhOQ3A5UXRWSjRjVElEV0VucldkVmp0UE12Y3dYc21sVlhuVzlteEVQTGZQRmI4M1dvQzJ3Z3oyb1AiLCJtYWMiOiJjY2M5ZWI5ZTVjZjBiOTE3ZDI2OWE2ZDgwNjc1MDhhNDQwMGMxZmY4MzZjNDQ4OGE4OWQ3YzE3NTI2ZGM2NzdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:44 GMT\r\ncontent-type: image/avif\r\ncontent-length: 2524\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 13 Mar 2026 05:05:58 GMT\r\nvary: User-Agent\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mvswsX5%2FifNrGNe%2FaR7UJeVQuAIKlxR7baUiQlh1J%2FD5LlRrKobhbWAv2lsRR%2F1oHqGa4ZKtQ9uuEgj9QRE6wqBrR9%2BsPvMzerPUw7cCCRHYhgJw5pLDtzxLwSW0BI7YVg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a04a7d3698edb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2524,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"43a2ffd5cfaf24fa45d4e2d996268911","sha1":"ee819e0a4856c9e6fdda7d1455e7ff9c98f9cf3e","sha256":"61decb94d1cb3475df79af504c8ea0302e1fdfbe270efe3b9a12f51e06d95824","sha512":"497b16168f2d18ad689f9f9f7e3ba53ebf8555df81b99f2b7ab49d2a7c361a9603dc80e805c2bb75b0d961cd883ed14bf802cd671e8116678ff534fc57e136d0","ssdeep":"","tlshash":"7d513b6bab033cc5d0b58ab12c8d9b5d2316c87cb17638c69cdcf44a9d677304667e41","first_seen":"2026-03-29T04:41:10.409009Z","last_seen":"2026-07-03T00:36:55.224592Z","times_seen":604,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/frontend/assets/en/js/jquery-3.1.1.min.js","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:44.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /frontend/assets/en/js/jquery-3.1.1.min.js HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9qUitpNHljMC9xVXlOajkwd2ZoK0E9PSIsInZhbHVlIjoiWGVjQW51c3laQ1QvbEhJQ1I2MFRrWHNtNEl6cVRoOWg4ZGNmaDJKcWxGMTRkcFFhRU5XcFBMSC9qbGgzSzNXVVdKWUZNeDlwaVVoOFUranZaR3pGSEFYMlJMSGFsb3lYK09oTHVONDlrYy9SR1ZjTjB6SkdCaWJhWHZ3QzFld3IiLCJtYWMiOiI1MDA5NjNjYzc0MGU0NTdhYWMzNTRmZWVlOTY4NWM3YTU4Y2MzZWIxZTkwMzc2NmJiOWZkOTBiMTZmMmU2NTYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iis5TzVWcWt1M01yRkl0WGEvQTk1OUE9PSIsInZhbHVlIjoiRG54V2lCODQ0djVvMmJVZE5GbWFpK3M3NzRlMG9TdXdPa3h4bmxkVU0xcSt1MWRaUmcyZ3pTY0w4dXBTd1Q1djhJZnN0OXhOQ3A5UXRWSjRjVElEV0VucldkVmp0UE12Y3dYc21sVlhuVzlteEVQTGZQRmI4M1dvQzJ3Z3oyb1AiLCJtYWMiOiJjY2M5ZWI5ZTVjZjBiOTE3ZDI2OWE2ZDgwNjc1MDhhNDQwMGMxZmY4MzZjNDQ4OGE4OWQ3YzE3NTI2ZGM2NzdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:44 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding,User-Agent\r\nlast-modified: Sat, 14 Mar 2026 21:39:24 GMT\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nWaP6%2BbktFbnz59ilqO0P6j2RYTePFF3VC8IDVtS%2B5tf7ntAdn1yFNFnYiFQwkjT7r5oQy4QttUZknFanWDn1MnbB%2BCAPNZERSWkcudEcR8kYFDBA4TKwQ3mdE24zKN6%2BQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a04a7d3698eeb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86709,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32030)","md5":"e071abda8fe61194711cfc2ab99fe104","sha1":"f647a6d37dc4ca055ced3cf64bbc1f490070acba","sha256":"85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf","sha512":"53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65","ssdeep":"1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5","tlshash":"3183d5d9b2c670529b7730b850bf450bb17a98dab44c8d60f058c5d57eb8a8e507bf2c","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-07-05T08:28:23.715292Z","times_seen":144495,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@25.8.3/build/img/flags.webp","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:45.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@25.8.3/build/img/flags.webp HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 28186\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/webp\r\nx-jsd-version: 25.8.3\r\nx-jsd-version-type: version\r\netag: W/\"6e1a-JHPdY1y9Ow2NjbjaGyegi0Qmya4\"\r\naccept-ranges: bytes\r\ndate: Mon, 01 Jun 2026 01:36:45 GMT\r\nage: 941567\r\nx-served-by: cache-fra-etou8220074-FRA, cache-hel1410025-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28186,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4af30d041d95c5a83b016ec6812cda19","sha1":"2473dd635cbd3b0d8d8db8da1b27a08b4426c9ae","sha256":"0e2a53ec4d77d08efa8e8f5fc86b1c25e8f2af39d6b44334e1219ed3e0687a61","sha512":"a43b49d0a8830608a8351b1fe3afc5d468664ad79b674583f6e8f1c647fd5270181e9b1d35cbbbddc0285dc15b49e9d53f34a8bd414d32ae3ad6d659168e095e","ssdeep":"384:NmynJhMcWfubAG0nXDutFs4CIwMB7Po+NKC5NPQic7vmUbx2Kh4du2r0mRo3d0:NmynJhMze5CD+3PZ7AEZPyx2KhSRj","tlshash":"66c2e133be32a6c76d998ab018364ffa97354446bdd359c3a1f6ba98dd374c3294020d","first_seen":"2025-03-06T15:46:52.721855Z","last_seen":"2026-07-05T04:07:53.277684Z","times_seen":2981,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/frontend/assets/en/js/forms.js","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:46.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /frontend/assets/en/js/forms.js HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/frontend/assets/en/js/deferred-imports.js\r\nCookie: XSRF-TOKEN=eyJpdiI6InpJT3RSb2lnLzcxejBuc3lRdkU3cnc9PSIsInZhbHVlIjoiczQ4WDJkSE04d25YQk01NjZtczFsaFJVQ0NleVN5b1hqb3JiamxiZWVaaDI3cmZIVzc2YmJNZ2hIV1NKZDVLcUtaVWc0Ymx0d1haZnZwWmxGOXBWNEM3eWFBUlZQTmtqN2tja3Rhbk1iS2wrUjMyaDkvZEt5S1MvSnY4Y0NYR0YiLCJtYWMiOiI3YWViYmY2MWE0MDFhNDUxYzEyYmFjNWI4YzUxYmQ0OTBlZjNkZTMxNzY2Yzc4NWRkNWEyMGRmYmVhYmNjOGNjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkIycHdseU5KeE1lQXoyQ2ZRR1JxbVE9PSIsInZhbHVlIjoiQVBQcitQVUs3aW43UFc3eFBVdFBxQnpZaDR5cGZ6RStyclFjOGJ2MW9BbURtT2FuZXgrZXdxUTN1OFB5by9PdlA1VkRQQnhzc2lCL3pLVy8rVU56WG1iU3RRRHlWNzhQeGJWUjlwWFRxSEdhNytNeTFUbmRzZU9YVm45cEZ1QXkiLCJtYWMiOiI3NGQ3ZDRiYTNhMTE1MGY5ODBlYjUxYTI5NWYyZmUwYmE3NDc2YjQwNjc5OTdiMDZmMzNiNzBmZDYyMjg3OWY4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:46 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding,User-Agent\r\nlast-modified: Fri, 13 Mar 2026 05:05:58 GMT\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0vNaz2XYn%2B4rnnQ0EAMSyhQXME1RHFZ82aMT%2BZznYLI1mekxaT6zyC9dyFAaidCxXVcj8%2BpZyhYrmESX19qeJVGt91W%2BBrtqtcpvlh0yUmKNvgQTPLZBinOfXqsEG0DiYg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a04a7d426e6cb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7614,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"311cc8bbb57cf1048f70b036cf6bfd70","sha1":"576fd8aa56ecf0d01015f6b15b29afbac4569d83","sha256":"668ed47288df834eaffcf666d3463cb39a3c53b52f8db94b8f1eb99a73e19cc0","sha512":"b7e8b2bd654cbeb43474a3520937750909cb6049ceb8da4c95d24ac13da0a4980052a09b0fe41f6f2ebae498b0564f4f51897b80c8a71ee412a586917acc984e","ssdeep":"192:wFzWhJL6YQRR9JYvGJ64U/8tkUCb+EWPH9ZZisEqN:QWhJOF9OO5U/EkUCbiH9ZZZl","tlshash":"f0f1009921fa45394db321fcafc7650229293027188dde547e4ca3106fc9bed6bf0b98","first_seen":"2026-05-03T18:34:41.364367Z","last_seen":"2026-06-16T05:28:50.785517Z","times_seen":736,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-01T01:36:43.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Accept-Encoding,User-Agent\r\ncache-control: max-age=3600, public, s-maxage=86400\r\nset-cookie: XSRF-TOKEN=eyJpdiI6Ii9qUitpNHljMC9xVXlOajkwd2ZoK0E9PSIsInZhbHVlIjoiWGVjQW51c3laQ1QvbEhJQ1I2MFRrWHNtNEl6cVRoOWg4ZGNmaDJKcWxGMTRkcFFhRU5XcFBMSC9qbGgzSzNXVVdKWUZNeDlwaVVoOFUranZaR3pGSEFYMlJMSGFsb3lYK09oTHVONDlrYy9SR1ZjTjB6SkdCaWJhWHZ3QzFld3IiLCJtYWMiOiI1MDA5NjNjYzc0MGU0NTdhYWMzNTRmZWVlOTY4NWM3YTU4Y2MzZWIxZTkwMzc2NmJiOWZkOTBiMTZmMmU2NTYzIiwidGFnIjoiIn0%3D; expires=Mon, 01 Jun 2026 03:36:44 GMT; Max-Age=7200; path=/; secure; samesite=lax\nlaravel_session=eyJpdiI6Iis5TzVWcWt1M01yRkl0WGEvQTk1OUE9PSIsInZhbHVlIjoiRG54V2lCODQ0djVvMmJVZE5GbWFpK3M3NzRlMG9TdXdPa3h4bmxkVU0xcSt1MWRaUmcyZ3pTY0w4dXBTd1Q1djhJZnN0OXhOQ3A5UXRWSjRjVElEV0VucldkVmp0UE12Y3dYc21sVlhuVzlteEVQTGZQRmI4M1dvQzJ3Z3oyb1AiLCJtYWMiOiJjY2M5ZWI5ZTVjZjBiOTE3ZDI2OWE2ZDgwNjc1MDhhNDQwMGMxZmY4MzZjNDQ4OGE4OWQ3YzE3NTI2ZGM2NzdiIiwidGFnIjoiIn0%3D; expires=Mon, 01 Jun 2026 03:36:44 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jtlqVqb9NtRitzxJ%2BwVp2mViM24HvoFGHRTI4OX6ux4no9wHfspiEFhDrL%2F6mjyVylxgPwtjaxJc21wmhGnQsg701GYFhYxGk1xr8ttGCHqGZEyeYc1hwmpKrtlxn6DnGg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: a04a7d334e05c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.1.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":152308,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (522), with CRLF line terminators","md5":"0857eacb8612f4e7dc40cc86c3493499","sha1":"3bfdfee8f4dd94531a4ed6e213bc9aa3d129600e","sha256":"aab1aabe314d718f9c7c746935504349cf5a9bc6076a164e71c52a54651dd57f","sha512":"7f6910b9a9c25f938a5fba990b2a0d244479758fbf60b3e099a4b1adf2f847e9625c1e401bdd12c03745e9234d8baf9173c50372b8acc823f9a4614a50ab5ca2","ssdeep":"1536:Hl8PuBQzVcCKRKUj8ZJ1X3RCPXZ9ZjBdRA/JdRAB3G7G:F8UR5U1X3RCfZAG","tlshash":"38e3637202c1152f1133c15186ac9aaefa87970fe38a5589fbac13473ff2d949e77258","first_seen":"2026-06-01T01:37:08.999911Z","last_seen":"2026-06-01T01:37:08.999911Z","times_seen":1,"resource_available":true,"data":null}},"time_used":501,"timings":{"blocked":148,"dns":73,"connect":33,"send":0,"wait":200,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/frontend/assets/en/css/loader.css","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:44.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /frontend/assets/en/css/loader.css HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9qUitpNHljMC9xVXlOajkwd2ZoK0E9PSIsInZhbHVlIjoiWGVjQW51c3laQ1QvbEhJQ1I2MFRrWHNtNEl6cVRoOWg4ZGNmaDJKcWxGMTRkcFFhRU5XcFBMSC9qbGgzSzNXVVdKWUZNeDlwaVVoOFUranZaR3pGSEFYMlJMSGFsb3lYK09oTHVONDlrYy9SR1ZjTjB6SkdCaWJhWHZ3QzFld3IiLCJtYWMiOiI1MDA5NjNjYzc0MGU0NTdhYWMzNTRmZWVlOTY4NWM3YTU4Y2MzZWIxZTkwMzc2NmJiOWZkOTBiMTZmMmU2NTYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iis5TzVWcWt1M01yRkl0WGEvQTk1OUE9PSIsInZhbHVlIjoiRG54V2lCODQ0djVvMmJVZE5GbWFpK3M3NzRlMG9TdXdPa3h4bmxkVU0xcSt1MWRaUmcyZ3pTY0w4dXBTd1Q1djhJZnN0OXhOQ3A5UXRWSjRjVElEV0VucldkVmp0UE12Y3dYc21sVlhuVzlteEVQTGZQRmI4M1dvQzJ3Z3oyb1AiLCJtYWMiOiJjY2M5ZWI5ZTVjZjBiOTE3ZDI2OWE2ZDgwNjc1MDhhNDQwMGMxZmY4MzZjNDQ4OGE4OWQ3YzE3NTI2ZGM2NzdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:44 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sat, 14 Mar 2026 21:28:22 GMT\r\ncache-control: max-age=2592000\r\nexpires: Tue, 30 Jun 2026 23:04:21 GMT\r\nvary: Accept-Encoding,User-Agent\r\nage: 9143\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pZRw0T7PHcx1AnB%2Bmw4k7LVBD5Oml8oMJil0RHB9oVysnPv0hymzHxPiMDrV8g7vuboaB4rW86CRFos2S797K3I4iWuXvJFLoLq2a5F8ds2H6vR7qHgcNE2I7Y6HlPDjpA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a04a7d3648a6b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":868,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"24fa75c44ae7ed6e4e29d7a40093d034","sha1":"2ac0bf8a5d5feab9e196c22e800852ac1ae70480","sha256":"7442bcf5fbf83b71cb174061f8c41879b682f8175e6988b659d79cea3c9f775d","sha512":"9d52beeb86a7597ee57ea8b019549c902afbebf1828591af170d5f9045c2f439558ecaec175626a44ba795bbae2fbfe253061f6a3a98a522974e4389fe03b396","ssdeep":"","tlshash":"be111e344611b04ca036cbba0ff4067cef6a6087474309acf6c839139fb35842a61cd7","first_seen":"2026-05-03T18:32:03.495718Z","last_seen":"2026-07-04T12:30:40.615802Z","times_seen":882,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/flags/fr.svg","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:44.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /flags/fr.svg HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9qUitpNHljMC9xVXlOajkwd2ZoK0E9PSIsInZhbHVlIjoiWGVjQW51c3laQ1QvbEhJQ1I2MFRrWHNtNEl6cVRoOWg4ZGNmaDJKcWxGMTRkcFFhRU5XcFBMSC9qbGgzSzNXVVdKWUZNeDlwaVVoOFUranZaR3pGSEFYMlJMSGFsb3lYK09oTHVONDlrYy9SR1ZjTjB6SkdCaWJhWHZ3QzFld3IiLCJtYWMiOiI1MDA5NjNjYzc0MGU0NTdhYWMzNTRmZWVlOTY4NWM3YTU4Y2MzZWIxZTkwMzc2NmJiOWZkOTBiMTZmMmU2NTYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iis5TzVWcWt1M01yRkl0WGEvQTk1OUE9PSIsInZhbHVlIjoiRG54V2lCODQ0djVvMmJVZE5GbWFpK3M3NzRlMG9TdXdPa3h4bmxkVU0xcSt1MWRaUmcyZ3pTY0w4dXBTd1Q1djhJZnN0OXhOQ3A5UXRWSjRjVElEV0VucldkVmp0UE12Y3dYc21sVlhuVzlteEVQTGZQRmI4M1dvQzJ3Z3oyb1AiLCJtYWMiOiJjY2M5ZWI5ZTVjZjBiOTE3ZDI2OWE2ZDgwNjc1MDhhNDQwMGMxZmY4MzZjNDQ4OGE4OWQ3YzE3NTI2ZGM2NzdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:44 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ygm2cgtiaCkVspozkgAIFd1ovCfMl9GFhdSphUeASfsOrGG9nrh8taLx465v9%2B4V8pGrB8L%2FPWLKrSTu8Q4F32%2F35oh7D2qBd7neWlUFblwj7YOibx38nFBV6STQfDTO7g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a04a7d3658b8b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":352,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e9efcfc75d8fdee9370032dc72e78bcf","sha1":"77d974568d91216054eee046c19c99f71cccb9be","sha256":"a7d195ab974d9555702eede5af18287b5767efcea5fc6dadf529e114dc6fb568","sha512":"12e0fd3eafb13d648d46f86cb8eeeea05e4acccceb2510abb4c888e07284de90503ddd8b3c02513d6fe84b6b66d6600039d56749f316d012cddd0d3d89cff8ea","ssdeep":"","tlshash":"1ae0d885a1a9c9094a16037959bc71d65123708f158905fc74842518bd4e39b3c51aac","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-07-05T04:52:57.833976Z","times_seen":8152,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/flags/de.svg","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:44.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /flags/de.svg HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9qUitpNHljMC9xVXlOajkwd2ZoK0E9PSIsInZhbHVlIjoiWGVjQW51c3laQ1QvbEhJQ1I2MFRrWHNtNEl6cVRoOWg4ZGNmaDJKcWxGMTRkcFFhRU5XcFBMSC9qbGgzSzNXVVdKWUZNeDlwaVVoOFUranZaR3pGSEFYMlJMSGFsb3lYK09oTHVONDlrYy9SR1ZjTjB6SkdCaWJhWHZ3QzFld3IiLCJtYWMiOiI1MDA5NjNjYzc0MGU0NTdhYWMzNTRmZWVlOTY4NWM3YTU4Y2MzZWIxZTkwMzc2NmJiOWZkOTBiMTZmMmU2NTYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iis5TzVWcWt1M01yRkl0WGEvQTk1OUE9PSIsInZhbHVlIjoiRG54V2lCODQ0djVvMmJVZE5GbWFpK3M3NzRlMG9TdXdPa3h4bmxkVU0xcSt1MWRaUmcyZ3pTY0w4dXBTd1Q1djhJZnN0OXhOQ3A5UXRWSjRjVElEV0VucldkVmp0UE12Y3dYc21sVlhuVzlteEVQTGZQRmI4M1dvQzJ3Z3oyb1AiLCJtYWMiOiJjY2M5ZWI5ZTVjZjBiOTE3ZDI2OWE2ZDgwNjc1MDhhNDQwMGMxZmY4MzZjNDQ4OGE4OWQ3YzE3NTI2ZGM2NzdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:44 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l1YSxtglO9WIe%2BbSaQWSOA4mozvXsNknrsjhsa6rRu6jUV6pWSJ7m%2BSO5xdjbsDVqqa9sA70BHCHa6wgIRiMz2Gw6tr94JIB3HgfuP7ILKBdt2h1hk36foA4y2CA9M9lrQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a04a7d3678c6b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":335,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"51768606d83a265da9e7ee8efbb21edb","sha1":"b22c5b98344da8d3ea54ecb9baab4c5a5a7ebdb4","sha256":"8fcaa96d8835e39fa6a74ff4dc781d908112d46ceb8fb81ff37c433f390a4c8b","sha512":"cec42089404b17430bc0d8c7882cfd6249d4fa7401b538f1899b2d315d639cb6fd28cf33da34d91afc40572f5dd59aac75dee16b0c65aa1abf2e0b93bc779c3d","ssdeep":"","tlshash":"a7e02644e0e98d0a8e2607a88efc71d280a230cc12cc00ed72842528fd4e3eb6845be5","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-07-05T02:36:59.711684Z","times_seen":8340,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@25.8.3/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:44.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@25.8.3/build/js/intlTelInput.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 25.8.3\r\nx-jsd-version-type: version\r\netag: W/\"871a-JROK+GPirWm7Ca9OkwCUSfLnXMs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Mon, 01 Jun 2026 01:36:44 GMT\r\nage: 1522436\r\nx-served-by: cache-fra-eddf8230041-FRA, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 12976\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34586,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18251)","md5":"7657299ef4e0a3abdc478c0b9d7075aa","sha1":"25138af863e2ad69bb09af4e93009449f2e75ccb","sha256":"8e184485db8b6a8a741dd831f7bae84644eedf8f0c371172e69721e1236a7cd1","sha512":"eb5e7ae63fb48ea7b543f7339625284b3cc5477b6c8be03667714ebab1eb7c493a1445bae46348d992a4477a2080634c532b16c7b6ae4102e1524e51ab142b6b","ssdeep":"768:U+h03XVqC/iPIqXpwJxsyysdjx2nmY249lHGIw:UiPIsy/tWHG","tlshash":"c0f2f9aeb3646637abfd82a270e54403ae6f79444604043d78bc8ede1399dd171f6b38","first_seen":"2025-10-21T03:51:56.40324Z","last_seen":"2026-07-05T03:39:18.669517Z","times_seen":1665,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":28,"dns":1,"connect":46,"send":0,"wait":46,"receive":5,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/assets/css/form/intltelinput.min.css","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:44.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /assets/css/form/intltelinput.min.css HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9qUitpNHljMC9xVXlOajkwd2ZoK0E9PSIsInZhbHVlIjoiWGVjQW51c3laQ1QvbEhJQ1I2MFRrWHNtNEl6cVRoOWg4ZGNmaDJKcWxGMTRkcFFhRU5XcFBMSC9qbGgzSzNXVVdKWUZNeDlwaVVoOFUranZaR3pGSEFYMlJMSGFsb3lYK09oTHVONDlrYy9SR1ZjTjB6SkdCaWJhWHZ3QzFld3IiLCJtYWMiOiI1MDA5NjNjYzc0MGU0NTdhYWMzNTRmZWVlOTY4NWM3YTU4Y2MzZWIxZTkwMzc2NmJiOWZkOTBiMTZmMmU2NTYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iis5TzVWcWt1M01yRkl0WGEvQTk1OUE9PSIsInZhbHVlIjoiRG54V2lCODQ0djVvMmJVZE5GbWFpK3M3NzRlMG9TdXdPa3h4bmxkVU0xcSt1MWRaUmcyZ3pTY0w4dXBTd1Q1djhJZnN0OXhOQ3A5UXRWSjRjVElEV0VucldkVmp0UE12Y3dYc21sVlhuVzlteEVQTGZQRmI4M1dvQzJ3Z3oyb1AiLCJtYWMiOiJjY2M5ZWI5ZTVjZjBiOTE3ZDI2OWE2ZDgwNjc1MDhhNDQwMGMxZmY4MzZjNDQ4OGE4OWQ3YzE3NTI2ZGM2NzdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:44 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding, Accept-Encoding,User-Agent\r\nlast-modified: Thu, 12 Mar 2026 12:14:09 GMT\r\ncache-control: max-age=2592000\r\nexpires: Tue, 30 Jun 2026 23:04:21 GMT\r\ncontent-encoding: gzip\r\nage: 9143\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=coJSHJDPRwWTESWp9jBzXHAyWleuIqbGVM%2FcocDmAefGuV7s9lMFA6yi1%2FKM2K9F%2BoVM72ZFw0ECoiwyMf1A9%2FjJ%2FjGtGbvyhRvXZhFp5pNSvSX3mK0qVAsHLr4UjZ%2B%2FZA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a04a7d3648a9b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18630,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f832705cac17afa9ac678cbfe89e1088","sha1":"89b2b08b07e41ec8b69bac2ada42b7323fd2ca2f","sha256":"b83ef02bff5c0c1d579e95aae90cb3f6f72f06c3842cbe3bbb22ed76dcadfa74","sha512":"7ac6d65b33659374567f020167802ddf89df4a32ad82499203ed60dc0162b6d623af0c4cafbf1dd37cc7f21938f209bd0d095029baf694692136692d64b09005","ssdeep":"192:mB/nPLIsL4L9LqTA7J9IADdTKQK9A3kZ0Y980F+ND7laGG7agLUJ/LZ5MVcH6EdZ:Y/PlcR4+T49+hFhLZ5MV3m","tlshash":"10829d1343b11c7ea61dc1ba3aea95b2733b188b34abedd3f6d920060f43551e1eac54","first_seen":"2026-03-12T09:22:20.73665Z","last_seen":"2026-06-16T05:28:50.811319Z","times_seen":839,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/frontend/assets/en/images/favicon.ico","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:45.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /frontend/assets/en/images/favicon.ico HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InpJT3RSb2lnLzcxejBuc3lRdkU3cnc9PSIsInZhbHVlIjoiczQ4WDJkSE04d25YQk01NjZtczFsaFJVQ0NleVN5b1hqb3JiamxiZWVaaDI3cmZIVzc2YmJNZ2hIV1NKZDVLcUtaVWc0Ymx0d1haZnZwWmxGOXBWNEM3eWFBUlZQTmtqN2tja3Rhbk1iS2wrUjMyaDkvZEt5S1MvSnY4Y0NYR0YiLCJtYWMiOiI3YWViYmY2MWE0MDFhNDUxYzEyYmFjNWI4YzUxYmQ0OTBlZjNkZTMxNzY2Yzc4NWRkNWEyMGRmYmVhYmNjOGNjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkIycHdseU5KeE1lQXoyQ2ZRR1JxbVE9PSIsInZhbHVlIjoiQVBQcitQVUs3aW43UFc3eFBVdFBxQnpZaDR5cGZ6RStyclFjOGJ2MW9BbURtT2FuZXgrZXdxUTN1OFB5by9PdlA1VkRQQnhzc2lCL3pLVy8rVU56WG1iU3RRRHlWNzhQeGJWUjlwWFRxSEdhNytNeTFUbmRzZU9YVm45cEZ1QXkiLCJtYWMiOiI3NGQ3ZDRiYTNhMTE1MGY5ODBlYjUxYTI5NWYyZmUwYmE3NDc2YjQwNjc5OTdiMDZmMzNiNzBmZDYyMjg3OWY4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:46 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nlast-modified: Fri, 13 Mar 2026 05:05:58 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jqhwT2C90jwVuPSajY96a83ZMBmSOp99rDhVl7xsbh3zG4vKaMbspZQ5LuaiN54OufKfjAuNwk5sDGG3FqGPQw81I8Je2%2Bh%2B2iBZlecZw0BFEVoETRWdwpnsuPI28YOpcQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a04a7d3f6d1bb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":194879,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 9 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"51ef3b344a3491ba956860bebe8eaef0","sha1":"70dbba5e0dc87b83a67c247c0951e8fd90936369","sha256":"3f248a7d44698731542605038bae8507a04af831fec9f643a816eab0633873d0","sha512":"980b11b7b390be9f7d17dc226b23a16c677af4fc18f27b8143a0e93f7ef0f6bf1a7f0a0332ab30f95163028ce81e6778eb877317358894a56722280a142e2f69","ssdeep":"3072:O8UhBCbbwWW+KiAbVVVUg1BjBw6l8x0J4R6u2wMWK:tUhBUMW4iAbVVVUaBEx02Au2wMWK","tlshash":"13146a4b7842d18dec07853ba44ad6f245a73c2ecea66877b6c07b3f35b0527d234269","first_seen":"2025-09-17T17:21:05.727403Z","last_seen":"2026-06-16T05:28:50.783496Z","times_seen":632,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":271,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/frontend/assets/en/js/sliders.js","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:46.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /frontend/assets/en/js/sliders.js HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/frontend/assets/en/js/deferred-imports.js\r\nCookie: XSRF-TOKEN=eyJpdiI6InpJT3RSb2lnLzcxejBuc3lRdkU3cnc9PSIsInZhbHVlIjoiczQ4WDJkSE04d25YQk01NjZtczFsaFJVQ0NleVN5b1hqb3JiamxiZWVaaDI3cmZIVzc2YmJNZ2hIV1NKZDVLcUtaVWc0Ymx0d1haZnZwWmxGOXBWNEM3eWFBUlZQTmtqN2tja3Rhbk1iS2wrUjMyaDkvZEt5S1MvSnY4Y0NYR0YiLCJtYWMiOiI3YWViYmY2MWE0MDFhNDUxYzEyYmFjNWI4YzUxYmQ0OTBlZjNkZTMxNzY2Yzc4NWRkNWEyMGRmYmVhYmNjOGNjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkIycHdseU5KeE1lQXoyQ2ZRR1JxbVE9PSIsInZhbHVlIjoiQVBQcitQVUs3aW43UFc3eFBVdFBxQnpZaDR5cGZ6RStyclFjOGJ2MW9BbURtT2FuZXgrZXdxUTN1OFB5by9PdlA1VkRQQnhzc2lCL3pLVy8rVU56WG1iU3RRRHlWNzhQeGJWUjlwWFRxSEdhNytNeTFUbmRzZU9YVm45cEZ1QXkiLCJtYWMiOiI3NGQ3ZDRiYTNhMTE1MGY5ODBlYjUxYTI5NWYyZmUwYmE3NDc2YjQwNjc5OTdiMDZmMzNiNzBmZDYyMjg3OWY4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:46 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding,User-Agent\r\nlast-modified: Fri, 13 Mar 2026 05:05:58 GMT\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nby018BnLRy8UTt5GTIFSiZke2lwCyT5Lz4yMcrTg2NN7K2FzVkL%2FvnqA149YJn5KeTQE2Ry3VfTnXRj6GG7oTG9C1tjJv8D0z%2BRr%2B14iUIKJXnyU2MmfSY6JXbPUm485g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a04a7d426e6db51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4454,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"67dd1e2333e167a77697aca034eb3df6","sha1":"306594dfb8433db362be7a689933e0eeca162f48","sha256":"eede0d06ab82379d31524d842f64e1ac779e3b3e5b0b57c026290af86649b706","sha512":"7fc94d65c296988603ad1d10539e40a52db78e8ddea794bc22ecd118084675d2fb7fb3ee16aeac57a10443e95af4db7a2a55ce5b0bbe1d2b425163bcfb553f07","ssdeep":"96:hWrrPGI8yDdWTAAOxlfWG0eTnCa9JeUW7Y:hWvPG/eeA5xlZCa2M","tlshash":"ec910366303223358a6742edae0bcc41e2dad0477905d581f58e471a8fc6faca6e5dfc","first_seen":"2026-05-03T18:34:41.351704Z","last_seen":"2026-06-16T05:28:50.76667Z","times_seen":736,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/dashboard-assets/css/disclaimer.css","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:44.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /dashboard-assets/css/disclaimer.css HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9qUitpNHljMC9xVXlOajkwd2ZoK0E9PSIsInZhbHVlIjoiWGVjQW51c3laQ1QvbEhJQ1I2MFRrWHNtNEl6cVRoOWg4ZGNmaDJKcWxGMTRkcFFhRU5XcFBMSC9qbGgzSzNXVVdKWUZNeDlwaVVoOFUranZaR3pGSEFYMlJMSGFsb3lYK09oTHVONDlrYy9SR1ZjTjB6SkdCaWJhWHZ3QzFld3IiLCJtYWMiOiI1MDA5NjNjYzc0MGU0NTdhYWMzNTRmZWVlOTY4NWM3YTU4Y2MzZWIxZTkwMzc2NmJiOWZkOTBiMTZmMmU2NTYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iis5TzVWcWt1M01yRkl0WGEvQTk1OUE9PSIsInZhbHVlIjoiRG54V2lCODQ0djVvMmJVZE5GbWFpK3M3NzRlMG9TdXdPa3h4bmxkVU0xcSt1MWRaUmcyZ3pTY0w4dXBTd1Q1djhJZnN0OXhOQ3A5UXRWSjRjVElEV0VucldkVmp0UE12Y3dYc21sVlhuVzlteEVQTGZQRmI4M1dvQzJ3Z3oyb1AiLCJtYWMiOiJjY2M5ZWI5ZTVjZjBiOTE3ZDI2OWE2ZDgwNjc1MDhhNDQwMGMxZmY4MzZjNDQ4OGE4OWQ3YzE3NTI2ZGM2NzdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:44 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding, Accept-Encoding,User-Agent\r\nlast-modified: Mon, 27 Apr 2026 14:12:07 GMT\r\ncache-control: max-age=2592000\r\nexpires: Tue, 30 Jun 2026 23:04:21 GMT\r\ncontent-encoding: gzip\r\nage: 9143\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wi9gtdlYLLeqF9YugyFt%2FdM6qvxoTkte5FUcPhmDFKXfd4j9TtwVgvRx1MOVnDra9sbgk7UzsVNl2ovLRAc6jCQYHKXwpMJkIAB6lO0%2FvoY83KpELrj65Tj72XPOvA%2Fe7g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a04a7d364898b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1538,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"81157dd8c0e81ac2b6dff5a554dff6a1","sha1":"4767f0372c03eb2db3cf2705c15fd8bac00bf423","sha256":"1b576ad8f27ee3d9bdc8beef2df0ea289bd98632237049bd9580e57ade70ea5a","sha512":"3e9ed8987ed15123623ea8a153382be1995970e9217900532e9caccbd2398218553f779fd80bb60c524325ecc11880729eadbce4f08020912c55267abb8ab2ef","ssdeep":"","tlshash":"3b31a0df25630a11788dea9c5fa643455a248087e30ec8593fdc21f99f4e3d9c922b9c","first_seen":"2026-05-02T23:33:09.791669Z","last_seen":"2026-07-04T12:30:40.64344Z","times_seen":996,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/flags/da.svg","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:44.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /flags/da.svg HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9qUitpNHljMC9xVXlOajkwd2ZoK0E9PSIsInZhbHVlIjoiWGVjQW51c3laQ1QvbEhJQ1I2MFRrWHNtNEl6cVRoOWg4ZGNmaDJKcWxGMTRkcFFhRU5XcFBMSC9qbGgzSzNXVVdKWUZNeDlwaVVoOFUranZaR3pGSEFYMlJMSGFsb3lYK09oTHVONDlrYy9SR1ZjTjB6SkdCaWJhWHZ3QzFld3IiLCJtYWMiOiI1MDA5NjNjYzc0MGU0NTdhYWMzNTRmZWVlOTY4NWM3YTU4Y2MzZWIxZTkwMzc2NmJiOWZkOTBiMTZmMmU2NTYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iis5TzVWcWt1M01yRkl0WGEvQTk1OUE9PSIsInZhbHVlIjoiRG54V2lCODQ0djVvMmJVZE5GbWFpK3M3NzRlMG9TdXdPa3h4bmxkVU0xcSt1MWRaUmcyZ3pTY0w4dXBTd1Q1djhJZnN0OXhOQ3A5UXRWSjRjVElEV0VucldkVmp0UE12Y3dYc21sVlhuVzlteEVQTGZQRmI4M1dvQzJ3Z3oyb1AiLCJtYWMiOiJjY2M5ZWI5ZTVjZjBiOTE3ZDI2OWE2ZDgwNjc1MDhhNDQwMGMxZmY4MzZjNDQ4OGE4OWQ3YzE3NTI2ZGM2NzdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:44 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=420cJNDApwCufOkjL9V2o3%2FKR4VmNoCeVAXx852rK5GO4IG2sqYh3BUA2uXn2s6TPaOEukLlCA0xun8KDYlVj6kXwEQui4IffVD4vIX%2FVokY5DSOUOCz6TalqwNBACsYyg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a04a7d3678c7b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":362,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c4d7abcf4c21c729ea9aab45faa1912a","sha1":"6ecbf40cb392204b8c7af284352108b500111969","sha256":"33815e73a3d07b3ae77cec1fdc77a285646e4e730136632f0ff5de6f8697c98c","sha512":"6d928963ac9562306e34f006030ddb4430cf81f3e37d8a5d805f90d5cc89659457e9f98257a2ec971205cf044387b7c3e87847c85bf7760ecfa2b667bdab3230","ssdeep":"","tlshash":"f6e0c09260ae8a0d4e1543205a3c70e2526770cf218e04fcf0c13e28fd667ab3800f5c","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-07-05T04:52:57.870662Z","times_seen":5399,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/flags/pt.svg","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:44.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /flags/pt.svg HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9qUitpNHljMC9xVXlOajkwd2ZoK0E9PSIsInZhbHVlIjoiWGVjQW51c3laQ1QvbEhJQ1I2MFRrWHNtNEl6cVRoOWg4ZGNmaDJKcWxGMTRkcFFhRU5XcFBMSC9qbGgzSzNXVVdKWUZNeDlwaVVoOFUranZaR3pGSEFYMlJMSGFsb3lYK09oTHVONDlrYy9SR1ZjTjB6SkdCaWJhWHZ3QzFld3IiLCJtYWMiOiI1MDA5NjNjYzc0MGU0NTdhYWMzNTRmZWVlOTY4NWM3YTU4Y2MzZWIxZTkwMzc2NmJiOWZkOTBiMTZmMmU2NTYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iis5TzVWcWt1M01yRkl0WGEvQTk1OUE9PSIsInZhbHVlIjoiRG54V2lCODQ0djVvMmJVZE5GbWFpK3M3NzRlMG9TdXdPa3h4bmxkVU0xcSt1MWRaUmcyZ3pTY0w4dXBTd1Q1djhJZnN0OXhOQ3A5UXRWSjRjVElEV0VucldkVmp0UE12Y3dYc21sVlhuVzlteEVQTGZQRmI4M1dvQzJ3Z3oyb1AiLCJtYWMiOiJjY2M5ZWI5ZTVjZjBiOTE3ZDI2OWE2ZDgwNjc1MDhhNDQwMGMxZmY4MzZjNDQ4OGE4OWQ3YzE3NTI2ZGM2NzdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:44 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, Accept-Encoding,User-Agent\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0e3Jn24VV34xZu5P9GqrzVMl%2B2w9mrdiD%2F9Xmb2FA1Fnzo7KhCb15rXXim%2FPoR3JaJol3jype888q41QMOEZ2GRfE1uyqku6QVcbaGewzi3iaMPfwCp2OalVT0BGZ3D20Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a04a7d3688dbb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1912,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b0f66bd6beaac99c6e2f26c24305a1a2","sha1":"afea1f64055e95d095cb738e07e7751036d3bfe6","sha256":"a97c198d9404f1f1db3616ee0b26980087346fff121db3bb7f13540b90b56c96","sha512":"9bf4d9b22cd6cf9f0fb08b52cd1a93eb9886be4abbd1374bc05e1f3a6b822f127e03c1a5b0256bf0450393ae89406db6ffbfeaf4918ce2a30fd6accf8a212a7f","ssdeep":"","tlshash":"83410de82f2c50dc84a33aad2d25f544d34d50b572a54ec0af8db769d063895f0c7e80","first_seen":"2024-08-19T18:26:58.073415Z","last_seen":"2026-07-04T12:30:40.606051Z","times_seen":4586,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/flags/fil.jpg","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:44.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /flags/fil.jpg HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9qUitpNHljMC9xVXlOajkwd2ZoK0E9PSIsInZhbHVlIjoiWGVjQW51c3laQ1QvbEhJQ1I2MFRrWHNtNEl6cVRoOWg4ZGNmaDJKcWxGMTRkcFFhRU5XcFBMSC9qbGgzSzNXVVdKWUZNeDlwaVVoOFUranZaR3pGSEFYMlJMSGFsb3lYK09oTHVONDlrYy9SR1ZjTjB6SkdCaWJhWHZ3QzFld3IiLCJtYWMiOiI1MDA5NjNjYzc0MGU0NTdhYWMzNTRmZWVlOTY4NWM3YTU4Y2MzZWIxZTkwMzc2NmJiOWZkOTBiMTZmMmU2NTYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iis5TzVWcWt1M01yRkl0WGEvQTk1OUE9PSIsInZhbHVlIjoiRG54V2lCODQ0djVvMmJVZE5GbWFpK3M3NzRlMG9TdXdPa3h4bmxkVU0xcSt1MWRaUmcyZ3pTY0w4dXBTd1Q1djhJZnN0OXhOQ3A5UXRWSjRjVElEV0VucldkVmp0UE12Y3dYc21sVlhuVzlteEVQTGZQRmI4M1dvQzJ3Z3oyb1AiLCJtYWMiOiJjY2M5ZWI5ZTVjZjBiOTE3ZDI2OWE2ZDgwNjc1MDhhNDQwMGMxZmY4MzZjNDQ4OGE4OWQ3YzE3NTI2ZGM2NzdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:44 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16588\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\ncache-control: max-age=31536000\r\nexpires: Mon, 31 May 2027 23:04:21 GMT\r\nvary: User-Agent\r\naccept-ranges: bytes\r\nage: 9143\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2myZygE9o%2FKdRoLPAfI6pM2lhOl%2Fn0DJSgQJS4o2kRtZzwaT8SjjUlSfHiLmt3NZo05f4jlqkr%2Bs98do6j8nGN7mCkpH25erpXvEBQCAUXg0dCTU7EJ4woDJAXf35n1LCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a04a7d3698e6b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16588,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=13, height=0, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=0], baseline, precision 8, 20x11, components 3","md5":"0ae75b237b6dae635543c467ac8bfe5f","sha1":"5d35f0ce2acc3ead91fe68cfc7128c6e1f5b6654","sha256":"bee53edec9e55d91d851aa59423516050d3a9edbd67d30c35c7bb5a8c5ded0a7","sha512":"7591a08b13cb0c67301f17c6ef567ef0798a2ee97ac9dc3e67957f676e0652c947c2bb09727c623c847720252d271f07c63d630dd974b109b6af56488f6934fa","ssdeep":"192:McgnJzx+gCuVF03jiOkrQy4FwnJzx+gCuVF03bGXbtebIAFKIx0Ny3ajZtzz96OP:McuJzxb7C+JzxPX5WIAFKr9RP","tlshash":"fd720920ffe1be12f1d4323a64d8da458633ddc1e983198a7addec557f21a920d97283","first_seen":"2025-08-21T23:09:42.477784Z","last_seen":"2026-07-04T12:30:40.642562Z","times_seen":1722,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lexenddeca/v25/K2F1fZFYk-dHSE0UPPuwQ5qnJy8.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:45.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/lexenddeca/v25/K2F1fZFYk-dHSE0UPPuwQ5qnJy8.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://qatebixun.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39680\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 31 May 2026 10:59:25 GMT\r\nexpires: Mon, 31 May 2027 10:59:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 52640\r\nlast-modified: Tue, 16 Sep 2025 03:41:06 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39680,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39680, version 1.0","md5":"4f40f9c745b49a141e612eff59f3a917","sha1":"f19c314aad546b6a3ade9ff335318dec6e7a6d37","sha256":"3cad1d144b870d6083c79131c4817b2bcf3b4d76fc4aaeaba2eec295fbaa5cb1","sha512":"63bd4fb636d150b58801a6bfa7b5e9499fe8012c9cbaeaa5313fa4662f6d4fba8eed252b4c9ae24f22dfc72225c9fdbb43236b76096850f391d4494230b1e0a2","ssdeep":"768:nH89JOAPM5r9V1tqir40IKkgqy1g9HbSMPCVGyaalG2:H8fOltjU0IKqy1+GV0yaaz","tlshash":"a703019b60d5afa3c6db1060d74de6538820016e9831e3693c55be1b7cba688f2448ef","first_seen":"2025-09-17T17:21:05.707315Z","last_seen":"2026-07-04T23:31:53.03628Z","times_seen":2508,"resource_available":false,"data":null}},"time_used":556,"timings":{"blocked":219,"dns":0,"connect":50,"send":0,"wait":50,"receive":85,"ssl":138},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/dashboard-assets/js/disclaimer.js","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:44.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /dashboard-assets/js/disclaimer.js HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9qUitpNHljMC9xVXlOajkwd2ZoK0E9PSIsInZhbHVlIjoiWGVjQW51c3laQ1QvbEhJQ1I2MFRrWHNtNEl6cVRoOWg4ZGNmaDJKcWxGMTRkcFFhRU5XcFBMSC9qbGgzSzNXVVdKWUZNeDlwaVVoOFUranZaR3pGSEFYMlJMSGFsb3lYK09oTHVONDlrYy9SR1ZjTjB6SkdCaWJhWHZ3QzFld3IiLCJtYWMiOiI1MDA5NjNjYzc0MGU0NTdhYWMzNTRmZWVlOTY4NWM3YTU4Y2MzZWIxZTkwMzc2NmJiOWZkOTBiMTZmMmU2NTYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iis5TzVWcWt1M01yRkl0WGEvQTk1OUE9PSIsInZhbHVlIjoiRG54V2lCODQ0djVvMmJVZE5GbWFpK3M3NzRlMG9TdXdPa3h4bmxkVU0xcSt1MWRaUmcyZ3pTY0w4dXBTd1Q1djhJZnN0OXhOQ3A5UXRWSjRjVElEV0VucldkVmp0UE12Y3dYc21sVlhuVzlteEVQTGZQRmI4M1dvQzJ3Z3oyb1AiLCJtYWMiOiJjY2M5ZWI5ZTVjZjBiOTE3ZDI2OWE2ZDgwNjc1MDhhNDQwMGMxZmY4MzZjNDQ4OGE4OWQ3YzE3NTI2ZGM2NzdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:44 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 27 Apr 2026 17:27:37 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jBLXaRPKKGUsNUhuhC4dQK6cxEj75zrwWq1KphewsZ7lQa3T3EobW8tuYhOOXBrJQLTbuo4WZUjHI%2F3pq0P5eMdbc%2B6mBzA0Fcr2kD1rHcW0M9ZxT%2Fozsx4QyOJed%2BBdOA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a04a7d36489bb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":854,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"d31bf8a0967d5a38631c38691e66540c","sha1":"f4e654b84b034023b5e3db513087dd9205bd49ba","sha256":"d6712b0ff373f0cf02d1c81ff5a6fb945b47d5d173f02e41d1da28eee52b39d5","sha512":"3d4f2750a27f99297636d2e655b9d157d70113d304085e8ff716a907a7abd01252fbbc7ea521f695b6ec31bcb7a9198e0fc378ee71480a52abe2ab83f94b8181","ssdeep":"","tlshash":"58014c9e79e236b1a2c7eb7c19ab530566314003d11c85053d2c6262afa4f6816b3bc9","first_seen":"2026-05-03T18:32:03.521288Z","last_seen":"2026-07-04T12:30:40.633433Z","times_seen":995,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Questrial\u0026family=Lexend+Deca:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:44.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:15 GMT","end":"Thu, 30 Jul 2026 15:53:14 GMT"},"fingerprint":{"sha1":"19:42:B0:56:3A:E4:79:BF:8B:69:E2:50:F4:76:BF:1E:A9:D7:7A:49","sha256":"D7:FF:C1:46:95:F3:5F:08:04:B0:E1:A8:FE:14:FC:60:19:58:D6:C7:D3:6E:82:B3:64:07:E9:E1:CB:9A:27:8C"}}},"request":{"raw":"GET /css2?family=Questrial\u0026family=Lexend+Deca:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 01 Jun 2026 01:36:45 GMT\r\ndate: Mon, 01 Jun 2026 01:36:45 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6327,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"5a182b65e1da38541d4149cd43e8c979","sha1":"cbf5a24c6802d261b5a10a0552ea00c680350451","sha256":"63c600ce72c5123677f95af5a36d8360250d4d4bb1bec8d233bca877dff66fb5","sha512":"9b4dbb3d19f62de0611806f4add8756a2b30288d5fefb69410752077e6e37468998cd12cdae47c764477a25cd4e6c56ee8533f85734f7b156bd177c98c695daf","ssdeep":"96:cULOEa5SnLOEa5SSJc+ugLOEa5SSNDULOXa5SnLOXa5SSJc+ugLOXa5SSNDULOxr:cpRDCB6iDxBX/DYBw4DfBkT/bj","tlshash":"83d1da91046b9500eb5b1cc222cf7e32ae9f61657444c439affd18d8ecaed262366b0d","first_seen":"2026-03-12T05:25:58.277422Z","last_seen":"2026-07-04T21:24:23.386521Z","times_seen":1031,"resource_available":false,"data":null}},"time_used":1221,"timings":{"blocked":562,"dns":0,"connect":47,"send":0,"wait":60,"receive":0,"ssl":550},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/flags/en.svg","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:44.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /flags/en.svg HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9qUitpNHljMC9xVXlOajkwd2ZoK0E9PSIsInZhbHVlIjoiWGVjQW51c3laQ1QvbEhJQ1I2MFRrWHNtNEl6cVRoOWg4ZGNmaDJKcWxGMTRkcFFhRU5XcFBMSC9qbGgzSzNXVVdKWUZNeDlwaVVoOFUranZaR3pGSEFYMlJMSGFsb3lYK09oTHVONDlrYy9SR1ZjTjB6SkdCaWJhWHZ3QzFld3IiLCJtYWMiOiI1MDA5NjNjYzc0MGU0NTdhYWMzNTRmZWVlOTY4NWM3YTU4Y2MzZWIxZTkwMzc2NmJiOWZkOTBiMTZmMmU2NTYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iis5TzVWcWt1M01yRkl0WGEvQTk1OUE9PSIsInZhbHVlIjoiRG54V2lCODQ0djVvMmJVZE5GbWFpK3M3NzRlMG9TdXdPa3h4bmxkVU0xcSt1MWRaUmcyZ3pTY0w4dXBTd1Q1djhJZnN0OXhOQ3A5UXRWSjRjVElEV0VucldkVmp0UE12Y3dYc21sVlhuVzlteEVQTGZQRmI4M1dvQzJ3Z3oyb1AiLCJtYWMiOiJjY2M5ZWI5ZTVjZjBiOTE3ZDI2OWE2ZDgwNjc1MDhhNDQwMGMxZmY4MzZjNDQ4OGE4OWQ3YzE3NTI2ZGM2NzdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:44 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, Accept-Encoding,User-Agent\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IOHB8yCARkrZSNU%2B8s0aZ8ACRRwjylzl5nIcbdaRXgALYRmlKsasNTWSuj%2BwnvpWVpQjAW%2FnWiHz%2Fj43TR9AKInUjgwx3QEcDeG8uMF1vyrNxOQuzvTCG6%2BcViA6TupGTQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a04a7d3658b6b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1290,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a60a1cb88e021acfa9dae480687c55b4","sha1":"0badf2ca702eb29df29786296160d68ec247af9d","sha256":"c1fcc7d1f18d3597c793170b12cf568207e5d13ad0c2778fd165d33be41c05dc","sha512":"354c148d992a22b729fa7b5736d0f3bde4b477aeaa9d157d692fd190dc57f566f11e2741775534f5a69c3c499e3d8482da01800db5cda5bb95dc5ad49ed88ec4","ssdeep":"","tlshash":"c821ddd2495459c08d8a037cdf1f6bdb72335cce3a584af832d53a165d90bb7341ad85","first_seen":"2025-04-08T10:05:49.355682Z","last_seen":"2026-07-04T12:30:40.617311Z","times_seen":4563,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/flags/ar.svg","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:44.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /flags/ar.svg HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9qUitpNHljMC9xVXlOajkwd2ZoK0E9PSIsInZhbHVlIjoiWGVjQW51c3laQ1QvbEhJQ1I2MFRrWHNtNEl6cVRoOWg4ZGNmaDJKcWxGMTRkcFFhRU5XcFBMSC9qbGgzSzNXVVdKWUZNeDlwaVVoOFUranZaR3pGSEFYMlJMSGFsb3lYK09oTHVONDlrYy9SR1ZjTjB6SkdCaWJhWHZ3QzFld3IiLCJtYWMiOiI1MDA5NjNjYzc0MGU0NTdhYWMzNTRmZWVlOTY4NWM3YTU4Y2MzZWIxZTkwMzc2NmJiOWZkOTBiMTZmMmU2NTYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iis5TzVWcWt1M01yRkl0WGEvQTk1OUE9PSIsInZhbHVlIjoiRG54V2lCODQ0djVvMmJVZE5GbWFpK3M3NzRlMG9TdXdPa3h4bmxkVU0xcSt1MWRaUmcyZ3pTY0w4dXBTd1Q1djhJZnN0OXhOQ3A5UXRWSjRjVElEV0VucldkVmp0UE12Y3dYc21sVlhuVzlteEVQTGZQRmI4M1dvQzJ3Z3oyb1AiLCJtYWMiOiJjY2M5ZWI5ZTVjZjBiOTE3ZDI2OWE2ZDgwNjc1MDhhNDQwMGMxZmY4MzZjNDQ4OGE4OWQ3YzE3NTI2ZGM2NzdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:44 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, Accept-Encoding,User-Agent\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CS9GGWiR6Jb2lEuUgcsWhO7Rcc3QYGxdlrwrMTsOLm8vkVHinb%2Famysndco0QUZBkckKzUWys1VQaTlna%2B8wTO5WX%2F9gB3NSH7omos%2Fhhj8fGokBVIrzxVTMVNlsfHXrwA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a04a7d3658b7b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24678,"size_decoded":0,"mime_type":"image/svg+xml","magic":"ASCII text, with very long lines (24676), with CRLF line terminators","md5":"ff8d7927af846f11628284e5b270adaf","sha1":"06a32de0c63edfc6bec722294be0f50faad3f669","sha256":"0c606d62cbc00b47a56e55ee4dab3c85c4ef81e26b6896a8570020b464237816","sha512":"c25c00856a3beb0dd27dd5dd9e489398d3fb8d39ac8e0229553ae6853c9c13682b58cbdcdc4b6078222707e0bb2cb8365718d927026af77b9dfda6ccdb3d32a3","ssdeep":"384:TWqbKBQivkm1CEaCxcAHitd+aJNeCwdWuCRLWWmoPYK+SwYNR9/SL9iu2:TnbOvtxcAHiCuwgCWrPJbvyiu2","tlshash":"d1b2a6d92770e3d8a6cb996eff319c986a4bf4fe8e7742c0816e9a0459d7dc4e604c00","first_seen":"2025-08-21T23:09:42.503051Z","last_seen":"2026-07-04T12:30:40.621858Z","times_seen":1721,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/flags/es.svg","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:44.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /flags/es.svg HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9qUitpNHljMC9xVXlOajkwd2ZoK0E9PSIsInZhbHVlIjoiWGVjQW51c3laQ1QvbEhJQ1I2MFRrWHNtNEl6cVRoOWg4ZGNmaDJKcWxGMTRkcFFhRU5XcFBMSC9qbGgzSzNXVVdKWUZNeDlwaVVoOFUranZaR3pGSEFYMlJMSGFsb3lYK09oTHVONDlrYy9SR1ZjTjB6SkdCaWJhWHZ3QzFld3IiLCJtYWMiOiI1MDA5NjNjYzc0MGU0NTdhYWMzNTRmZWVlOTY4NWM3YTU4Y2MzZWIxZTkwMzc2NmJiOWZkOTBiMTZmMmU2NTYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iis5TzVWcWt1M01yRkl0WGEvQTk1OUE9PSIsInZhbHVlIjoiRG54V2lCODQ0djVvMmJVZE5GbWFpK3M3NzRlMG9TdXdPa3h4bmxkVU0xcSt1MWRaUmcyZ3pTY0w4dXBTd1Q1djhJZnN0OXhOQ3A5UXRWSjRjVElEV0VucldkVmp0UE12Y3dYc21sVlhuVzlteEVQTGZQRmI4M1dvQzJ3Z3oyb1AiLCJtYWMiOiJjY2M5ZWI5ZTVjZjBiOTE3ZDI2OWE2ZDgwNjc1MDhhNDQwMGMxZmY4MzZjNDQ4OGE4OWQ3YzE3NTI2ZGM2NzdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:44 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PGtQ16fAx8Iz4ZLUk%2Bwq35iOt6uir8STYRDhOKhVyL6jWqx78qXYlpjFwNlT91%2BTUOlEbhFz7QKsdvlhsn80p4%2FnpNAeoF5kwDZosHpQQbmZNQJP0MNMmYEkfTIEjNXT7w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a04a7d3678c8b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":714,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"82a1bb6b96ec71df6247971da6e35155","sha1":"bb5be7dedff6612e4c8cb7c8019563c547238897","sha256":"8fc508fdb3ef11a4e38f9123f1ae903962ca14841cefd7b98ed5550d50d2f1bb","sha512":"dc54baf3110ea3a0512a272b5dac1bd1b24e50ecc32e9944436708791394a98fae1220f440ed1615c7d5e6f05d761190f3720105c9bf5f63300ff940cbb2738e","ssdeep":"","tlshash":"9b019cd4ba6c498c9e15837d0b6c70d1a20e20bc31cf40e8b98c8164b26a3ebe943d50","first_seen":"2023-05-07T18:03:13Z","last_seen":"2026-07-05T08:32:24.238337Z","times_seen":8632,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/flags/it.svg","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:44.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /flags/it.svg HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9qUitpNHljMC9xVXlOajkwd2ZoK0E9PSIsInZhbHVlIjoiWGVjQW51c3laQ1QvbEhJQ1I2MFRrWHNtNEl6cVRoOWg4ZGNmaDJKcWxGMTRkcFFhRU5XcFBMSC9qbGgzSzNXVVdKWUZNeDlwaVVoOFUranZaR3pGSEFYMlJMSGFsb3lYK09oTHVONDlrYy9SR1ZjTjB6SkdCaWJhWHZ3QzFld3IiLCJtYWMiOiI1MDA5NjNjYzc0MGU0NTdhYWMzNTRmZWVlOTY4NWM3YTU4Y2MzZWIxZTkwMzc2NmJiOWZkOTBiMTZmMmU2NTYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iis5TzVWcWt1M01yRkl0WGEvQTk1OUE9PSIsInZhbHVlIjoiRG54V2lCODQ0djVvMmJVZE5GbWFpK3M3NzRlMG9TdXdPa3h4bmxkVU0xcSt1MWRaUmcyZ3pTY0w4dXBTd1Q1djhJZnN0OXhOQ3A5UXRWSjRjVElEV0VucldkVmp0UE12Y3dYc21sVlhuVzlteEVQTGZQRmI4M1dvQzJ3Z3oyb1AiLCJtYWMiOiJjY2M5ZWI5ZTVjZjBiOTE3ZDI2OWE2ZDgwNjc1MDhhNDQwMGMxZmY4MzZjNDQ4OGE4OWQ3YzE3NTI2ZGM2NzdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:44 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r6Guu%2BuwBcCSjp6WzA%2Fweeteo7PbEkkXTfBfz%2Fiz42ZZCKfNEQJ5eAAGYYZfU9gr%2Bp2IGy8yLbKPGzpBtC8rHWZzX5xuNCndp0xDo9OAhY3LqtA6pLofEgr2kPY52pMDxA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a04a7d3688ccb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":352,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"34ec214f5547e19d4e1fe9d0d638f9c7","sha1":"7ef49fd31ffa7a0ea47e8ad0a2fa2121621baae5","sha256":"ebdeb69d61fd3e3b429eafd9b45b51422b87348d932a7fbcd668975437650fdd","sha512":"95f427b45f9af6fbc409cba7617a3a653ea21bb15bc722a442edc8f9a492914e0eb0e25d113403eff378c7ab9078d3bcd38e9e7cd7bc9c987e8b0da621e2b477","ssdeep":"","tlshash":"96e02084a5a9c9098b16437959bc71da512370cf15cc05fd75c43518bd4d3df3c51a6c","first_seen":"2023-05-10T09:01:08Z","last_seen":"2026-07-05T08:32:24.26757Z","times_seen":7739,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/flags/sv.svg","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:44.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /flags/sv.svg HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9qUitpNHljMC9xVXlOajkwd2ZoK0E9PSIsInZhbHVlIjoiWGVjQW51c3laQ1QvbEhJQ1I2MFRrWHNtNEl6cVRoOWg4ZGNmaDJKcWxGMTRkcFFhRU5XcFBMSC9qbGgzSzNXVVdKWUZNeDlwaVVoOFUranZaR3pGSEFYMlJMSGFsb3lYK09oTHVONDlrYy9SR1ZjTjB6SkdCaWJhWHZ3QzFld3IiLCJtYWMiOiI1MDA5NjNjYzc0MGU0NTdhYWMzNTRmZWVlOTY4NWM3YTU4Y2MzZWIxZTkwMzc2NmJiOWZkOTBiMTZmMmU2NTYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iis5TzVWcWt1M01yRkl0WGEvQTk1OUE9PSIsInZhbHVlIjoiRG54V2lCODQ0djVvMmJVZE5GbWFpK3M3NzRlMG9TdXdPa3h4bmxkVU0xcSt1MWRaUmcyZ3pTY0w4dXBTd1Q1djhJZnN0OXhOQ3A5UXRWSjRjVElEV0VucldkVmp0UE12Y3dYc21sVlhuVzlteEVQTGZQRmI4M1dvQzJ3Z3oyb1AiLCJtYWMiOiJjY2M5ZWI5ZTVjZjBiOTE3ZDI2OWE2ZDgwNjc1MDhhNDQwMGMxZmY4MzZjNDQ4OGE4OWQ3YzE3NTI2ZGM2NzdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:44 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fy%2B5cxOOo7CW8gLEwAcCblpXVKECCc9RLekAdz%2Ba7RsXltAa5thX29x%2BTPLT7ZH923N0q5D7wRi8Cj%2FGg9kwySif52LcM8Bvcjt1WnzfjEW%2BpKY3pG9mS412db0yLBzliA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a04a7d3688e1b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":376,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6d7b2e74f61e873c0fb690155956025e","sha1":"b515a34c1884d45ef9a2b7f3ebdf731a0613e1c8","sha256":"4a271da0e5fbcda6d2d15092d8a564e8ef3d36ad507215563ac2faa0e8833001","sha512":"e2ccfb1f70a37129ea1a51b5e143e103904df03d6dfd5966f169d13222bd87a2d54b1ec21ac28ef3ce09c1d853f07c16eae7190c263c0e250506ecb8abdff54b","ssdeep":"","tlshash":"97e068d0902ec60a9e1507b95fbc70ca4232b08e298e00fc70c12528f49e7cf2810bb9","first_seen":"2023-05-07T18:03:13Z","last_seen":"2026-07-04T12:30:40.622412Z","times_seen":5524,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/flags/zh.png","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:44.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /flags/zh.png HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9qUitpNHljMC9xVXlOajkwd2ZoK0E9PSIsInZhbHVlIjoiWGVjQW51c3laQ1QvbEhJQ1I2MFRrWHNtNEl6cVRoOWg4ZGNmaDJKcWxGMTRkcFFhRU5XcFBMSC9qbGgzSzNXVVdKWUZNeDlwaVVoOFUranZaR3pGSEFYMlJMSGFsb3lYK09oTHVONDlrYy9SR1ZjTjB6SkdCaWJhWHZ3QzFld3IiLCJtYWMiOiI1MDA5NjNjYzc0MGU0NTdhYWMzNTRmZWVlOTY4NWM3YTU4Y2MzZWIxZTkwMzc2NmJiOWZkOTBiMTZmMmU2NTYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iis5TzVWcWt1M01yRkl0WGEvQTk1OUE9PSIsInZhbHVlIjoiRG54V2lCODQ0djVvMmJVZE5GbWFpK3M3NzRlMG9TdXdPa3h4bmxkVU0xcSt1MWRaUmcyZ3pTY0w4dXBTd1Q1djhJZnN0OXhOQ3A5UXRWSjRjVElEV0VucldkVmp0UE12Y3dYc21sVlhuVzlteEVQTGZQRmI4M1dvQzJ3Z3oyb1AiLCJtYWMiOiJjY2M5ZWI5ZTVjZjBiOTE3ZDI2OWE2ZDgwNjc1MDhhNDQwMGMxZmY4MzZjNDQ4OGE4OWQ3YzE3NTI2ZGM2NzdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 870\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\ncache-control: max-age=31536000\r\nexpires: Mon, 31 May 2027 23:04:21 GMT\r\nvary: User-Agent\r\naccept-ranges: bytes\r\nage: 9143\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FsUZW4o6Xie%2FXqNFs9LEFblwNes1UxGa7RwYSQlI%2BB7%2FFSVOm%2BnAg%2F1Df%2BOK4F3ki0Ae6FltG54SLV1MeH0MQJofeuOv0XsjTSOaXYxZjizxuinZhbUx%2Bi4Qlcofajg%2FKQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a04a7d3688e5b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":870,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"2a2b643bc15c7363c9e58e6b47d7de30","sha1":"506ab44f76022397b3aa9682e8972d7944703d54","sha256":"c63293f5412adc096b8e492e88b8d8edfca5367a491acdd9071ef8d31b4ba9a1","sha512":"a742115cc74831e58f2607fda3ecdf88d8a01d1f9f19d784e1c46a24f9dc23f3a8b5f11251b1c6c911a53a18ee3a01d841e82952f7ab97fcc44b2a0673238e43","ssdeep":"","tlshash":"1f1196ca2450d5d7c2ea12e389ee4b452b4f4afc28560d886c151ab511df1d740e4710","first_seen":"2023-06-10T08:53:38Z","last_seen":"2026-07-04T12:30:40.631088Z","times_seen":5144,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/flags/cs.svg","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:44.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /flags/cs.svg HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9qUitpNHljMC9xVXlOajkwd2ZoK0E9PSIsInZhbHVlIjoiWGVjQW51c3laQ1QvbEhJQ1I2MFRrWHNtNEl6cVRoOWg4ZGNmaDJKcWxGMTRkcFFhRU5XcFBMSC9qbGgzSzNXVVdKWUZNeDlwaVVoOFUranZaR3pGSEFYMlJMSGFsb3lYK09oTHVONDlrYy9SR1ZjTjB6SkdCaWJhWHZ3QzFld3IiLCJtYWMiOiI1MDA5NjNjYzc0MGU0NTdhYWMzNTRmZWVlOTY4NWM3YTU4Y2MzZWIxZTkwMzc2NmJiOWZkOTBiMTZmMmU2NTYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iis5TzVWcWt1M01yRkl0WGEvQTk1OUE9PSIsInZhbHVlIjoiRG54V2lCODQ0djVvMmJVZE5GbWFpK3M3NzRlMG9TdXdPa3h4bmxkVU0xcSt1MWRaUmcyZ3pTY0w4dXBTd1Q1djhJZnN0OXhOQ3A5UXRWSjRjVElEV0VucldkVmp0UE12Y3dYc21sVlhuVzlteEVQTGZQRmI4M1dvQzJ3Z3oyb1AiLCJtYWMiOiJjY2M5ZWI5ZTVjZjBiOTE3ZDI2OWE2ZDgwNjc1MDhhNDQwMGMxZmY4MzZjNDQ4OGE4OWQ3YzE3NTI2ZGM2NzdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:44 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=deV9Xs1mtxJCZD7SX%2FYRvQ%2FTIh%2FMCxB2EwmDDXvUFp3a%2BwHAambS3s1QLPu5RE3vtDU%2FXc3ELJ%2BQkXif5eUOHjV10PWCHEQPojXMFhzd5mqtT4iG38qtF4FDXpWnCsq6Ag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a04a7d3658bab51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":374,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0fe0a2e4225eee5dd8a3c73a5ab5a312","sha1":"c930c1341640bee697cf50053721ddfd750dae2e","sha256":"2a3a7fa3da584643cbac6234aa452705982f50454ed0a259d8c8cd6a9c2fa8c8","sha512":"92390117a5b345c7f9123d5d06839d95959664b32e621961e0d28a353ee515df51a446563354cf9f3911acbd0032a0fb61b1ca356250262157aae05dc907fe8e","ssdeep":"","tlshash":"80e06889a0e88e094e1803b60efcb0d5612330ee208d02ecb0c06619e9197cb2808ee8","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-07-05T04:52:57.823429Z","times_seen":5288,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/undefined","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:45.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /undefined HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9qUitpNHljMC9xVXlOajkwd2ZoK0E9PSIsInZhbHVlIjoiWGVjQW51c3laQ1QvbEhJQ1I2MFRrWHNtNEl6cVRoOWg4ZGNmaDJKcWxGMTRkcFFhRU5XcFBMSC9qbGgzSzNXVVdKWUZNeDlwaVVoOFUranZaR3pGSEFYMlJMSGFsb3lYK09oTHVONDlrYy9SR1ZjTjB6SkdCaWJhWHZ3QzFld3IiLCJtYWMiOiI1MDA5NjNjYzc0MGU0NTdhYWMzNTRmZWVlOTY4NWM3YTU4Y2MzZWIxZTkwMzc2NmJiOWZkOTBiMTZmMmU2NTYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iis5TzVWcWt1M01yRkl0WGEvQTk1OUE9PSIsInZhbHVlIjoiRG54V2lCODQ0djVvMmJVZE5GbWFpK3M3NzRlMG9TdXdPa3h4bmxkVU0xcSt1MWRaUmcyZ3pTY0w4dXBTd1Q1djhJZnN0OXhOQ3A5UXRWSjRjVElEV0VucldkVmp0UE12Y3dYc21sVlhuVzlteEVQTGZQRmI4M1dvQzJ3Z3oyb1AiLCJtYWMiOiJjY2M5ZWI5ZTVjZjBiOTE3ZDI2OWE2ZDgwNjc1MDhhNDQwMGMxZmY4MzZjNDQ4OGE4OWQ3YzE3NTI2ZGM2NzdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Mon, 01 Jun 2026 01:36:45 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, User-Agent\r\ncache-control: max-age=3600, public, s-maxage=86400\r\nset-cookie: XSRF-TOKEN=eyJpdiI6InpJT3RSb2lnLzcxejBuc3lRdkU3cnc9PSIsInZhbHVlIjoiczQ4WDJkSE04d25YQk01NjZtczFsaFJVQ0NleVN5b1hqb3JiamxiZWVaaDI3cmZIVzc2YmJNZ2hIV1NKZDVLcUtaVWc0Ymx0d1haZnZwWmxGOXBWNEM3eWFBUlZQTmtqN2tja3Rhbk1iS2wrUjMyaDkvZEt5S1MvSnY4Y0NYR0YiLCJtYWMiOiI3YWViYmY2MWE0MDFhNDUxYzEyYmFjNWI4YzUxYmQ0OTBlZjNkZTMxNzY2Yzc4NWRkNWEyMGRmYmVhYmNjOGNjIiwidGFnIjoiIn0%3D; expires=Mon, 01 Jun 2026 03:36:45 GMT; Max-Age=7200; path=/; secure; samesite=lax\nlaravel_session=eyJpdiI6IkIycHdseU5KeE1lQXoyQ2ZRR1JxbVE9PSIsInZhbHVlIjoiQVBQcitQVUs3aW43UFc3eFBVdFBxQnpZaDR5cGZ6RStyclFjOGJ2MW9BbURtT2FuZXgrZXdxUTN1OFB5by9PdlA1VkRQQnhzc2lCL3pLVy8rVU56WG1iU3RRRHlWNzhQeGJWUjlwWFRxSEdhNytNeTFUbmRzZU9YVm45cEZ1QXkiLCJtYWMiOiI3NGQ3ZDRiYTNhMTE1MGY5ODBlYjUxYTI5NWYyZmUwYmE3NDc2YjQwNjc5OTdiMDZmMzNiNzBmZDYyMjg3OWY4IiwidGFnIjoiIn0%3D; expires=Mon, 01 Jun 2026 03:36:45 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FJAB3Uc0iioiLiTjlX3SAtbzhOZw7axhdUgznM2dUdrY9fdKSGRVZu%2FizzGcpPMWxi%2FOMsMQcnJugf4l2EDDw465C%2Bw79JlT3ld2OkWhHIOgL8FQ%2F5SU1JAKnju%2BX5CyTg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a04a7d3c3b99b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6603,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5391)","md5":"543ac81966d87ac815e08eb0e436d719","sha1":"e35bb4e32ccf08c11a3935084b50660feb835350","sha256":"8cbc10ee9755ef972000f666711a5c4d0e025d3cedf53079ba3bfd8f2b19a968","sha512":"0c6a8f7948f93d4d00b5fbb98f487d7e2ee15d104acd83dfbc884ef9b77826dc7daa27b906640572977750a00cb7ef590ed5cd93e2f40ef4def88b9ff92f1dc3","ssdeep":"96:/J/SNi/FLQVTLKCGWz5NN5PXy0jRdoMCX4SZTdI5:/pV2RKCxnNByTMCX4SZT0","tlshash":"aed1871eeac5101e60d785b7e8d4e64c8916aac3de238bdfb54f7915cf8038719a321c","first_seen":"2023-04-06T17:05:03Z","last_seen":"2026-07-05T06:07:52.75864Z","times_seen":8726,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@25.12.5/build/js/utils.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:46.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@25.12.5/build/js/utils.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://qatebixun.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 63100\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 25.12.5\r\nx-jsd-version-type: version\r\netag: W/\"419b0-Py3EkUQ6tNnb9qvuiV2BQBlvCqs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Mon, 01 Jun 2026 01:36:46 GMT\r\nage: 2859327\r\nx-served-by: cache-fra-etou8220020-FRA, cache-hel1410025-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":268720,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1903)","md5":"e654fbae22a0762fa384b61fd03f1679","sha1":"3f2dc491443ab4d9dbf6abee895d8140196f0aab","sha256":"93c8dd85421914d3c09fdacc4b77730595202004a1d8c9ef7639c7551157bda6","sha512":"af44d0ca2f0ca731ecb7e535963c694710a3e887c8bbdfc95066f1fab72d5c5da66313e9097498d246b93a04a1b642fd65d591e80d325a72bb0f7bf5a5f8da6e","ssdeep":"3072:TklM0tDKjFs3OwPss3MwPky0zOt62xFMfM+dhvo4sUifhNyf4LtXKtofQVkmDmVu:TklMmDOW0IxFMfM+dMGou","tlshash":"fe44f0ebd63c973ba1d87b35968eb3cd5a8cbca3c858567826c3b54f52784e0706c205","first_seen":"2026-02-13T03:24:00.128548Z","last_seen":"2026-07-05T03:34:22.255193Z","times_seen":992,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":135,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/flags/fi.svg","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:44.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /flags/fi.svg HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9qUitpNHljMC9xVXlOajkwd2ZoK0E9PSIsInZhbHVlIjoiWGVjQW51c3laQ1QvbEhJQ1I2MFRrWHNtNEl6cVRoOWg4ZGNmaDJKcWxGMTRkcFFhRU5XcFBMSC9qbGgzSzNXVVdKWUZNeDlwaVVoOFUranZaR3pGSEFYMlJMSGFsb3lYK09oTHVONDlrYy9SR1ZjTjB6SkdCaWJhWHZ3QzFld3IiLCJtYWMiOiI1MDA5NjNjYzc0MGU0NTdhYWMzNTRmZWVlOTY4NWM3YTU4Y2MzZWIxZTkwMzc2NmJiOWZkOTBiMTZmMmU2NTYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iis5TzVWcWt1M01yRkl0WGEvQTk1OUE9PSIsInZhbHVlIjoiRG54V2lCODQ0djVvMmJVZE5GbWFpK3M3NzRlMG9TdXdPa3h4bmxkVU0xcSt1MWRaUmcyZ3pTY0w4dXBTd1Q1djhJZnN0OXhOQ3A5UXRWSjRjVElEV0VucldkVmp0UE12Y3dYc21sVlhuVzlteEVQTGZQRmI4M1dvQzJ3Z3oyb1AiLCJtYWMiOiJjY2M5ZWI5ZTVjZjBiOTE3ZDI2OWE2ZDgwNjc1MDhhNDQwMGMxZmY4MzZjNDQ4OGE4OWQ3YzE3NTI2ZGM2NzdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:44 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UleCgwrhZdVGbibJ%2FcRzMaR1SpwxuZMs2TsDNtLSwuCsma4izpUUszPtjJDiMVNqBcyew3UdDm%2BCcpWiuYqsX9L836nFJL1k6DTccUcQO00t3E6DIavTtDa64Jdz16ezcA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a04a7d3658bbb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":249,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d1724c02c151d1f44b22d5c89e199c54","sha1":"fbb67ed0796f19c50d9354ffa54a0103d33049b7","sha256":"0d9fdf20d3b93aa471132ea660f36e3331fc137bb628121caeec33e905a2a33b","sha512":"b25f8b249311ea474d847f05738c744e4b3590a79c6859db8b7cef67f7e50c234ac86b2eedd86778cfebe26fce6f376b93e202a0ebf7b519700a87b56302a741","ssdeep":"","tlshash":"8bd05e9690b96a044902476a8dec76da6026a0e6668d01fdb0811525f6893df78a36a8","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-07-04T12:30:40.60369Z","times_seen":2481,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/frontend/assets/en/images/favicon.ico","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:45.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /frontend/assets/en/images/favicon.ico HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InpJT3RSb2lnLzcxejBuc3lRdkU3cnc9PSIsInZhbHVlIjoiczQ4WDJkSE04d25YQk01NjZtczFsaFJVQ0NleVN5b1hqb3JiamxiZWVaaDI3cmZIVzc2YmJNZ2hIV1NKZDVLcUtaVWc0Ymx0d1haZnZwWmxGOXBWNEM3eWFBUlZQTmtqN2tja3Rhbk1iS2wrUjMyaDkvZEt5S1MvSnY4Y0NYR0YiLCJtYWMiOiI3YWViYmY2MWE0MDFhNDUxYzEyYmFjNWI4YzUxYmQ0OTBlZjNkZTMxNzY2Yzc4NWRkNWEyMGRmYmVhYmNjOGNjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkIycHdseU5KeE1lQXoyQ2ZRR1JxbVE9PSIsInZhbHVlIjoiQVBQcitQVUs3aW43UFc3eFBVdFBxQnpZaDR5cGZ6RStyclFjOGJ2MW9BbURtT2FuZXgrZXdxUTN1OFB5by9PdlA1VkRQQnhzc2lCL3pLVy8rVU56WG1iU3RRRHlWNzhQeGJWUjlwWFRxSEdhNytNeTFUbmRzZU9YVm45cEZ1QXkiLCJtYWMiOiI3NGQ3ZDRiYTNhMTE1MGY5ODBlYjUxYTI5NWYyZmUwYmE3NDc2YjQwNjc5OTdiMDZmMzNiNzBmZDYyMjg3OWY4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:46 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nlast-modified: Fri, 13 Mar 2026 05:05:58 GMT\r\nvary: Accept-Encoding,User-Agent\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EDM3zEHpNyTBsvGHtt9Qu5ATjW5X%2FU%2FTmZnVgJpb1J90Vkt%2BgJ7uIAcDZkOsJZlvR2IpG%2FnuLr8RdfvCsEbn2%2F4Nvu%2Bi%2F4OWsXF0wVx0co1qakOjA4Zb6QI0lhXuCJM1ow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a04a7d3f6d19b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":194879,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 9 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"51ef3b344a3491ba956860bebe8eaef0","sha1":"70dbba5e0dc87b83a67c247c0951e8fd90936369","sha256":"3f248a7d44698731542605038bae8507a04af831fec9f643a816eab0633873d0","sha512":"980b11b7b390be9f7d17dc226b23a16c677af4fc18f27b8143a0e93f7ef0f6bf1a7f0a0332ab30f95163028ce81e6778eb877317358894a56722280a142e2f69","ssdeep":"3072:O8UhBCbbwWW+KiAbVVVUg1BjBw6l8x0J4R6u2wMWK:tUhBUMW4iAbVVVUaBEx02Au2wMWK","tlshash":"13146a4b7842d18dec07853ba44ad6f245a73c2ecea66877b6c07b3f35b0527d234269","first_seen":"2025-09-17T17:21:05.727403Z","last_seen":"2026-06-16T05:28:50.783496Z","times_seen":632,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":170,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/flags/ja.svg","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:44.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /flags/ja.svg HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9qUitpNHljMC9xVXlOajkwd2ZoK0E9PSIsInZhbHVlIjoiWGVjQW51c3laQ1QvbEhJQ1I2MFRrWHNtNEl6cVRoOWg4ZGNmaDJKcWxGMTRkcFFhRU5XcFBMSC9qbGgzSzNXVVdKWUZNeDlwaVVoOFUranZaR3pGSEFYMlJMSGFsb3lYK09oTHVONDlrYy9SR1ZjTjB6SkdCaWJhWHZ3QzFld3IiLCJtYWMiOiI1MDA5NjNjYzc0MGU0NTdhYWMzNTRmZWVlOTY4NWM3YTU4Y2MzZWIxZTkwMzc2NmJiOWZkOTBiMTZmMmU2NTYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iis5TzVWcWt1M01yRkl0WGEvQTk1OUE9PSIsInZhbHVlIjoiRG54V2lCODQ0djVvMmJVZE5GbWFpK3M3NzRlMG9TdXdPa3h4bmxkVU0xcSt1MWRaUmcyZ3pTY0w4dXBTd1Q1djhJZnN0OXhOQ3A5UXRWSjRjVElEV0VucldkVmp0UE12Y3dYc21sVlhuVzlteEVQTGZQRmI4M1dvQzJ3Z3oyb1AiLCJtYWMiOiJjY2M5ZWI5ZTVjZjBiOTE3ZDI2OWE2ZDgwNjc1MDhhNDQwMGMxZmY4MzZjNDQ4OGE4OWQ3YzE3NTI2ZGM2NzdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:44 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2TF1r4Hmh%2FAJGQGcsIqtd%2BPHBtLDbQY7o7Tn1%2F%2FgQi%2FYsRYhMraGcZyVcvib0V9kfIQx2MSc2KPeZm3yBowLz7f%2FqNYjBAmf3oRxKldx6lAO1MivmCe36v6wOe2c57WcJg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a04a7d3688d1b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":357,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b072ff9b575b2c9db1f40db4a8603ea1","sha1":"56c055fa39d04fdfbf8ca59c3186b982e301bbf2","sha256":"3cff261749f98b839faf4cbd34b7748daf28ed5d9377f3cb9929d6cc506665a2","sha512":"9a42eab5c883210142df99507c2cb0d4a2b8bba9cc91d87440039f0cb340d010b5137066ae28269ceb59e23b5901528506b4f3af4b49eec1ab405f1629a76a4a","ssdeep":"","tlshash":"a0e0c060a0ecc94c4e098b640b7c70d041a670dd268b01fc748c2668e98ebc77811a7c","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-07-04T12:30:40.604838Z","times_seen":2534,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vumbnail.com/1128168202_small.jpg","fqdn":"vumbnail.com","domain":"vumbnail.com","tld":"com"},"ip":{"addr":"104.26.8.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:45.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vumbnail.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 17:55:42 GMT","end":"Mon, 27 Jul 2026 18:55:37 GMT"},"fingerprint":{"sha1":"A2:E7:88:1A:74:70:2F:90:D1:A0:18:7D:8B:93:44:F1:27:F6:95:13","sha256":"B0:0F:0F:77:38:15:97:32:22:49:27:CA:EB:75:07:5D:50:FA:0E:F2:2D:8A:12:F6:F2:6A:0E:C6:DE:9C:D1:F3"}}},"request":{"raw":"GET /1128168202_small.jpg HTTP/1.1\r\nHost: vumbnail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1762\r\ncache-control: max-age=2592000\r\nx-thumbnail-source: r2\r\nx-thumbnail-variant: clean\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BMq7oPPa3JDRe6kbBggKO07FIJ6Pc3UnjteIiNH0LUF92gxPo9LGASWAEIgmsL2nsjxKEPNZQEKQWD2a4%2BY6F1yDxV8GKeOUl%2FLZFUpVCSC70HoCVD9tJqKPEnblKA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a04a7d3d8843c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1762,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x75, components 3","md5":"1295ff989205541a4746e90857149ace","sha1":"12c482d48f6eebf74944e11cab64a48e06b64021","sha256":"3cb0d715e67b24f236909a0145049d29dd2991b4452266c0d13e2a8e36524ae1","sha512":"e7f7353960fce6360278bb81cd7de33d75994936073fbec300b98ea62381de1ccff131054424f71b8af04ea2f904e152128185d867e73046f34d02dd482c456f","ssdeep":"","tlshash":"5631d847bfabc0c5ef1dc535a6f47f7a27558db9195289c710c0346524e4a84a34514c","first_seen":"2026-05-06T05:56:06.673063Z","last_seen":"2026-06-16T05:28:50.73805Z","times_seen":517,"resource_available":false,"data":null}},"time_used":683,"timings":{"blocked":204,"dns":1,"connect":33,"send":0,"wait":273,"receive":0,"ssl":169},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/frontend/assets/en/js/calc.js","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:46.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /frontend/assets/en/js/calc.js HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/frontend/assets/en/js/deferred-imports.js\r\nCookie: XSRF-TOKEN=eyJpdiI6InpJT3RSb2lnLzcxejBuc3lRdkU3cnc9PSIsInZhbHVlIjoiczQ4WDJkSE04d25YQk01NjZtczFsaFJVQ0NleVN5b1hqb3JiamxiZWVaaDI3cmZIVzc2YmJNZ2hIV1NKZDVLcUtaVWc0Ymx0d1haZnZwWmxGOXBWNEM3eWFBUlZQTmtqN2tja3Rhbk1iS2wrUjMyaDkvZEt5S1MvSnY4Y0NYR0YiLCJtYWMiOiI3YWViYmY2MWE0MDFhNDUxYzEyYmFjNWI4YzUxYmQ0OTBlZjNkZTMxNzY2Yzc4NWRkNWEyMGRmYmVhYmNjOGNjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkIycHdseU5KeE1lQXoyQ2ZRR1JxbVE9PSIsInZhbHVlIjoiQVBQcitQVUs3aW43UFc3eFBVdFBxQnpZaDR5cGZ6RStyclFjOGJ2MW9BbURtT2FuZXgrZXdxUTN1OFB5by9PdlA1VkRQQnhzc2lCL3pLVy8rVU56WG1iU3RRRHlWNzhQeGJWUjlwWFRxSEdhNytNeTFUbmRzZU9YVm45cEZ1QXkiLCJtYWMiOiI3NGQ3ZDRiYTNhMTE1MGY5ODBlYjUxYTI5NWYyZmUwYmE3NDc2YjQwNjc5OTdiMDZmMzNiNzBmZDYyMjg3OWY4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:46 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding,User-Agent\r\nlast-modified: Fri, 13 Mar 2026 05:05:58 GMT\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QgtZAtddwLeFXLoj2YfFSlGo%2FP8sRt7WbS4swgadq09op4vUzt%2BuVWJqHS1APzRHT7HPSGCeLvW%2BFgbvyrit1X3NGgjXn7h6YojpPH4VQRe1W8mBNGZ6DZ5a%2F%2BBN7syeeA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a04a7d426e6eb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2116,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"8db1c397f4875a2f87a43231fdc04d1f","sha1":"f085d10aa760378cb58a4427f9811737f04f4233","sha256":"2d0a615e04ee58fe04a7fea897a6e519a7c8e272f0f996d72ec50854ea214605","sha512":"0665e2c41eef2cee0b21045b74c34d264027c9ee313cf833b7f0cf7ec35f7df81a4187522e5294231cf90d58f1dd7c42d9f608b0da5757e896b3e44a4a7e1d05","ssdeep":"","tlshash":"a441ff567ff20070cdb321d527ab4a44283d36433081d6c4b71c86211fb1d92e15bebd","first_seen":"2026-05-03T18:34:41.366198Z","last_seen":"2026-06-16T05:28:50.817994Z","times_seen":789,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/flags/id.png","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:44.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /flags/id.png HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9qUitpNHljMC9xVXlOajkwd2ZoK0E9PSIsInZhbHVlIjoiWGVjQW51c3laQ1QvbEhJQ1I2MFRrWHNtNEl6cVRoOWg4ZGNmaDJKcWxGMTRkcFFhRU5XcFBMSC9qbGgzSzNXVVdKWUZNeDlwaVVoOFUranZaR3pGSEFYMlJMSGFsb3lYK09oTHVONDlrYy9SR1ZjTjB6SkdCaWJhWHZ3QzFld3IiLCJtYWMiOiI1MDA5NjNjYzc0MGU0NTdhYWMzNTRmZWVlOTY4NWM3YTU4Y2MzZWIxZTkwMzc2NmJiOWZkOTBiMTZmMmU2NTYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iis5TzVWcWt1M01yRkl0WGEvQTk1OUE9PSIsInZhbHVlIjoiRG54V2lCODQ0djVvMmJVZE5GbWFpK3M3NzRlMG9TdXdPa3h4bmxkVU0xcSt1MWRaUmcyZ3pTY0w4dXBTd1Q1djhJZnN0OXhOQ3A5UXRWSjRjVElEV0VucldkVmp0UE12Y3dYc21sVlhuVzlteEVQTGZQRmI4M1dvQzJ3Z3oyb1AiLCJtYWMiOiJjY2M5ZWI5ZTVjZjBiOTE3ZDI2OWE2ZDgwNjc1MDhhNDQwMGMxZmY4MzZjNDQ4OGE4OWQ3YzE3NTI2ZGM2NzdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 351\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\ncache-control: max-age=31536000\r\nexpires: Mon, 31 May 2027 23:04:21 GMT\r\nvary: User-Agent\r\naccept-ranges: bytes\r\nage: 9143\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9uQxk36u305e5eyg5tv8aje6Aqd0PkFoAPJp%2FWiuoDeLkMXAN4HkBEDUyt0mlgcKjvYnEhdnBNnuiW5994f579%2B9FpuSsB8r6AhLZCAjGdWyN00%2FJFuuTe1RBoTYHxvFqw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a04a7d3688d5b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":351,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 13, 2-bit colormap, non-interlaced","md5":"fd273ad5f3d1e33a14e6fd37860a58a3","sha1":"a0891a0bb126e310d6f963108c875c52b5f0db5c","sha256":"1fce31ae1ba50ed9e3e01f06dfe4866bd4132847dccbc1de171b455c990636e8","sha512":"daef9968e8706e62a91288c11f8573533868e91a8d858b50bb6baae7f42b30b3c0a97b49ee902c4f28285bfdb6d049b910a997c14af60f495e32f8c16876edf7","ssdeep":"","tlshash":"35e020e1b1709ed0c5472325a5172240fef3ca094fe24504ba69e1448d18fcf5f747d2","first_seen":"2025-08-21T23:09:42.483866Z","last_seen":"2026-07-04T12:30:40.650142Z","times_seen":1721,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/frontend/assets/en/js/currency.js","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:46.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /frontend/assets/en/js/currency.js HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/frontend/assets/en/js/deferred-imports.js\r\nCookie: XSRF-TOKEN=eyJpdiI6InpJT3RSb2lnLzcxejBuc3lRdkU3cnc9PSIsInZhbHVlIjoiczQ4WDJkSE04d25YQk01NjZtczFsaFJVQ0NleVN5b1hqb3JiamxiZWVaaDI3cmZIVzc2YmJNZ2hIV1NKZDVLcUtaVWc0Ymx0d1haZnZwWmxGOXBWNEM3eWFBUlZQTmtqN2tja3Rhbk1iS2wrUjMyaDkvZEt5S1MvSnY4Y0NYR0YiLCJtYWMiOiI3YWViYmY2MWE0MDFhNDUxYzEyYmFjNWI4YzUxYmQ0OTBlZjNkZTMxNzY2Yzc4NWRkNWEyMGRmYmVhYmNjOGNjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkIycHdseU5KeE1lQXoyQ2ZRR1JxbVE9PSIsInZhbHVlIjoiQVBQcitQVUs3aW43UFc3eFBVdFBxQnpZaDR5cGZ6RStyclFjOGJ2MW9BbURtT2FuZXgrZXdxUTN1OFB5by9PdlA1VkRQQnhzc2lCL3pLVy8rVU56WG1iU3RRRHlWNzhQeGJWUjlwWFRxSEdhNytNeTFUbmRzZU9YVm45cEZ1QXkiLCJtYWMiOiI3NGQ3ZDRiYTNhMTE1MGY5ODBlYjUxYTI5NWYyZmUwYmE3NDc2YjQwNjc5OTdiMDZmMzNiNzBmZDYyMjg3OWY4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:46 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding,User-Agent\r\nlast-modified: Fri, 13 Mar 2026 05:05:58 GMT\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eW6b269e9h6EBKA8rJAK7gd1mhX5TWHo%2BNrCYYUq3bIAWHoMXyF9V5tIAI23tE%2F0xq%2FDwW4jSpb%2BSoPADCjN%2BA432P1ugmmibaE2E68FxTB4y2tgfw%2FhOP8id55fy97qoQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a04a7d426e6bb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4746,"size_decoded":0,"mime_type":"text/javascript","magic":"C++ source, Unicode text, UTF-8 text","md5":"4160b6922867907ece073fc2c064ebc7","sha1":"e92a9d8bab66d120ecf7d4f39bc6c7fb7dc60dc1","sha256":"8d4194c5892b959b1bfe12f8ef98473cd58e94b6b68d9b20bb6893fe9b178640","sha512":"e5c81b8851ed78c8aa5bb165f43e5cd5c72f7fb8d3d81ad14c78e88a36d5778e9fdd360dda8737f61de09c442534d2ff857ce20dc2c9c2e0c473e934d504161a","ssdeep":"96:mkMuTXwIKaqEl0Y1ry6YigPWQmxgbKWjdsaqmo6n:mkNbqCo6YVWQOgbKWjds6n","tlshash":"0ba1fdd86a634590c2713199484f7c80a4f2a63b7c09bacab85f810c2f4dc1de935bfb","first_seen":"2026-05-03T18:34:41.365318Z","last_seen":"2026-06-16T05:28:50.787439Z","times_seen":736,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/frontend/assets/en/js/config.js","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:44.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /frontend/assets/en/js/config.js HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9qUitpNHljMC9xVXlOajkwd2ZoK0E9PSIsInZhbHVlIjoiWGVjQW51c3laQ1QvbEhJQ1I2MFRrWHNtNEl6cVRoOWg4ZGNmaDJKcWxGMTRkcFFhRU5XcFBMSC9qbGgzSzNXVVdKWUZNeDlwaVVoOFUranZaR3pGSEFYMlJMSGFsb3lYK09oTHVONDlrYy9SR1ZjTjB6SkdCaWJhWHZ3QzFld3IiLCJtYWMiOiI1MDA5NjNjYzc0MGU0NTdhYWMzNTRmZWVlOTY4NWM3YTU4Y2MzZWIxZTkwMzc2NmJiOWZkOTBiMTZmMmU2NTYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iis5TzVWcWt1M01yRkl0WGEvQTk1OUE9PSIsInZhbHVlIjoiRG54V2lCODQ0djVvMmJVZE5GbWFpK3M3NzRlMG9TdXdPa3h4bmxkVU0xcSt1MWRaUmcyZ3pTY0w4dXBTd1Q1djhJZnN0OXhOQ3A5UXRWSjRjVElEV0VucldkVmp0UE12Y3dYc21sVlhuVzlteEVQTGZQRmI4M1dvQzJ3Z3oyb1AiLCJtYWMiOiJjY2M5ZWI5ZTVjZjBiOTE3ZDI2OWE2ZDgwNjc1MDhhNDQwMGMxZmY4MzZjNDQ4OGE4OWQ3YzE3NTI2ZGM2NzdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:44 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sat, 14 Mar 2026 21:28:22 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6rNTG%2FwAvYx7ZIuJrWWAvygAQ0qtsYJKlZihpDwXY%2F70BfqcnP7U68bq%2Fe3T1Z1uxsiXWgjKs5KXSW9KmVRJ91kYnFmdsQCFokbRFEXTr3TCdVMSzX4TwnPFV%2B5wFQLyqA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a04a7d3658aab51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":782,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"3d4b19fc39d88043bdbb9c096f385843","sha1":"6f41533a8c20e52830c28f9d4cc62e354fc29969","sha256":"ac1a70193e1bc0e8a7ba774ccfbb01a2b0906ec4478d3c94b8dd49eba94b34d8","sha512":"cab9965c797644d298334f1c0bc6a51f5fe22286f97b038839ce5e29777d97ec56bd89466b361f4193466d0b1b76ba997b9943b8b7821bb42b9295e2e34d6e01","ssdeep":"","tlshash":"c401d06fc17488032df2129eba462b29f512423f076cc06a71bd516c2f7a26fd6471c1","first_seen":"2026-05-03T18:32:03.512014Z","last_seen":"2026-06-16T05:28:50.813945Z","times_seen":794,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/frontend/assets/en/js/loader.js","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:44.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /frontend/assets/en/js/loader.js HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9qUitpNHljMC9xVXlOajkwd2ZoK0E9PSIsInZhbHVlIjoiWGVjQW51c3laQ1QvbEhJQ1I2MFRrWHNtNEl6cVRoOWg4ZGNmaDJKcWxGMTRkcFFhRU5XcFBMSC9qbGgzSzNXVVdKWUZNeDlwaVVoOFUranZaR3pGSEFYMlJMSGFsb3lYK09oTHVONDlrYy9SR1ZjTjB6SkdCaWJhWHZ3QzFld3IiLCJtYWMiOiI1MDA5NjNjYzc0MGU0NTdhYWMzNTRmZWVlOTY4NWM3YTU4Y2MzZWIxZTkwMzc2NmJiOWZkOTBiMTZmMmU2NTYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iis5TzVWcWt1M01yRkl0WGEvQTk1OUE9PSIsInZhbHVlIjoiRG54V2lCODQ0djVvMmJVZE5GbWFpK3M3NzRlMG9TdXdPa3h4bmxkVU0xcSt1MWRaUmcyZ3pTY0w4dXBTd1Q1djhJZnN0OXhOQ3A5UXRWSjRjVElEV0VucldkVmp0UE12Y3dYc21sVlhuVzlteEVQTGZQRmI4M1dvQzJ3Z3oyb1AiLCJtYWMiOiJjY2M5ZWI5ZTVjZjBiOTE3ZDI2OWE2ZDgwNjc1MDhhNDQwMGMxZmY4MzZjNDQ4OGE4OWQ3YzE3NTI2ZGM2NzdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:44 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sat, 14 Mar 2026 21:28:22 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ofb4TNINd%2BzmzDJ5E8NE2qiuy9cfuaF5uQHAT%2BKtFHcRdOmWequmbVG4jGFzrviCFckZG4eFbo4xMlsmIgfvWR3SqxP%2B9x34NBoV5LJ9DZ3CKMIUULMUfO7PH5LT4pu6RQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a04a7d3658abb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":656,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"7495dbde5ab60ac459b25cc5c0217b0f","sha1":"a3915023aa8e39ab95d7417eef6bdcdedefde3ca","sha256":"80da25369b4c34a14b7deac6d1ca96b307bb42e738f41aea491ccf993ac946a1","sha512":"d95ed327c8180538a84de3b5b3a5fe5d2d261d32db8ceccfd978ecbd999f1ff24cc81955ca6e6482746dc8e951df3019f84457874652e13fff3454458d03c23c","ssdeep":"","tlshash":"aaf0d11a231749a48bf6c66ba3718381febe6133e445d486359f74c07f709d45065cd8","first_seen":"2026-05-03T18:32:03.601612Z","last_seen":"2026-07-04T12:30:40.621326Z","times_seen":994,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/flags/ro.svg","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:44.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /flags/ro.svg HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9qUitpNHljMC9xVXlOajkwd2ZoK0E9PSIsInZhbHVlIjoiWGVjQW51c3laQ1QvbEhJQ1I2MFRrWHNtNEl6cVRoOWg4ZGNmaDJKcWxGMTRkcFFhRU5XcFBMSC9qbGgzSzNXVVdKWUZNeDlwaVVoOFUranZaR3pGSEFYMlJMSGFsb3lYK09oTHVONDlrYy9SR1ZjTjB6SkdCaWJhWHZ3QzFld3IiLCJtYWMiOiI1MDA5NjNjYzc0MGU0NTdhYWMzNTRmZWVlOTY4NWM3YTU4Y2MzZWIxZTkwMzc2NmJiOWZkOTBiMTZmMmU2NTYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iis5TzVWcWt1M01yRkl0WGEvQTk1OUE9PSIsInZhbHVlIjoiRG54V2lCODQ0djVvMmJVZE5GbWFpK3M3NzRlMG9TdXdPa3h4bmxkVU0xcSt1MWRaUmcyZ3pTY0w4dXBTd1Q1djhJZnN0OXhOQ3A5UXRWSjRjVElEV0VucldkVmp0UE12Y3dYc21sVlhuVzlteEVQTGZQRmI4M1dvQzJ3Z3oyb1AiLCJtYWMiOiJjY2M5ZWI5ZTVjZjBiOTE3ZDI2OWE2ZDgwNjc1MDhhNDQwMGMxZmY4MzZjNDQ4OGE4OWQ3YzE3NTI2ZGM2NzdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:44 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EcWe8AxCcLXE%2FgOT7otDG7iJiEAhxen2DHffoscmozOfgp17nYR7cT4gHSHARNz9AXm3OSi1jXKoTQirAHeXM80xFagnVMWd9mpVNxcmrU4y%2FlkOkazfNjZa6ccqhOePsg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a04a7d3688dcb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":352,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b3459066e38308492a7ac98271d7b034","sha1":"bdc08d8b6b3a4ab7eef55fb2b73028001f045581","sha256":"3244688e345eb37de4069b23d32d91b59ecb2c28a14e38aaa4e02678f5d0bb7c","sha512":"5e68e1f9adf42375f8432dfc1a5b8a5f91849b2e3fdaa7ac1de0fb111cce8d61daf0330cca3137ae1ee66e20ba12c7e135114bb565b5f711cc730f8db4e20f81","ssdeep":"","tlshash":"00e0d88595a9c9094a1603795abc70d65123708e158905fc74c42514bd4e79b3c51aac","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-07-05T04:52:57.878625Z","times_seen":5185,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lexenddeca/v25/K2F1fZFYk-dHSE0UPPuwQ5qnJy8.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:45.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/lexenddeca/v25/K2F1fZFYk-dHSE0UPPuwQ5qnJy8.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://qatebixun.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39680\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 31 May 2026 10:59:25 GMT\r\nexpires: Mon, 31 May 2027 10:59:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 52640\r\nlast-modified: Tue, 16 Sep 2025 03:41:06 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39680,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39680, version 1.0","md5":"4f40f9c745b49a141e612eff59f3a917","sha1":"f19c314aad546b6a3ade9ff335318dec6e7a6d37","sha256":"3cad1d144b870d6083c79131c4817b2bcf3b4d76fc4aaeaba2eec295fbaa5cb1","sha512":"63bd4fb636d150b58801a6bfa7b5e9499fe8012c9cbaeaa5313fa4662f6d4fba8eed252b4c9ae24f22dfc72225c9fdbb43236b76096850f391d4494230b1e0a2","ssdeep":"768:nH89JOAPM5r9V1tqir40IKkgqy1g9HbSMPCVGyaalG2:H8fOltjU0IKqy1+GV0yaaz","tlshash":"a703019b60d5afa3c6db1060d74de6538820016e9831e3693c55be1b7cba688f2448ef","first_seen":"2025-09-17T17:21:05.707315Z","last_seen":"2026-07-04T23:31:53.03628Z","times_seen":2508,"resource_available":false,"data":null}},"time_used":786,"timings":{"blocked":313,"dns":16,"connect":64,"send":0,"wait":157,"receive":2,"ssl":230},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/flags/hu.svg","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:44.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /flags/hu.svg HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9qUitpNHljMC9xVXlOajkwd2ZoK0E9PSIsInZhbHVlIjoiWGVjQW51c3laQ1QvbEhJQ1I2MFRrWHNtNEl6cVRoOWg4ZGNmaDJKcWxGMTRkcFFhRU5XcFBMSC9qbGgzSzNXVVdKWUZNeDlwaVVoOFUranZaR3pGSEFYMlJMSGFsb3lYK09oTHVONDlrYy9SR1ZjTjB6SkdCaWJhWHZ3QzFld3IiLCJtYWMiOiI1MDA5NjNjYzc0MGU0NTdhYWMzNTRmZWVlOTY4NWM3YTU4Y2MzZWIxZTkwMzc2NmJiOWZkOTBiMTZmMmU2NTYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iis5TzVWcWt1M01yRkl0WGEvQTk1OUE9PSIsInZhbHVlIjoiRG54V2lCODQ0djVvMmJVZE5GbWFpK3M3NzRlMG9TdXdPa3h4bmxkVU0xcSt1MWRaUmcyZ3pTY0w4dXBTd1Q1djhJZnN0OXhOQ3A5UXRWSjRjVElEV0VucldkVmp0UE12Y3dYc21sVlhuVzlteEVQTGZQRmI4M1dvQzJ3Z3oyb1AiLCJtYWMiOiJjY2M5ZWI5ZTVjZjBiOTE3ZDI2OWE2ZDgwNjc1MDhhNDQwMGMxZmY4MzZjNDQ4OGE4OWQ3YzE3NTI2ZGM2NzdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:44 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MbhDJ0sC7B5j0HYqIugmfvlE%2Fs0%2BcZIXtVp%2BGQ0joGZirqsKTbQW2hJpVI%2Fv5hZXnqsZCn6BTRm3tf9bfGmgR0Et2%2Ba3PIYYaYi6mqxdggbgn8NNQWSWL0s%2FQqmkL1Jnhg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a04a7d3688cbb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":359,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3621c5eb449691cbe1d3bc8757c831a1","sha1":"e7e3674fe42359cc9a376e543d7548418071aea0","sha256":"2c1380bd6fb1a88cabcae439eaf960d4dffa929a74cfe3d44f7552084fc1150b","sha512":"7c66bd80019b994685400d020e37d38ba3c45ee3cec449b83bf8a2e8d08d346e03d6245e81f9b868eab42325782107cbf837f3c057efb2c83a5151b22b1104c7","ssdeep":"","tlshash":"61e0d8caa9e9c90e9a1947694eed71da416270cd21cc01fd71843528fd4d3ef2411764","first_seen":"2023-05-29T23:05:28Z","last_seen":"2026-07-05T04:52:57.805966Z","times_seen":5174,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/flags/ko.png","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:44.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /flags/ko.png HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9qUitpNHljMC9xVXlOajkwd2ZoK0E9PSIsInZhbHVlIjoiWGVjQW51c3laQ1QvbEhJQ1I2MFRrWHNtNEl6cVRoOWg4ZGNmaDJKcWxGMTRkcFFhRU5XcFBMSC9qbGgzSzNXVVdKWUZNeDlwaVVoOFUranZaR3pGSEFYMlJMSGFsb3lYK09oTHVONDlrYy9SR1ZjTjB6SkdCaWJhWHZ3QzFld3IiLCJtYWMiOiI1MDA5NjNjYzc0MGU0NTdhYWMzNTRmZWVlOTY4NWM3YTU4Y2MzZWIxZTkwMzc2NmJiOWZkOTBiMTZmMmU2NTYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iis5TzVWcWt1M01yRkl0WGEvQTk1OUE9PSIsInZhbHVlIjoiRG54V2lCODQ0djVvMmJVZE5GbWFpK3M3NzRlMG9TdXdPa3h4bmxkVU0xcSt1MWRaUmcyZ3pTY0w4dXBTd1Q1djhJZnN0OXhOQ3A5UXRWSjRjVElEV0VucldkVmp0UE12Y3dYc21sVlhuVzlteEVQTGZQRmI4M1dvQzJ3Z3oyb1AiLCJtYWMiOiJjY2M5ZWI5ZTVjZjBiOTE3ZDI2OWE2ZDgwNjc1MDhhNDQwMGMxZmY4MzZjNDQ4OGE4OWQ3YzE3NTI2ZGM2NzdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 1361\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\ncache-control: max-age=31536000\r\nexpires: Mon, 31 May 2027 23:04:21 GMT\r\nvary: User-Agent\r\naccept-ranges: bytes\r\nage: 9143\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HsFyey2Nawov5h9hrd%2BZ3W5FK3w1uxqUddFBa%2FA32qeKOfPvm8HHsU3DPjUPrO7hcZWXjy7chAXcNxf3xS9O3WKclKUmcIhOuP8V5Z14QzHVfJVDTn9agy6wcUF6xdmYXQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a04a7d3688cdb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1361,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"ed87e4c8a4dd16c9c3f8499a0aaa28bd","sha1":"f818a0782047c159ed8e5cd041ad7f09e8fe52fb","sha256":"eb59eb7dcf155a7b38c8f4c9db869ed942bf55a4457e3f4ff0791be4f2c736d5","sha512":"bcf1992bfb1d0ed92e4393e0b85fe5c768ed29285d38a259d0cfb60827537b74d39a925cfc4df58ed8b478d5015fad047a211ec2ddffa5a69b0d08f5abcdab6e","ssdeep":"","tlshash":"05210bad1b7c302cd6f9c5799909fb01ddfb04040c9fa1c59129d6cc28c588b70d5436","first_seen":"2023-05-07T21:05:59Z","last_seen":"2026-07-04T12:30:40.623841Z","times_seen":5310,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/flags/nl.svg","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:44.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /flags/nl.svg HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9qUitpNHljMC9xVXlOajkwd2ZoK0E9PSIsInZhbHVlIjoiWGVjQW51c3laQ1QvbEhJQ1I2MFRrWHNtNEl6cVRoOWg4ZGNmaDJKcWxGMTRkcFFhRU5XcFBMSC9qbGgzSzNXVVdKWUZNeDlwaVVoOFUranZaR3pGSEFYMlJMSGFsb3lYK09oTHVONDlrYy9SR1ZjTjB6SkdCaWJhWHZ3QzFld3IiLCJtYWMiOiI1MDA5NjNjYzc0MGU0NTdhYWMzNTRmZWVlOTY4NWM3YTU4Y2MzZWIxZTkwMzc2NmJiOWZkOTBiMTZmMmU2NTYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iis5TzVWcWt1M01yRkl0WGEvQTk1OUE9PSIsInZhbHVlIjoiRG54V2lCODQ0djVvMmJVZE5GbWFpK3M3NzRlMG9TdXdPa3h4bmxkVU0xcSt1MWRaUmcyZ3pTY0w4dXBTd1Q1djhJZnN0OXhOQ3A5UXRWSjRjVElEV0VucldkVmp0UE12Y3dYc21sVlhuVzlteEVQTGZQRmI4M1dvQzJ3Z3oyb1AiLCJtYWMiOiJjY2M5ZWI5ZTVjZjBiOTE3ZDI2OWE2ZDgwNjc1MDhhNDQwMGMxZmY4MzZjNDQ4OGE4OWQ3YzE3NTI2ZGM2NzdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:44 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NVtRebdwR3PlwjTmRB%2F4rJvSy3Ih6WnZtYyRydElocNT89WvOEHIaH3GZJUy5lc1mwHvH%2F5%2FFASGlhfNn48Zi90O0uUl62Bdg1YMhsPbAg4zT%2Bchz0VqpGTMq98Po%2B3h8g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a04a7d3688ceb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":355,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1932756ac7767c2f33986237417d8731","sha1":"84a604da4f8df24af728a73685c4cc2cad9de962","sha256":"8ca8a2dc879e29edd00a08bffc8d825f67d0988e55538d52e43861bb3af22f83","sha512":"9138b8b056aa4c5a5e0179ba58175ec8b98b2aa66b2a9f0bf17e2defed3b441f9f0d5d91a463bb45ed6f002c6e81d85730338890c3990a604677ded0bfdff8e9","ssdeep":"","tlshash":"d4e0d886a4e989095a1947694eec71d6406270ce218d01fd70853529fe4d3db2451aa8","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-07-05T04:52:57.860515Z","times_seen":6427,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/flags/pl.svg","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:44.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /flags/pl.svg HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9qUitpNHljMC9xVXlOajkwd2ZoK0E9PSIsInZhbHVlIjoiWGVjQW51c3laQ1QvbEhJQ1I2MFRrWHNtNEl6cVRoOWg4ZGNmaDJKcWxGMTRkcFFhRU5XcFBMSC9qbGgzSzNXVVdKWUZNeDlwaVVoOFUranZaR3pGSEFYMlJMSGFsb3lYK09oTHVONDlrYy9SR1ZjTjB6SkdCaWJhWHZ3QzFld3IiLCJtYWMiOiI1MDA5NjNjYzc0MGU0NTdhYWMzNTRmZWVlOTY4NWM3YTU4Y2MzZWIxZTkwMzc2NmJiOWZkOTBiMTZmMmU2NTYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iis5TzVWcWt1M01yRkl0WGEvQTk1OUE9PSIsInZhbHVlIjoiRG54V2lCODQ0djVvMmJVZE5GbWFpK3M3NzRlMG9TdXdPa3h4bmxkVU0xcSt1MWRaUmcyZ3pTY0w4dXBTd1Q1djhJZnN0OXhOQ3A5UXRWSjRjVElEV0VucldkVmp0UE12Y3dYc21sVlhuVzlteEVQTGZQRmI4M1dvQzJ3Z3oyb1AiLCJtYWMiOiJjY2M5ZWI5ZTVjZjBiOTE3ZDI2OWE2ZDgwNjc1MDhhNDQwMGMxZmY4MzZjNDQ4OGE4OWQ3YzE3NTI2ZGM2NzdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:44 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kroge6xpWS6WVMQFtoVZhXGptCc2jY1e2t2GaXcx5A%2FfznAxw4nt72VeB%2FBQI2R0p%2FdwLxwkLAeLOAqT42L6IsswJ3veZWFcHdGYbCza%2BP3xt6XeGoq8b67HPkFJea8MLg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a04a7d3688dab51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":310,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"73699780fe17013ad360d5441cba044d","sha1":"3e37c78fdc79aada415a05c2275c0fdf9664f062","sha256":"e03d57c0f7db7d4dc8eb6a2bc359f3a40591b490130bcfa06fba08d514fbdb07","sha512":"94ef034160ec61a32cd5ce34621c993aa3a14f0fd5d60adb807f7c3c116060d45956297c0213950824c0886292669cfb2aec40c110e32e43049ba733490f6e4b","ssdeep":"","tlshash":"c2e0c2d5a4a9ce4e4e1407758ebcb1e9917270df218d04fc71c52a29fd1e38b2811e99","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-07-05T04:52:57.832443Z","times_seen":5730,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lexenddeca/v25/K2F1fZFYk-dHSE0UPPuwQ5qnJy8.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:45.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/lexenddeca/v25/K2F1fZFYk-dHSE0UPPuwQ5qnJy8.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://qatebixun.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39680\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 31 May 2026 10:59:25 GMT\r\nexpires: Mon, 31 May 2027 10:59:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 52640\r\nlast-modified: Tue, 16 Sep 2025 03:41:06 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39680,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39680, version 1.0","md5":"4f40f9c745b49a141e612eff59f3a917","sha1":"f19c314aad546b6a3ade9ff335318dec6e7a6d37","sha256":"3cad1d144b870d6083c79131c4817b2bcf3b4d76fc4aaeaba2eec295fbaa5cb1","sha512":"63bd4fb636d150b58801a6bfa7b5e9499fe8012c9cbaeaa5313fa4662f6d4fba8eed252b4c9ae24f22dfc72225c9fdbb43236b76096850f391d4494230b1e0a2","ssdeep":"768:nH89JOAPM5r9V1tqir40IKkgqy1g9HbSMPCVGyaalG2:H8fOltjU0IKqy1+GV0yaaz","tlshash":"a703019b60d5afa3c6db1060d74de6538820016e9831e3693c55be1b7cba688f2448ef","first_seen":"2025-09-17T17:21:05.707315Z","last_seen":"2026-07-04T23:31:53.03628Z","times_seen":2508,"resource_available":false,"data":null}},"time_used":708,"timings":{"blocked":308,"dns":0,"connect":64,"send":0,"wait":53,"receive":50,"ssl":224},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/flags/sk.svg","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:44.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /flags/sk.svg HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9qUitpNHljMC9xVXlOajkwd2ZoK0E9PSIsInZhbHVlIjoiWGVjQW51c3laQ1QvbEhJQ1I2MFRrWHNtNEl6cVRoOWg4ZGNmaDJKcWxGMTRkcFFhRU5XcFBMSC9qbGgzSzNXVVdKWUZNeDlwaVVoOFUranZaR3pGSEFYMlJMSGFsb3lYK09oTHVONDlrYy9SR1ZjTjB6SkdCaWJhWHZ3QzFld3IiLCJtYWMiOiI1MDA5NjNjYzc0MGU0NTdhYWMzNTRmZWVlOTY4NWM3YTU4Y2MzZWIxZTkwMzc2NmJiOWZkOTBiMTZmMmU2NTYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iis5TzVWcWt1M01yRkl0WGEvQTk1OUE9PSIsInZhbHVlIjoiRG54V2lCODQ0djVvMmJVZE5GbWFpK3M3NzRlMG9TdXdPa3h4bmxkVU0xcSt1MWRaUmcyZ3pTY0w4dXBTd1Q1djhJZnN0OXhOQ3A5UXRWSjRjVElEV0VucldkVmp0UE12Y3dYc21sVlhuVzlteEVQTGZQRmI4M1dvQzJ3Z3oyb1AiLCJtYWMiOiJjY2M5ZWI5ZTVjZjBiOTE3ZDI2OWE2ZDgwNjc1MDhhNDQwMGMxZmY4MzZjNDQ4OGE4OWQ3YzE3NTI2ZGM2NzdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:44 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, Accept-Encoding,User-Agent\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sYBoibljzIEK44cUtVcvSakZwVhovE1cuCExBnHK8SdBgmaG9s0L%2BeXQbxAL35H%2FmMCVR1hXN0pa787PTaWPXGSErOER%2BJpYEuUw6S%2F1mP3QLrOHjJGEhtCgvxzcvw1THA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a04a7d3688d3b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1637,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6ed3cf547a2f8579e45330fde3095537","sha1":"dfc6023844bb5a110c3d9219c82dd326940ae055","sha256":"c1b338efd99956c2ae0c62fcf559b2d956fa11f71751985d62c9942b061dad6a","sha512":"4ed0e6912bfa55a7bee5b4f6318c3878bff3bf23d5a220225b5e19d207d7f55bd816f06dfb8daf8a5eb4c2e266d0fcce8f40d0f797c81d97a2517e5eba2a3be4","ssdeep":"","tlshash":"193176c55178aa4849c7a76fde7cb8959015a0fd21f940fd7a4a470c956caceaf00cb4","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-07-05T04:52:57.873125Z","times_seen":5175,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/questrial/v19/QdVUSTchPBm7nuUeVf70viFl.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:45.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/questrial/v19/QdVUSTchPBm7nuUeVf70viFl.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://qatebixun.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20668\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 31 May 2026 11:18:00 GMT\r\nexpires: Mon, 31 May 2027 11:18:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 51525\r\nlast-modified: Wed, 10 Sep 2025 16:44:45 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20668,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20668, version 1.0","md5":"0ba39ef25da1708d5ef30d83a36dd90a","sha1":"738e40194d1395962ecc952017e64de4e230c978","sha256":"89ccc12b1889293597ece5fe971b0bc352464a9f7ca870e4f3b473f5940a2025","sha512":"e659bfc87f8af905f4f7b249e24a9bc46a881b17136be68514c1be9bb724a4991aca2f18004f5aad42a1826c7bdb89d60950d5243ed7d5f352a9e91108e63c28","ssdeep":"384:1FAeuYSMqTQZwdmq+tFLgXFLx5PDnIpKdUPn98+eJzkGPe4b6p0b7:1FAejhY84N+vux5PD4rleJzVP3c0b7","tlshash":"a892cf096813426edbc25eb34fd9fef6b02047a615ce3799a53aa5353f49437e8f0181","first_seen":"2025-09-12T08:18:52.008104Z","last_seen":"2026-07-05T00:13:42.166953Z","times_seen":4710,"resource_available":false,"data":null}},"time_used":812,"timings":{"blocked":327,"dns":30,"connect":65,"send":0,"wait":102,"receive":55,"ssl":222},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/embla-carousel@8.6.0/embla-carousel.umd.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:46.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 17:38:50 GMT","end":"Tue, 11 Aug 2026 18:38:47 GMT"},"fingerprint":{"sha1":"85:3A:E3:4D:41:9A:40:A5:EA:4D:21:21:BC:8B:AF:E9:9B:B2:27:3A","sha256":"41:2C:5C:27:2E:1B:0A:16:BA:4A:09:22:08:86:E9:EC:B5:B9:C4:CF:94:00:3A:8F:52:77:35:8C:F9:C4:FC:A4"}}},"request":{"raw":"GET /embla-carousel@8.6.0/embla-carousel.umd.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://qatebixun.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:46 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: a04a7d42e9775688-OSL\r\ncf-cache-status: HIT\r\nfly-request-id: 01KPW5VKFVKVBHQR0ZHVJPPTYF-fra\r\naccess-control-allow-origin: *\r\nage: 9144\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 01 Jun 2027 01:36:46 GMT\r\nlast-modified: Tue, 12 May 2026 10:58:16 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:8Ftdv+N9ebY2udt0rQTtXpm0vONp14Gw+ziwsqxhnmY=:\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":17946,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (17945)","md5":"ccc433e7e2ed8017b86837389e278027","sha1":"ac157e8dec8dddbd9b768674968422d629d59bd9","sha256":"f05b5dbfe37d79b636b9db74ad04ed5e99b4bce369d781b0fb38b0b2ac619e66","sha512":"a62638d1120d541d148cb4714759538c9fa838a93009f3dfa1b840bdd731b3fdb2b201c677ead9c177c5f33af1dfd60ad34bdca57d41bdef2ee957fdfd3a7482","ssdeep":"384:pW3WT2X/jBbU6N/LHq0GFZGPow0Ov7NijEUE2Uy1s2B4fUXH9y0ApP:E3SmrRU6N/LHq0WZGPdzSEGKssAAP","tlshash":"c782b7ec70c2b062639724f9503f9109f37b1881384e9550e678e9e63cb606e9677f9e","first_seen":"2025-04-09T07:37:23.81801Z","last_seen":"2026-07-05T04:07:53.33149Z","times_seen":1519,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":80,"dns":1,"connect":33,"send":0,"wait":67,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@25.12.5/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:46.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@25.12.5/build/js/intlTelInput.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://qatebixun.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 14763\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 25.12.5\r\nx-jsd-version-type: version\r\netag: W/\"9edd-Mk7PJTbzeB2x937UVL88JxWURU8\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Mon, 01 Jun 2026 01:36:46 GMT\r\nage: 1737100\r\nx-served-by: cache-fra-eddf8230046-FRA, cache-hel1410025-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40669,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26135)","md5":"584b32aaa35c260a3b4ddacfce274a42","sha1":"324ecf2536f3781db1f77ed454bf3c271594454f","sha256":"990fdaa51ed5c86f92d670ab5a79dbf7415f34900dc2f443c5a03dca94479475","sha512":"bca5c9cdfd2562a5a1d31e26c974022172e14ebd599e30d3daf091d27a266a820a025b2ea1e1329bf18be3489c51aafca5025db638631452fee03afedd8f8a26","ssdeep":"768:mYJ0FRsgH7XpwJxK6jk4ixVDQtwnixrUT2PXIh+vH/kvzas:mcgHl6Q4ixVDQAsrcGgmHMas","tlshash":"f603b52d6316672babfd8155f4e4a582de6f7a460944886c3dac8fcb0098dc379b3734","first_seen":"2025-11-18T18:36:54.272556Z","last_seen":"2026-07-05T03:34:22.244563Z","times_seen":1013,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/frontend/assets/en/js/geo.js","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:46.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /frontend/assets/en/js/geo.js HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/frontend/assets/en/js/deferred-imports.js\r\nCookie: XSRF-TOKEN=eyJpdiI6InpJT3RSb2lnLzcxejBuc3lRdkU3cnc9PSIsInZhbHVlIjoiczQ4WDJkSE04d25YQk01NjZtczFsaFJVQ0NleVN5b1hqb3JiamxiZWVaaDI3cmZIVzc2YmJNZ2hIV1NKZDVLcUtaVWc0Ymx0d1haZnZwWmxGOXBWNEM3eWFBUlZQTmtqN2tja3Rhbk1iS2wrUjMyaDkvZEt5S1MvSnY4Y0NYR0YiLCJtYWMiOiI3YWViYmY2MWE0MDFhNDUxYzEyYmFjNWI4YzUxYmQ0OTBlZjNkZTMxNzY2Yzc4NWRkNWEyMGRmYmVhYmNjOGNjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkIycHdseU5KeE1lQXoyQ2ZRR1JxbVE9PSIsInZhbHVlIjoiQVBQcitQVUs3aW43UFc3eFBVdFBxQnpZaDR5cGZ6RStyclFjOGJ2MW9BbURtT2FuZXgrZXdxUTN1OFB5by9PdlA1VkRQQnhzc2lCL3pLVy8rVU56WG1iU3RRRHlWNzhQeGJWUjlwWFRxSEdhNytNeTFUbmRzZU9YVm45cEZ1QXkiLCJtYWMiOiI3NGQ3ZDRiYTNhMTE1MGY5ODBlYjUxYTI5NWYyZmUwYmE3NDc2YjQwNjc5OTdiMDZmMzNiNzBmZDYyMjg3OWY4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:46 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 13 Mar 2026 05:05:58 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=My5RX4jssIoufDE2sqMXGQNYHevj022hm%2BxVRIZ6lkhk84TwnrFnTnZ7EzRbggttpqnnj0lob%2Bv%2FHEX67HuUBzMyNYiX9jjO8Fu%2BXCP4lLEjwp8cewXI2%2FFtUxI88vsgHQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a04a7d426e69b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":825,"size_decoded":0,"mime_type":"text/javascript","magic":"C++ source, ASCII text","md5":"b9c760269aeea47905f4d33aaf740c3a","sha1":"14120a6947ffad92c5f9e886b485ec65b3bed3ee","sha256":"556384cb09c3f07d6576faea9d370459e288fbfbe44b1c5e847b2db9dab5690c","sha512":"b594df48a2e062a0618a0443ca35e4b7bcdf55eb2599b8fe782016f29b198210ab39b46e017121f150e27fa14918c37ec05c62c00752e61914b095aa1c087946","ssdeep":"","tlshash":"fd01496552b6466040e771cada6fa2601435e40b374dd8ea7a9f43480f8991dc2b27dd","first_seen":"2026-05-03T18:34:41.313902Z","last_seen":"2026-06-16T05:28:50.816995Z","times_seen":789,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/frontend/assets/en/css/tailwind.min.css","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:44.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /frontend/assets/en/css/tailwind.min.css HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9qUitpNHljMC9xVXlOajkwd2ZoK0E9PSIsInZhbHVlIjoiWGVjQW51c3laQ1QvbEhJQ1I2MFRrWHNtNEl6cVRoOWg4ZGNmaDJKcWxGMTRkcFFhRU5XcFBMSC9qbGgzSzNXVVdKWUZNeDlwaVVoOFUranZaR3pGSEFYMlJMSGFsb3lYK09oTHVONDlrYy9SR1ZjTjB6SkdCaWJhWHZ3QzFld3IiLCJtYWMiOiI1MDA5NjNjYzc0MGU0NTdhYWMzNTRmZWVlOTY4NWM3YTU4Y2MzZWIxZTkwMzc2NmJiOWZkOTBiMTZmMmU2NTYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iis5TzVWcWt1M01yRkl0WGEvQTk1OUE9PSIsInZhbHVlIjoiRG54V2lCODQ0djVvMmJVZE5GbWFpK3M3NzRlMG9TdXdPa3h4bmxkVU0xcSt1MWRaUmcyZ3pTY0w4dXBTd1Q1djhJZnN0OXhOQ3A5UXRWSjRjVElEV0VucldkVmp0UE12Y3dYc21sVlhuVzlteEVQTGZQRmI4M1dvQzJ3Z3oyb1AiLCJtYWMiOiJjY2M5ZWI5ZTVjZjBiOTE3ZDI2OWE2ZDgwNjc1MDhhNDQwMGMxZmY4MzZjNDQ4OGE4OWQ3YzE3NTI2ZGM2NzdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:44 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding, Accept-Encoding,User-Agent\r\nlast-modified: Fri, 13 Mar 2026 05:05:58 GMT\r\ncache-control: max-age=2592000\r\nexpires: Tue, 30 Jun 2026 23:04:21 GMT\r\ncontent-encoding: gzip\r\nage: 9143\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=acy2ZpD9ndcXy3dqyb%2FPPA7l0aLpY%2FbrSDUrmc1jE%2Ffq8SoPONW%2BEGTu2vvTwLXalTlQVQ7tKh0q%2BzgSCZuvYTxVU7%2Bplh0M9ZzyBJ3v2Z8MZLXduTy3usU2NorzBL7PQg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a04a7d3648a3b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95031,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (338)","md5":"659d98ce787484bf73ae3be9b9f409a2","sha1":"2126c85616631cadf0dbe0c15c892e98be9f28c4","sha256":"8dd24d5fdaaf4849b54f1e7bdc59d8f5c098a79f51437c8de032c2eb3f7ebe21","sha512":"7c6ffdb4d4b39c5751653d9e31f8a72d9fd5b4880fba1cef6d377d7d80b84b5f9497813ba26c87ea55eb578afe8765b0e367d6fe554bc8f4bedbd964c5fab466","ssdeep":"768:w9NKXg9rS7N7sa3a9r4oscQxUSnYdjgZonsPDDjSQZk8RLSNKn5MVRkYLk078j8H:kaK+TeSab0g8RWM5+d8cd71","tlshash":"0a93fe17627389ba5d27e0be37ee91193339a047991aedd5becc21018fc52f459e2f08","first_seen":"2026-05-03T18:32:03.493891Z","last_seen":"2026-07-04T12:30:40.634663Z","times_seen":815,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/flags/no.svg","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:44.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /flags/no.svg HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9qUitpNHljMC9xVXlOajkwd2ZoK0E9PSIsInZhbHVlIjoiWGVjQW51c3laQ1QvbEhJQ1I2MFRrWHNtNEl6cVRoOWg4ZGNmaDJKcWxGMTRkcFFhRU5XcFBMSC9qbGgzSzNXVVdKWUZNeDlwaVVoOFUranZaR3pGSEFYMlJMSGFsb3lYK09oTHVONDlrYy9SR1ZjTjB6SkdCaWJhWHZ3QzFld3IiLCJtYWMiOiI1MDA5NjNjYzc0MGU0NTdhYWMzNTRmZWVlOTY4NWM3YTU4Y2MzZWIxZTkwMzc2NmJiOWZkOTBiMTZmMmU2NTYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iis5TzVWcWt1M01yRkl0WGEvQTk1OUE9PSIsInZhbHVlIjoiRG54V2lCODQ0djVvMmJVZE5GbWFpK3M3NzRlMG9TdXdPa3h4bmxkVU0xcSt1MWRaUmcyZ3pTY0w4dXBTd1Q1djhJZnN0OXhOQ3A5UXRWSjRjVElEV0VucldkVmp0UE12Y3dYc21sVlhuVzlteEVQTGZQRmI4M1dvQzJ3Z3oyb1AiLCJtYWMiOiJjY2M5ZWI5ZTVjZjBiOTE3ZDI2OWE2ZDgwNjc1MDhhNDQwMGMxZmY4MzZjNDQ4OGE4OWQ3YzE3NTI2ZGM2NzdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:44 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c4VpZuFFx3H7dOEqONxLIswiI9t1vImBxQBykidsSh3z4AfWvpiw7OLHTSKyP%2B9l61h8DNK%2F8SlIASrz61FsuJ%2BRijgYKQhbRfPt5hD9kXGpF0UOadRY8QnOby1LXXGFDQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a04a7d3688cfb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":424,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ebe2b7f4aefa3c8869fa9f0a402210bb","sha1":"dc0ceab0f048a8c8ac97e3277f2ed237b974f005","sha256":"7021694edfe47096e0aa9a5ea85a6851181f723ae3a8806779a8e01702325804","sha512":"f176bd1aa2416960b0eec285da0b91e983a162a1d475bac76786b33ab0aede45783d422ce4d909b62ee6e6ba1fa55bf5b6b6ffcdf2463e305941e2d804073da5","ssdeep":"","tlshash":"d6e0e5809b9d1a6da91283a41ddcb885022b70e6328c0ced658dae987f412eaf466264","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-07-05T04:52:57.824735Z","times_seen":4718,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/frontend/assets/en/js/scripts.js?v=20260329-card-hover-fix","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:44.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /frontend/assets/en/js/scripts.js?v=20260329-card-hover-fix HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9qUitpNHljMC9xVXlOajkwd2ZoK0E9PSIsInZhbHVlIjoiWGVjQW51c3laQ1QvbEhJQ1I2MFRrWHNtNEl6cVRoOWg4ZGNmaDJKcWxGMTRkcFFhRU5XcFBMSC9qbGgzSzNXVVdKWUZNeDlwaVVoOFUranZaR3pGSEFYMlJMSGFsb3lYK09oTHVONDlrYy9SR1ZjTjB6SkdCaWJhWHZ3QzFld3IiLCJtYWMiOiI1MDA5NjNjYzc0MGU0NTdhYWMzNTRmZWVlOTY4NWM3YTU4Y2MzZWIxZTkwMzc2NmJiOWZkOTBiMTZmMmU2NTYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iis5TzVWcWt1M01yRkl0WGEvQTk1OUE9PSIsInZhbHVlIjoiRG54V2lCODQ0djVvMmJVZE5GbWFpK3M3NzRlMG9TdXdPa3h4bmxkVU0xcSt1MWRaUmcyZ3pTY0w4dXBTd1Q1djhJZnN0OXhOQ3A5UXRWSjRjVElEV0VucldkVmp0UE12Y3dYc21sVlhuVzlteEVQTGZQRmI4M1dvQzJ3Z3oyb1AiLCJtYWMiOiJjY2M5ZWI5ZTVjZjBiOTE3ZDI2OWE2ZDgwNjc1MDhhNDQwMGMxZmY4MzZjNDQ4OGE4OWQ3YzE3NTI2ZGM2NzdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:44 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding,User-Agent\r\nlast-modified: Mon, 04 May 2026 16:47:04 GMT\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CZT%2BvX6uq3A7x1PtoRTuBuSUhFr67oPWgrGRx5WcJUeaV%2FDHuUtY2U7iXcKb5FKZ9%2FFvBR0mPjwqexkbNEwMtGtnD1I71l58a1GuFJqCd8ylsr8lIslvPHmlbhYllay6aA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a04a7d3658afb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8260,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"5027dd34bbabb7baf24a353d73d95dc4","sha1":"069b7ab6533d9ce490e3562f383c3787f4193b04","sha256":"11f21fea558292de4502dd467e89d84ae0e998fa53aa3eb75f5599302463d617","sha512":"c471a8a425b49565ed9c8f106466d01f754ec9e61a994dd441f452a61800a742cd485b334a6b004354b78eacd802c7f7cbb01b3a30993718fe06d02379b2983b","ssdeep":"192:5vaUOUNrDeAHVSx8x70XkyEeiK6cthSiQGfkDf9Idm:5rOjAHKX1TFxtyGod","tlshash":"1d022f6a65b61436403311af9bcf825a2b1530c7ba05eead3f0c83042fc976c59f1be9","first_seen":"2026-05-06T05:56:06.68471Z","last_seen":"2026-06-16T05:28:50.797201Z","times_seen":585,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qatebixun.live/frontend/assets/en/images/responsive/green/hero-2560.avif","fqdn":"qatebixun.live","domain":"qatebixun.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qatebixun.live/","date":"2026-06-01T01:36:44.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatebixun.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 13:24:26 GMT","end":"Mon, 24 Aug 2026 13:24:25 GMT"},"fingerprint":{"sha1":"91:E8:12:69:ED:D9:5F:44:6C:CE:80:C6:6B:D9:E9:94:3F:DA:AA:85","sha256":"BB:90:52:07:28:BC:5D:50:14:E5:51:FD:F1:38:F5:AE:12:5D:93:79:7F:DA:FF:E1:76:CB:37:F7:FD:2A:1C:03"}}},"request":{"raw":"GET /frontend/assets/en/images/responsive/green/hero-2560.avif HTTP/1.1\r\nHost: qatebixun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qatebixun.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9qUitpNHljMC9xVXlOajkwd2ZoK0E9PSIsInZhbHVlIjoiWGVjQW51c3laQ1QvbEhJQ1I2MFRrWHNtNEl6cVRoOWg4ZGNmaDJKcWxGMTRkcFFhRU5XcFBMSC9qbGgzSzNXVVdKWUZNeDlwaVVoOFUranZaR3pGSEFYMlJMSGFsb3lYK09oTHVONDlrYy9SR1ZjTjB6SkdCaWJhWHZ3QzFld3IiLCJtYWMiOiI1MDA5NjNjYzc0MGU0NTdhYWMzNTRmZWVlOTY4NWM3YTU4Y2MzZWIxZTkwMzc2NmJiOWZkOTBiMTZmMmU2NTYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iis5TzVWcWt1M01yRkl0WGEvQTk1OUE9PSIsInZhbHVlIjoiRG54V2lCODQ0djVvMmJVZE5GbWFpK3M3NzRlMG9TdXdPa3h4bmxkVU0xcSt1MWRaUmcyZ3pTY0w4dXBTd1Q1djhJZnN0OXhOQ3A5UXRWSjRjVElEV0VucldkVmp0UE12Y3dYc21sVlhuVzlteEVQTGZQRmI4M1dvQzJ3Z3oyb1AiLCJtYWMiOiJjY2M5ZWI5ZTVjZjBiOTE3ZDI2OWE2ZDgwNjc1MDhhNDQwMGMxZmY4MzZjNDQ4OGE4OWQ3YzE3NTI2ZGM2NzdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 01:36:44 GMT\r\ncontent-type: image/avif\r\ncontent-length: 23078\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 01 Apr 2026 13:11:38 GMT\r\nvary: User-Agent\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P0fFkVt8VF6JKfbc15OT41gY2tAPHTUCq07cHwlT9InUfpXqH5wGqZ0Qn3UHmj4qSsOayL%2Fj7Ho03BYmTH%2FtuaRolz35pgRlniGTG%2BYH7brt4rkVBPyILHNH5DS%2FpzzqsQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a04a7d3698eab51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23078,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"a77a8641c74f47ffa67df79d85eefc75","sha1":"54a933f6e55c6a3f88a3a7920bd5d7f9abe6fc72","sha256":"a2c53ae17abffafd144cc830090e6e16ccca55e6d5728bca442dde1af2ebdd66","sha512":"21d9ca486ce9a0412f8f779a18b9acc4143aca89687606a2090be7915256d9891fa3bd2ee0a18c3b5503999b243df46b6b565eeb4a736378c7d7d090eb306d33","ssdeep":"384:xQl/oSosLYlP9G2d7ugm7icaf8ZWZxp0GT8ZHcEoam3EvxJGi8V/euIdL5:xQNJ+X7ugm7cf8ZWPeGYGomcbU/adL5","tlshash":"bda2e0324afb4c08e3586d375cad05ce5a117f790650d8a6f41bcecd76a00fed2888b0","first_seen":"2026-05-03T18:32:03.577308Z","last_seen":"2026-06-16T05:28:50.759115Z","times_seen":595,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"qatebixun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}