{"report_id":"b43f4a40-84e8-4890-92d3-16f5f8db3bc4","version":6,"status":"done","tags":[],"date":"2025-11-21T15:36:06Z","url":{"schema":"https","addr":"qafiro.online/","fqdn":"qafiro.online","domain":"qafiro.online","tld":"online"},"ip":{"addr":"104.21.41.185","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"qafiro.online/","fqdn":"qafiro.online","domain":"qafiro.online","tld":"online"},"title":"qafiro.online/","dom":{"size":80,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"e4fd67ec895a157030e6f0982d66a5ec","sha1":"5bde172699e9cf0b443df25fb74c524afb8ca316","sha256":"33671490ed32898bc0a1a139fc620a6cd77c02e64ad2ad6ab37c87b58368a7c8","sha512":"2139a625d0961eb41b9515bf40521185cb19dbe0fb31432b6e6973a7d7447cb09fd5aa252a52813dbca3c1a8a26518e9666050151b3133d4b79376c2f08f1e2a","ssdeep":"","tlshash":"9ea012ed6050004108a077492c91368b34899185100815005c42e47089041118c03084","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"qafiro.online/","fqdn":"qafiro.online","domain":"qafiro.online","tld":"online"},"ip":{"addr":"104.21.41.185","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98","country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-26T15:36:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"qafiro.online","ip":{"addr":"172.67.166.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-19","domain_rank":0,"first_seen":"2025-10-15T00:57:02.892443Z","last_seen":"2025-10-15T00:57:02.892443Z","alert_count":0,"request_count":2,"received_data":6698,"sent_data":915,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"qafiro.online/","fqdn":"qafiro.online","domain":"qafiro.online","tld":"online"},"ip":{"addr":"172.67.166.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-21T15:35:44.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qafiro.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 10:26:53 GMT","end":"Mon, 16 Feb 2026 11:25:38 GMT"},"fingerprint":{"sha1":"D7:DD:1C:EE:4F:EE:9F:7B:90:A0:16:75:19:4E:32:C3:E1:7E:D5:24","sha256":"89:35:19:39:22:98:3B:61:1F:08:0E:79:36:15:63:32:B0:8D:76:7B:32:35:4D:DC:57:98:C0:32:70:7B:A9:AE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: qafiro.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 21 Nov 2025 15:35:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oMyNDy3H3aFwKejN1gGp2%2F%2BV0uM5YlQQFTkMtu3QmPcKIekmNRThHofWtq%2BxkZJkfLO%2Fq6rnRwVhOVoup9p15EEoh59l7OGTDhSi\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9a2142380f770b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"64563df4339add36a96ed5e54628bcc5","sha1":"081663f0606b81dfba8f3e5fbd3258e4dc5a83b8","sha256":"a8e9b8233b7f91c87b2f52bc8c48f17e1c76d334235455cf718686e73c48e7f2","sha512":"1191204e14c6cb98efab41d21ce43bcde6be0cc9ab02e2b66b4b634435ccb9edf8a4bf55ceec2b899bd1498821874134cc5a8f28a408709a137b312184798c61","ssdeep":"","tlshash":"7390044d345000c100c1c70f7c313ddf30c5f0c7001c30045c07c4704f054515c53044","first_seen":"2023-10-14T03:06:59Z","last_seen":"2026-07-17T10:28:44.03322Z","times_seen":60,"resource_available":true,"data":null}},"time_used":286,"timings":{"blocked":71,"dns":50,"connect":1,"send":0,"wait":137,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qafiro.online/favicon.ico","fqdn":"qafiro.online","domain":"qafiro.online","tld":"online"},"ip":{"addr":"172.67.166.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qafiro.online/","date":"2025-11-21T15:35:45.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qafiro.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 10:26:53 GMT","end":"Mon, 16 Feb 2026 11:25:38 GMT"},"fingerprint":{"sha1":"D7:DD:1C:EE:4F:EE:9F:7B:90:A0:16:75:19:4E:32:C3:E1:7E:D5:24","sha256":"89:35:19:39:22:98:3B:61:1F:08:0E:79:36:15:63:32:B0:8D:76:7B:32:35:4D:DC:57:98:C0:32:70:7B:A9:AE"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: qafiro.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qafiro.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 21 Nov 2025 15:35:45 GMT\r\ncontent-type: image/x-icon\r\nvary: accept-encoding\r\nlast-modified: Mon, 15 Jan 2024 13:30:35 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"65a5337b-1536\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F4SphY%2BwbAKTh4HMha8mq5Wf3EDdxuJUTSZH95Sdu3%2FVZ9PdC7u3RaEBGf5nommQULwG0fB6o%2B3YMjeAyqruYY469fCyBmCojjD8zgs%3D\"}]}\r\ncf-ray: 9a21423a5e615ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5430,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"b0a102991e7332643ae57365023c00c8","sha1":"4ea4c55c982e08bda104d2e8e981594c067cef24","sha256":"1dfc58ffbcb07c761f79eb6b46f50b3789bd21e41a0b4cb1aca82b1dd8020fcc","sha512":"08e1a60f257755ed18478c56e5684627fcd3d3077325648526260bb06526bc07da1a4bd26b3382add493ffb91f6958221c76c0f7f968e32e81c9943a559bbd57","ssdeep":"96:kVHBkspHt4BHWHW7DgdzDHzHiHzHVHHZHBHH7HHHQHbHHH7HHHHHHHGHHHgHHHHo:ZxN","tlshash":"23b104a06de4d470c59876b0b612cbf957f4efe530541a4e16667e2bfc32266b703e08","first_seen":"2023-04-05T03:26:14Z","last_seen":"2026-07-17T22:43:23.564633Z","times_seen":441,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}