{"report_id":"c4b901a0-ea4c-4a84-878c-a8a8a206ceb2","version":6,"status":"done","tags":[],"date":"2025-07-31T22:57:59Z","url":{"schema":"http","addr":"iqsg700xc24.top/","fqdn":"iqsg700xc24.top","domain":"iqsg700xc24.top","tld":"top"},"ip":{"addr":"104.21.71.93","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ssq7y8grhyv.xyz/?domain=iqsg700xc24.top","fqdn":"ssq7y8grhyv.xyz","domain":"ssq7y8grhyv.xyz","tld":"xyz"},"title":"ssq7y8grhyv.xyz/?domain=iqsg700xc24.top"},"submit":{"url":{"schema":"http","addr":"iqsg700xc24.top/","fqdn":"iqsg700xc24.top","domain":"iqsg700xc24.top","tld":"top"},"ip":{"addr":"104.21.71.93","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-04T22:57:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":8,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-31T22:57:39Z","timestamp":1754002659,"ip_dst":{"addr":"172.18.0.18","port":44468,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"172.247.112.162","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"severity":"low","alert":"ET INFO Observed ZeroSSL Certificate for Suspicious TLD (.xyz)","source":"{\"timestamp\":\"2025-07-31T22:57:39.791808+0000\",\"flow_id\":1464905784086033,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.247.112.162\",\"src_port\":443,\"dest_ip\":\"172.18.0.18\",\"dest_port\":44468,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031228,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL Certificate for Suspicious TLD (.xyz)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=*.g1jgsl9oyum.xyz\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL ECC Domain Secure Site CA\",\"serial\":\"00:CA:29:49:10:C4:DB:C0:1B:62:26:34:7E:E2:AF:D3:2C\",\"fingerprint\":\"33:cf:45:ce:c0:aa:05:63:91:65:fc:f2:a8:a8:de:c7:2f:86:29:93\",\"sni\":\"xh21d4m.g1jgsl9oyum.xyz\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-07-31T00:00:00\",\"notafter\":\"2025-10-29T23:59:59\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"fe0146829eef1917ba6c2dd4f5c08905\",\"string\":\"771,49196,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1216,\"bytes_toclient\":3641,\"start\":\"2025-07-31T22:57:39.314897+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-31T22:57:39Z","timestamp":1754002659,"ip_dst":{"addr":"172.18.0.18","port":44468,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"172.247.112.162","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"severity":"low","alert":"ET INFO Observed ZeroSSL SSL/TLS Certificate","source":"{\"timestamp\":\"2025-07-31T22:57:39.791808+0000\",\"flow_id\":1464905784086033,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.247.112.162\",\"src_port\":443,\"dest_ip\":\"172.18.0.18\",\"dest_port\":44468,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031231,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL SSL/TLS Certificate\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=*.g1jgsl9oyum.xyz\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL ECC Domain Secure Site CA\",\"serial\":\"00:CA:29:49:10:C4:DB:C0:1B:62:26:34:7E:E2:AF:D3:2C\",\"fingerprint\":\"33:cf:45:ce:c0:aa:05:63:91:65:fc:f2:a8:a8:de:c7:2f:86:29:93\",\"sni\":\"xh21d4m.g1jgsl9oyum.xyz\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-07-31T00:00:00\",\"notafter\":\"2025-10-29T23:59:59\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"fe0146829eef1917ba6c2dd4f5c08905\",\"string\":\"771,49196,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1216,\"bytes_toclient\":3641,\"start\":\"2025-07-31T22:57:39.314897+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-31T22:57:39Z","timestamp":1754002659,"ip_dst":{"addr":"172.18.0.18","port":44484,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"172.247.112.162","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"severity":"low","alert":"ET INFO Observed ZeroSSL Certificate for Suspicious TLD (.xyz)","source":"{\"timestamp\":\"2025-07-31T22:57:39.795673+0000\",\"flow_id\":1344663879667331,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.247.112.162\",\"src_port\":443,\"dest_ip\":\"172.18.0.18\",\"dest_port\":44484,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031228,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL Certificate for Suspicious TLD (.xyz)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=*.g1jgsl9oyum.xyz\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL ECC Domain Secure Site CA\",\"serial\":\"00:CA:29:49:10:C4:DB:C0:1B:62:26:34:7E:E2:AF:D3:2C\",\"fingerprint\":\"33:cf:45:ce:c0:aa:05:63:91:65:fc:f2:a8:a8:de:c7:2f:86:29:93\",\"sni\":\"xh21d4m.g1jgsl9oyum.xyz\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-07-31T00:00:00\",\"notafter\":\"2025-10-29T23:59:59\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"fe0146829eef1917ba6c2dd4f5c08905\",\"string\":\"771,49196,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1080,\"bytes_toclient\":3643,\"start\":\"2025-07-31T22:57:39.315011+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-31T22:57:39Z","timestamp":1754002659,"ip_dst":{"addr":"172.18.0.18","port":44484,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"172.247.112.162","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"severity":"low","alert":"ET INFO Observed ZeroSSL SSL/TLS Certificate","source":"{\"timestamp\":\"2025-07-31T22:57:39.795673+0000\",\"flow_id\":1344663879667331,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.247.112.162\",\"src_port\":443,\"dest_ip\":\"172.18.0.18\",\"dest_port\":44484,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031231,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL SSL/TLS Certificate\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=*.g1jgsl9oyum.xyz\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL ECC Domain Secure Site CA\",\"serial\":\"00:CA:29:49:10:C4:DB:C0:1B:62:26:34:7E:E2:AF:D3:2C\",\"fingerprint\":\"33:cf:45:ce:c0:aa:05:63:91:65:fc:f2:a8:a8:de:c7:2f:86:29:93\",\"sni\":\"xh21d4m.g1jgsl9oyum.xyz\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-07-31T00:00:00\",\"notafter\":\"2025-10-29T23:59:59\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"fe0146829eef1917ba6c2dd4f5c08905\",\"string\":\"771,49196,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1080,\"bytes_toclient\":3643,\"start\":\"2025-07-31T22:57:39.315011+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-31T22:57:43Z","timestamp":1754002663,"ip_dst":{"addr":"172.18.0.18","port":35724,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"23.224.132.202","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"severity":"low","alert":"ET INFO Observed ZeroSSL Certificate for Suspicious TLD (.xyz)","source":"{\"timestamp\":\"2025-07-31T22:57:43.311148+0000\",\"flow_id\":1166856528777535,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"23.224.132.202\",\"src_port\":443,\"dest_ip\":\"172.18.0.18\",\"dest_port\":35724,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031228,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL Certificate for Suspicious TLD (.xyz)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=*.g1jgsl9oyum.xyz\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL ECC Domain Secure Site CA\",\"serial\":\"00:CA:29:49:10:C4:DB:C0:1B:62:26:34:7E:E2:AF:D3:2C\",\"fingerprint\":\"33:cf:45:ce:c0:aa:05:63:91:65:fc:f2:a8:a8:de:c7:2f:86:29:93\",\"sni\":\"xh21d4m.g1jgsl9oyum.xyz\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-07-31T00:00:00\",\"notafter\":\"2025-10-29T23:59:59\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"fe0146829eef1917ba6c2dd4f5c08905\",\"string\":\"771,49196,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1080,\"bytes_toclient\":3643,\"start\":\"2025-07-31T22:57:42.839999+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-31T22:57:43Z","timestamp":1754002663,"ip_dst":{"addr":"172.18.0.18","port":35724,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"23.224.132.202","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"severity":"low","alert":"ET INFO Observed ZeroSSL SSL/TLS Certificate","source":"{\"timestamp\":\"2025-07-31T22:57:43.311148+0000\",\"flow_id\":1166856528777535,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"23.224.132.202\",\"src_port\":443,\"dest_ip\":\"172.18.0.18\",\"dest_port\":35724,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031231,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL SSL/TLS Certificate\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=*.g1jgsl9oyum.xyz\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL ECC Domain Secure Site CA\",\"serial\":\"00:CA:29:49:10:C4:DB:C0:1B:62:26:34:7E:E2:AF:D3:2C\",\"fingerprint\":\"33:cf:45:ce:c0:aa:05:63:91:65:fc:f2:a8:a8:de:c7:2f:86:29:93\",\"sni\":\"xh21d4m.g1jgsl9oyum.xyz\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-07-31T00:00:00\",\"notafter\":\"2025-10-29T23:59:59\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"fe0146829eef1917ba6c2dd4f5c08905\",\"string\":\"771,49196,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1080,\"bytes_toclient\":3643,\"start\":\"2025-07-31T22:57:42.839999+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-31T22:57:43Z","timestamp":1754002663,"ip_dst":{"addr":"172.18.0.18","port":35722,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"23.224.132.202","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"severity":"low","alert":"ET INFO Observed ZeroSSL Certificate for Suspicious TLD (.xyz)","source":"{\"timestamp\":\"2025-07-31T22:57:43.317255+0000\",\"flow_id\":1177057076105332,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"23.224.132.202\",\"src_port\":443,\"dest_ip\":\"172.18.0.18\",\"dest_port\":35722,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031228,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL Certificate for Suspicious TLD (.xyz)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=*.g1jgsl9oyum.xyz\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL ECC Domain Secure Site CA\",\"serial\":\"00:CA:29:49:10:C4:DB:C0:1B:62:26:34:7E:E2:AF:D3:2C\",\"fingerprint\":\"33:cf:45:ce:c0:aa:05:63:91:65:fc:f2:a8:a8:de:c7:2f:86:29:93\",\"sni\":\"xh21d4m.g1jgsl9oyum.xyz\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-07-31T00:00:00\",\"notafter\":\"2025-10-29T23:59:59\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"fe0146829eef1917ba6c2dd4f5c08905\",\"string\":\"771,49196,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1216,\"bytes_toclient\":3641,\"start\":\"2025-07-31T22:57:42.839796+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-31T22:57:43Z","timestamp":1754002663,"ip_dst":{"addr":"172.18.0.18","port":35722,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"23.224.132.202","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"severity":"low","alert":"ET INFO Observed ZeroSSL SSL/TLS Certificate","source":"{\"timestamp\":\"2025-07-31T22:57:43.317255+0000\",\"flow_id\":1177057076105332,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"23.224.132.202\",\"src_port\":443,\"dest_ip\":\"172.18.0.18\",\"dest_port\":35722,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031231,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL SSL/TLS Certificate\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=*.g1jgsl9oyum.xyz\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL ECC Domain Secure Site CA\",\"serial\":\"00:CA:29:49:10:C4:DB:C0:1B:62:26:34:7E:E2:AF:D3:2C\",\"fingerprint\":\"33:cf:45:ce:c0:aa:05:63:91:65:fc:f2:a8:a8:de:c7:2f:86:29:93\",\"sni\":\"xh21d4m.g1jgsl9oyum.xyz\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-07-31T00:00:00\",\"notafter\":\"2025-10-29T23:59:59\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"fe0146829eef1917ba6c2dd4f5c08905\",\"string\":\"771,49196,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1216,\"bytes_toclient\":3641,\"start\":\"2025-07-31T22:57:42.839796+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"a2v70wm7dxt.xyz","ip":{"addr":"104.21.15.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-18","domain_rank":0,"first_seen":"2025-07-31T22:53:08.942105Z","last_seen":"2025-07-31T22:53:08.942105Z","alert_count":0,"request_count":17,"received_data":707941,"sent_data":8288,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"iqsg700xc24.top","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-07-31","domain_rank":0,"first_seen":"2025-07-31T22:57:59.844271Z","last_seen":"2025-07-31T22:57:59.844271Z","alert_count":0,"request_count":10,"received_data":206318,"sent_data":4576,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"crypto-js","description":"crypto-js is a JavaScript library of crypto standards.","website":"https://github.com/brix/crypto-js","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]}]},{"fqdn":"xh21d4m.g1jgsl9oyum.xyz","ip":{"addr":"23.224.132.202","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"domain_registered":"2025-07-18","domain_rank":0,"first_seen":"2025-07-31T22:53:08.943704Z","last_seen":"2025-07-31T22:53:08.943704Z","alert_count":0,"request_count":6,"received_data":7479,"sent_data":3282,"comment":"","tags":null,"fingerprints":[{"name":"Spring","description":"","website":"https://spring.io/","common_platform_enumeration":"","icon":"Spring.png","categories":["Web frameworks"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Nginx:1.17.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ssq7y8grhyv.xyz","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-18","domain_rank":0,"first_seen":"2025-07-31T22:57:59.840914Z","last_seen":"2025-07-31T22:57:59.840914Z","alert_count":0,"request_count":4,"received_data":62461,"sent_data":1922,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"crypto-js","description":"crypto-js is a JavaScript library of crypto standards.","website":"https://github.com/brix/crypto-js","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]}]},{"fqdn":"6qdy0xioq0d39hm.xyz","ip":{"addr":"172.67.174.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-17","domain_rank":0,"first_seen":"2025-04-02T01:43:23.292608Z","last_seen":"2025-07-25T07:32:23.324016Z","alert_count":0,"request_count":3,"received_data":5104,"sent_data":1311,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-31T22:57:39Z","timestamp":1754002659,"ip_dst":{"addr":"172.18.0.18","port":44468,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"172.247.112.162","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"severity":"low","alert":"ET INFO Observed ZeroSSL Certificate for Suspicious TLD (.xyz)","source":"{\"timestamp\":\"2025-07-31T22:57:39.791808+0000\",\"flow_id\":1464905784086033,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.247.112.162\",\"src_port\":443,\"dest_ip\":\"172.18.0.18\",\"dest_port\":44468,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031228,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL Certificate for Suspicious TLD (.xyz)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=*.g1jgsl9oyum.xyz\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL ECC Domain Secure Site CA\",\"serial\":\"00:CA:29:49:10:C4:DB:C0:1B:62:26:34:7E:E2:AF:D3:2C\",\"fingerprint\":\"33:cf:45:ce:c0:aa:05:63:91:65:fc:f2:a8:a8:de:c7:2f:86:29:93\",\"sni\":\"xh21d4m.g1jgsl9oyum.xyz\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-07-31T00:00:00\",\"notafter\":\"2025-10-29T23:59:59\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"fe0146829eef1917ba6c2dd4f5c08905\",\"string\":\"771,49196,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1216,\"bytes_toclient\":3641,\"start\":\"2025-07-31T22:57:39.314897+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-31T22:57:39Z","timestamp":1754002659,"ip_dst":{"addr":"172.18.0.18","port":44468,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"172.247.112.162","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"severity":"low","alert":"ET INFO Observed ZeroSSL SSL/TLS Certificate","source":"{\"timestamp\":\"2025-07-31T22:57:39.791808+0000\",\"flow_id\":1464905784086033,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.247.112.162\",\"src_port\":443,\"dest_ip\":\"172.18.0.18\",\"dest_port\":44468,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031231,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL SSL/TLS Certificate\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=*.g1jgsl9oyum.xyz\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL ECC Domain Secure Site CA\",\"serial\":\"00:CA:29:49:10:C4:DB:C0:1B:62:26:34:7E:E2:AF:D3:2C\",\"fingerprint\":\"33:cf:45:ce:c0:aa:05:63:91:65:fc:f2:a8:a8:de:c7:2f:86:29:93\",\"sni\":\"xh21d4m.g1jgsl9oyum.xyz\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-07-31T00:00:00\",\"notafter\":\"2025-10-29T23:59:59\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"fe0146829eef1917ba6c2dd4f5c08905\",\"string\":\"771,49196,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1216,\"bytes_toclient\":3641,\"start\":\"2025-07-31T22:57:39.314897+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-31T22:57:39Z","timestamp":1754002659,"ip_dst":{"addr":"172.18.0.18","port":44484,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"172.247.112.162","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"severity":"low","alert":"ET INFO Observed ZeroSSL Certificate for Suspicious TLD (.xyz)","source":"{\"timestamp\":\"2025-07-31T22:57:39.795673+0000\",\"flow_id\":1344663879667331,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.247.112.162\",\"src_port\":443,\"dest_ip\":\"172.18.0.18\",\"dest_port\":44484,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031228,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL Certificate for Suspicious TLD (.xyz)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=*.g1jgsl9oyum.xyz\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL ECC Domain Secure Site CA\",\"serial\":\"00:CA:29:49:10:C4:DB:C0:1B:62:26:34:7E:E2:AF:D3:2C\",\"fingerprint\":\"33:cf:45:ce:c0:aa:05:63:91:65:fc:f2:a8:a8:de:c7:2f:86:29:93\",\"sni\":\"xh21d4m.g1jgsl9oyum.xyz\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-07-31T00:00:00\",\"notafter\":\"2025-10-29T23:59:59\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"fe0146829eef1917ba6c2dd4f5c08905\",\"string\":\"771,49196,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1080,\"bytes_toclient\":3643,\"start\":\"2025-07-31T22:57:39.315011+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-31T22:57:39Z","timestamp":1754002659,"ip_dst":{"addr":"172.18.0.18","port":44484,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"172.247.112.162","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"severity":"low","alert":"ET INFO Observed ZeroSSL SSL/TLS Certificate","source":"{\"timestamp\":\"2025-07-31T22:57:39.795673+0000\",\"flow_id\":1344663879667331,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.247.112.162\",\"src_port\":443,\"dest_ip\":\"172.18.0.18\",\"dest_port\":44484,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031231,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL SSL/TLS Certificate\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=*.g1jgsl9oyum.xyz\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL ECC Domain Secure Site CA\",\"serial\":\"00:CA:29:49:10:C4:DB:C0:1B:62:26:34:7E:E2:AF:D3:2C\",\"fingerprint\":\"33:cf:45:ce:c0:aa:05:63:91:65:fc:f2:a8:a8:de:c7:2f:86:29:93\",\"sni\":\"xh21d4m.g1jgsl9oyum.xyz\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-07-31T00:00:00\",\"notafter\":\"2025-10-29T23:59:59\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"fe0146829eef1917ba6c2dd4f5c08905\",\"string\":\"771,49196,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1080,\"bytes_toclient\":3643,\"start\":\"2025-07-31T22:57:39.315011+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-31T22:57:43Z","timestamp":1754002663,"ip_dst":{"addr":"172.18.0.18","port":35724,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"23.224.132.202","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"severity":"low","alert":"ET INFO Observed ZeroSSL Certificate for Suspicious TLD (.xyz)","source":"{\"timestamp\":\"2025-07-31T22:57:43.311148+0000\",\"flow_id\":1166856528777535,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"23.224.132.202\",\"src_port\":443,\"dest_ip\":\"172.18.0.18\",\"dest_port\":35724,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031228,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL Certificate for Suspicious TLD (.xyz)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=*.g1jgsl9oyum.xyz\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL ECC Domain Secure Site CA\",\"serial\":\"00:CA:29:49:10:C4:DB:C0:1B:62:26:34:7E:E2:AF:D3:2C\",\"fingerprint\":\"33:cf:45:ce:c0:aa:05:63:91:65:fc:f2:a8:a8:de:c7:2f:86:29:93\",\"sni\":\"xh21d4m.g1jgsl9oyum.xyz\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-07-31T00:00:00\",\"notafter\":\"2025-10-29T23:59:59\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"fe0146829eef1917ba6c2dd4f5c08905\",\"string\":\"771,49196,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1080,\"bytes_toclient\":3643,\"start\":\"2025-07-31T22:57:42.839999+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-31T22:57:43Z","timestamp":1754002663,"ip_dst":{"addr":"172.18.0.18","port":35724,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"23.224.132.202","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"severity":"low","alert":"ET INFO Observed ZeroSSL SSL/TLS Certificate","source":"{\"timestamp\":\"2025-07-31T22:57:43.311148+0000\",\"flow_id\":1166856528777535,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"23.224.132.202\",\"src_port\":443,\"dest_ip\":\"172.18.0.18\",\"dest_port\":35724,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031231,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL SSL/TLS Certificate\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=*.g1jgsl9oyum.xyz\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL ECC Domain Secure Site CA\",\"serial\":\"00:CA:29:49:10:C4:DB:C0:1B:62:26:34:7E:E2:AF:D3:2C\",\"fingerprint\":\"33:cf:45:ce:c0:aa:05:63:91:65:fc:f2:a8:a8:de:c7:2f:86:29:93\",\"sni\":\"xh21d4m.g1jgsl9oyum.xyz\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-07-31T00:00:00\",\"notafter\":\"2025-10-29T23:59:59\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"fe0146829eef1917ba6c2dd4f5c08905\",\"string\":\"771,49196,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1080,\"bytes_toclient\":3643,\"start\":\"2025-07-31T22:57:42.839999+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-31T22:57:43Z","timestamp":1754002663,"ip_dst":{"addr":"172.18.0.18","port":35722,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"23.224.132.202","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"severity":"low","alert":"ET INFO Observed ZeroSSL Certificate for Suspicious TLD (.xyz)","source":"{\"timestamp\":\"2025-07-31T22:57:43.317255+0000\",\"flow_id\":1177057076105332,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"23.224.132.202\",\"src_port\":443,\"dest_ip\":\"172.18.0.18\",\"dest_port\":35722,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031228,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL Certificate for Suspicious TLD (.xyz)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=*.g1jgsl9oyum.xyz\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL ECC Domain Secure Site CA\",\"serial\":\"00:CA:29:49:10:C4:DB:C0:1B:62:26:34:7E:E2:AF:D3:2C\",\"fingerprint\":\"33:cf:45:ce:c0:aa:05:63:91:65:fc:f2:a8:a8:de:c7:2f:86:29:93\",\"sni\":\"xh21d4m.g1jgsl9oyum.xyz\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-07-31T00:00:00\",\"notafter\":\"2025-10-29T23:59:59\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"fe0146829eef1917ba6c2dd4f5c08905\",\"string\":\"771,49196,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1216,\"bytes_toclient\":3641,\"start\":\"2025-07-31T22:57:42.839796+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-31T22:57:43Z","timestamp":1754002663,"ip_dst":{"addr":"172.18.0.18","port":35722,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"23.224.132.202","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"severity":"low","alert":"ET INFO Observed ZeroSSL SSL/TLS Certificate","source":"{\"timestamp\":\"2025-07-31T22:57:43.317255+0000\",\"flow_id\":1177057076105332,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"23.224.132.202\",\"src_port\":443,\"dest_ip\":\"172.18.0.18\",\"dest_port\":35722,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031231,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL SSL/TLS Certificate\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=*.g1jgsl9oyum.xyz\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL ECC Domain Secure Site CA\",\"serial\":\"00:CA:29:49:10:C4:DB:C0:1B:62:26:34:7E:E2:AF:D3:2C\",\"fingerprint\":\"33:cf:45:ce:c0:aa:05:63:91:65:fc:f2:a8:a8:de:c7:2f:86:29:93\",\"sni\":\"xh21d4m.g1jgsl9oyum.xyz\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-07-31T00:00:00\",\"notafter\":\"2025-10-29T23:59:59\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"fe0146829eef1917ba6c2dd4f5c08905\",\"string\":\"771,49196,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1216,\"bytes_toclient\":3641,\"start\":\"2025-07-31T22:57:42.839796+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a24a9b2837eb4ec0083987f74926cdf","sha1":"a5fb492f5574e3281705556db911d91dc11c7f79","sha256":"0dc5311e446f51bfca3a1deb9a49439dd2cdd93930a780912d4e6b11a08bffb1","sha512":"79881f6b8fa952d5233357cd9eb6c42fb0bbcdc6ed7a1c78658e01fb7f17f20408541ef8da7b6af35dfe45eb2d9dc62b74ce2bd461cf05f5d316d5752651ae36","ssdeep":"","tlshash":"57d0a7661d7989306799024f21b7d7ac256626a166119a4081dacc1bae11ed308b1998","size":236,"data":"","first_seen":"2025-07-31T22:58:04.894186Z","last_seen":"2025-07-31T22:58:04.894186Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssq7y8grhyv.xyz/static/js/iframe.js?t=202409101529","fqdn":"ssq7y8grhyv.xyz","domain":"ssq7y8grhyv.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c22c9e3452e38ba8ee1dfaf956b3e93","sha1":"204d668cda3c14738dd1e84bcae4287e0329f205","sha256":"a419d3a2b0f1a74e2093f2378b2125a8a0761f683bc3b5f5bddd963f30dac368","sha512":"f6e026e7d5032bd7921f8ca1ed2e2f92f2b76ea321e0ebbfdfa3d659b2309c436b3a7be843ca006902c1bd99eb8e4d95fe859ac7bb6dbcfa71c31637f1ee9504","ssdeep":"192:/p2Sa2DAm3GBCzpYTW77nA/whK3jITL8VhG85jRkKRJ:/p2SaFmWoz2MSwhXwjjRVb","tlshash":"04e12092ab802976179e072b6aa2f4ffc01f015b3bc04743d45059d36adfd36e1b56b8","size":6909,"data":"","first_seen":"2025-04-02T01:45:44.857638Z","last_seen":"2026-01-22T14:14:38.432936Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a2v70wm7dxt.xyz/static/cdn/js/crypto-js.min.js","fqdn":"a2v70wm7dxt.xyz","domain":"a2v70wm7dxt.xyz","tld":"xyz"},"ip":{"addr":"104.21.15.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8b215ef1c396901ab19c41a7ac42cd7","sha1":"00e971d00ca3e26ef1bc0f7586e16c5e30296ebe","sha256":"817c88066f7a344d4471bb20d30652e641f498eedd9c28e5a6ed661c67795010","sha512":"7b673e3b43efcad7a491d24b73cd831df6ba2daf133caccedbf0c503ded87874db8830b028cce5a2ea4933a2e57ff5b82b5f7e376d60172a65564bf32f8a59c5","ssdeep":"768:JxMJNNuN2XlYGu0kG+QZfrORTIM9OT81KMpBs9oQvu:0Jw2hu0uifrIhdXs9oau","tlshash":"4b232ac1a19c605163a774d00d3f750bb553363a460a85ecfa68e9eeecbc6da903dd38","size":47576,"data":"","first_seen":"2023-03-10T18:36:37Z","last_seen":"2026-07-25T21:05:02.805506Z","times_seen":1041,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iqsg700xc24.top/","fqdn":"iqsg700xc24.top","domain":"iqsg700xc24.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-07-25T23:15:19.942982Z","times_seen":733089,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iqsg700xc24.top/","fqdn":"iqsg700xc24.top","domain":"iqsg700xc24.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2512414f817df8312569d55032748f81","sha1":"13467df6e962aa77bb36867ff1412e1ba9f8feb1","sha256":"e193735f8d500f10e2cdc6a94f5a43fb0257c1e2f8afc10fa04f0e3761d258de","sha512":"db6e4298746d519b0987bfa0feb89c39315718e178418e482b1c10c76439eae343afabf2db35ffaaa26c7ee6a3855084d39e9b88d35b11f87c354ceaf38874a0","ssdeep":"","tlshash":"a590029525c25101965295d4455b5c8450658675249569809180956259550205125cbc","size":47,"data":"","first_seen":"2023-04-11T22:25:25Z","last_seen":"2026-07-25T23:21:43.975109Z","times_seen":22819,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iqsg700xc24.top/","fqdn":"iqsg700xc24.top","domain":"iqsg700xc24.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-07-25T22:49:48.285091Z","times_seen":236200,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a2v70wm7dxt.xyz/static/cdn/js/vue-clipboard.min.js","fqdn":"a2v70wm7dxt.xyz","domain":"a2v70wm7dxt.xyz","tld":"xyz"},"ip":{"addr":"104.21.15.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8856c5f65c23d45fe8f4eec0c6dc6a44","sha1":"015add8db60dfd6b903f201f84b4bcfa10cde132","sha256":"7122add2d588267de45bc07c225bc54761a51516ed7c704342b639e48f501759","sha512":"668c76b80708523b21ef9eed7a8bf41ddd6e18d09b9a82f94609d7d0df15baca7f7cb7b8493036bec59f9b6f2faef77cdedce59998497dae334cfaa5377b16ec","ssdeep":"192:27VIW9HL4f3wo+1k7BoWsjwuLJnHu4wamahW/C5nZd0fkA4pS/x0usECf8w:27iTf34Wsj9LJvwPwWaLGSpS50Q41","tlshash":"4a528498b2d171b1d6e770a9412f820bf332a575649e80c4e538dce1adbca8e5467f3c","size":13748,"data":"","first_seen":"2023-03-08T14:22:20Z","last_seen":"2026-07-21T23:43:09.565713Z","times_seen":544,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iqsg700xc24.top/static/cdn/js/axios.min.js","fqdn":"iqsg700xc24.top","domain":"iqsg700xc24.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1e71c0ca404956d46e475dbe30566b8","sha1":"474c81de5ff1418895a10cb6e03f9ab522914b69","sha256":"1d389f625c1d774224d32527657e7398e57a65c718a07748f0ad7faecce8de3e","sha512":"21dafbc553673160ac80142c7134828af04d5961f7d28a3fb7360e46f88e0ab2ca981691c517e59b69a23614c524d5665ef0adce09ace679491786b3da18869c","ssdeep":"384:3/v60vgp81DaP9epzrPt/BL3dkyRuHrxytZ5CISD1ViQCKk:HiigP9exrthkJrifV","tlshash":"d782d7ca7594f0a747e770f040af590fb37ba529688d88a0f650e8e66c7910d8733f69","size":17843,"data":"","first_seen":"2023-03-13T01:01:23Z","last_seen":"2026-07-24T02:13:18.101738Z","times_seen":768,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a2v70wm7dxt.xyz/static/cdn/js/vant.min.js","fqdn":"a2v70wm7dxt.xyz","domain":"a2v70wm7dxt.xyz","tld":"xyz"},"ip":{"addr":"104.21.15.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6acac5582671becac49932e171aa29d3","sha1":"cc80b56375fea6bed369ad838427f49e5d51367d","sha256":"b0959628d4f805ae4bfca66b98ec3fb4b494f35928075b4b50a7959ff25c4310","sha512":"9ec185f81238c2cd309c9e32ce6a4aa05e3096e522a71eb0b0f7a746cfb17b0967aedc7ca1bfef63d74dbd85822b64ed20280c876b15684a7b93a872b86ec9e4","ssdeep":"3072:Ruhii1OdJpfzFgvzEnppgXJWgAVUi2muW1UYPYznLghgun6I2rNyJD:MhigsjAAeiIiYAnMy1","tlshash":"7444d88ab1c1b425079770b5403f110ab237298cb81a84dcba79e4e66d7ca5da13ff7d","size":277492,"data":"","first_seen":"2023-10-24T10:20:47Z","last_seen":"2026-07-21T23:43:09.572919Z","times_seen":519,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"192586d40520809761b939bf5997f5ea","sha1":"f71b810b4ea6a8c3979337f2d216dbfaab528d0c","sha256":"cc254c03c45817c6b309519f70797baccfe5520e4d1b642bf51328cd023e849a","sha512":"12c90d6b539f18ac7f83525fd6f407f079568677141d91a50c2efc78014daec5deed4d337ac1b435c45ce70f47ba71f1317a0ff73430c773b2795e7c0201f49c","ssdeep":"","tlshash":"d8d097a61c3589306388024a20b3e3a8212228d06710aa8080decc1f9a10fc308a2998","size":236,"data":"","first_seen":"2025-07-31T22:58:04.903876Z","last_seen":"2025-07-31T22:58:04.903876Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a2v70wm7dxt.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"a2v70wm7dxt.xyz","domain":"a2v70wm7dxt.xyz","tld":"xyz"},"ip":{"addr":"104.21.15.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fcdcec24e30b76b8d67178e5d7bef0e6","sha1":"13a59ef2d68572acc350c0791e1d603fa38050f7","sha256":"081a1ca561963c236449de1a5e5891ae4e2f4b66ed19b631879bf8aebc5b0f17","sha512":"502f0c122cf81f685fbe0bacf793b5093e733a3f0842e65d65bac4825dbb7be1306487343947f565bd750f15770a35e585d918bcacc41c319801f1973ee8c995","ssdeep":"192:Z5gFFbD0LGMkQCFKbXCcIR22ACKugGHU1SttdPd3+0WvFVVlZh22T:Z5gFFbD0LGMkQCFgXmReCKzG6SjdPd38","tlshash":"d6220acef88c5eda415508f418972ae7962e4f6934929f00c290c8b5feac37465e9f14","size":10096,"data":"","first_seen":"2025-07-31T22:33:25.587004Z","last_seen":"2025-07-31T22:58:04.891825Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iqsg700xc24.top/static/js/common.js?t=202409091529","fqdn":"iqsg700xc24.top","domain":"iqsg700xc24.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"99c074624829921ce287e2add965002a","sha1":"992f59021e2860aeb243ec933006e1d11ff2e1e5","sha256":"aadb131196f7bf3c5702c6a43209470907e7638a486a0851700dc68b6acf5125","sha512":"35ba1459a53aeccee89b1ad8768c6f427e090be4a9471e5dedef2c0541625070f42b00a442cfa823afb1848a8d7ddf1f1796f190d1b32e0df009b4c105ed4fbc","ssdeep":"192:RbtFJT0QoS06D4PpUz4MAxwofQAEMd8Sjrpdtr+PNORZ9NLo+PVNFlbO4KWFnu88:7XFnDGW4MacpBSBbr+lCZ92SbO4xc8+j","tlshash":"a7f16450b9d0bcb90fb6077b971f70c9f86f0c6a28ea4945d4019e537a5ce02e5a06f7","size":7804,"data":"","first_seen":"2024-12-21T04:47:04.232345Z","last_seen":"2026-07-18T22:44:53.395088Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iqsg700xc24.top/static/cdn/js/vue.min.js","fqdn":"iqsg700xc24.top","domain":"iqsg700xc24.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b21b8531847604ab5f2f5caaef51ba31","sha1":"da8d7a59f4e6cc55ea58abec33ef9cebb9ba67c1","sha256":"9174c425c445377df4562ad9165ea08fdf9433a808296d7de5f619791df10e17","sha512":"5dd519e67acd915c924019e7339bf30ea1da8bcdb74a9a2ad56de9268430a264236bea38370d04c35a69c68e5b845daf32e83ab1f89b84a59c349b06f158fdb6","ssdeep":"1536:3UsY7qfIDMIL2u0lgK44R82g9p5q2lMVkxPDs4g2w:VYegDM62uqiq2wkxL+2w","tlshash":"bb9309dd3289b07157eb31f1107f140bf2366a19ac0ec194b122e4d67db984d92abe7e","size":94151,"data":"","first_seen":"2023-03-07T01:10:40Z","last_seen":"2026-07-25T16:20:33.911807Z","times_seen":4796,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a2v70wm7dxt.xyz/enter.html?domain=iqsg700xc24.top","fqdn":"a2v70wm7dxt.xyz","domain":"a2v70wm7dxt.xyz","tld":"xyz"},"ip":{"addr":"104.21.15.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"343426735be3d49a105ebe398699d75c","sha1":"bca1808dd24eb6b94a17926cb7f6fa4e537506a6","sha256":"ccb781c87ab5108fa69bb1845463d9a6c380c74017be5ab1d148fd10bd8b3d91","sha512":"3f13134723f3993d7cba6f0c54e402b557460b92208f37fd096436c7a1a1ca4d18971e183468c8c34ed9bb436b84cc4da353dd7989cacff21f283dc0e4f1f5d0","ssdeep":"","tlshash":"e7a0024ea52d4da87a6556113e3679453c52c05742435860bb0da56f5fb02c75001fd4","size":64,"data":"","first_seen":"2024-01-03T14:37:15Z","last_seen":"2026-06-06T17:52:18.791151Z","times_seen":477,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a2v70wm7dxt.xyz/enter.html?domain=iqsg700xc24.top","fqdn":"a2v70wm7dxt.xyz","domain":"a2v70wm7dxt.xyz","tld":"xyz"},"ip":{"addr":"104.21.15.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"cb73db0bad8a623fd49d62de46709bd8","sha1":"89c45b3a623640c796e4b5907eacf9f8522e5d49","sha256":"57f5d7fa17451c68df801132d9721c9e506f580ffc0072d05eb2854c590275e7","sha512":"f1577c52097970b8d9b4754838d0c9794b36cae28b91e97ea6cd40c187940eeef837105d6a12c3725b6355e6d6b93d27ef4b72d286c63538aa40a9de282ffc17","ssdeep":"","tlshash":"84f01c4604bef1b0ec5a4513552ca6b4c8944ae7862d25f8f9b48e3840ee9f50b5e12e","size":487,"data":"","first_seen":"2024-05-16T09:07:25Z","last_seen":"2026-07-21T23:43:09.576852Z","times_seen":240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iqsg700xc24.top/","fqdn":"iqsg700xc24.top","domain":"iqsg700xc24.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c7250766fbcdc5322c31c268c1fff205","sha1":"476bb83a44623bb5ae69b5acedf6821ee376c8e5","sha256":"13c395795abea79ce0b4db627cbb54b550b3896867ec1b30b7b05f231cf5be8c","sha512":"52032947f4755afb54848a36cc7191c2533b537f28e6d0604f7bd0d69e652d485178cc36be294e2ce21410e2fe717169c7cfdab9932de05a1b61e7f06def88e8","ssdeep":"","tlshash":"a7a022ca20e828208ae320302a3aae82300c08f000c08c08bacccc022cab030ab200be","size":75,"data":"","first_seen":"2023-06-14T16:56:45Z","last_seen":"2026-07-18T22:44:53.410392Z","times_seen":222,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iqsg700xc24.top/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"iqsg700xc24.top","domain":"iqsg700xc24.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"efba5e12a4344523deec69cb73de12bf","sha1":"98268eb68e36d5b5c0e506b4b2b04b4dc82d6bd2","sha256":"924aaa933b6628ed8d661dbede32aa95a1244bf64febc31c10796ffd9b3fef24","sha512":"87b5e4d333a072ecb443c7d5af7e899434a6b8946d805a19e281f814883691369664f25c8c85b6894f883fb28434d399ee30329774ab3feb98b32e12ea3dd052","ssdeep":"192:IfaV5EDKwMXiZKAQMQMpM2ia9NDFwl+t2VOCRtCoEwYW/HB:IfaV5EDKwMXiZKAQMNpMzaFwl+t2sC6s","tlshash":"cb22e7cef9043889c55654aa20eb37de562c7fad24e56e158718ccde3cbc734351ae88","size":9967,"data":"","first_seen":"2025-07-31T22:53:13.888719Z","last_seen":"2025-07-31T22:58:04.887489Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssq7y8grhyv.xyz/?domain=iqsg700xc24.top","fqdn":"ssq7y8grhyv.xyz","domain":"ssq7y8grhyv.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"abc95a53f8fe325d45918ef2ae05d4fd","sha1":"121fd4b654696e3cdf866e407f423a86b6ccc679","sha256":"d03218252430dce7f9cbde825971cba6620e49f417e99644ec022786d875b69d","sha512":"f63f1145ae272c27c6bd5885c1d0184758930bc33adf1b0ff5bc4de024a8b7ad9f8e1d650f055eef129508c7bdcf7f7af12c29b7893cfdc90016d060df73328d","ssdeep":"","tlshash":"aba02413731005453f3004c70c4d701715d1c1373d140050d1410003d1111047110330","size":73,"data":"","first_seen":"2024-01-21T08:18:12Z","last_seen":"2026-07-19T04:07:18.20449Z","times_seen":206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a2v70wm7dxt.xyz/enter.html?domain=iqsg700xc24.top","fqdn":"a2v70wm7dxt.xyz","domain":"a2v70wm7dxt.xyz","tld":"xyz"},"ip":{"addr":"104.21.15.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4a84bc5eb908f06ebab74c1193cdee81","sha1":"63d5844a7e4eada4ee479eb6cee504d3c1627446","sha256":"7aaa483e2329f6e4240f4d439b725155b65e2744963505532a6d935bce337c48","sha512":"058289a4106258d74b1b018e8760d492692f67dbc1dd483abd0782dfecaa12ffc00df23f6cbea5315f52cc0d92ba04e77c9f7fcb09d329f5b2fe74cf724c0b1d","ssdeep":"","tlshash":"a5a002d721949fa1246009db151d1d6b4895aa7f0bf030e5e7d74817f86e914d134355","size":72,"data":"","first_seen":"2024-01-21T08:18:12Z","last_seen":"2026-07-18T23:43:35.196164Z","times_seen":192,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iqsg700xc24.top/","fqdn":"iqsg700xc24.top","domain":"iqsg700xc24.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2d85e469cf7c65f6bc8020700d13cc17","sha1":"425e20c2c51ed46a6e9f4e8566304e42ce982bab","sha256":"352268074a0a0a3073a5306b3703a670db390fa6b90321255d189ea16e393064","sha512":"b1884b56edde2adec52b6df9ef1433a690fd17846d6f05f7f3bf5f9941b4dfcaefba99e4f4c7b7685e12bbf3abe88334c1462bbddd8e865f46bfcf5078d2e353","ssdeep":"","tlshash":"c2a00273574502412cb08c87151e10866076d2370f6030e996574e57e07ce509611f70","size":71,"data":"","first_seen":"2024-01-21T08:18:12Z","last_seen":"2026-07-19T00:15:16.860205Z","times_seen":191,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a2v70wm7dxt.xyz/static/cdn/js/axios.min.js","fqdn":"a2v70wm7dxt.xyz","domain":"a2v70wm7dxt.xyz","tld":"xyz"},"ip":{"addr":"104.21.15.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1e71c0ca404956d46e475dbe30566b8","sha1":"474c81de5ff1418895a10cb6e03f9ab522914b69","sha256":"1d389f625c1d774224d32527657e7398e57a65c718a07748f0ad7faecce8de3e","sha512":"21dafbc553673160ac80142c7134828af04d5961f7d28a3fb7360e46f88e0ab2ca981691c517e59b69a23614c524d5665ef0adce09ace679491786b3da18869c","ssdeep":"384:3/v60vgp81DaP9epzrPt/BL3dkyRuHrxytZ5CISD1ViQCKk:HiigP9exrthkJrifV","tlshash":"d782d7ca7594f0a747e770f040af590fb37ba529688d88a0f650e8e66c7910d8733f69","size":17843,"data":"","first_seen":"2023-03-13T01:01:23Z","last_seen":"2026-07-24T02:13:18.101738Z","times_seen":768,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a2v70wm7dxt.xyz/static/cdn/js/vue.min.js","fqdn":"a2v70wm7dxt.xyz","domain":"a2v70wm7dxt.xyz","tld":"xyz"},"ip":{"addr":"104.21.15.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b21b8531847604ab5f2f5caaef51ba31","sha1":"da8d7a59f4e6cc55ea58abec33ef9cebb9ba67c1","sha256":"9174c425c445377df4562ad9165ea08fdf9433a808296d7de5f619791df10e17","sha512":"5dd519e67acd915c924019e7339bf30ea1da8bcdb74a9a2ad56de9268430a264236bea38370d04c35a69c68e5b845daf32e83ab1f89b84a59c349b06f158fdb6","ssdeep":"1536:3UsY7qfIDMIL2u0lgK44R82g9p5q2lMVkxPDs4g2w:VYegDM62uqiq2wkxL+2w","tlshash":"bb9309dd3289b07157eb31f1107f140bf2366a19ac0ec194b122e4d67db984d92abe7e","size":94151,"data":"","first_seen":"2023-03-07T01:10:40Z","last_seen":"2026-07-25T16:20:33.911807Z","times_seen":4796,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iqsg700xc24.top/static/js/collect_301.js?t=202409091529","fqdn":"iqsg700xc24.top","domain":"iqsg700xc24.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"41d5df08ceccaac4f8f64c6ace323378","sha1":"9ecf7bd1e70a9bab3500d10202f26c1229e4e63f","sha256":"f4943e53f44f9073df28ae45c372f5bd9a5ee7d9bb226bab0ce408d31db00de1","sha512":"c6c1f017e94e85e8d176be78ba497930c5a37480c1bf8bd4e4e762380677dfe6c54aca57ccc43d296f34d43643687e8e4c5f130c1b851142e8955f6c7faefb08","ssdeep":"","tlshash":"9b71c86afac0091e57f1c4bb792129a2c157744838d97460f8252909968f4abe2ff2f7","size":3784,"data":"","first_seen":"2025-04-02T05:52:54.55036Z","last_seen":"2026-01-22T14:14:38.44528Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a2v70wm7dxt.xyz/static/js/enter.js?t=202409091529","fqdn":"a2v70wm7dxt.xyz","domain":"a2v70wm7dxt.xyz","tld":"xyz"},"ip":{"addr":"104.21.15.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1cc35d7cc7a3c3d79be636267abb8812","sha1":"4d395157015cd1216e9464fd3883def6f17b7851","sha256":"0e97595b24f8ca1f9d0db3b05e17c36ad2eb6bdefd712a38c89e6825defc77fe","sha512":"05a5e4fbe1631d7e26ef641d2902deb3eecc8df4ce3286cbefb47ef26667b525258faa3aef21aa3b96c34784e2a7a03f684b146105265c9bb835ecd4bb8702cc","ssdeep":"192:IaxlOkF00ZawD73uBUB3LwLBjT7dY/4IK06GFe+XtR4:vxUkF0oaM3uBq7mBjT7dY/4IKtGI+tR4","tlshash":"8ae183aa6a40297a677245ffb722f5ecd08b116c34c84854f0646c17abddd37e2a92f0","size":6856,"data":"","first_seen":"2025-04-02T01:43:27.204088Z","last_seen":"2026-01-22T14:14:38.439082Z","times_seen":138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a2v70wm7dxt.xyz/enter.html?domain=iqsg700xc24.top","fqdn":"a2v70wm7dxt.xyz","domain":"a2v70wm7dxt.xyz","tld":"xyz"},"ip":{"addr":"104.21.15.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"02030f6c76f55b681e30d332cc4c125d","sha1":"2de156d2a6e233d4e4f2b771cc296a7eda8e51b6","sha256":"504c123beef162ca5869b8dcdeed85b1dce75694cef4afcda8b11e124160deff","sha512":"658d3ff7d22cb4c72019f7a02da701d58e4b540e55d6b7218db3325b01c5b13506b2de7d260aedc52dd8659df2a5ab2f2bb59e415c314e00e4e36ae4ee04a89f","ssdeep":"","tlshash":"bf11d0753e1a1534c685418b317ee7a93d3250617a029184c2accc299918ec3149fcbe","size":921,"data":"","first_seen":"2025-07-31T22:58:04.920634Z","last_seen":"2025-07-31T22:58:04.920634Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iqsg700xc24.top/","fqdn":"iqsg700xc24.top","domain":"iqsg700xc24.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"eaffc95435f080d95de43200f349cae9","sha1":"023dde36e8177c86069fe0747e5f1de652422200","sha256":"da57106d3a885552da3b8e5da9796c29c92f677e71c84bfd75b46af45f798beb","sha512":"8c8be57828fbd395d19ae59842c056e76d1d8edba3b0ef99105904dc77c791c6f6f9d27a02192fb098dea8343664078782ee3bef1e4703bad99e0f914b7b8bfa","ssdeep":"","tlshash":"fe11d0753f1a1534c685414b317ee7a93d3250617a029044c2accc289d18ec714afcbe","size":921,"data":"","first_seen":"2025-07-31T22:58:04.923274Z","last_seen":"2025-07-31T22:58:04.923274Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iqsg700xc24.top/static/cdn/js/crypto-js.min.js","fqdn":"iqsg700xc24.top","domain":"iqsg700xc24.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8b215ef1c396901ab19c41a7ac42cd7","sha1":"00e971d00ca3e26ef1bc0f7586e16c5e30296ebe","sha256":"817c88066f7a344d4471bb20d30652e641f498eedd9c28e5a6ed661c67795010","sha512":"7b673e3b43efcad7a491d24b73cd831df6ba2daf133caccedbf0c503ded87874db8830b028cce5a2ea4933a2e57ff5b82b5f7e376d60172a65564bf32f8a59c5","ssdeep":"768:JxMJNNuN2XlYGu0kG+QZfrORTIM9OT81KMpBs9oQvu:0Jw2hu0uifrIhdXs9oau","tlshash":"4b232ac1a19c605163a774d00d3f750bb553363a460a85ecfa68e9eeecbc6da903dd38","size":47576,"data":"","first_seen":"2023-03-10T18:36:37Z","last_seen":"2026-07-25T21:05:02.805506Z","times_seen":1041,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssq7y8grhyv.xyz/static/cdn/js/crypto-js.min.js","fqdn":"ssq7y8grhyv.xyz","domain":"ssq7y8grhyv.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8b215ef1c396901ab19c41a7ac42cd7","sha1":"00e971d00ca3e26ef1bc0f7586e16c5e30296ebe","sha256":"817c88066f7a344d4471bb20d30652e641f498eedd9c28e5a6ed661c67795010","sha512":"7b673e3b43efcad7a491d24b73cd831df6ba2daf133caccedbf0c503ded87874db8830b028cce5a2ea4933a2e57ff5b82b5f7e376d60172a65564bf32f8a59c5","ssdeep":"768:JxMJNNuN2XlYGu0kG+QZfrORTIM9OT81KMpBs9oQvu:0Jw2hu0uifrIhdXs9oau","tlshash":"4b232ac1a19c605163a774d00d3f750bb553363a460a85ecfa68e9eeecbc6da903dd38","size":47576,"data":"","first_seen":"2023-03-10T18:36:37Z","last_seen":"2026-07-25T21:05:02.805506Z","times_seen":1041,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a2v70wm7dxt.xyz/?domain=iqsg700xc24.top","fqdn":"a2v70wm7dxt.xyz","domain":"a2v70wm7dxt.xyz","tld":"xyz"},"ip":{"addr":"104.21.15.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"12f0bc2e1322ab2af9b12a22c3375430","sha1":"2f1d79c2b55b602b5115c2e720749f5c66145ca2","sha256":"acfa19b14b9017babb12fceb0cd43ae76fd49fd3519a4481d6532ea0701f663c","sha512":"f9910c8539154533090b4ed10fef7e9f330080b21b05de58a0f8d77278a97be2eb53cc427a8fd447c88e10d93cb3cd399f481f383da547c16d6c35ef406003e1","ssdeep":"","tlshash":"2bd05e8ab0464e8426f659116a673911b47280cf0446a415710db9936fa6a6fa226fce","size":254,"data":"","first_seen":"2025-03-06T16:06:09.271639Z","last_seen":"2026-06-06T17:52:18.79038Z","times_seen":129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"a2v70wm7dxt.xyz/static/img/zb3.png","fqdn":"a2v70wm7dxt.xyz","domain":"a2v70wm7dxt.xyz","tld":"xyz"},"ip":{"addr":"104.21.15.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://a2v70wm7dxt.xyz/enter.html?domain=iqsg700xc24.top","date":"2025-07-31T22:57:45.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a2v70wm7dxt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Jul 2025 05:36:05 GMT","end":"Fri, 17 Oct 2025 06:34:26 GMT"},"fingerprint":{"sha1":"A0:DA:D3:47:98:5C:A0:ED:76:C7:79:44:4B:A2:DA:93:F1:FD:5E:B6","sha256":"53:81:9C:51:58:FF:11:E9:C7:1C:F6:12:FF:AC:52:49:70:BF:22:70:93:F5:4C:55:64:8F:9D:9B:EF:3B:C8:47"}}},"request":{"raw":"GET /static/img/zb3.png HTTP/1.1\r\nHost: a2v70wm7dxt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://a2v70wm7dxt.xyz/enter.html?domain=iqsg700xc24.top\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 22:57:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 3731\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=uYAkOxWYVzaA0wirBI2HEwNt448Z8UN2VIraluopw2XJwDVzNpg9dSr4DCN3V%2FSp5SSsIVUuI7eVev0MOFWULMCa1zuw2PBMGlUeAqWvO7I2d%2FfY8z2kNIUtGlddQ%2FKgQMs%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Mon, 31 Mar 2025 13:05:32 GMT\r\netag: \"67ea931c-e93\"\r\naccept-ranges: bytes\r\nage: 292\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9680b2566e7856c4-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=588\u0026min_rtt=0\u0026rtt_var=366\u0026sent=333\u0026recv=291\u0026lost=0\u0026retrans=0\u0026sent_bytes=231788\u0026recv_bytes=18717\u0026delivery_rate=16302252\u0026ss_exit_cwnd=14916\u0026ss_exit_reason=2\u0026cwnd=28636\u0026unsent_bytes=0\u0026cid=5839441b72a5ee76\u0026ts=805\u0026inflight_dur=107\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3731,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 352 x 36, 8-bit/color RGBA, non-interlaced","md5":"682623e9d9fe5d8f304c7261f20e96cd","sha1":"fdddeaadc13dd187932bce5e5e04da5bc149a204","sha256":"90dcba37e59c9b18bf3b18423d9bbdad9ece87dc558db3a86882fca9c1fc1569","sha512":"b1c621399fafba5bf1971945555415f57b22a0c8a368f9d6a3940f49661b637f9d2b2d7ebba8c1d984e6dfa308ac6cd437b40c87dbee99304b754a892d05d748","ssdeep":"","tlshash":"a9715cf12760b894560fd1907f67a51829f603f118121f10942a91efdc3ea979e5bd8c","first_seen":"2024-05-16T09:07:26Z","last_seen":"2026-07-21T23:43:09.569521Z","times_seen":446,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a2v70wm7dxt.xyz/static/img/zb4.png","fqdn":"a2v70wm7dxt.xyz","domain":"a2v70wm7dxt.xyz","tld":"xyz"},"ip":{"addr":"104.21.15.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://a2v70wm7dxt.xyz/enter.html?domain=iqsg700xc24.top","date":"2025-07-31T22:57:45.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a2v70wm7dxt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Jul 2025 05:36:05 GMT","end":"Fri, 17 Oct 2025 06:34:26 GMT"},"fingerprint":{"sha1":"A0:DA:D3:47:98:5C:A0:ED:76:C7:79:44:4B:A2:DA:93:F1:FD:5E:B6","sha256":"53:81:9C:51:58:FF:11:E9:C7:1C:F6:12:FF:AC:52:49:70:BF:22:70:93:F5:4C:55:64:8F:9D:9B:EF:3B:C8:47"}}},"request":{"raw":"GET /static/img/zb4.png HTTP/1.1\r\nHost: a2v70wm7dxt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://a2v70wm7dxt.xyz/enter.html?domain=iqsg700xc24.top\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 22:57:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 3920\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Sms4BRy1PejMss565cqC8BIpE3WhRe1pA8tlma7I8Pp%2BDzkZWRE7BExdMvz1Dk1%2F8DsICrDqzTW1sKRFfupWauGt3uQBWFSfVmthHJRAI%2F3l%2B9gvYq%2FLVqZsrb37%2B4jbKCw%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Mon, 31 Mar 2025 13:05:32 GMT\r\netag: \"67ea931c-f50\"\r\naccept-ranges: bytes\r\nage: 292\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9680b2566e7956c4-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=629\u0026min_rtt=0\u0026rtt_var=357\u0026sent=337\u0026recv=292\u0026lost=0\u0026retrans=0\u0026sent_bytes=236281\u0026recv_bytes=18764\u0026delivery_rate=16302252\u0026ss_exit_cwnd=14916\u0026ss_exit_reason=2\u0026cwnd=28636\u0026unsent_bytes=0\u0026cid=5839441b72a5ee76\u0026ts=809\u0026inflight_dur=110\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3920,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 362 x 59, 8-bit/color RGBA, non-interlaced","md5":"ec7d5ce45f04077f610d351f6fead7b4","sha1":"f23728808d14a0d78f283a913c74ca42054eae50","sha256":"9ad5196e9c615c673214814cf83d9ac81678f9ef38b1cd3ce92b17cd92bd57a4","sha512":"a35a9c2f5de9bc4bf96397f11deb5332d020ad48dcd1c699f709ae3f97ddee47e91f962a7c283f3699192d470ededc1679ab2f5ecd6d49f6d9eccc43b7ee095d","ssdeep":"","tlshash":"24816c01e15249cbbfae135ae236d6a17c9a217e17c851145872ca4f30eddfcd0810bb","first_seen":"2024-05-16T09:07:26Z","last_seen":"2026-07-21T23:43:09.570026Z","times_seen":445,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iqsg700xc24.top/","fqdn":"iqsg700xc24.top","domain":"iqsg700xc24.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-07-31T22:57:36.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iqsg700xc24.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 22 Jul 2025 05:52:38 GMT","end":"Mon, 20 Oct 2025 06:51:06 GMT"},"fingerprint":{"sha1":"C9:54:1A:A9:2B:46:E4:E0:1B:DD:12:BB:80:04:06:B2:B8:3B:9A:E9","sha256":"DA:BC:51:F6:3B:63:99:63:4A:10:69:2A:13:7B:98:0E:5C:64:E4:24:D4:38:E9:F3:14:C9:79:B1:8A:E2:53:D0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: iqsg700xc24.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 22:57:37 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\nlast-modified: Mon, 31 Mar 2025 13:05:32 GMT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=6k1K2gBS2zS82167sdqoH4vunMPMNsku2pdjKVLkhs5anX2T%2BqAzY83eQeXES5gDkRDRHIyYg4YlSYl0pBoWN3cyONXqO8P%2FKFreeTGHrDXajbgJ3GzJRjlfxVJ8GpRJLK0%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9680b21ceab056b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=5933\u0026min_rtt=488\u0026rtt_var=10881\u0026sent=7\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3213\u0026recv_bytes=1125\u0026delivery_rate=6683076\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=fef76117e5fda635\u0026ts=512\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"crypto-js","description":"crypto-js is a JavaScript library of crypto standards.","website":"https://github.com/brix/crypto-js","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]}],"data":{"size":1890,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (945), with CRLF line terminators","md5":"a62fd1261e1f5e9c3957c4074e2e1b8d","sha1":"ccbadb405dbfa6c4a50b243ec1e6cac5643c4692","sha256":"9d7b7bb91be8d482c028c225396997729804d83953a0eb9707fbb00392b692bf","sha512":"123561679a31a1e75fb45678bfa6fe5defd212b44083b412664bfe1045f7fd448c10e1f6762b3a5ade540e47a6f4a600d06a3ba443eba8c4e486a48521c04464","ssdeep":"","tlshash":"314130363d45d92845b1811622faf3adbc35b023b601c844f2acd8a71fb4f890c9fda9","first_seen":"2025-07-31T22:58:04.83238Z","last_seen":"2025-07-31T22:58:04.83238Z","times_seen":1,"resource_available":false,"data":null}},"time_used":949,"timings":{"blocked":230,"dns":201,"connect":1,"send":0,"wait":489,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iqsg700xc24.top/static/cdn/js/crypto-js.min.js","fqdn":"iqsg700xc24.top","domain":"iqsg700xc24.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iqsg700xc24.top/","date":"2025-07-31T22:57:37.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iqsg700xc24.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 22 Jul 2025 05:52:38 GMT","end":"Mon, 20 Oct 2025 06:51:06 GMT"},"fingerprint":{"sha1":"C9:54:1A:A9:2B:46:E4:E0:1B:DD:12:BB:80:04:06:B2:B8:3B:9A:E9","sha256":"DA:BC:51:F6:3B:63:99:63:4A:10:69:2A:13:7B:98:0E:5C:64:E4:24:D4:38:E9:F3:14:C9:79:B1:8A:E2:53:D0"}}},"request":{"raw":"GET /static/cdn/js/crypto-js.min.js HTTP/1.1\r\nHost: iqsg700xc24.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iqsg700xc24.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 22:57:38 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nlast-modified: Mon, 31 Mar 2025 13:05:32 GMT\r\netag: W/\"67ea931c-b9d8\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=9Oo3NGUdx3LtByzJ1Wv90vgtrgyxfAyxUjXCxBMbmlarafYnGSAEUqikP2ES1xHWRq8EgWa6NXVECSNZBHgYVW6zVkxnXwm08%2BkjnY3h3kcALAiXxS4209k%2B9tpL7B0uo2s%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9680b221bcfe5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=5363\u0026min_rtt=1878\u0026rtt_var=2761\u0026sent=37\u0026recv=16\u0026lost=0\u0026retrans=0\u0026sent_bytes=20845\u0026recv_bytes=2405\u0026delivery_rate=2962074\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=6117357a2c2bf4d8\u0026ts=771\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47576,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (47576), with no line terminators","md5":"c8b215ef1c396901ab19c41a7ac42cd7","sha1":"00e971d00ca3e26ef1bc0f7586e16c5e30296ebe","sha256":"817c88066f7a344d4471bb20d30652e641f498eedd9c28e5a6ed661c67795010","sha512":"7b673e3b43efcad7a491d24b73cd831df6ba2daf133caccedbf0c503ded87874db8830b028cce5a2ea4933a2e57ff5b82b5f7e376d60172a65564bf32f8a59c5","ssdeep":"768:JxMJNNuN2XlYGu0kG+QZfrORTIM9OT81KMpBs9oQvu:0Jw2hu0uifrIhdXs9oau","tlshash":"4b232ac1a19c605163a774d00d3f750bb553363a460a85ecfa68e9eeecbc6da903dd38","first_seen":"2023-03-10T18:36:37Z","last_seen":"2026-07-25T21:05:02.805506Z","times_seen":1041,"resource_available":true,"data":null}},"time_used":1020,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":499,"receive":521,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a2v70wm7dxt.xyz/static/js/enter.js?t=202409091529","fqdn":"a2v70wm7dxt.xyz","domain":"a2v70wm7dxt.xyz","tld":"xyz"},"ip":{"addr":"104.21.15.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://a2v70wm7dxt.xyz/enter.html?domain=iqsg700xc24.top","date":"2025-07-31T22:57:45.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a2v70wm7dxt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Jul 2025 05:36:05 GMT","end":"Fri, 17 Oct 2025 06:34:26 GMT"},"fingerprint":{"sha1":"A0:DA:D3:47:98:5C:A0:ED:76:C7:79:44:4B:A2:DA:93:F1:FD:5E:B6","sha256":"53:81:9C:51:58:FF:11:E9:C7:1C:F6:12:FF:AC:52:49:70:BF:22:70:93:F5:4C:55:64:8F:9D:9B:EF:3B:C8:47"}}},"request":{"raw":"GET /static/js/enter.js?t=202409091529 HTTP/1.1\r\nHost: a2v70wm7dxt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://a2v70wm7dxt.xyz/enter.html?domain=iqsg700xc24.top\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 22:57:45 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=sK3cN4BC4UkcMUK78pfA2sl%2BzdLw6%2FrIE0xjAoqsptLx15Siw1G1E2pezyUXIfeClyITkeGJk9LA%2Ff7rRTw%2Fe0PFRnYDgBftyy64xC8cVUEtdB5xe9tj9%2BTiNMasAvdGdqE%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Mon, 31 Mar 2025 13:05:32 GMT\r\netag: W/\"67ea931c-1ac8\"\r\nage: 293\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9680b2553e6d56c4-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=471\u0026min_rtt=0\u0026rtt_var=218\u0026sent=236\u0026recv=266\u0026lost=0\u0026retrans=0\u0026sent_bytes=112464\u0026recv_bytes=16197\u0026delivery_rate=10357902\u0026ss_exit_cwnd=14916\u0026ss_exit_reason=2\u0026cwnd=18147\u0026unsent_bytes=0\u0026cid=5839441b72a5ee76\u0026ts=611\u0026inflight_dur=94\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6856,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6835)","md5":"1cc35d7cc7a3c3d79be636267abb8812","sha1":"4d395157015cd1216e9464fd3883def6f17b7851","sha256":"0e97595b24f8ca1f9d0db3b05e17c36ad2eb6bdefd712a38c89e6825defc77fe","sha512":"05a5e4fbe1631d7e26ef641d2902deb3eecc8df4ce3286cbefb47ef26667b525258faa3aef21aa3b96c34784e2a7a03f684b146105265c9bb835ecd4bb8702cc","ssdeep":"192:IaxlOkF00ZawD73uBUB3LwLBjT7dY/4IK06GFe+XtR4:vxUkF0oaM3uBq7mBjT7dY/4IKtGI+tR4","tlshash":"8ae183aa6a40297a677245ffb722f5ecd08b116c34c84854f0646c17abddd37e2a92f0","first_seen":"2025-04-02T01:43:27.204088Z","last_seen":"2026-01-22T14:14:38.439082Z","times_seen":138,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a2v70wm7dxt.xyz/static/img/zb2.png","fqdn":"a2v70wm7dxt.xyz","domain":"a2v70wm7dxt.xyz","tld":"xyz"},"ip":{"addr":"104.21.15.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://a2v70wm7dxt.xyz/enter.html?domain=iqsg700xc24.top","date":"2025-07-31T22:57:45.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a2v70wm7dxt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Jul 2025 05:36:05 GMT","end":"Fri, 17 Oct 2025 06:34:26 GMT"},"fingerprint":{"sha1":"A0:DA:D3:47:98:5C:A0:ED:76:C7:79:44:4B:A2:DA:93:F1:FD:5E:B6","sha256":"53:81:9C:51:58:FF:11:E9:C7:1C:F6:12:FF:AC:52:49:70:BF:22:70:93:F5:4C:55:64:8F:9D:9B:EF:3B:C8:47"}}},"request":{"raw":"GET /static/img/zb2.png HTTP/1.1\r\nHost: a2v70wm7dxt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://a2v70wm7dxt.xyz/enter.html?domain=iqsg700xc24.top\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 22:57:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 2605\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ZbHnQ5tzW%2BkIeUX%2BbjZC8Oh5IZv%2B76Nw7FhuIS4iG8%2FHxDxzTmCsBVbSd7DJUNbOxb2Bxw5yPjDEA0AX3v5Rc8jrLlAFVc%2BW5jm75erWwN0hDCZpEFEeb2sIVfSW7R4zBCU%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Mon, 31 Mar 2025 13:05:32 GMT\r\netag: \"67ea931c-a2d\"\r\naccept-ranges: bytes\r\nage: 292\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9680b2566e7756c4-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=411\u0026min_rtt=0\u0026rtt_var=321\u0026sent=324\u0026recv=288\u0026lost=0\u0026retrans=0\u0026sent_bytes=220670\u0026recv_bytes=18580\u0026delivery_rate=16302252\u0026ss_exit_cwnd=14916\u0026ss_exit_reason=2\u0026cwnd=28636\u0026unsent_bytes=0\u0026cid=5839441b72a5ee76\u0026ts=796\u0026inflight_dur=102\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2605,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 356 x 48, 8-bit/color RGBA, non-interlaced","md5":"8a5bc601f532c9747bbebcc63f96f705","sha1":"b50af210d6d63cda94f5c57f913f87165108bb31","sha256":"379f832f36508310c768174d0afa2143f2d2913477b0054570ca8ef0b6d9b917","sha512":"0af3a70ecc25d13bb36a621642f9fb3474280507bdfa280eadbe8d95d2f6a5e95bd93af0f6e0d9cc5cdf44eac92db9f91fcff807791800a1d503666096faebc2","ssdeep":"","tlshash":"6d516ce3412e025d08f46cd0a24a7741b542d51ae18d2f1d3c47d85d5df31b8b7052b6","first_seen":"2024-05-16T09:07:26Z","last_seen":"2026-07-21T23:43:09.566959Z","times_seen":446,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a2v70wm7dxt.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"a2v70wm7dxt.xyz","domain":"a2v70wm7dxt.xyz","tld":"xyz"},"ip":{"addr":"104.21.15.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://a2v70wm7dxt.xyz/enter.html?domain=iqsg700xc24.top","date":"2025-07-31T22:57:46.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a2v70wm7dxt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Jul 2025 05:36:05 GMT","end":"Fri, 17 Oct 2025 06:34:26 GMT"},"fingerprint":{"sha1":"A0:DA:D3:47:98:5C:A0:ED:76:C7:79:44:4B:A2:DA:93:F1:FD:5E:B6","sha256":"53:81:9C:51:58:FF:11:E9:C7:1C:F6:12:FF:AC:52:49:70:BF:22:70:93:F5:4C:55:64:8F:9D:9B:EF:3B:C8:47"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: a2v70wm7dxt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Thu, 31 Jul 2025 22:57:46 GMT\r\ncontent-length: 0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=QVjUsTWO6XOJMWxl5YN5X8xO8pAHt5k8X8zxrvDuyKoxhIYTVysXofVVa7LYYmB6k%2FQwI9TgFgWwKAZYAqpjFgQzFTCBYKFcxrROcsHYRvVUjSxKaSkYzMrrsBWC%2FvShc0s%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/8359bcf47b68/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncf-ray: 9680b2569e7d56c4-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=739\u0026min_rtt=0\u0026rtt_var=486\u0026sent=342\u0026recv=294\u0026lost=0\u0026retrans=0\u0026sent_bytes=240993\u0026recv_bytes=19065\u0026delivery_rate=16302252\u0026ss_exit_cwnd=14916\u0026ss_exit_reason=2\u0026cwnd=28636\u0026unsent_bytes=0\u0026cid=5839441b72a5ee76\u0026ts=821\u0026inflight_dur=113\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10096,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T23:24:08.370728Z","times_seen":17535745,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xh21d4m.g1jgsl9oyum.xyz/fast-endecode/main/request","fqdn":"xh21d4m.g1jgsl9oyum.xyz","domain":"g1jgsl9oyum.xyz","tld":"xyz"},"ip":{"addr":"23.224.132.202","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://a2v70wm7dxt.xyz/enter.html?domain=iqsg700xc24.top","date":"2025-07-31T22:57:46.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.g1jgsl9oyum.xyz","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 31 Jul 2025 00:00:00 GMT","end":"Wed, 29 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"33:CF:45:CE:C0:AA:05:63:91:65:FC:F2:A8:A8:DE:C7:2F:86:29:93","sha256":"F5:54:2A:E2:70:87:8E:4B:EC:4E:33:55:ED:79:F5:74:F6:88:BF:CD:8E:95:55:D9:EE:56:69:42:E1:5A:29:B4"}}},"request":{"raw":"POST /fast-endecode/main/request HTTP/1.1\r\nHost: xh21d4m.g1jgsl9oyum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 96\r\nOrigin: https://a2v70wm7dxt.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://a2v70wm7dxt.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx/1.17.6\r\nDate: Thu, 31 Jul 2025 22:57:47 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nVary: Origin\r\nX-Application-Context: cloud-module-endecode:41136\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Spring","description":"","website":"https://spring.io/","common_platform_enumeration":"","icon":"Spring.png","categories":["Web frameworks"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Nginx:1.17.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1976,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"8c524de4a2b04e94e0d2482b5fcd9d12","sha1":"833bfb04ac76c1c61609517fbaa5003286543776","sha256":"403bd4b14e6cee85e839bef7431fb9671825ab800abb680a70aca9e9d9271091","sha512":"d59a52b1f38e9ba2c0fad783c161aa5e205a931f68822ef66acf745cd1e58aa593a647ad43204ff96b34a59580fec1a23501877b6715056a85c5433df2e2f2f8","ssdeep":"","tlshash":"d0412c6ce3ce0f285451142f63fb9e4d66c9c9df5dc83dc29928c54c3c4e2a1a425e6e","first_seen":"2025-07-31T22:58:04.844617Z","last_seen":"2025-07-31T22:58:04.844617Z","times_seen":1,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":477,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssq7y8grhyv.xyz/?domain=iqsg700xc24.top","fqdn":"ssq7y8grhyv.xyz","domain":"ssq7y8grhyv.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-07-31T22:57:40.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ssq7y8grhyv.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Jul 2025 05:40:23 GMT","end":"Fri, 17 Oct 2025 06:38:53 GMT"},"fingerprint":{"sha1":"AB:50:4D:E3:B4:AB:3D:B9:EA:D6:D3:F0:C0:CF:15:0E:88:D2:8F:93","sha256":"6A:51:30:33:AB:A5:6E:67:C4:52:F0:2C:80:CA:37:95:B2:39:0C:29:7E:B8:9F:F4:E5:66:CA:75:B3:05:44:F6"}}},"request":{"raw":"GET /?domain=iqsg700xc24.top HTTP/1.1\r\nHost: ssq7y8grhyv.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iqsg700xc24.top/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 22:57:41 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Mon, 31 Mar 2025 13:05:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4OyKe6vSE5i1wLsP%2BabHUhQPF1Q82%2B0mWbBF%2FmP8N2re1jjYy9T3ObKb7Lok1jzhNV9dRnj4zMZ%2BveyXS9Eplm9yB5rWWw9nVgEe9rE%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9680b2361bcd0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"crypto-js","description":"crypto-js is a JavaScript library of crypto standards.","website":"https://github.com/brix/crypto-js","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]}],"data":{"size":1357,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"46410db2f2f9b23a44f70bc864c9c7fa","sha1":"02b380cc9799f87029ab1e0fc302174d64b7f694","sha256":"427355644694c798140f7008cc3a757323d9d79d70c65ffa26c90b659be6bb84","sha512":"7f1b83b27b3dac8d3a5d0633881103b050c3ac8e0409a1c4325eb242ef49f3a6f0d114ea59263e28989d38d88b7b2d94cb0a2627856d36ffb2428d31682942e3","ssdeep":"","tlshash":"3a2111232ed1880d5432c2306ff1b15ae9155963a7018924f6ec72b35fb0a5889d77ac","first_seen":"2024-09-12T18:58:43Z","last_seen":"2026-07-21T23:43:09.564415Z","times_seen":89,"resource_available":true,"data":null}},"time_used":671,"timings":{"blocked":99,"dns":77,"connect":1,"send":0,"wait":474,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a2v70wm7dxt.xyz/enter.html?domain=iqsg700xc24.top","fqdn":"a2v70wm7dxt.xyz","domain":"a2v70wm7dxt.xyz","tld":"xyz"},"ip":{"addr":"104.21.15.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ssq7y8grhyv.xyz/?domain=iqsg700xc24.top","date":"2025-07-31T22:57:45.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a2v70wm7dxt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Jul 2025 05:36:05 GMT","end":"Fri, 17 Oct 2025 06:34:26 GMT"},"fingerprint":{"sha1":"A0:DA:D3:47:98:5C:A0:ED:76:C7:79:44:4B:A2:DA:93:F1:FD:5E:B6","sha256":"53:81:9C:51:58:FF:11:E9:C7:1C:F6:12:FF:AC:52:49:70:BF:22:70:93:F5:4C:55:64:8F:9D:9B:EF:3B:C8:47"}}},"request":{"raw":"GET /enter.html?domain=iqsg700xc24.top HTTP/1.1\r\nHost: a2v70wm7dxt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://a2v70wm7dxt.xyz/?domain=iqsg700xc24.top\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 22:57:45 GMT\r\ncontent-type: text/html\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=22hXwodX7b%2FZ3gNA56LAIFkCUTOgUrjkIDWIQexydyQXKquqx3OEmYFu3%2F5tQ3lLdIjFeUGpcz%2F8%2B6VgNYfyISNjM9khlwPk5%2F%2BGT1uwFnE%2Bx51J7%2FUWv%2Bz9z2fRYNKyi7g%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Mon, 31 Mar 2025 13:05:32 GMT\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9680b2535e5656c4-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3003\u0026min_rtt=505\u0026rtt_var=3283\u0026sent=154\u0026recv=236\u0026lost=0\u0026retrans=0\u0026sent_bytes=12866\u0026recv_bytes=13135\u0026delivery_rate=351054\u0026ss_exit_cwnd=14916\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=5839441b72a5ee76\u0026ts=560\u0026inflight_dur=55\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5230,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (945), with CRLF line terminators","md5":"be1260d4e3b39dae47355b50f962a244","sha1":"5d9bb4e8efed623ece1058f4392f9409b7a2f0de","sha256":"be11c74f280db846d8eb912100d3ada58936046dc70309551e37a5b3179d0b9b","sha512":"8ed5c82815197eda6420d82b4a19d4820e0c27a746faa576af3a0a49161d7c35a5cecd1264be2591bfa8f26a863a2273bab184b16f606095f52fb69575780165","ssdeep":"96:1TD5x5w6i6h4Hbxcz1/XanhL5mS9j5r4AjSFqXkxxe7UtOnx/Ik:dT5wB6h4H9ctXahL5b9j5rvjSFqXk7en","tlshash":"7cb11226ad418519e8b3d1901fb2a30deb21d027d3028528f7fc69e25f74aa5486bfc8","first_seen":"2025-07-31T22:58:04.849773Z","last_seen":"2025-07-31T22:58:04.849773Z","times_seen":1,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":262,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a2v70wm7dxt.xyz/static/cdn/js/crypto-js.min.js","fqdn":"a2v70wm7dxt.xyz","domain":"a2v70wm7dxt.xyz","tld":"xyz"},"ip":{"addr":"104.21.15.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://a2v70wm7dxt.xyz/enter.html?domain=iqsg700xc24.top","date":"2025-07-31T22:57:45.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a2v70wm7dxt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Jul 2025 05:36:05 GMT","end":"Fri, 17 Oct 2025 06:34:26 GMT"},"fingerprint":{"sha1":"A0:DA:D3:47:98:5C:A0:ED:76:C7:79:44:4B:A2:DA:93:F1:FD:5E:B6","sha256":"53:81:9C:51:58:FF:11:E9:C7:1C:F6:12:FF:AC:52:49:70:BF:22:70:93:F5:4C:55:64:8F:9D:9B:EF:3B:C8:47"}}},"request":{"raw":"GET /static/cdn/js/crypto-js.min.js HTTP/1.1\r\nHost: a2v70wm7dxt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://a2v70wm7dxt.xyz/enter.html?domain=iqsg700xc24.top\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 22:57:45 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=fpYDaX9X9tBlEwY0foBpnQane4z5dhOoYixnElZmlqwBh%2FN102nFNBAkaBsgRGpNswnsg8SCgCgAJGQBIqmLAyP3w3V2PoLWr8IShDzqx7BzhPBx%2B1U6pgr%2B5uO6%2FA8%2FF28%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Mon, 31 Mar 2025 13:05:32 GMT\r\netag: W/\"67ea931c-b9d8\"\r\nage: 293\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9680b2552e6956c4-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1494\u0026min_rtt=0\u0026rtt_var=2190\u0026sent=176\u0026recv=249\u0026lost=0\u0026retrans=0\u0026sent_bytes=35331\u0026recv_bytes=15423\u0026delivery_rate=2775883\u0026ss_exit_cwnd=14916\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=5839441b72a5ee76\u0026ts=600\u0026inflight_dur=83\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47576,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (47576), with no line terminators","md5":"c8b215ef1c396901ab19c41a7ac42cd7","sha1":"00e971d00ca3e26ef1bc0f7586e16c5e30296ebe","sha256":"817c88066f7a344d4471bb20d30652e641f498eedd9c28e5a6ed661c67795010","sha512":"7b673e3b43efcad7a491d24b73cd831df6ba2daf133caccedbf0c503ded87874db8830b028cce5a2ea4933a2e57ff5b82b5f7e376d60172a65564bf32f8a59c5","ssdeep":"768:JxMJNNuN2XlYGu0kG+QZfrORTIM9OT81KMpBs9oQvu:0Jw2hu0uifrIhdXs9oau","tlshash":"4b232ac1a19c605163a774d00d3f750bb553363a460a85ecfa68e9eeecbc6da903dd38","first_seen":"2023-03-10T18:36:37Z","last_seen":"2026-07-25T21:05:02.805506Z","times_seen":1041,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a2v70wm7dxt.xyz/cdn-cgi/challenge-platform/h/b/jsd/r/0.6210614361667839:1753999973:NEH1aeHHWnsi22q6YZP11XNPrvMkUxnmG2Sk1bJj83k/9680b2535e5656c4","fqdn":"a2v70wm7dxt.xyz","domain":"a2v70wm7dxt.xyz","tld":"xyz"},"ip":{"addr":"104.21.15.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://a2v70wm7dxt.xyz/enter.html?domain=iqsg700xc24.top","date":"2025-07-31T22:57:46.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a2v70wm7dxt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Jul 2025 05:36:05 GMT","end":"Fri, 17 Oct 2025 06:34:26 GMT"},"fingerprint":{"sha1":"A0:DA:D3:47:98:5C:A0:ED:76:C7:79:44:4B:A2:DA:93:F1:FD:5E:B6","sha256":"53:81:9C:51:58:FF:11:E9:C7:1C:F6:12:FF:AC:52:49:70:BF:22:70:93:F5:4C:55:64:8F:9D:9B:EF:3B:C8:47"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/r/0.6210614361667839:1753999973:NEH1aeHHWnsi22q6YZP11XNPrvMkUxnmG2Sk1bJj83k/9680b2535e5656c4 HTTP/1.1\r\nHost: a2v70wm7dxt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12146\r\nOrigin: https://a2v70wm7dxt.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://a2v70wm7dxt.xyz/enter.html?domain=iqsg700xc24.top\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 22:57:46 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=6nR59j%2FM9RoirEgp52lKP8UCPevmhz%2Bsku%2FyYZqam94LxaJqTzMfp08xneaRb9MXOFvsLohtXZ5zGYycxBcYq1wV688e6aR5FePS%2Flbkx61kxE3wgZprcgFSYfq6apEchvE%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nset-cookie: cf_clearance=Qy0mLjaFrPg2cR5G5jTwnIMflYbwdN.Olm4t7OVu5lA-1754002666-1.2.1.1-sst2KV_nonFt2URMngKv4KGTLvkzOB7x3h3hJSnQJ9Sk3sFAh8.H7uAuANXAt90WGr5en51qJF8jurqmybtQ5XvlYVRNTGx0LjTmxKyc_.Vned75TVlZIGaGvfzVqnzNKpdL0iIXk03oKUzNHyVPsPM1IYlK1IYIyC0Dn4ZEsYdggK0XDM2IGbkela7zzp63UFy4SEiR2GicYzGnyXsAbRU2BxtBOYQhONV45h7hxAg; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=a2v70wm7dxt.xyz; Expires=Fri, 31 Jul 2026 22:57:46 GMT\r\ncf-ray: 9680b2582e8d56c4-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=772\u0026min_rtt=0\u0026rtt_var=340\u0026sent=357\u0026recv=307\u0026lost=0\u0026retrans=0\u0026sent_bytes=247478\u0026recv_bytes=32355\u0026delivery_rate=16302252\u0026ss_exit_cwnd=14916\u0026ss_exit_reason=2\u0026cwnd=28636\u0026unsent_bytes=0\u0026cid=5839441b72a5ee76\u0026ts=1078\u0026inflight_dur=136\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T23:24:08.370728Z","times_seen":17535745,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iqsg700xc24.top/static/cdn/js/axios.min.js","fqdn":"iqsg700xc24.top","domain":"iqsg700xc24.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iqsg700xc24.top/","date":"2025-07-31T22:57:37.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iqsg700xc24.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 22 Jul 2025 05:52:38 GMT","end":"Mon, 20 Oct 2025 06:51:06 GMT"},"fingerprint":{"sha1":"C9:54:1A:A9:2B:46:E4:E0:1B:DD:12:BB:80:04:06:B2:B8:3B:9A:E9","sha256":"DA:BC:51:F6:3B:63:99:63:4A:10:69:2A:13:7B:98:0E:5C:64:E4:24:D4:38:E9:F3:14:C9:79:B1:8A:E2:53:D0"}}},"request":{"raw":"GET /static/cdn/js/axios.min.js HTTP/1.1\r\nHost: iqsg700xc24.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iqsg700xc24.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 22:57:38 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nlast-modified: Mon, 31 Mar 2025 13:05:32 GMT\r\netag: W/\"67ea931c-45b3\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4ONz3lmu5D65shLdm5XSX97HswxoNAxnCXGkuIQtb9HHjv4mlfbFn4eqL1xH7yfiWmBEtUL0su0JXMlFF50XlmvMVX1eu7b0NBhAoelJxNAHZ8z99J4B1biN%2FJEmrSXq03U%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9680b221bcfa5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=5363\u0026min_rtt=1878\u0026rtt_var=2761\u0026sent=32\u0026recv=16\u0026lost=0\u0026retrans=0\u0026sent_bytes=15800\u0026recv_bytes=2405\u0026delivery_rate=2962074\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=6117357a2c2bf4d8\u0026ts=769\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17843,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17808)","md5":"d1e71c0ca404956d46e475dbe30566b8","sha1":"474c81de5ff1418895a10cb6e03f9ab522914b69","sha256":"1d389f625c1d774224d32527657e7398e57a65c718a07748f0ad7faecce8de3e","sha512":"21dafbc553673160ac80142c7134828af04d5961f7d28a3fb7360e46f88e0ab2ca981691c517e59b69a23614c524d5665ef0adce09ace679491786b3da18869c","ssdeep":"384:3/v60vgp81DaP9epzrPt/BL3dkyRuHrxytZ5CISD1ViQCKk:HiigP9exrthkJrifV","tlshash":"d782d7ca7594f0a747e770f040af590fb37ba529688d88a0f650e8e66c7910d8733f69","first_seen":"2023-03-13T01:01:23Z","last_seen":"2026-07-24T02:13:18.101738Z","times_seen":768,"resource_available":true,"data":null}},"time_used":741,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":499,"receive":242,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xh21d4m.g1jgsl9oyum.xyz/fast-endecode/main/request","fqdn":"xh21d4m.g1jgsl9oyum.xyz","domain":"g1jgsl9oyum.xyz","tld":"xyz"},"ip":{"addr":"23.224.132.202","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ssq7y8grhyv.xyz/?domain=iqsg700xc24.top","date":"2025-07-31T22:57:43.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.g1jgsl9oyum.xyz","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 31 Jul 2025 00:00:00 GMT","end":"Wed, 29 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"33:CF:45:CE:C0:AA:05:63:91:65:FC:F2:A8:A8:DE:C7:2F:86:29:93","sha256":"F5:54:2A:E2:70:87:8E:4B:EC:4E:33:55:ED:79:F5:74:F6:88:BF:CD:8E:95:55:D9:EE:56:69:42:E1:5A:29:B4"}}},"request":{"raw":"POST /fast-endecode/main/request HTTP/1.1\r\nHost: xh21d4m.g1jgsl9oyum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ssq7y8grhyv.xyz/\r\nContent-Type: application/json\r\nContent-Length: 96\r\nOrigin: https://ssq7y8grhyv.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx/1.17.6\r\nDate: Thu, 31 Jul 2025 22:57:44 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nVary: Origin\r\nX-Application-Context: cloud-module-endecode:41134\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Spring","description":"","website":"https://spring.io/","common_platform_enumeration":"","icon":"Spring.png","categories":["Web frameworks"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Nginx:1.17.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1976,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"8a09b81eaf70e89ec5675605f66c2c28","sha1":"3f28f776b31a70bdf05bebbd2a6793b82563a0ef","sha256":"29b60b90d684c8c91c9a4f72d2241eb754c80bf8986173dd784e36bc5d3681f8","sha512":"1c487a99e85abadb053ce694000d5af91d035582e22742c9acdc70d7a6fca1e22e86acf63759c8905cacc00772f2b1561a436a6394fcbde4618a845d5a3b70fe","ssdeep":"","tlshash":"39414a1115b0c4aaa71ccb389dba44e8355113d3b68359a20cefa35cabe4f41d9f1f42","first_seen":"2025-07-31T22:58:04.854968Z","last_seen":"2025-07-31T22:58:04.854968Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1411,"timings":{"blocked":-1,"dns":3,"connect":158,"send":0,"wait":466,"receive":1,"ssl":321},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a2v70wm7dxt.xyz/static/cdn/js/vue.min.js","fqdn":"a2v70wm7dxt.xyz","domain":"a2v70wm7dxt.xyz","tld":"xyz"},"ip":{"addr":"104.21.15.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://a2v70wm7dxt.xyz/enter.html?domain=iqsg700xc24.top","date":"2025-07-31T22:57:45.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a2v70wm7dxt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Jul 2025 05:36:05 GMT","end":"Fri, 17 Oct 2025 06:34:26 GMT"},"fingerprint":{"sha1":"A0:DA:D3:47:98:5C:A0:ED:76:C7:79:44:4B:A2:DA:93:F1:FD:5E:B6","sha256":"53:81:9C:51:58:FF:11:E9:C7:1C:F6:12:FF:AC:52:49:70:BF:22:70:93:F5:4C:55:64:8F:9D:9B:EF:3B:C8:47"}}},"request":{"raw":"GET /static/cdn/js/vue.min.js HTTP/1.1\r\nHost: a2v70wm7dxt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://a2v70wm7dxt.xyz/enter.html?domain=iqsg700xc24.top\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 22:57:45 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=05Lu1joLOm9LugoiFoJGCxSt%2FT%2B6m%2Fa0%2BtQ1u%2FHZLbWyvYZexx9IZJJvlc06izWI5aA7in%2Fafyx7pZMGWAkupuOc5ssRnf4DaYrK%2Bepr980KLtFRzKh%2FDzzDzfFum5iMqIo%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Mon, 31 Mar 2025 13:05:32 GMT\r\netag: W/\"67ea931c-16fc7\"\r\nage: 293\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9680b2552e6756c4-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2520\u0026min_rtt=505\u0026rtt_var=2683\u0026sent=160\u0026recv=241\u0026lost=0\u0026retrans=0\u0026sent_bytes=15021\u0026recv_bytes=14075\u0026delivery_rate=1595385\u0026ss_exit_cwnd=14916\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=5839441b72a5ee76\u0026ts=593\u0026inflight_dur=78\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":94151,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65449)","md5":"b21b8531847604ab5f2f5caaef51ba31","sha1":"da8d7a59f4e6cc55ea58abec33ef9cebb9ba67c1","sha256":"9174c425c445377df4562ad9165ea08fdf9433a808296d7de5f619791df10e17","sha512":"5dd519e67acd915c924019e7339bf30ea1da8bcdb74a9a2ad56de9268430a264236bea38370d04c35a69c68e5b845daf32e83ab1f89b84a59c349b06f158fdb6","ssdeep":"1536:3UsY7qfIDMIL2u0lgK44R82g9p5q2lMVkxPDs4g2w:VYegDM62uqiq2wkxL+2w","tlshash":"bb9309dd3289b07157eb31f1107f140bf2366a19ac0ec194b122e4d67db984d92abe7e","first_seen":"2023-03-07T01:10:40Z","last_seen":"2026-07-25T16:20:33.911807Z","times_seen":4796,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a2v70wm7dxt.xyz/static/cdn/css/vant/index.css","fqdn":"a2v70wm7dxt.xyz","domain":"a2v70wm7dxt.xyz","tld":"xyz"},"ip":{"addr":"104.21.15.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://a2v70wm7dxt.xyz/enter.html?domain=iqsg700xc24.top","date":"2025-07-31T22:57:45.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a2v70wm7dxt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Jul 2025 05:36:05 GMT","end":"Fri, 17 Oct 2025 06:34:26 GMT"},"fingerprint":{"sha1":"A0:DA:D3:47:98:5C:A0:ED:76:C7:79:44:4B:A2:DA:93:F1:FD:5E:B6","sha256":"53:81:9C:51:58:FF:11:E9:C7:1C:F6:12:FF:AC:52:49:70:BF:22:70:93:F5:4C:55:64:8F:9D:9B:EF:3B:C8:47"}}},"request":{"raw":"GET /static/cdn/css/vant/index.css HTTP/1.1\r\nHost: a2v70wm7dxt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://a2v70wm7dxt.xyz/enter.html?domain=iqsg700xc24.top\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 22:57:45 GMT\r\ncontent-type: text/css\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=NziRw5ZizMBf4k267XwxLMYBWyLZ1KnFbC6MX8ImxYBUN05ajkaXocvw7mlXh5Gxx%2FpGEj2PbLrbUfpoCAyUYuhq9lc6%2BsrH%2FinCyoNuIY2BQ7x7Y0QyEAQcegdFI%2FQXU04%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Mon, 31 Mar 2025 13:05:32 GMT\r\netag: W/\"67ea931c-230ae\"\r\nage: 293\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9680b2552e6a56c4-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1307\u0026min_rtt=0\u0026rtt_var=2016\u0026sent=178\u0026recv=250\u0026lost=0\u0026retrans=0\u0026sent_bytes=38131\u0026recv_bytes=15467\u0026delivery_rate=3469855\u0026ss_exit_cwnd=14916\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=5839441b72a5ee76\u0026ts=601\u0026inflight_dur=84\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":143534,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"5654d331a48a5a10adcb064e5ba0be68","sha1":"bfdf42b58ad4b60c3063d80b82978b56865b6fa0","sha256":"2ac1d6d6a6d0441e007ccb5076eba4541bd1d076395b582a788178f7249e57a8","sha512":"31a2e189a066f76785d7d122379f4b184140fc638ec457cdc9f16c720c667928c294e5795c7b0339049943645f130a8ef1d216e66181eac3c55ed1409233378c","ssdeep":"1536:KUyCltWrqoK3U0iNEBVcZH5NHMja4drYkAfP1Iz1jVfSV:KTeVc5HMjajtfNKLSV","tlshash":"69e3c52756c0236cb31bcd219bc096c5e224c123f5121bfaf1517a2dcfdbb9616a2b5b","first_seen":"2023-10-24T10:20:48Z","last_seen":"2026-07-21T23:43:09.572309Z","times_seen":509,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xh21d4m.g1jgsl9oyum.xyz/fast-endecode/main/request","fqdn":"xh21d4m.g1jgsl9oyum.xyz","domain":"g1jgsl9oyum.xyz","tld":"xyz"},"ip":{"addr":"23.224.132.202","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ssq7y8grhyv.xyz/?domain=iqsg700xc24.top","date":"2025-07-31T22:57:42.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.g1jgsl9oyum.xyz","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 31 Jul 2025 00:00:00 GMT","end":"Wed, 29 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"33:CF:45:CE:C0:AA:05:63:91:65:FC:F2:A8:A8:DE:C7:2F:86:29:93","sha256":"F5:54:2A:E2:70:87:8E:4B:EC:4E:33:55:ED:79:F5:74:F6:88:BF:CD:8E:95:55:D9:EE:56:69:42:E1:5A:29:B4"}}},"request":{"raw":"OPTIONS /fast-endecode/main/request HTTP/1.1\r\nHost: xh21d4m.g1jgsl9oyum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://ssq7y8grhyv.xyz/\r\nOrigin: https://ssq7y8grhyv.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx/1.17.6\r\nDate: Thu, 31 Jul 2025 22:57:43 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nVary: Origin\r\nAccess-Control-Allow-Methods: POST\r\nAccess-Control-Allow-Headers: content-type\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.17.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T23:24:08.370728Z","times_seen":17535745,"resource_available":true,"data":null}},"time_used":1416,"timings":{"blocked":476,"dns":3,"connect":154,"send":0,"wait":465,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a2v70wm7dxt.xyz/static/img/zb1.png","fqdn":"a2v70wm7dxt.xyz","domain":"a2v70wm7dxt.xyz","tld":"xyz"},"ip":{"addr":"104.21.15.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://a2v70wm7dxt.xyz/enter.html?domain=iqsg700xc24.top","date":"2025-07-31T22:57:45.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a2v70wm7dxt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Jul 2025 05:36:05 GMT","end":"Fri, 17 Oct 2025 06:34:26 GMT"},"fingerprint":{"sha1":"A0:DA:D3:47:98:5C:A0:ED:76:C7:79:44:4B:A2:DA:93:F1:FD:5E:B6","sha256":"53:81:9C:51:58:FF:11:E9:C7:1C:F6:12:FF:AC:52:49:70:BF:22:70:93:F5:4C:55:64:8F:9D:9B:EF:3B:C8:47"}}},"request":{"raw":"GET /static/img/zb1.png HTTP/1.1\r\nHost: a2v70wm7dxt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://a2v70wm7dxt.xyz/enter.html?domain=iqsg700xc24.top\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 22:57:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 6359\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4qLuVL8Q51C0AMD8USCI0jkvDNWkMA0jTkQSf9R%2BhlUPVk%2F6sYXxzDPAzDhfF%2FcDFWSGVZCJNGnX8GQRwV8kU7z3Q8I5eX54OvnkdCf4SXRA2qbgogNSN1ZDC6YHSEnAnwQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Mon, 31 Mar 2025 13:05:32 GMT\r\netag: \"67ea931c-18d7\"\r\naccept-ranges: bytes\r\nage: 292\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9680b2565e7656c4-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=411\u0026min_rtt=0\u0026rtt_var=321\u0026sent=318\u0026recv=288\u0026lost=0\u0026retrans=0\u0026sent_bytes=213492\u0026recv_bytes=18580\u0026delivery_rate=16302252\u0026ss_exit_cwnd=14916\u0026ss_exit_reason=2\u0026cwnd=28636\u0026unsent_bytes=0\u0026cid=5839441b72a5ee76\u0026ts=794\u0026inflight_dur=102\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6359,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 364 x 95, 8-bit/color RGBA, non-interlaced","md5":"ebb1b9066ac37a22a5ba0c2c419cb7af","sha1":"ee621f80857dfe4d36721afb4da97bbbca1fed2c","sha256":"8bd85f4ff0e271ecdb9473b34e875ce82ebe82c1e3c09399286fd1a99fcc7caf","sha512":"d0cd0eb82f24b00f11df159d8012f34a193856317cd2e144b1458b0783fa97a5d5c4b1a1d17c7ca614af3a357dc9fd56e6a4522b49d7f7193487f5ce3e18d68d","ssdeep":"192:bOBu2dN0YamS/89D+8fIuNijcUAuRIB7JWKCop4suS564:bOBuWN0YYgD+8fdNij5AB7/p4U564","tlshash":"15d17ef55c1450aa196f7b32c5af4a3ec74206b9589710cd13880e32a74ce6a7a89ead","first_seen":"2024-05-16T09:07:26Z","last_seen":"2026-07-21T23:43:09.569004Z","times_seen":446,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iqsg700xc24.top/static/js/collect_301.js?t=202409091529","fqdn":"iqsg700xc24.top","domain":"iqsg700xc24.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iqsg700xc24.top/","date":"2025-07-31T22:57:37.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iqsg700xc24.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 22 Jul 2025 05:52:38 GMT","end":"Mon, 20 Oct 2025 06:51:06 GMT"},"fingerprint":{"sha1":"C9:54:1A:A9:2B:46:E4:E0:1B:DD:12:BB:80:04:06:B2:B8:3B:9A:E9","sha256":"DA:BC:51:F6:3B:63:99:63:4A:10:69:2A:13:7B:98:0E:5C:64:E4:24:D4:38:E9:F3:14:C9:79:B1:8A:E2:53:D0"}}},"request":{"raw":"GET /static/js/collect_301.js?t=202409091529 HTTP/1.1\r\nHost: iqsg700xc24.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iqsg700xc24.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 22:57:38 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nlast-modified: Mon, 31 Mar 2025 13:05:32 GMT\r\netag: W/\"67ea931c-ec8\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=TCp%2FrotqeA4N3XMrSBS34A4RW%2F%2BZ9OiPsGrRnXXzIYsGTxxkq680PbueD4fOiIf3HrO99Fift6Kx7GfwcK6NSjRNg5UexDpsgXZKXNuTN%2Fy847gEZshk6Murq7nN0Hz7i9Q%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9680b221bd025694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=6360\u0026min_rtt=3486\u0026rtt_var=3360\u0026sent=18\u0026recv=13\u0026lost=0\u0026retrans=0\u0026sent_bytes=4289\u0026recv_bytes=2273\u0026delivery_rate=358151\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=6117357a2c2bf4d8\u0026ts=745\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3784,"size_decoded":0,"mime_type":"application/javascript","magic":"C source, Unicode text, UTF-8 text, with very long lines (3767)","md5":"41d5df08ceccaac4f8f64c6ace323378","sha1":"9ecf7bd1e70a9bab3500d10202f26c1229e4e63f","sha256":"f4943e53f44f9073df28ae45c372f5bd9a5ee7d9bb226bab0ce408d31db00de1","sha512":"c6c1f017e94e85e8d176be78ba497930c5a37480c1bf8bd4e4e762380677dfe6c54aca57ccc43d296f34d43643687e8e4c5f130c1b851142e8955f6c7faefb08","ssdeep":"","tlshash":"9b71c86afac0091e57f1c4bb792129a2c157744838d97460f8252909968f4abe2ff2f7","first_seen":"2025-04-02T05:52:54.55036Z","last_seen":"2026-01-22T14:14:38.44528Z","times_seen":54,"resource_available":true,"data":null}},"time_used":471,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":470,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iqsg700xc24.top/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"iqsg700xc24.top","domain":"iqsg700xc24.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iqsg700xc24.top/","date":"2025-07-31T22:57:38.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iqsg700xc24.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 22 Jul 2025 05:52:38 GMT","end":"Mon, 20 Oct 2025 06:51:06 GMT"},"fingerprint":{"sha1":"C9:54:1A:A9:2B:46:E4:E0:1B:DD:12:BB:80:04:06:B2:B8:3B:9A:E9","sha256":"DA:BC:51:F6:3B:63:99:63:4A:10:69:2A:13:7B:98:0E:5C:64:E4:24:D4:38:E9:F3:14:C9:79:B1:8A:E2:53:D0"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: iqsg700xc24.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Thu, 31 Jul 2025 22:57:38 GMT\r\ncontent-length: 0\r\ncf-ray: 9680b2299c955694-OSL\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/8359bcf47b68/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=oo7XMAgUA4WXXsabZ4wEoV%2Bo0QtmTmc4RZAjvjMsWM5a5EECeSJkm7sRDwKJ4M%2FCcF3t6w%2FqbovaQ2KXpqgjORbyfEFcWGBl4pnLHcwQy1INaHr2APqNw7JygmdZevCYUdY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4097\u0026min_rtt=1396\u0026rtt_var=3006\u0026sent=87\u0026recv=25\u0026lost=0\u0026retrans=0\u0026sent_bytes=72230\u0026recv_bytes=3032\u0026delivery_rate=6034370\u0026cwnd=24000\u0026unsent_bytes=0\u0026cid=6117357a2c2bf4d8\u0026ts=1544\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9967,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T23:24:08.370728Z","times_seen":17535745,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iqsg700xc24.top/favicon.ico","fqdn":"iqsg700xc24.top","domain":"iqsg700xc24.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iqsg700xc24.top/","date":"2025-07-31T22:57:38.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iqsg700xc24.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 22 Jul 2025 05:52:38 GMT","end":"Mon, 20 Oct 2025 06:51:06 GMT"},"fingerprint":{"sha1":"C9:54:1A:A9:2B:46:E4:E0:1B:DD:12:BB:80:04:06:B2:B8:3B:9A:E9","sha256":"DA:BC:51:F6:3B:63:99:63:4A:10:69:2A:13:7B:98:0E:5C:64:E4:24:D4:38:E9:F3:14:C9:79:B1:8A:E2:53:D0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: iqsg700xc24.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iqsg700xc24.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 22:57:39 GMT\r\ncontent-type: image/x-icon\r\ncontent-encoding: br\r\nlast-modified: Mon, 31 Mar 2025 13:05:32 GMT\r\netag: W/\"67ea931c-eb0\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Qiva2IRgddVrYtTsAruaeYuBofhFIa7B%2FEfSk%2B3ORD25O3lc1OrudEUNFoe8Wh36%2FC9rbyre8hcH3YWbs%2FJkb911hm%2F0nakIwZtKVJpH%2FuFhBQBDyl%2BLn3Tgn6YlFT8JU%2BM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9680b22a3d305694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3835\u0026min_rtt=1396\u0026rtt_var=2152\u0026sent=101\u0026recv=40\u0026lost=0\u0026retrans=0\u0026sent_bytes=79583\u0026recv_bytes=16570\u0026delivery_rate=6034370\u0026cwnd=24000\u0026unsent_bytes=0\u0026cid=6117357a2c2bf4d8\u0026ts=2089\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3760,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 90 x 90, 8-bit colormap, non-interlaced","md5":"47b453539b8944ecdc587a8db88022e0","sha1":"7867d74e921338dfc1aff0bfa2e6a9ed2b357d34","sha256":"5e1fe9bb70d664878f4704611ec4f086aeb4725e0a6d9c1555b9a0e1413a9989","sha512":"46d31b73da13226aacb0f1ea0c41262fa9b752ab5fef50693da1d4d212e01b7421bb83d77c03029ca6d75ca6e493a60917eb2fb2e98c42d455f0f5112168eeef","ssdeep":"","tlshash":"bf718c5d6ea46d5a48493d1db2bc14dff8bc3f2de806831e2b0e89d2fc9074a4c0680b","first_seen":"2023-07-07T13:28:50Z","last_seen":"2026-07-21T23:43:09.575272Z","times_seen":643,"resource_available":false,"data":null}},"time_used":461,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":461,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xh21d4m.g1jgsl9oyum.xyz/fast-endecode/main/request","fqdn":"xh21d4m.g1jgsl9oyum.xyz","domain":"g1jgsl9oyum.xyz","tld":"xyz"},"ip":{"addr":"172.247.112.162","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iqsg700xc24.top/","date":"2025-07-31T22:57:40.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.g1jgsl9oyum.xyz","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 31 Jul 2025 00:00:00 GMT","end":"Wed, 29 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"33:CF:45:CE:C0:AA:05:63:91:65:FC:F2:A8:A8:DE:C7:2F:86:29:93","sha256":"F5:54:2A:E2:70:87:8E:4B:EC:4E:33:55:ED:79:F5:74:F6:88:BF:CD:8E:95:55:D9:EE:56:69:42:E1:5A:29:B4"}}},"request":{"raw":"POST /fast-endecode/main/request HTTP/1.1\r\nHost: xh21d4m.g1jgsl9oyum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 96\r\nOrigin: https://iqsg700xc24.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iqsg700xc24.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx/1.17.6\r\nDate: Thu, 31 Jul 2025 22:57:40 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nVary: Origin\r\nX-Application-Context: cloud-module-endecode:41134\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Spring","description":"","website":"https://spring.io/","common_platform_enumeration":"","icon":"Spring.png","categories":["Web frameworks"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Nginx:1.17.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1976,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"acc04a4f841be4b83677e47f2dc41199","sha1":"85095cc48361e75f13cc398a3a77b7373e57f8a3","sha256":"f7df39c1cebb20534aba609edd9d886536af1f0340984349558944fcd2b62161","sha512":"96f5b7bd6e459655f4006bc9c968c9d8019aedecfe34323cbe017c48174c4ea003700c3d45f98098c8da1cdc9582186d1f2ad968c99ebfc549681a6dcc312acc","ssdeep":"","tlshash":"a0412a9a216b1b86a817bc1582f62d58f96c11430056a30bfe8b5086f330de23121ce8","first_seen":"2025-07-31T22:58:04.870039Z","last_seen":"2025-07-31T22:58:04.870039Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1382,"timings":{"blocked":-1,"dns":3,"connect":160,"send":0,"wait":448,"receive":0,"ssl":321},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssq7y8grhyv.xyz/static/js/iframe.js?t=202409101529","fqdn":"ssq7y8grhyv.xyz","domain":"ssq7y8grhyv.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ssq7y8grhyv.xyz/?domain=iqsg700xc24.top","date":"2025-07-31T22:57:41.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ssq7y8grhyv.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Jul 2025 05:40:23 GMT","end":"Fri, 17 Oct 2025 06:38:53 GMT"},"fingerprint":{"sha1":"AB:50:4D:E3:B4:AB:3D:B9:EA:D6:D3:F0:C0:CF:15:0E:88:D2:8F:93","sha256":"6A:51:30:33:AB:A5:6E:67:C4:52:F0:2C:80:CA:37:95:B2:39:0C:29:7E:B8:9F:F4:E5:66:CA:75:B3:05:44:F6"}}},"request":{"raw":"GET /static/js/iframe.js?t=202409101529 HTTP/1.1\r\nHost: ssq7y8grhyv.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ssq7y8grhyv.xyz/?domain=iqsg700xc24.top\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 22:57:41 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 31 Mar 2025 13:05:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ip%2FXzysOgNGsUlTa4AJeJHlrHsqVjjlXk2al5g8Pmg9WPlYPz6vaYMGBQ9gLb6uQj4jYdBG8V%2FUYeQL0yMkmVos3mSyJGxAVQuXN0So%3D\"}]}\r\netag: W/\"67ea931c-1afd\"\r\ncontent-encoding: br\r\ncf-ray: 9680b2399c1db4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6909,"size_decoded":0,"mime_type":"application/javascript","magic":"C source, Unicode text, UTF-8 text, with very long lines (6904)","md5":"5c22c9e3452e38ba8ee1dfaf956b3e93","sha1":"204d668cda3c14738dd1e84bcae4287e0329f205","sha256":"a419d3a2b0f1a74e2093f2378b2125a8a0761f683bc3b5f5bddd963f30dac368","sha512":"f6e026e7d5032bd7921f8ca1ed2e2f92f2b76ea321e0ebbfdfa3d659b2309c436b3a7be843ca006902c1bd99eb8e4d95fe859ac7bb6dbcfa71c31637f1ee9504","ssdeep":"192:/p2Sa2DAm3GBCzpYTW77nA/whK3jITL8VhG85jRkKRJ:/p2SaFmWoz2MSwhXwjjRVb","tlshash":"04e12092ab802976179e072b6aa2f4ffc01f015b3bc04743d45059d36adfd36e1b56b8","first_seen":"2025-04-02T01:45:44.857638Z","last_seen":"2026-01-22T14:14:38.432936Z","times_seen":115,"resource_available":true,"data":null}},"time_used":464,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":464,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssq7y8grhyv.xyz/favicon.ico","fqdn":"ssq7y8grhyv.xyz","domain":"ssq7y8grhyv.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ssq7y8grhyv.xyz/?domain=iqsg700xc24.top","date":"2025-07-31T22:57:42.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ssq7y8grhyv.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Jul 2025 05:40:23 GMT","end":"Fri, 17 Oct 2025 06:38:53 GMT"},"fingerprint":{"sha1":"AB:50:4D:E3:B4:AB:3D:B9:EA:D6:D3:F0:C0:CF:15:0E:88:D2:8F:93","sha256":"6A:51:30:33:AB:A5:6E:67:C4:52:F0:2C:80:CA:37:95:B2:39:0C:29:7E:B8:9F:F4:E5:66:CA:75:B3:05:44:F6"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ssq7y8grhyv.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ssq7y8grhyv.xyz/?domain=iqsg700xc24.top\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 22:57:42 GMT\r\ncontent-type: image/x-icon\r\ncontent-encoding: br\r\nlast-modified: Mon, 31 Mar 2025 13:05:32 GMT\r\netag: W/\"67ea931c-eb0\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=cCzKY6Io1BbS87c3kMSfDrggJRbdlxf1PhO5vW94Ur8%2BEYgwoKlKPBJ0apNFhUP5A1UFfa1STqlrFN74c%2BCy2CfqXxsWl1Y6zFrR2OwrjyDiuLHzRW5V6eOj%2FGvhX3X%2FKB8%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9680b2404aaeb4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4076\u0026min_rtt=1433\u0026rtt_var=3171\u0026sent=32\u0026recv=14\u0026lost=0\u0026retrans=0\u0026sent_bytes=24879\u0026recv_bytes=1957\u0026delivery_rate=6825907\u0026cwnd=24000\u0026unsent_bytes=0\u0026cid=bfa83d792be0f52c\u0026ts=1642\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3760,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 90 x 90, 8-bit colormap, non-interlaced","md5":"47b453539b8944ecdc587a8db88022e0","sha1":"7867d74e921338dfc1aff0bfa2e6a9ed2b357d34","sha256":"5e1fe9bb70d664878f4704611ec4f086aeb4725e0a6d9c1555b9a0e1413a9989","sha512":"46d31b73da13226aacb0f1ea0c41262fa9b752ab5fef50693da1d4d212e01b7421bb83d77c03029ca6d75ca6e493a60917eb2fb2e98c42d455f0f5112168eeef","ssdeep":"","tlshash":"bf718c5d6ea46d5a48493d1db2bc14dff8bc3f2de806831e2b0e89d2fc9074a4c0680b","first_seen":"2023-07-07T13:28:50Z","last_seen":"2026-07-21T23:43:09.575272Z","times_seen":643,"resource_available":false,"data":null}},"time_used":491,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":491,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6qdy0xioq0d39hm.xyz/","fqdn":"6qdy0xioq0d39hm.xyz","domain":"6qdy0xioq0d39hm.xyz","tld":"xyz"},"ip":{"addr":"172.67.174.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://a2v70wm7dxt.xyz/enter.html?domain=iqsg700xc24.top","date":"2025-07-31T22:57:45.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6qdy0xioq0d39hm.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Jul 2025 18:45:29 GMT","end":"Sun, 12 Oct 2025 19:44:12 GMT"},"fingerprint":{"sha1":"21:AC:68:B0:22:CD:77:8B:54:7F:37:A2:D3:7E:E1:6C:DF:29:37:16","sha256":"EC:53:30:AD:AE:6D:F7:1E:7E:13:DB:FB:73:13:0D:7E:CB:34:D2:61:4B:B2:B1:02:E2:6A:B1:FD:90:4B:AE:06"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 6qdy0xioq0d39hm.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://a2v70wm7dxt.xyz/\r\nOrigin: https://a2v70wm7dxt.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 22:57:46 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\ncloudservicediscount: CDN\r\nx-amz-request-id: 0000019861789955954DDD0822A5DBEA\r\nlast-modified: Thu, 31 Jul 2025 17:12:27 GMT\r\ncontent-disposition: attachment\r\nx-amz-tagging-count: 0\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: EA-HKG-EDGE1-CACHE2[2],EA-HKG-EDGE1-CACHE2[0,TCP_HIT,1],EA-HKG-GLOBAL1-CACHE9[6],EA-HKG-GLOBAL1-CACHE23[0,TCP_HIT,4]\r\nx-hcs-proxy-type: 1\r\nx-ccdn-cachettl: 60\r\nx-ccdn-req-id-46b1: 0bdf433b38c8dd306ccbd7fa45b46e73\r\nnginx-hit: 1\r\nage: 15\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mruKUqyYC2khch2P2DlEscJq%2B%2BPkn5e64CjjZgNS%2BCnNVYlX73e8Z%2FNULvG1%2FWIUWFfAn%2Bfc91DHi33yFA7p1tNOWIWw35m7pdJNqp1DwnbM\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\ncf-cache-status: DYNAMIC\r\netag: W/\"372c40057368c78b53a5546304ad07b0\"\r\ncontent-encoding: br\r\ncf-ray: 9680b2562c330afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":278,"size_decoded":0,"mime_type":"text/plain","magic":"JSON text data","md5":"372c40057368c78b53a5546304ad07b0","sha1":"fce2c343e6626c0bb2edc4e7a1eedd0db9348325","sha256":"f543c0aeaf0ebe0fdc9713a75bba86b5373ff9f729b8bb214d6cd1ecb78edc3d","sha512":"031e94aefccfeaaaf4aee28da988504a9960d42a3d93391c31b7b1119fa3208544fa21762859b515ae14c0bd28463fd8c1802926d48d1fc9ca2591bed37a834c","ssdeep":"","tlshash":"e4d052a391000aaa27841088c83e2668901f220f0c9220c0b90f0ccc0f256b8beb033c","first_seen":"2025-07-31T22:53:13.90291Z","last_seen":"2025-08-01T00:00:03.166248Z","times_seen":8,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a2v70wm7dxt.xyz/static/img/zb5.png","fqdn":"a2v70wm7dxt.xyz","domain":"a2v70wm7dxt.xyz","tld":"xyz"},"ip":{"addr":"104.21.15.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://a2v70wm7dxt.xyz/enter.html?domain=iqsg700xc24.top","date":"2025-07-31T22:57:45.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a2v70wm7dxt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Jul 2025 05:36:05 GMT","end":"Fri, 17 Oct 2025 06:34:26 GMT"},"fingerprint":{"sha1":"A0:DA:D3:47:98:5C:A0:ED:76:C7:79:44:4B:A2:DA:93:F1:FD:5E:B6","sha256":"53:81:9C:51:58:FF:11:E9:C7:1C:F6:12:FF:AC:52:49:70:BF:22:70:93:F5:4C:55:64:8F:9D:9B:EF:3B:C8:47"}}},"request":{"raw":"GET /static/img/zb5.png HTTP/1.1\r\nHost: a2v70wm7dxt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://a2v70wm7dxt.xyz/enter.html?domain=iqsg700xc24.top\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 22:57:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 6951\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=IBdP%2B%2B698OSZl6wOEGECHSvqYADO6OmvOoX9K68%2BnRfXihGEICwpqYhwSOT0%2B9kzKjNeYK6%2B63TuPPHgOkUu3lTGw5b5uGLi1JSi%2BL2ZtuOPUUBBPoJjgX41t6yCJeVf%2F7k%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Mon, 31 Mar 2025 13:05:32 GMT\r\netag: \"67ea931c-1b27\"\r\naccept-ranges: bytes\r\nage: 292\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9680b2566e7a56c4-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=508\u0026min_rtt=0\u0026rtt_var=434\u0026sent=327\u0026recv=289\u0026lost=0\u0026retrans=0\u0026sent_bytes=224013\u0026recv_bytes=18625\u0026delivery_rate=16302252\u0026ss_exit_cwnd=14916\u0026ss_exit_reason=2\u0026cwnd=28636\u0026unsent_bytes=0\u0026cid=5839441b72a5ee76\u0026ts=798\u0026inflight_dur=105\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6951,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 364 x 61, 8-bit/color RGBA, non-interlaced","md5":"d894519d43b7a46a37ec0aa8eb7c928e","sha1":"66e6c1f4a9e37e5d909cb71a015deb2f24279a8d","sha256":"7ecec350edbd7b0f13acd8e4a0c1d0718cec996fd7bbb8bdd601dcadbd6594a6","sha512":"97f028fb16306388be0ba39d7faa1eeafc523db2b59b716e577f1b54c5a63730ad0bc1d0a26a9ba7bc79b2ce0f5cd7f8680f9a70e39e6f774bc6d19ceea6fdd9","ssdeep":"192:lwxkxPYhNrHTX7YCzupmBPmct9GjbKBTv0T+3:AkxwhpXULmBPmcujbUvT3","tlshash":"20e19e92a1b2c16f5416b5bcbf4467ea60a60e31ed6d3c0860da35889c321dbe3d09a2","first_seen":"2024-05-16T09:07:26Z","last_seen":"2026-07-21T23:43:09.573506Z","times_seen":445,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iqsg700xc24.top/static/js/common.js?t=202409091529","fqdn":"iqsg700xc24.top","domain":"iqsg700xc24.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iqsg700xc24.top/","date":"2025-07-31T22:57:37.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iqsg700xc24.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 22 Jul 2025 05:52:38 GMT","end":"Mon, 20 Oct 2025 06:51:06 GMT"},"fingerprint":{"sha1":"C9:54:1A:A9:2B:46:E4:E0:1B:DD:12:BB:80:04:06:B2:B8:3B:9A:E9","sha256":"DA:BC:51:F6:3B:63:99:63:4A:10:69:2A:13:7B:98:0E:5C:64:E4:24:D4:38:E9:F3:14:C9:79:B1:8A:E2:53:D0"}}},"request":{"raw":"GET /static/js/common.js?t=202409091529 HTTP/1.1\r\nHost: iqsg700xc24.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iqsg700xc24.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 22:57:38 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nlast-modified: Mon, 31 Mar 2025 13:05:32 GMT\r\netag: W/\"67ea931c-1e7c\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=SlcFzJIprk2WawYapDffv87mOm4KaOHsGfAfxTm3i9e5%2Bu2xlEq2CqnBXitWuF2vmfdVazOhXlNmOCtl7UGdqMdzYoDArnRIPTDwFzSy7MYfSe9UqwlaUMV6gL2zT3XKCmU%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9680b221bcf55694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=5401\u0026min_rtt=1878\u0026rtt_var=3580\u0026sent=27\u0026recv=15\u0026lost=0\u0026retrans=0\u0026sent_bytes=12172\u0026recv_bytes=2361\u0026delivery_rate=2962074\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=6117357a2c2bf4d8\u0026ts=761\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7804,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7803)","md5":"99c074624829921ce287e2add965002a","sha1":"992f59021e2860aeb243ec933006e1d11ff2e1e5","sha256":"aadb131196f7bf3c5702c6a43209470907e7638a486a0851700dc68b6acf5125","sha512":"35ba1459a53aeccee89b1ad8768c6f427e090be4a9471e5dedef2c0541625070f42b00a442cfa823afb1848a8d7ddf1f1796f190d1b32e0df009b4c105ed4fbc","ssdeep":"192:RbtFJT0QoS06D4PpUz4MAxwofQAEMd8Sjrpdtr+PNORZ9NLo+PVNFlbO4KWFnu88:7XFnDGW4MacpBSBbr+lCZ92SbO4xc8+j","tlshash":"a7f16450b9d0bcb90fb6077b971f70c9f86f0c6a28ea4945d4019e537a5ce02e5a06f7","first_seen":"2024-12-21T04:47:04.232345Z","last_seen":"2026-07-18T22:44:53.395088Z","times_seen":83,"resource_available":true,"data":null}},"time_used":494,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":493,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iqsg700xc24.top/static/cdn/js/vue.min.js","fqdn":"iqsg700xc24.top","domain":"iqsg700xc24.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iqsg700xc24.top/","date":"2025-07-31T22:57:37.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iqsg700xc24.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 22 Jul 2025 05:52:38 GMT","end":"Mon, 20 Oct 2025 06:51:06 GMT"},"fingerprint":{"sha1":"C9:54:1A:A9:2B:46:E4:E0:1B:DD:12:BB:80:04:06:B2:B8:3B:9A:E9","sha256":"DA:BC:51:F6:3B:63:99:63:4A:10:69:2A:13:7B:98:0E:5C:64:E4:24:D4:38:E9:F3:14:C9:79:B1:8A:E2:53:D0"}}},"request":{"raw":"GET /static/cdn/js/vue.min.js HTTP/1.1\r\nHost: iqsg700xc24.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iqsg700xc24.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 22:57:38 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nlast-modified: Mon, 31 Mar 2025 13:05:32 GMT\r\netag: W/\"67ea931c-16fc7\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=IAimTm1r0x%2B5NuKeGrL%2BLnVgeBiK6qUt1TwgYv6Wep2KmhhapCT0c1VH%2Fu%2FhOC7MiJMRpjhqpWe1cJLWuINcP5RkBwQZ4oZxAK8ZH7EFq4RWYcrqGM8tjzfnz1yIQy68faY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9680b221bcf65694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=5904\u0026min_rtt=2712\u0026rtt_var=3432\u0026sent=21\u0026recv=14\u0026lost=0\u0026retrans=0\u0026sent_bytes=6607\u0026recv_bytes=2317\u0026delivery_rate=854477\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=6117357a2c2bf4d8\u0026ts=758\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":94151,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65449)","md5":"b21b8531847604ab5f2f5caaef51ba31","sha1":"da8d7a59f4e6cc55ea58abec33ef9cebb9ba67c1","sha256":"9174c425c445377df4562ad9165ea08fdf9433a808296d7de5f619791df10e17","sha512":"5dd519e67acd915c924019e7339bf30ea1da8bcdb74a9a2ad56de9268430a264236bea38370d04c35a69c68e5b845daf32e83ab1f89b84a59c349b06f158fdb6","ssdeep":"1536:3UsY7qfIDMIL2u0lgK44R82g9p5q2lMVkxPDs4g2w:VYegDM62uqiq2wkxL+2w","tlshash":"bb9309dd3289b07157eb31f1107f140bf2366a19ac0ec194b122e4d67db984d92abe7e","first_seen":"2023-03-07T01:10:40Z","last_seen":"2026-07-25T16:20:33.911807Z","times_seen":4796,"resource_available":true,"data":null}},"time_used":1181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":488,"receive":693,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6qdy0xioq0d39hm.xyz/","fqdn":"6qdy0xioq0d39hm.xyz","domain":"6qdy0xioq0d39hm.xyz","tld":"xyz"},"ip":{"addr":"104.21.31.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://iqsg700xc24.top/","date":"2025-07-31T22:57:38.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6qdy0xioq0d39hm.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Jul 2025 18:45:29 GMT","end":"Sun, 12 Oct 2025 19:44:12 GMT"},"fingerprint":{"sha1":"21:AC:68:B0:22:CD:77:8B:54:7F:37:A2:D3:7E:E1:6C:DF:29:37:16","sha256":"EC:53:30:AD:AE:6D:F7:1E:7E:13:DB:FB:73:13:0D:7E:CB:34:D2:61:4B:B2:B1:02:E2:6A:B1:FD:90:4B:AE:06"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 6qdy0xioq0d39hm.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iqsg700xc24.top/\r\nOrigin: https://iqsg700xc24.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 22:57:39 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\ncloudservicediscount: CDN\r\nx-amz-request-id: 0000019861789955954DDD0822A5DBEA\r\nlast-modified: Thu, 31 Jul 2025 17:12:27 GMT\r\ncontent-disposition: attachment\r\nx-amz-tagging-count: 0\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: EA-HKG-EDGE2-CACHE4[2],EA-HKG-EDGE2-CACHE1[0,TCP_HIT,0],EA-HKG-GLOBAL1-CACHE46[3],EA-HKG-GLOBAL1-CACHE23[0,TCP_HIT,2]\r\nx-hcs-proxy-type: 1\r\nx-ccdn-cachettl: 60\r\nx-ccdn-req-id-46b1: 5ac0786b2d5e709e07cf42740a029738\r\nnginx-hit: 1\r\nage: 58\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zrC7qIpa5UHDr%2BxrhjWwjhbCURuNcD4Kv%2F%2B2NTNbS0w%2BwWlgM1lZm2WkYWrGoTyljvhJktpKbIDwrvrTSf7CowgH00R%2F4WTrIer5THG4yVfS\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\ncf-cache-status: DYNAMIC\r\netag: W/\"372c40057368c78b53a5546304ad07b0\"\r\ncontent-encoding: br\r\ncf-ray: 9680b2298f0756ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":278,"size_decoded":0,"mime_type":"text/plain","magic":"JSON text data","md5":"372c40057368c78b53a5546304ad07b0","sha1":"fce2c343e6626c0bb2edc4e7a1eedd0db9348325","sha256":"f543c0aeaf0ebe0fdc9713a75bba86b5373ff9f729b8bb214d6cd1ecb78edc3d","sha512":"031e94aefccfeaaaf4aee28da988504a9960d42a3d93391c31b7b1119fa3208544fa21762859b515ae14c0bd28463fd8c1802926d48d1fc9ca2591bed37a834c","ssdeep":"","tlshash":"e4d052a391000aaa27841088c83e2668901f220f0c9220c0b90f0ccc0f256b8beb033c","first_seen":"2025-07-31T22:53:13.90291Z","last_seen":"2025-08-01T00:00:03.166248Z","times_seen":8,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":24,"dns":1,"connect":1,"send":0,"wait":449,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a2v70wm7dxt.xyz/?domain=iqsg700xc24.top","fqdn":"a2v70wm7dxt.xyz","domain":"a2v70wm7dxt.xyz","tld":"xyz"},"ip":{"addr":"104.21.15.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ssq7y8grhyv.xyz/?domain=iqsg700xc24.top","date":"2025-07-31T22:57:44.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a2v70wm7dxt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Jul 2025 05:36:05 GMT","end":"Fri, 17 Oct 2025 06:34:26 GMT"},"fingerprint":{"sha1":"A0:DA:D3:47:98:5C:A0:ED:76:C7:79:44:4B:A2:DA:93:F1:FD:5E:B6","sha256":"53:81:9C:51:58:FF:11:E9:C7:1C:F6:12:FF:AC:52:49:70:BF:22:70:93:F5:4C:55:64:8F:9D:9B:EF:3B:C8:47"}}},"request":{"raw":"GET /?domain=iqsg700xc24.top HTTP/1.1\r\nHost: a2v70wm7dxt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ssq7y8grhyv.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 22:57:44 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Mon, 31 Mar 2025 13:05:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UBaqI9mDKaznnrFlHaf29xmG3V2fW2%2FsI71qPtd7FchlFo5dl7o%2FetT7ml3rhOTWcVD3efA9wvb2n%2B9RLk8bMp4uBwEDkSNXugEY1WU%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9680b24bcc07569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41693,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (561), with CRLF line terminators","md5":"d6d08160cf83b73cea5933fbaf5d184a","sha1":"d328d40a5bea09b65ff2e603708b107ca2ca971c","sha256":"c37ee8e06bca10c0f8e333471ff7869509b5f5adfe990e2ddd567053a9340cea","sha512":"4c3db60e8acb11f31ca10d8db25d8a0fdc6c678f577d13be027852c00c0a160b33082240ae6e913c09f7c68337667dc468dbefd176052cd90800d46d3647a0f3","ssdeep":"384:ZfxjvTzQ0lDPPOky7DZCliMRQHoUzVQ9ZEFUA:Z6kdMVJ","tlshash":"3b13600a9651261a4633a379dfe3210cfb7684a3c302a269bfcc93444ff56985563fdd","first_seen":"2023-12-27T20:07:34Z","last_seen":"2026-07-21T23:43:09.576233Z","times_seen":111,"resource_available":true,"data":null}},"time_used":504,"timings":{"blocked":21,"dns":1,"connect":1,"send":0,"wait":462,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a2v70wm7dxt.xyz/static/cdn/js/vant.min.js","fqdn":"a2v70wm7dxt.xyz","domain":"a2v70wm7dxt.xyz","tld":"xyz"},"ip":{"addr":"104.21.15.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://a2v70wm7dxt.xyz/enter.html?domain=iqsg700xc24.top","date":"2025-07-31T22:57:45.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a2v70wm7dxt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Jul 2025 05:36:05 GMT","end":"Fri, 17 Oct 2025 06:34:26 GMT"},"fingerprint":{"sha1":"A0:DA:D3:47:98:5C:A0:ED:76:C7:79:44:4B:A2:DA:93:F1:FD:5E:B6","sha256":"53:81:9C:51:58:FF:11:E9:C7:1C:F6:12:FF:AC:52:49:70:BF:22:70:93:F5:4C:55:64:8F:9D:9B:EF:3B:C8:47"}}},"request":{"raw":"GET /static/cdn/js/vant.min.js HTTP/1.1\r\nHost: a2v70wm7dxt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://a2v70wm7dxt.xyz/enter.html?domain=iqsg700xc24.top\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 22:57:45 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=2G6921n1iPlorFQ1LuW%2FyD8J0pkjlG%2FzJ4%2BJIhgDu8hnZ2G6DpQVmNjT6J4NEsQtMxvVi0tkw94nj5pkVzCbmRigYqi6AvN9bfrPlHSWjNhvRPId5mcj03FhV9XBpLQjj2c%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Mon, 31 Mar 2025 13:05:32 GMT\r\netag: W/\"67ea931c-43bf4\"\r\nage: 293\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9680b2553e6b56c4-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=843\u0026min_rtt=0\u0026rtt_var=969\u0026sent=196\u0026recv=255\u0026lost=0\u0026retrans=0\u0026sent_bytes=61891\u0026recv_bytes=15691\u0026delivery_rate=6824164\u0026ss_exit_cwnd=14916\u0026ss_exit_reason=2\u0026cwnd=18919\u0026unsent_bytes=0\u0026cid=5839441b72a5ee76\u0026ts=605\u0026inflight_dur=88\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":277492,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (57307)","md5":"6acac5582671becac49932e171aa29d3","sha1":"cc80b56375fea6bed369ad838427f49e5d51367d","sha256":"b0959628d4f805ae4bfca66b98ec3fb4b494f35928075b4b50a7959ff25c4310","sha512":"9ec185f81238c2cd309c9e32ce6a4aa05e3096e522a71eb0b0f7a746cfb17b0967aedc7ca1bfef63d74dbd85822b64ed20280c876b15684a7b93a872b86ec9e4","ssdeep":"3072:Ruhii1OdJpfzFgvzEnppgXJWgAVUi2muW1UYPYznLghgun6I2rNyJD:MhigsjAAeiIiYAnMy1","tlshash":"7444d88ab1c1b425079770b5403f110ab237298cb81a84dcba79e4e66d7ca5da13ff7d","first_seen":"2023-10-24T10:20:47Z","last_seen":"2026-07-21T23:43:09.572919Z","times_seen":519,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a2v70wm7dxt.xyz/static/cdn/js/vue-clipboard.min.js","fqdn":"a2v70wm7dxt.xyz","domain":"a2v70wm7dxt.xyz","tld":"xyz"},"ip":{"addr":"104.21.15.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://a2v70wm7dxt.xyz/enter.html?domain=iqsg700xc24.top","date":"2025-07-31T22:57:45.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a2v70wm7dxt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Jul 2025 05:36:05 GMT","end":"Fri, 17 Oct 2025 06:34:26 GMT"},"fingerprint":{"sha1":"A0:DA:D3:47:98:5C:A0:ED:76:C7:79:44:4B:A2:DA:93:F1:FD:5E:B6","sha256":"53:81:9C:51:58:FF:11:E9:C7:1C:F6:12:FF:AC:52:49:70:BF:22:70:93:F5:4C:55:64:8F:9D:9B:EF:3B:C8:47"}}},"request":{"raw":"GET /static/cdn/js/vue-clipboard.min.js HTTP/1.1\r\nHost: a2v70wm7dxt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://a2v70wm7dxt.xyz/enter.html?domain=iqsg700xc24.top\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 22:57:45 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ugvjxVEiagM5rIVJon1voWmgYWEIY00l0AZXIYbuVbeQy7d1dRfA06%2FwNvzstoHPvml7KjoRSC%2BgCvFNxudjaC8%2F4s7DOHw%2Fd0wZ6GJHw%2FSPPPjF1DBi%2FBCsB4n8GaAMMJM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Mon, 31 Mar 2025 13:05:32 GMT\r\netag: W/\"67ea931c-35b4\"\r\nage: 293\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9680b2553e6c56c4-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=471\u0026min_rtt=0\u0026rtt_var=218\u0026sent=234\u0026recv=266\u0026lost=0\u0026retrans=0\u0026sent_bytes=110252\u0026recv_bytes=16197\u0026delivery_rate=10357902\u0026ss_exit_cwnd=14916\u0026ss_exit_reason=2\u0026cwnd=18147\u0026unsent_bytes=0\u0026cid=5839441b72a5ee76\u0026ts=611\u0026inflight_dur=93\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13748,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13748), with no line terminators","md5":"8856c5f65c23d45fe8f4eec0c6dc6a44","sha1":"015add8db60dfd6b903f201f84b4bcfa10cde132","sha256":"7122add2d588267de45bc07c225bc54761a51516ed7c704342b639e48f501759","sha512":"668c76b80708523b21ef9eed7a8bf41ddd6e18d09b9a82f94609d7d0df15baca7f7cb7b8493036bec59f9b6f2faef77cdedce59998497dae334cfaa5377b16ec","ssdeep":"192:27VIW9HL4f3wo+1k7BoWsjwuLJnHu4wamahW/C5nZd0fkA4pS/x0usECf8w:27iTf34Wsj9LJvwPwWaLGSpS50Q41","tlshash":"4a528498b2d171b1d6e770a9412f820bf332a575649e80c4e538dce1adbca8e5467f3c","first_seen":"2023-03-08T14:22:20Z","last_seen":"2026-07-21T23:43:09.565713Z","times_seen":544,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xh21d4m.g1jgsl9oyum.xyz/fast-endecode/main/request","fqdn":"xh21d4m.g1jgsl9oyum.xyz","domain":"g1jgsl9oyum.xyz","tld":"xyz"},"ip":{"addr":"23.224.132.202","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://a2v70wm7dxt.xyz/enter.html?domain=iqsg700xc24.top","date":"2025-07-31T22:57:46.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.g1jgsl9oyum.xyz","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 31 Jul 2025 00:00:00 GMT","end":"Wed, 29 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"33:CF:45:CE:C0:AA:05:63:91:65:FC:F2:A8:A8:DE:C7:2F:86:29:93","sha256":"F5:54:2A:E2:70:87:8E:4B:EC:4E:33:55:ED:79:F5:74:F6:88:BF:CD:8E:95:55:D9:EE:56:69:42:E1:5A:29:B4"}}},"request":{"raw":"OPTIONS /fast-endecode/main/request HTTP/1.1\r\nHost: xh21d4m.g1jgsl9oyum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://a2v70wm7dxt.xyz/\r\nOrigin: https://a2v70wm7dxt.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx/1.17.6\r\nDate: Thu, 31 Jul 2025 22:57:46 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nVary: Origin\r\nAccess-Control-Allow-Methods: POST\r\nAccess-Control-Allow-Headers: content-type\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.17.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T23:24:08.370728Z","times_seen":17535745,"resource_available":true,"data":null}},"time_used":467,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":467,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iqsg700xc24.top/cdn-cgi/challenge-platform/h/b/scripts/jsd/8359bcf47b68/main.js?","fqdn":"iqsg700xc24.top","domain":"iqsg700xc24.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iqsg700xc24.top/","date":"2025-07-31T22:57:38.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iqsg700xc24.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 22 Jul 2025 05:52:38 GMT","end":"Mon, 20 Oct 2025 06:51:06 GMT"},"fingerprint":{"sha1":"C9:54:1A:A9:2B:46:E4:E0:1B:DD:12:BB:80:04:06:B2:B8:3B:9A:E9","sha256":"DA:BC:51:F6:3B:63:99:63:4A:10:69:2A:13:7B:98:0E:5C:64:E4:24:D4:38:E9:F3:14:C9:79:B1:8A:E2:53:D0"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/8359bcf47b68/main.js? HTTP/1.1\r\nHost: iqsg700xc24.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 22:57:38 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: br\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=WOf00CokduZXKZTj8KQ1F%2FozSAZsH1%2ByOO5KZgmFw8JVVHEt49QcR6%2F2%2FplhmX%2F27Eg2ifSQ%2F6EERylHOzdc7PHpVGJAG6Jds1HTCB5zIhimfs%2BX%2Fon91q8t4dnKIjGjvbw%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9680b229ccce5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4007\u0026min_rtt=1396\u0026rtt_var=2436\u0026sent=89\u0026recv=27\u0026lost=0\u0026retrans=0\u0026sent_bytes=72983\u0026recv_bytes=3343\u0026delivery_rate=6034370\u0026cwnd=24000\u0026unsent_bytes=0\u0026cid=6117357a2c2bf4d8\u0026ts=1573\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9967,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9967), with no line terminators","md5":"efba5e12a4344523deec69cb73de12bf","sha1":"98268eb68e36d5b5c0e506b4b2b04b4dc82d6bd2","sha256":"924aaa933b6628ed8d661dbede32aa95a1244bf64febc31c10796ffd9b3fef24","sha512":"87b5e4d333a072ecb443c7d5af7e899434a6b8946d805a19e281f814883691369664f25c8c85b6894f883fb28434d399ee30329774ab3feb98b32e12ea3dd052","ssdeep":"192:IfaV5EDKwMXiZKAQMQMpM2ia9NDFwl+t2VOCRtCoEwYW/HB:IfaV5EDKwMXiZKAQMNpMzaFwl+t2sC6s","tlshash":"cb22e7cef9043889c55654aa20eb37de562c7fad24e56e158718ccde3cbc734351ae88","first_seen":"2025-07-31T22:53:13.888719Z","last_seen":"2025-07-31T22:58:04.887489Z","times_seen":2,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iqsg700xc24.top/cdn-cgi/challenge-platform/h/b/jsd/r/0.012525351983360971:1753999972:I3VUggyJrzI_7XqyrT9A48Otz7TJCvp_SIApTyfldL0/9680b21ceab056b7","fqdn":"iqsg700xc24.top","domain":"iqsg700xc24.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iqsg700xc24.top/","date":"2025-07-31T22:57:39.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iqsg700xc24.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 22 Jul 2025 05:52:38 GMT","end":"Mon, 20 Oct 2025 06:51:06 GMT"},"fingerprint":{"sha1":"C9:54:1A:A9:2B:46:E4:E0:1B:DD:12:BB:80:04:06:B2:B8:3B:9A:E9","sha256":"DA:BC:51:F6:3B:63:99:63:4A:10:69:2A:13:7B:98:0E:5C:64:E4:24:D4:38:E9:F3:14:C9:79:B1:8A:E2:53:D0"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/r/0.012525351983360971:1753999972:I3VUggyJrzI_7XqyrT9A48Otz7TJCvp_SIApTyfldL0/9680b21ceab056b7 HTTP/1.1\r\nHost: iqsg700xc24.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12098\r\nOrigin: https://iqsg700xc24.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iqsg700xc24.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 22:57:39 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\ncf-ray: 9680b22b1e0f5694-OSL\r\nset-cookie: cf_clearance=E8R52EkJMlizknrIB8Ca.E.WfNFvqJK1YIGwnpccoKk-1754002659-1.2.1.1-J13HDTzpoTqCLurB02xiCqP4WWhsf0vInlaMqoOPEd3IvNNFQo8tAS.jrQ10vrldln86Y_ujUwb.3QOedQw_IXnQTyeA6oP6itfgKmSUA5WSHbWzUM_z5Pj3CSyT1KymSRGZdomvkk5LwaDqlS3EhEomM6ErWPA61nSUvr0zzm8DMiVv7CMcgYeZY1za1aF4rpoSuciq9SZt_eDc1Tju7rt2yPJKQLYSGZF4jeB_dC8; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=iqsg700xc24.top; Expires=Fri, 31 Jul 2026 22:57:39 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xAqoz9k78qucyQE9GbPApcYMBOCDG9gYBkxN1nB2lj6rHTcd75RBCgMLiehuKlq3zPvvM7Bhb%2FYQ%2FdxTfmBuA2jnEL4bXJioEAwoWKwbKqMdRRk7APFesT3oY2DaaMDiWbk%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4132\u0026min_rtt=1396\u0026rtt_var=2077\u0026sent=100\u0026recv=39\u0026lost=0\u0026retrans=0\u0026sent_bytes=78618\u0026recv_bytes=16525\u0026delivery_rate=6034370\u0026cwnd=24000\u0026unsent_bytes=0\u0026cid=6117357a2c2bf4d8\u0026ts=1784\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T23:24:08.370728Z","times_seen":17535745,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xh21d4m.g1jgsl9oyum.xyz/fast-endecode/main/request","fqdn":"xh21d4m.g1jgsl9oyum.xyz","domain":"g1jgsl9oyum.xyz","tld":"xyz"},"ip":{"addr":"172.247.112.162","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iqsg700xc24.top/","date":"2025-07-31T22:57:39.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.g1jgsl9oyum.xyz","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 31 Jul 2025 00:00:00 GMT","end":"Wed, 29 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"33:CF:45:CE:C0:AA:05:63:91:65:FC:F2:A8:A8:DE:C7:2F:86:29:93","sha256":"F5:54:2A:E2:70:87:8E:4B:EC:4E:33:55:ED:79:F5:74:F6:88:BF:CD:8E:95:55:D9:EE:56:69:42:E1:5A:29:B4"}}},"request":{"raw":"OPTIONS /fast-endecode/main/request HTTP/1.1\r\nHost: xh21d4m.g1jgsl9oyum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://iqsg700xc24.top/\r\nOrigin: https://iqsg700xc24.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx/1.17.6\r\nDate: Thu, 31 Jul 2025 22:57:40 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nVary: Origin\r\nAccess-Control-Allow-Methods: POST\r\nAccess-Control-Allow-Headers: content-type\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.17.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T23:24:08.370728Z","times_seen":17535745,"resource_available":true,"data":null}},"time_used":1414,"timings":{"blocked":482,"dns":2,"connect":156,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssq7y8grhyv.xyz/static/cdn/js/crypto-js.min.js","fqdn":"ssq7y8grhyv.xyz","domain":"ssq7y8grhyv.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ssq7y8grhyv.xyz/?domain=iqsg700xc24.top","date":"2025-07-31T22:57:41.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ssq7y8grhyv.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Jul 2025 05:40:23 GMT","end":"Fri, 17 Oct 2025 06:38:53 GMT"},"fingerprint":{"sha1":"AB:50:4D:E3:B4:AB:3D:B9:EA:D6:D3:F0:C0:CF:15:0E:88:D2:8F:93","sha256":"6A:51:30:33:AB:A5:6E:67:C4:52:F0:2C:80:CA:37:95:B2:39:0C:29:7E:B8:9F:F4:E5:66:CA:75:B3:05:44:F6"}}},"request":{"raw":"GET /static/cdn/js/crypto-js.min.js HTTP/1.1\r\nHost: ssq7y8grhyv.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ssq7y8grhyv.xyz/?domain=iqsg700xc24.top\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 22:57:41 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 31 Mar 2025 13:05:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CJuTTJLI2FkTmbU%2BOewg1FT3zYyZh%2BTSawrZQj4seWUgY%2FnDT3MhqL2PBVLMUzsk90Ilwcdgp6a4TjZPQAGNsLYGL%2F0MD188spvBSN8%3D\"}]}\r\netag: W/\"67ea931c-b9d8\"\r\ncontent-encoding: br\r\ncf-ray: 9680b2399c1bb4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47576,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (47576), with no line terminators","md5":"c8b215ef1c396901ab19c41a7ac42cd7","sha1":"00e971d00ca3e26ef1bc0f7586e16c5e30296ebe","sha256":"817c88066f7a344d4471bb20d30652e641f498eedd9c28e5a6ed661c67795010","sha512":"7b673e3b43efcad7a491d24b73cd831df6ba2daf133caccedbf0c503ded87874db8830b028cce5a2ea4933a2e57ff5b82b5f7e376d60172a65564bf32f8a59c5","ssdeep":"768:JxMJNNuN2XlYGu0kG+QZfrORTIM9OT81KMpBs9oQvu:0Jw2hu0uifrIhdXs9oau","tlshash":"4b232ac1a19c605163a774d00d3f750bb553363a460a85ecfa68e9eeecbc6da903dd38","first_seen":"2023-03-10T18:36:37Z","last_seen":"2026-07-25T21:05:02.805506Z","times_seen":1041,"resource_available":true,"data":null}},"time_used":936,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":473,"receive":463,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6qdy0xioq0d39hm.xyz/","fqdn":"6qdy0xioq0d39hm.xyz","domain":"6qdy0xioq0d39hm.xyz","tld":"xyz"},"ip":{"addr":"172.67.174.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ssq7y8grhyv.xyz/?domain=iqsg700xc24.top","date":"2025-07-31T22:57:42.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6qdy0xioq0d39hm.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Jul 2025 18:45:29 GMT","end":"Sun, 12 Oct 2025 19:44:12 GMT"},"fingerprint":{"sha1":"21:AC:68:B0:22:CD:77:8B:54:7F:37:A2:D3:7E:E1:6C:DF:29:37:16","sha256":"EC:53:30:AD:AE:6D:F7:1E:7E:13:DB:FB:73:13:0D:7E:CB:34:D2:61:4B:B2:B1:02:E2:6A:B1:FD:90:4B:AE:06"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 6qdy0xioq0d39hm.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ssq7y8grhyv.xyz/\r\nOrigin: https://ssq7y8grhyv.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 22:57:42 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\ncloudservicediscount: CDN\r\nx-amz-request-id: 0000019861789955954DDD0822A5DBEA\r\nlast-modified: Thu, 31 Jul 2025 17:12:27 GMT\r\ncontent-disposition: attachment\r\nx-amz-tagging-count: 0\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: EA-HKG-EDGE6-CACHE1[5],EA-HKG-EDGE6-CACHE2[0,TCP_HIT,4],EA-HKG-GLOBAL1-CACHE34[2],EA-HKG-GLOBAL1-CACHE23[0,TCP_HIT,0]\r\nx-hcs-proxy-type: 1\r\nx-ccdn-cachettl: 60\r\nx-ccdn-req-id-46b1: 7fa9364c1b540de848d0c9ec4df09a86\r\nnginx-hit: 1\r\nage: 9\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tI1FwAohC%2BuIyV%2BTF48bi%2FSAc9nWX6iswqy7S92oBkfLRWJxe6yGoUdpcV5te9%2BEAnYF7gaeS%2BwUzOXLjFMvsC8EWUoC8h%2B5n3UX%2FRyYavk9\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\ncf-cache-status: DYNAMIC\r\netag: W/\"372c40057368c78b53a5546304ad07b0\"\r\ncontent-encoding: br\r\ncf-ray: 9680b23fcbe50afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":278,"size_decoded":0,"mime_type":"text/plain","magic":"JSON text data","md5":"372c40057368c78b53a5546304ad07b0","sha1":"fce2c343e6626c0bb2edc4e7a1eedd0db9348325","sha256":"f543c0aeaf0ebe0fdc9713a75bba86b5373ff9f729b8bb214d6cd1ecb78edc3d","sha512":"031e94aefccfeaaaf4aee28da988504a9960d42a3d93391c31b7b1119fa3208544fa21762859b515ae14c0bd28463fd8c1802926d48d1fc9ca2591bed37a834c","ssdeep":"","tlshash":"e4d052a391000aaa27841088c83e2668901f220f0c9220c0b90f0ccc0f256b8beb033c","first_seen":"2025-07-31T22:53:13.90291Z","last_seen":"2025-08-01T00:00:03.166248Z","times_seen":8,"resource_available":false,"data":null}},"time_used":510,"timings":{"blocked":23,"dns":1,"connect":1,"send":0,"wait":464,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a2v70wm7dxt.xyz/static/cdn/js/axios.min.js","fqdn":"a2v70wm7dxt.xyz","domain":"a2v70wm7dxt.xyz","tld":"xyz"},"ip":{"addr":"104.21.15.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://a2v70wm7dxt.xyz/enter.html?domain=iqsg700xc24.top","date":"2025-07-31T22:57:45.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a2v70wm7dxt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Jul 2025 05:36:05 GMT","end":"Fri, 17 Oct 2025 06:34:26 GMT"},"fingerprint":{"sha1":"A0:DA:D3:47:98:5C:A0:ED:76:C7:79:44:4B:A2:DA:93:F1:FD:5E:B6","sha256":"53:81:9C:51:58:FF:11:E9:C7:1C:F6:12:FF:AC:52:49:70:BF:22:70:93:F5:4C:55:64:8F:9D:9B:EF:3B:C8:47"}}},"request":{"raw":"GET /static/cdn/js/axios.min.js HTTP/1.1\r\nHost: a2v70wm7dxt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://a2v70wm7dxt.xyz/enter.html?domain=iqsg700xc24.top\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 22:57:45 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=9Ynl4cUxt%2FFrWq6z7V1MRQT5i8XURGMY%2BQWnJKJT0ZzgEIgpfzxeXKIpTGyUKCSTSRFkHKxw8mkB7tx3fXkRXIlVp9qQAaBObkdO60hiYsI5I2%2FBPNvh3VDbTd5O5KbKg5A%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Mon, 31 Mar 2025 13:05:32 GMT\r\netag: W/\"67ea931c-45b3\"\r\nage: 293\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9680b2552e6856c4-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1942\u0026min_rtt=46\u0026rtt_var=2510\u0026sent=168\u0026recv=245\u0026lost=0\u0026retrans=0\u0026sent_bytes=24131\u0026recv_bytes=14758\u0026delivery_rate=2220706\u0026ss_exit_cwnd=14916\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=5839441b72a5ee76\u0026ts=596\u0026inflight_dur=81\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17843,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17808)","md5":"d1e71c0ca404956d46e475dbe30566b8","sha1":"474c81de5ff1418895a10cb6e03f9ab522914b69","sha256":"1d389f625c1d774224d32527657e7398e57a65c718a07748f0ad7faecce8de3e","sha512":"21dafbc553673160ac80142c7134828af04d5961f7d28a3fb7360e46f88e0ab2ca981691c517e59b69a23614c524d5665ef0adce09ace679491786b3da18869c","ssdeep":"384:3/v60vgp81DaP9epzrPt/BL3dkyRuHrxytZ5CISD1ViQCKk:HiigP9exrthkJrifV","tlshash":"d782d7ca7594f0a747e770f040af590fb37ba529688d88a0f650e8e66c7910d8733f69","first_seen":"2023-03-13T01:01:23Z","last_seen":"2026-07-24T02:13:18.101738Z","times_seen":768,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a2v70wm7dxt.xyz/cdn-cgi/challenge-platform/h/b/scripts/jsd/8359bcf47b68/main.js?","fqdn":"a2v70wm7dxt.xyz","domain":"a2v70wm7dxt.xyz","tld":"xyz"},"ip":{"addr":"104.21.15.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://a2v70wm7dxt.xyz/enter.html?domain=iqsg700xc24.top","date":"2025-07-31T22:57:46.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a2v70wm7dxt.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Jul 2025 05:36:05 GMT","end":"Fri, 17 Oct 2025 06:34:26 GMT"},"fingerprint":{"sha1":"A0:DA:D3:47:98:5C:A0:ED:76:C7:79:44:4B:A2:DA:93:F1:FD:5E:B6","sha256":"53:81:9C:51:58:FF:11:E9:C7:1C:F6:12:FF:AC:52:49:70:BF:22:70:93:F5:4C:55:64:8F:9D:9B:EF:3B:C8:47"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/8359bcf47b68/main.js? HTTP/1.1\r\nHost: a2v70wm7dxt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 22:57:46 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=abd00O4E28t4RlFOO%2BL6rL17P%2FxXyiYqWRS4zrEy3TQ0mzO3Y5EFPLPBDvOpjMDZF6XOSgt0guqINMxIMRJsAtM0NvrQJHvq7VkPV33o6MRjs63IfyZBOu2Gnbcc%2FCRtiwk%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: 9680b256ae8056c4-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=739\u0026min_rtt=0\u0026rtt_var=366\u0026sent=344\u0026recv=296\u0026lost=0\u0026retrans=0\u0026sent_bytes=241728\u0026recv_bytes=19377\u0026delivery_rate=16302252\u0026ss_exit_cwnd=14916\u0026ss_exit_reason=2\u0026cwnd=28636\u0026unsent_bytes=0\u0026cid=5839441b72a5ee76\u0026ts=843\u0026inflight_dur=135\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10096,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10096), with no line terminators","md5":"fcdcec24e30b76b8d67178e5d7bef0e6","sha1":"13a59ef2d68572acc350c0791e1d603fa38050f7","sha256":"081a1ca561963c236449de1a5e5891ae4e2f4b66ed19b631879bf8aebc5b0f17","sha512":"502f0c122cf81f685fbe0bacf793b5093e733a3f0842e65d65bac4825dbb7be1306487343947f565bd750f15770a35e585d918bcacc41c319801f1973ee8c995","ssdeep":"192:Z5gFFbD0LGMkQCFKbXCcIR22ACKugGHU1SttdPd3+0WvFVVlZh22T:Z5gFFbD0LGMkQCFgXmReCKzG6SjdPd38","tlshash":"d6220acef88c5eda415508f418972ae7962e4f6934929f00c290c8b5feac37465e9f14","first_seen":"2025-07-31T22:33:25.587004Z","last_seen":"2025-07-31T22:58:04.891825Z","times_seen":3,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}