{"report_id":"c7dfab1d-7f50-4b52-8432-648df11453a7","version":6,"status":"done","tags":[],"date":"2026-04-22T13:06:43Z","url":{"schema":"https","addr":"googleyzq1.com","fqdn":"googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.googleyzq1.com/","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"title":"Google Authenticator - Google Authenticator官网","dom":{"size":45860,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8832)","md5":"2aee48c3e9d9b986ac9f5427587f6a41","sha1":"2a202befc8a595ed30221832db405ec14fa829d0","sha256":"e894db239e71b98334d1050f0357b79027e19597104823b84ce830448cacfd7e","sha512":"a1156b6caae8c470ce92bfa37707076ef8d1dd13c8f6997fe61b8146e8d82734c09af35dd17805c7d0553c408fd83170329eba0e90b96c4e451996ba1bde3777","ssdeep":"384:juEBBLsEr/ZdSZUaAskWWlgRcNF0wqz12fZMZAGehj+6LJmL6uj7RvDZqPx5yHAr:j3FHZdypJWaT7Rv1kx5+Ar","tlshash":"972395f3a5d09463168dd3e4b4b0374ade4b9687ca0282a971fc1cacdbd1dfa41a718d","dom_hash":"domhashea54d826306e02d8df1f918e03b06808","first_seen":"2026-04-22T13:06:49.092628Z","last_seen":"2026-04-22T13:06:49.092628Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"googleyzq1.com","fqdn":"googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-27T13:06:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googleyzq1.com","ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-27","domain_rank":0,"first_seen":"2026-04-20T03:27:48.863324Z","last_seen":"2026-04-20T03:27:48.863324Z","alert_count":144,"request_count":48,"received_data":2867525,"sent_data":23005,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Yoast SEO:25.4","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"WordPress Super Cache","description":"WordPress Super Cache is a static caching plugin for WordPress.","website":"https://z9.io/wp-super-cache/","common_platform_enumeration":"","icon":"wp_super_cache.png","categories":["Caching","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"googleyzq1.com","ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-27","domain_rank":0,"first_seen":"2026-04-22T13:06:44.985296Z","last_seen":"2026-04-22T13:06:44.985296Z","alert_count":3,"request_count":1,"received_data":45084,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/themes/Yanzhengqi/js/jquery.min.js","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6cbb321051a268424103cd4aea8ffa66","sha1":"7cb05e3d551cd61439337b2cb22f49b1955f9711","sha256":"82f420005cd31fab6b4ab016a07d623e8f5773de90c526777de5ba91e9be3b4d","sha512":"72165cd8cc7c0751b319234c7c9447eb78d6eee6195f35f46bf525591ad3be5e24c7162a50734cb724d303920343b8139780132e85e566d86c89a956de6b92d0","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIK6alrUnzZ6a4tsO7KixfWBP+qCddWHs3ghda98o:v4KZ+slsOuixfpwhda98HrU","tlshash":"4883d6d9b2d67062977734b850bf410bb17a98dab44c8c60f098d4e47eb4a8e507bf2d","size":85630,"data":"","first_seen":"2023-03-07T01:06:19Z","last_seen":"2026-08-13T01:52:46.406821Z","times_seen":1134,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/themes/Yanzhengqi/css/swiper-bundle.min.js","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e350189ca403921effb91eccea88504","sha1":"eb08f89875ba610dcf5ad5d691cf0259cca97ff3","sha256":"5c26dbf61b3922aa3290fbaba9a5640bef360d5d8243174738dde7086d25bcca","sha512":"4289331bf07ff62e57dc161b9aec8d9f66a1f44880a4ae4a638b1a39865109020db81f97e76103d0bdd109cff5c7b61403ce6a68567dba8078c794a690b18225","ssdeep":"1536:EIJcfGRELR8Nxn0LzGhd+IWzGolxUFnOk8+ILDX1ftgeQV9qDlUpf/arWcplXvQM:HJDNmLz2vHnOk82V9SAXiTnXpk07jl","tlshash":"f2e3f8896220b57646e316db93e4c621b3b54540b80ac8f470b94c9f597ec9813feffa","size":143034,"data":"","first_seen":"2023-09-22T06:50:27Z","last_seen":"2026-08-09T22:40:02.010057Z","times_seen":799,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"192141ef1eec3cb9c0e0bbc8b724fa4f","sha1":"cc2f23082e6e0b1fce4cab8ed861ad29833863d8","sha256":"6b3ef885d5a7ee72cc4c534184a9d262589fd711045032d777a4ebd8d19302b9","sha512":"28009df71c3e5372f256f6537acd97d5aefe90b80a2363f93a2eded8dac16949088d55518ff0b849edf65b1f75c5fd57059ed07bd0bea58ddbaf2efdcfcc4173","ssdeep":"","tlshash":"5031f106f2646aa6247f677a0d7f3280362b4a438e8e8811f17c44a14f5c12d3d77e9d","size":1849,"data":"","first_seen":"2026-04-20T03:27:54.29276Z","last_seen":"2026-04-22T13:06:49.22095Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/themes/Yanzhengqi/css/7.webp","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleyzq1.com/","date":"2026-04-22T13:06:23.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET /wp-content/themes/Yanzhengqi/css/7.webp HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleyzq1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7768\r\nserver: cloudflare\r\nlast-modified: Fri, 11 Jul 2025 02:49:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68707bb9-1e58\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QhSozYJOsdHeCiYPnCJycatgdb6jGPZvLoSccLUADb%2BJvqR1gmJrO%2BmtB2U5IbidmxdQNuDktYcNdHMOT9%2BKmaO9YuzDF%2FqA%2FX%2B6DPienG626acWjOxvuZRgLze3UbMAyKbnmA%3D%3D\"}]}\r\ncf-ray: 9f04d86d9fb123eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7768,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 273x592, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"04f2613ced70d1a487df8200e7f0c795","sha1":"452a52c8648ff25610e629d762c8789fde4f89bb","sha256":"fe996c0b9a706fa81b0be6b48d448f4bd2abb7e95826882648f2771b007558f9","sha512":"b7c280365e70f14f0d23ea82781a528f6cd16e36dacd4a2315020331136f63207d90b6e5bcf9acadc080dc6299e650c4e66b5897552dc2be2556d5cf4e5fbf6c","ssdeep":"96:SLo02JJeJZE4roWP1PTtmxec1UURB4d1Up8iXgwMSXjkU8+iqKStS2yxzbSP970t:SxjE4rDPxmf2UR5p8ggweEiH+J4z9t","tlshash":"2df1ae11fd2043bf628842734568eb42fbd470b3d899527467876cc9da65ae2620783f","first_seen":"2026-04-22T13:06:49.095864Z","last_seen":"2026-04-22T13:06:49.095864Z","times_seen":1,"resource_available":false,"data":null}},"time_used":569,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":569,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/themes/Yanzhengqi/css/9.webp","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleyzq1.com/","date":"2026-04-22T13:06:23.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET /wp-content/themes/Yanzhengqi/css/9.webp HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleyzq1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6416\r\nserver: cloudflare\r\nlast-modified: Fri, 11 Jul 2025 02:49:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68707bb9-1910\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wlC9QxGVjF6fBcva%2BnHoTVjrQh7gSEbt0moa62wzasMlKERZ16P1twPMTbQPoZr167E4cmH9UOYQ74Le50Q4I9NuymHmpF4xCF9TNYTjttgHKclCNOyc7WOnLxm20dsPDR%2Ft3A%3D%3D\"}]}\r\ncf-ray: 9f04d86dc83023eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6416,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 370x592, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e5c8a32685806ff375f0c4f16b169e26","sha1":"e9f31689791e1b154edd9e2b66163211c4558fa0","sha256":"ee8a0f7f3493a9598b4305b04ae32ad9f38ebf93fe4ef2cc74de0677dcf377f7","sha512":"041d29e86ee4c82d4cade5033da7288b2dc2d35f04cc08b87e77a2c6788ced05f44973a6578b9130790da8f18f857172748a098ca82d51663d1f9938d3de0c03","ssdeep":"192:Fu+j3OKoFc9M4BdU8vqAjwriZGDfKUMbtm49Z97y:Fu+jwFk1NC+wribPdy","tlshash":"ddd19ed05d5e2a8edd57b7f004b3909f5263cb473d806f0e891346ba5a5841c9663717","first_seen":"2026-04-22T13:06:49.110257Z","last_seen":"2026-04-22T13:06:49.110257Z","times_seen":1,"resource_available":false,"data":null}},"time_used":625,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":625,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/themes/Yanzhengqi/css/12.webp","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleyzq1.com/","date":"2026-04-22T13:06:23.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET /wp-content/themes/Yanzhengqi/css/12.webp HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleyzq1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7190\r\nserver: cloudflare\r\nlast-modified: Fri, 11 Jul 2025 02:49:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68707bb9-1c16\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IYerJ%2F1FY5XbS2713vB4kTDUgVtm1ZSBS3vPjVtpOP0eDPeurZV0%2BK6HihQ%2Fsww8USq7LvkxIzJmAsA9n7UNmwT2f7cQX9ttfKyWYLEtGawPYeIrGegEfG8G86HoucAw0rlNAw%3D%3D\"}]}\r\ncf-ray: 9f04d86dc85323eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7190,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 370x592, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e6f0b735c3f28a90902cde20060d9ba0","sha1":"504b892ecbb48868e47659ef0cd8dc27469b3077","sha256":"28d0051df99295f36187178c2b9b13355e62005bd787dee2098910dce29359c3","sha512":"3c31ade5789357f06b6368103e9869f0b6f0a42664ea600b8eddcf16f0f2f60db902884cae5c6e39d3d50958b280b5012afbbe0d3e864ddc751f60995248cb98","ssdeep":"192:UU9cNJ008WzdsRMWKOy+6coD7SB8hgrzgSZUiHDj5re:sJ008WzZWW+69D+B8hgrkWP5re","tlshash":"42e19ef256e96a1388d172b0c9d87a0f67b638f32d10f08dacbc06ad43554a1d7eb456","first_seen":"2026-04-22T13:06:49.113448Z","last_seen":"2026-04-22T13:06:49.113448Z","times_seen":1,"resource_available":false,"data":null}},"time_used":553,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":553,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/themes/Yanzhengqi/css/13.webp","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleyzq1.com/","date":"2026-04-22T13:06:23.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET /wp-content/themes/Yanzhengqi/css/13.webp HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleyzq1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7672\r\nserver: cloudflare\r\nlast-modified: Fri, 11 Jul 2025 02:49:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68707bb9-1df8\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y7R3NdjMkvHY7bWTby%2Bk1chsU0K8%2FDXQ6M6TKU5h%2Bi4W5kO8BsemKIHq6P3PlNjq948V2JJHq%2FdjA7d47ErDg9aSujG%2FilWsciXQcF1hIt9Qj51OZPLKWDqiRAVWmjTURqReOw%3D%3D\"}]}\r\ncf-ray: 9f04d86dd85c23eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7672,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 370x592, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2c450d1faca6ce0c5048d436f9dfa8e3","sha1":"b370daf03e7251cfc85beabc07c74a0cbf48cbe2","sha256":"db1ee494d14a555986458ebbeba40f021cdc8c2e3c0ed8faa20b113052d92279","sha512":"8690a4b4b58496316b7cb24583c81f59caa89b68bf0e4af4d67206fa29e987cae4ec222e4d8098ae91d89211670717045b9f47aa8168e4453120c0f09c771a5e","ssdeep":"192:GJRx28hhhhhhhh2B+fDBYFC5z5zDRsLgPtMunVOPZLqqou:URNhhhhhhhh2BKBYQ5z5BswKIVQ/n","tlshash":"9ef18e12fe70d7d5d06c12b652fa61400384d1576d823aeefa03a0cfa65384eb22f6d3","first_seen":"2026-04-22T13:06:49.115868Z","last_seen":"2026-04-22T13:06:49.115868Z","times_seen":1,"resource_available":false,"data":null}},"time_used":644,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":644,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/themes/Yanzhengqi/css/1.webp","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleyzq1.com/","date":"2026-04-22T13:06:23.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET /wp-content/themes/Yanzhengqi/css/1.webp HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleyzq1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10726\r\nserver: cloudflare\r\nlast-modified: Fri, 11 Jul 2025 02:49:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68707bb9-29e6\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dJJ0EQRQntdhmAIPkB31%2BLYT61lkFZZobrn90yjFX8XQbvFlS0SY%2FHVx4QAdnZ%2BAjghGro%2Fl3EeZtGUA40DTyfXRbNnrPVhU%2BiDTjFUyodQfo2%2Fr7rUS%2FujtZ%2FShCjZs6c2Csg%3D%3D\"}]}\r\ncf-ray: 9f04d86d8f9e23eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10726,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 273x592, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a12fd12116693443f9cb4e10edd76c82","sha1":"ef90d7964653470a642c519cac2163f26f3cf1ba","sha256":"26982a706ebed649b0e1fcd123974bcc9be89c4d322375afdbe91bade405c739","sha512":"22cac4aff66e819df9c211f9b4ec153bafa1fd765230157de27cd96fda887b2b5036cdc2ef13d751a85d871e291fe82b05220ab077375a22b227b4e033661844","ssdeep":"192:286a0iS9YWStLmtrKwS8DqPPwMhzFsDOhT1/BSJ3ua3pGYKi/g:2bdr9XKmtfS8uPPZzmDOTc59p9KP","tlshash":"fc22c0c439882810d67ad8375184b60ffee2f7367cb1752044a1b853e754ddf59921f4","first_seen":"2026-04-22T13:06:49.11816Z","last_seen":"2026-04-22T13:06:49.11816Z","times_seen":1,"resource_available":false,"data":null}},"time_used":601,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":601,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/themes/Yanzhengqi/css/8.webp","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleyzq1.com/","date":"2026-04-22T13:06:23.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET /wp-content/themes/Yanzhengqi/css/8.webp HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleyzq1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6540\r\nserver: cloudflare\r\nlast-modified: Fri, 11 Jul 2025 02:49:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68707bb9-198c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w79d4JXhfdZoSNzDu8N8bArp4pM7V3uMLdIbiASua3D%2FKwwq2BJs8P6MXkBtCweQoSoy8Sx%2B7okkGISc190kD4JEV%2FVL7S3l7ak3Pza0bD95m2JZqyY77q19Ob8q%2BbGvSSGQZw%3D%3D\"}]}\r\ncf-ray: 9f04d86d9fb423eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6540,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 370x592, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1dc58c6c2fd97cd5094cfb1608894e89","sha1":"9b6ec3ae5658f91dc43fbedb35054a80f51ae1ab","sha256":"1175ef5a5c9ca328b568b74da98a4ff453becaedd1a58e23d15ccd770b004c86","sha512":"6a23fc00491a80b2f93970a52b29d0b2ef582315efa0e867571355b66893b5b4c61decbf259e82e38deed7ba741ddf4fa75fe243bef0858915454f02334707bf","ssdeep":"96:dU2wEJAJOcf8GeFP+iiLj3TsQ60P+bRHFJEouwYWcbUiObSFlockaYaZ/n4Twgy5:dUEJBGG+iiP3IFyLWcpObnbUZ/4T6EQ","tlshash":"bbd17de4a85f7608cfe744361a5b871c1ed85186369c055b02ca2929ea17abecf11e53","first_seen":"2026-04-22T13:06:49.122144Z","last_seen":"2026-04-22T13:06:49.122144Z","times_seen":1,"resource_available":false,"data":null}},"time_used":607,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":607,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/themes/Yanzhengqi/css/10.webp","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleyzq1.com/","date":"2026-04-22T13:06:23.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET /wp-content/themes/Yanzhengqi/css/10.webp HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleyzq1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5472\r\nserver: cloudflare\r\nlast-modified: Fri, 11 Jul 2025 02:49:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68707bb9-1560\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OtYgEIwLdf8xCqq6zaniEkRClL9l%2FYKeSd5rk5WWDgYBRbctk5cDZcWP%2BNvVtxU%2BU36AHS5A6hk4nrNn%2BDSnqMfyLldabBPF1tDgrharcFSil2dBCaJ63hJG3XSprOeUNiZEsA%3D%3D\"}]}\r\ncf-ray: 9f04d86dc83823eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5472,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 370x592, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"20fff1e81817e3a0f3a99a547b4c9888","sha1":"580fc16596c00703a8d65babedb2a1b8b09e4c5a","sha256":"24aaf1cfd8f5270d82c3109add9b61c99e661011896028cbb8a7561b18553dcd","sha512":"edad2f7a3ffe10669cf5a732cbca745a1cb8d9ae8612bb432d41f38d96ed92a8e3daf979fc3313a72be7247b7de709af74dd0ccc4bead02e926449ce5d13c4c4","ssdeep":"96:G1/CR3g7tbFSaAXC5NCQVOmxEKMQCJInb2i3JQmXK:UVF5aCLCmx5aenb2AJZXK","tlshash":"4fb16c4705d86e09da74f5384278099b8d1e045188c1e656bca9bd3cf3ab99be3d0778","first_seen":"2026-04-22T13:06:49.124831Z","last_seen":"2026-04-22T13:06:49.124831Z","times_seen":1,"resource_available":false,"data":null}},"time_used":530,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":530,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/themes/Yanzhengqi/css/14.webp","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleyzq1.com/","date":"2026-04-22T13:06:23.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET /wp-content/themes/Yanzhengqi/css/14.webp HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleyzq1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4226\r\nserver: cloudflare\r\nlast-modified: Fri, 11 Jul 2025 02:49:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68707bb9-1082\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zYymQoxHLrZaVnEvGin5bOCP17eyE5XQj%2FW1jGYXBtZUdCn%2BqLtitBlm%2FKnWYRnEEYT6BtU3vdEoVyNDvISlzSQMfRDKrVkJfdlFPkTSJ4Ea7lByKO%2BETReIGivRGWDwvZMxpA%3D%3D\"}]}\r\ncf-ray: 9f04d86dd86223eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4226,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 370x592, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"23d7dc188cd561ba0eeadf09dd1bb6ee","sha1":"9d11adc3b73e5e59b25e5a2fc1b84acc83b3eb9f","sha256":"7b298046b25e7b6371b318798369d4d4a516007f37d65e3f97d99245a4d2760f","sha512":"b9823846f92f39a4bbe3b9989dce6d4a46a19b30d1258f3cf8aac39bf9233c89c2e705a386e4226a8d92364dedd10e22eb0fd808d0fcfe5062894f47be855283","ssdeep":"96:nXSRKlqNUe+Wdq35QThz3lUfIud/brrWGTwL5kB/Si8:nXQPCe+o/1YIutbrrex","tlshash":"729127c3f5b0af10945c86e21c0187d5cc8af93c338f8fc58be28962495c8f26c2472a","first_seen":"2026-04-22T13:06:49.126983Z","last_seen":"2026-04-22T13:06:49.126983Z","times_seen":1,"resource_available":false,"data":null}},"time_used":626,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":625,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/themes/Yanzhengqi/css/16.webp","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleyzq1.com/","date":"2026-04-22T13:06:23.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET /wp-content/themes/Yanzhengqi/css/16.webp HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleyzq1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11974\r\nserver: cloudflare\r\nlast-modified: Fri, 11 Jul 2025 02:49:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68707bb9-2ec6\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MxBQJ9tzHuo6NYUBkZBj3%2BoGSvNA4IGc2L6VyAmt4%2BRdO6SkYQsVY26JZZEuDQIo26w10o%2BlImI4RrG%2BYt7vguFktnkPN2aGww4Hj11dx%2FKm4TBAAC0lCaUxOkmIHCuXXv8tbw%3D%3D\"}]}\r\ncf-ray: 9f04d86dd86c23eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11974,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 842x592, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9796b6b6f758b11da5951fa85bc7a153","sha1":"af676f4bc4dde8207b265365a802da3076391224","sha256":"198cf17b1768aa7d3ec42961d58dd529a8a52fd0c87f0c8712e00401a74d122c","sha512":"4ed952f6d672c1bef56f35a18609cd5606506f3942a83ca91b6f41185c98249172022ac93ce18c8bf7b48d16748701abeb5dfca7739d4b8d517ca82983a07918","ssdeep":"192:6mQSPkOAutuqiwdSLxe9XAhkI2CnRGjoTHNS72V9TsxcdO8KMwZIx3SKkJVsMn:6mQEAMuqrYLU50kITYM5/V9AxuO8b99i","tlshash":"e832bfee08ad97efe6c85ff4244385898dc3e42162f6ead1d684c384e0575a34d2bc65","first_seen":"2026-04-22T13:06:49.129248Z","last_seen":"2026-04-22T13:06:49.129248Z","times_seen":1,"resource_available":false,"data":null}},"time_used":833,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":833,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/themes/Yanzhengqi/css/swiper-bundle.min.js","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.googleyzq1.com/","date":"2026-04-22T13:06:23.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET /wp-content/themes/Yanzhengqi/css/swiper-bundle.min.js HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleyzq1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 11 Jul 2025 02:49:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"68707bb9-22eba\"\r\nexpires: Thu, 23 Apr 2026 01:06:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BpnFXpj6CsnqhVa5f0VNmBu2JC%2Fo6TkCInlfomMcaIOiDtDAHM%2B%2BqvEG0GjJjAjE3OD8%2BBs49N1O8Ahll42uezoSPBdJBEXkw2dNN%2FRHnVwXCPwixEEIc%2FR00QwINB3AMn%2BPQg%3D%3D\"}]}\r\ncf-ray: 9f04d86de89623eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":143034,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65277)","md5":"8e350189ca403921effb91eccea88504","sha1":"eb08f89875ba610dcf5ad5d691cf0259cca97ff3","sha256":"5c26dbf61b3922aa3290fbaba9a5640bef360d5d8243174738dde7086d25bcca","sha512":"4289331bf07ff62e57dc161b9aec8d9f66a1f44880a4ae4a638b1a39865109020db81f97e76103d0bdd109cff5c7b61403ce6a68567dba8078c794a690b18225","ssdeep":"1536:EIJcfGRELR8Nxn0LzGhd+IWzGolxUFnOk8+ILDX1ftgeQV9qDlUpf/arWcplXvQM:HJDNmLz2vHnOk82V9SAXiTnXpk07jl","tlshash":"f2e3f8896220b57646e316db93e4c621b3b54540b80ac8f470b94c9f597ec9813feffa","first_seen":"2023-09-22T06:50:27Z","last_seen":"2026-08-09T22:40:02.010057Z","times_seen":799,"resource_available":true,"data":null}},"time_used":570,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":570,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"googleyzq1.com/","fqdn":"googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-22T13:06:21.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 22 Apr 2026 13:06:22 GMT\r\ncontent-type: text/html\r\nlocation: https://www.googleyzq1.com/\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H0YANuIfd92B3lAMAoOZYw%2BDIYFPZuDWiTrWAAtiFMmKM91LQTxa0EhN2tyJAQaS2OyubW0X9hPdNjOW1cRtP686g414HfV9wDEqpUP9h6KhxiUfdoQXgQhQy83gwGQK\"}]}\r\ncf-ray: 9f04d8649f6c23eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44497,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T11:51:57.48642Z","times_seen":17870963,"resource_available":true,"data":null}},"time_used":705,"timings":{"blocked":26,"dns":9,"connect":1,"send":0,"wait":649,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/plugins/faq-schema-ultimate/public/css/faq-schema-ultimate-public.css?ver=1.0.0","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.googleyzq1.com/","date":"2026-04-22T13:06:23.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET /wp-content/plugins/faq-schema-ultimate/public/css/faq-schema-ultimate-public.css?ver=1.0.0 HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleyzq1.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:23 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 08 Jul 2025 13:17:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 23 Apr 2026 01:06:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1w3X5zE6eTUe9WVQc7VWng5dATy7vpNSyVm2OD76NxmDpxJGjYrvcKm%2FDI11kq0I2S3OqQ3kkt8sngYTF1XUsoPxB2ihjzZMewoSSJi8I1aR3OAwnXMU%2BwJTb3z4FAB6HGYu%2Fg%3D%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\netag: W/\"686d1a5e-62\"\r\ncontent-encoding: br\r\ncf-ray: 9f04d86d8f9823eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":98,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"e6094661d8923e95b233019ebff7c8f0","sha1":"cfd836d385d475baffee45d85cfeb9bb36e70d9e","sha256":"547dda3c14b284819be511be1e410da94a5efc6ccc4a9afe1c75394f9333191a","sha512":"b5684920345ccc14419cec135d43521bdc9b77618befa0096e11e33414dba09225ffe8e19ef10f3d75a74a086cfa40be2ebf3a4310fa6395e3e2d407a7451995","ssdeep":"","tlshash":"5eb0120b56b51c0700051d30bb0b80ce213d291e43b65004284711fcfc16d781316c9f","first_seen":"2023-04-05T14:27:18Z","last_seen":"2026-08-13T12:04:49.478242Z","times_seen":26305,"resource_available":false,"data":null}},"time_used":525,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":525,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/themes/Yanzhengqi/css/21.webp","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleyzq1.com/","date":"2026-04-22T13:06:23.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET /wp-content/themes/Yanzhengqi/css/21.webp HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleyzq1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9054\r\nserver: cloudflare\r\nlast-modified: Fri, 11 Jul 2025 02:49:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68707bb9-235e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HhcnaXp2FNtp7MaYctvlkykgk9jijVdFh5%2Flw%2BwVv7CbXo7DLvfmLKPSjWY438i0U74jt26a%2F%2B%2BzDHnGKdoVEZeq35aWywRsBNqzerwyz6g8AphfCqNctpMO%2FoWWxIKN9s4kXA%3D%3D\"}]}\r\ncf-ray: 9f04d86de89323eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9054,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 842x592, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"aa6254a7aae42a2279813deb93aa5987","sha1":"82c991f5481547786ecd7458d7ba0b09874db3f7","sha256":"9db6fca9ad5fab3558683478d7fcd7fe74bb8ce2afa645981ad380a340887d15","sha512":"4c9b4bc4846ca4629fbc015706e87bf4d33f9b6b07d3cdf3b7f6fe7e30e693265fb423a479be12320e25979fda165ef8b1bef3701913ac1b73aeef928fcceaa7","ssdeep":"192:m56ikkdRWBZTi9vEHy+0s24Udvw9jGSNNcMqttTmmC53QYC:m8ikkdUTGAyN4gAStM0tSmYQYC","tlshash":"84127da1c47be24de514e9310fe172e8d9af2002d46f41f7218dcda62f5b809d74af91","first_seen":"2026-04-22T13:06:49.135356Z","last_seen":"2026-04-22T13:06:49.135356Z","times_seen":1,"resource_available":false,"data":null}},"time_used":595,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":591,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/uploads/2025/09/105325-1.png","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleyzq1.com/","date":"2026-04-22T13:06:23.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/105325-1.png HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleyzq1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:24 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 13:39:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"68c573f9-14be7\"\r\nexpires: Fri, 22 May 2026 13:06:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YTwsNk4IZTqHzIn0VBA2V%2BpthC%2Fo0hIhHLfMHpdFVzBRFC4%2BCANBAHK2h01FKNZZ%2FDR2JBd2AXEVHq9J%2BcNh3KmBUedfoGakz13maFWkFzjH%2BAEKlgCJ6a0f%2BmV4c%2F5S3N3FdQ%3D%3D\"}]}\r\ncf-ray: 9f04d8718a1e23eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84967,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 720, 8-bit/color RGB, non-interlaced","md5":"edfa3f7583f71fc54e2175721c1fe25e","sha1":"52a767169df4a32175cee4169d10510b7fc7b583","sha256":"79db239399ee43c01b41bb95e3cc1cc220215dd9a1d8de1f22dcee09af972145","sha512":"eab508b3c94e34f200c68d22a351b7b0c82bbf9eb16f4729d0521ef04c098003f491991926d5b1c61add93d888c28cc4afa07fbd0e890e02559fa00efd0a7b59","ssdeep":"1536:a5rTWQloqzvk5ma9j4Qitwwk0FIrIBdCgzE5ow+cYYHuWRtcE:4TWQloEmma9jTi9hFIr8dCD5+cdOA","tlshash":"b683025da698e81e8fe4157152df4e3bb6234e3c140f8bb367296ce2be30c1d558a305","first_seen":"2026-04-20T03:27:54.248897Z","last_seen":"2026-04-22T13:06:49.137717Z","times_seen":2,"resource_available":false,"data":null}},"time_used":710,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":710,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/uploads/2025/09/230426-52994-7.jpg","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleyzq1.com/","date":"2026-04-22T13:06:23.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/230426-52994-7.jpg HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleyzq1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:23 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Sun, 14 Sep 2025 03:47:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"68c63adf-5b20\"\r\nexpires: Wed, 20 May 2026 03:27:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 207541\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zlqotea84C4BUUN4c7eFEgeLnHk5WrrewiSo4QlhxPcvv9txvX3zQx%2B7DKnj3fEiu4v%2F4r1C9alSNqw2rp7HOHdYPoeezm9u5iTpIzlA4r1JHQX4SfQe4oi1r2%2BHoSenfz70ew%3D%3D\"}]}\r\ncf-ray: 9f04d8718a3623eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23328,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 1080x692, components 3","md5":"6a439ae4e71b53cc62664862c587e41a","sha1":"467e612c32b970898e31d8d66b80b872a13f9fa2","sha256":"606946027fd224987ea4bf9b77db12f2ae946fb29a7686184c30c7df354da99d","sha512":"02f95d006fade0e07aa065d2ee66750aeab8b6b51eac3a36bc9071d9a84762bd40b6fa54c079edc90a9f629f1e7e0f6691d42f4c7cf0fd7bb2b31d56835dade5","ssdeep":"384:G9j9MXlOPKfovp9VfkMu4jMkVk7cvN6vcVQYLntJ:G9gtC9J04jMkvNXQYLnn","tlshash":"daa2a403dc198683552983fdbe074eed6e0a6b5ce9423beb14760edb3d205261c8f42a","first_seen":"2026-04-20T03:27:54.262356Z","last_seen":"2026-04-22T13:06:49.140343Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/uploads/2025/09/Google-Authenticator.001.jpeg","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleyzq1.com/","date":"2026-04-22T13:06:23.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/Google-Authenticator.001.jpeg HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleyzq1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:23 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Sun, 14 Sep 2025 03:24:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"68c63550-13317\"\r\nexpires: Wed, 20 May 2026 09:45:34 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 184848\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KNLrkUzB69ceHiLr33hxci5ueHDQIn9qDEUfTMz2c8r809LK3MyeiLL6V1ORS1Hl8jN8%2BVLDl8QB%2Bo1w0jtj%2Fyc6S2ukDOvvsbT%2B8bFMObLuHOMRuAGz5LuZgsVoJ5IufPMCGQ%3D%3D\"}]}\r\ncf-ray: 9f04d871aa7d23eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78615,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 1600x900, components 3","md5":"dac601e8b06a722858394d49d604b789","sha1":"cba4629d0c66058d42f0fa22f64131d03754f930","sha256":"83793559d099eb47eb2a225f71ffe546e9c2fba7faae28a4877f8ca197987bfb","sha512":"309eb34716a1a943d40748a3e947cad72cb1ac0e97d37cf50433a8df3700fb89978cabfd6c69cf7f78b000f8f359eab14a12d485f4ea8617725fccf6e83441ae","ssdeep":"1536:2YmPFO7nxzp0Mq5rI+AAq7GOX7/2kMC4e+Aiik+B/2nEyjqri:E2nMMq5E+A7Z7/2kMeiik2unEGqu","tlshash":"16736d435c08db82d66842e5fe034eac7f563f5ce9942aff04629ecb3d662214d9d42e","first_seen":"2026-04-20T03:27:54.264899Z","last_seen":"2026-04-22T13:06:49.142608Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-22T13:06:22.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:22 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Cookie\r\ncache-control: max-age=3, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=owIkIjd0kRHRKLVLsqVSpENv4quWu%2FWyoKPSXFGbXv72a%2BU9rMgF43vo5HsIeXTfFmMo1Km54tGVZVwKT8Nv9HYS29V%2BSdCv5yghKOTY6DuEweKNVVUPzZZ3F0Q0KqANoua8PA%3D%3D\"}]}\r\nlast-modified: Wed, 22 Apr 2026 12:50:47 GMT\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9f04d868caf323eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Yoast SEO:25.4","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"WordPress Super Cache","description":"WordPress Super Cache is a static caching plugin for WordPress.","website":"https://z9.io/wp-super-cache/","common_platform_enumeration":"","icon":"wp_super_cache.png","categories":["Caching","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":44497,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8832)","md5":"d80332c17288f6f8227a24cb037c80f5","sha1":"055bb8c5344ff77602fddaabbb1797befa74fb84","sha256":"5c6b728d5762a011c58eb1f362401932b176aba3236ebd6b3f7dc55b30cc9fbe","sha512":"95b50f51b690ae101270d9e7c05b1a9e51b9ce5e58cf74023b07f103498d354113ff8e68a0663ad6e4dd88d809e202f8572090ce1d2be5fea3a52c5f3a045184","ssdeep":"384:vcEBBCK3sr/ZdSZUaAskWWloRcN5qz12fZMZAGehj+6LJmL6ujtR3DZqPx5yHAwp:v1wQUZdypJWCtR31kx5+AQ","tlshash":"f71385f3b5d9a4231a89d3e4d9903718da5b9617ce0183b1b2fc1ca8afc0de744a719d","first_seen":"2026-04-22T13:06:49.144721Z","last_seen":"2026-04-22T13:06:49.144721Z","times_seen":1,"resource_available":false,"data":null}},"time_used":582,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":571,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/themes/Yanzhengqi/css/4.webp","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleyzq1.com/","date":"2026-04-22T13:06:23.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET /wp-content/themes/Yanzhengqi/css/4.webp HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleyzq1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8130\r\nserver: cloudflare\r\nlast-modified: Fri, 11 Jul 2025 02:49:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68707bb9-1fc2\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0aXtbubjgI%2Flb6CTy7js0lM%2B72lOav9EeH%2FwUIAInXXmTXdhcL3VmL0fZnrC3zWOib3RpVdOXQAJgoM1si53gHQWtbyJwrF3Su292%2Feu5zIPm79%2BzYr0tL84jLCueAZoSdgCBw%3D%3D\"}]}\r\ncf-ray: 9f04d86d9fa423eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8130,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 273x592, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"aa085ad044b8bbfc921f9e4442dfbdf7","sha1":"8055d82441da31a304eedbb05cc3c23fc15a11ef","sha256":"e2ba81abbee090153f534e6e4119950d078117ed174e85904c522b0fd98e1725","sha512":"e741e0211fa7c1c2dd4db4fc7c60f3e251ae8f5d5e7b3de6b8b33b43017388fac7713708759cfb25f06ecd1d1fd1087a313e096f1cd1ed75c2db55b21def8d45","ssdeep":"192:vQabiRTqTUuhXT1HgLZvswRVDaH7CMtA1TKW0HCx:vPiRTqTUuhjJiBxnK7sEW0ix","tlshash":"daf1bff721a18d7af6509aa2b3b0136878f531e46045838cec5d1160f9f762eca5b07a","first_seen":"2026-04-22T13:06:49.146734Z","last_seen":"2026-04-22T13:06:49.146734Z","times_seen":1,"resource_available":false,"data":null}},"time_used":549,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":549,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/themes/Yanzhengqi/css/5.webp","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleyzq1.com/","date":"2026-04-22T13:06:23.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET /wp-content/themes/Yanzhengqi/css/5.webp HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleyzq1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12180\r\nserver: cloudflare\r\nlast-modified: Fri, 11 Jul 2025 02:49:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68707bb9-2f94\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EQYrYGQBEfGgKINTchJRYav1V5o1LpsXKdaZyAB%2FZK5Y%2BvFNLQJIozjmw0fpfjPyLllOPj%2FIdlHA2dz%2B8qct8oBJgJphtaC0BLO7PiXeCBn5dbUmGbYaY9V5pzioP4eWGmIrMQ%3D%3D\"}]}\r\ncf-ray: 9f04d86d9fa923eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12180,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 273x592, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"88ed3c602c413506761d003a828eafcb","sha1":"f5bdde7063c63fa4a014e86b88d38f39e7d76cf2","sha256":"33a64467ff4433d5846d0c7e6a77e0c75ae6df9fa91c7545d88671d50a3eaa40","sha512":"3401077882962bf8aab48a8d72c1038c62c8d053ad1563eab9e0521e02bd1815be9888b3e83dd1da7d3d6706109490dfdea8f8189f41ec37a002eeee9ca4f750","ssdeep":"192:9rKmBmTuVnoqn403Ve3cQDqSGsbs/THuiln25+fS/ADFi3yjy3k3MbypneS1nVUa:9pyIn1J2qSGsIjui5y+fJXyUcbyplGaX","tlshash":"9d42bfaadd628336b4541eb206f7414ebdf3533571898004784b72b2797f193aae8778","first_seen":"2026-04-22T13:06:49.148634Z","last_seen":"2026-04-22T13:06:49.148634Z","times_seen":1,"resource_available":false,"data":null}},"time_used":603,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":603,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/themes/Yanzhengqi/css/18.webp","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleyzq1.com/","date":"2026-04-22T13:06:23.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET /wp-content/themes/Yanzhengqi/css/18.webp HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleyzq1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9892\r\nserver: cloudflare\r\nlast-modified: Fri, 11 Jul 2025 02:49:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68707bb9-26a4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t%2BdW93uKbblGAM5X5haJqI3KW8D%2BFUw5Mdttam6a2ysDH0wfKMot2j1V4aNKD77RHMbLLDovMDi%2FDrz58VHu64KEIyzA97nThZqx7cy3ozMCEpu9yvo4VNPZmPMUK76KZryfFQ%3D%3D\"}]}\r\ncf-ray: 9f04d86dd87d23eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9892,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 842x592, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6bff330b144d31467d78411e93c471af","sha1":"c47d52d3ab5e5e3c79c3d3ca8b4f41a00150fee8","sha256":"9d8bcdf44ad6f697e5d2f9fffad7f850c40c330744da4fee5324fd5aea46fdef","sha512":"63eeadadad9387516272c80c3ecc2950e6e09b68b1bbb441409bdc01f532e2cfb8ea68ad56dbf11f32caa0d85ad0ede9a3c0ecc7012dd4df45227955f1f78e0e","ssdeep":"192:b6kjZUazF19L89PG7wm0A8HcKo0pLWUKPGIbZ0/JrSb1rd2X5qMh:PSazFB7woavD0PG8GWbNwqMh","tlshash":"0c127dcff290a8deb942daf4355388f4e33c6982f48814de852d08bbd5cb55d291be49","first_seen":"2026-04-22T13:06:49.151614Z","last_seen":"2026-04-22T13:06:49.151614Z","times_seen":1,"resource_available":false,"data":null}},"time_used":544,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":544,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/uploads/2025/09/How_to_Use_Google_Authenticator_on_Windows_PC-740x493-1.png","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleyzq1.com/","date":"2026-04-22T13:06:23.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/How_to_Use_Google_Authenticator_on_Windows_PC-740x493-1.png HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleyzq1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:23 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 13:36:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"68c5735f-510d\"\r\nexpires: Wed, 20 May 2026 03:27:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 207541\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GPsDcYm6Wn%2B0JB4otCjCQYAdyhmlxNZJLacbT8Ba6OwgmEbjKcFYB9kFyq0TY3gYKYiI%2Bkq7ltI%2BhJ7zcZzSx%2BbUamxYuKmOGpqjcmruJy4KT2lM0LMhmSks962lpWukzQeoYQ%3D%3D\"}]}\r\ncf-ray: 9f04d8717a0523eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20749,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 740 x 493, 8-bit colormap, non-interlaced","md5":"75e486778ad4b8ab1aa70fa63c8cbf2e","sha1":"38ad803e1baf055d4f46a7db4710bb0e07c7e64d","sha256":"17ecedd971887ad870a5a74029a0af9997fa434b9b23edd2d6be582f27d344d1","sha512":"61774e5c805c6229f3c0040bef2e47df65a976eaa245437ab90977f45d73deebb26bf61c461e639d8b008b3090d38428c8d54ff805f83433926739061f9f6696","ssdeep":"384:SYJqnhEnxufsXp7f6lRcCMDfH8hnew+PPqDPCQZgs8uWrehruMKJAvM58cb:N4Exzp7f6bcbDfH8VD+3rQoqhruMKJ1r","tlshash":"b192e13de0890fa2683bf414e48654ef60a9c627c3ab75c2cf9a58ebf1189db1160a15","first_seen":"2026-04-20T03:27:54.251402Z","last_seen":"2026-04-22T13:06:49.154409Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/uploads/2025/09/582755-2-1024x576-1.png","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleyzq1.com/","date":"2026-04-22T13:06:23.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/582755-2-1024x576-1.png HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleyzq1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:23 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 13:47:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"68c575fd-85745\"\r\nexpires: Wed, 20 May 2026 03:27:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 207541\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PrPd1VVYxXaBt1ynbtV33m2cAuMGailCrERhkPQrlpeIMjncJwj4bJGQOIxvMRuZDq8BBWTOiJyb0T0AYE8QorzytAx%2FpC2OaMMTAb%2FoKpf5HNh4tta9EkXw%2FcgwEbdTP1ULCw%3D%3D\"}]}\r\ncf-ray: 9f04d8717a1223eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":546629,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 576, 8-bit/color RGBA, non-interlaced","md5":"e4c13c0dd26c5eee91100e7bd4af6fb5","sha1":"f363ab57b1ef4143345d408fa18ee4c107c0bdbb","sha256":"c062905e9e7fcf3f32679c203e4d37b794ba861f45b8ce1bd26c3f0f235532d2","sha512":"dbf81b8cc519b3178d1f0dc1df40c5d59f1d293127910872b344395e9af05735cc6b691f6f2b76c81ce64fa8f1f78b16b7294267303de511abceb16d7d508a7e","ssdeep":"12288:JSJltvZc3i0fXIjzQVAgJPauo6TJMqqvdBIylPbn4xX:Ju+3x4Pjgno6TJWHPkxX","tlshash":"e2c423f2599c856a9c7e3824235c84ed08df1af8ecf45d540cb127be6598e0d8d9cac6","first_seen":"2026-04-20T03:27:54.260605Z","last_seen":"2026-04-22T13:06:49.156526Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/uploads/2025/09/maxresdefault-25.jpg","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleyzq1.com/","date":"2026-04-22T13:06:23.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/maxresdefault-25.jpg HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleyzq1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:24 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 13:39:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"68c573f6-15cd0\"\r\nexpires: Fri, 22 May 2026 13:06:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rPkhnaQKP5tl2IiMUFLSDDQHBnaplPCYJIXt2WilKO2jDUArZ0g8DlKbltZQJdsfojyNCsyYwmN5yjaaQjncSaheonvRQIV2hC5i6jWJn6CB5j1NjKg%2Bc2h47tf82ale7X7qig%3D%3D\"}]}\r\ncf-ray: 9f04d871aa7723eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89296,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3","md5":"c897dc53cb601953aa3e31e10a7fc451","sha1":"3d9985c56ac728e08dc6cb3c074c02f993309b44","sha256":"0699debb6c030d9eaad03d6bdbd09e123e56b5b25847a80f39d2dd7bb32e7ff0","sha512":"f546e940a34b17f65efb9de3a34748bf861231ba0a0a44e788e93e4c6569055c69a37c42cebe2e1fc73e902a1131613321d2807a6b67eabe5a1a6036151b28c7","ssdeep":"1536:zc19mmdCeKMnTgs4bcK0RktswSuXo/nQnCQX92P6hOmSVzRCxJJJDZ:zc197nTgpn0mseUqCu2ikjRCN","tlshash":"64939dc5fd4449a40fae9af00dc2c913d4658631eea7f975ac53ade0f84af0ca60b741","first_seen":"2026-04-20T03:27:54.255931Z","last_seen":"2026-04-22T13:06:49.158581Z","times_seen":2,"resource_available":false,"data":null}},"time_used":714,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":714,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/themes/Yanzhengqi/style.css","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.googleyzq1.com/","date":"2026-04-22T13:06:22.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET /wp-content/themes/Yanzhengqi/style.css HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleyzq1.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:23 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 06:20:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"68ba8115-2f66\"\r\nexpires: Thu, 23 Apr 2026 01:06:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RDCogd2pPFj0VFNx5j2QnG0818s6AkPyR%2BVZqb%2FkUnzLBoNxSerGSanZOopwwe6IlVx63b5G1Eg%2Ft3RpYsufq5zOK3IskCSot5lJjSWOcO3V9ITUFshlGL87DdIi0Ljnqpr2bQ%3D%3D\"}]}\r\ncf-ray: 9f04d86d8f8023eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12134,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"48eebd9631e58f8d219030372d1c4d70","sha1":"9a8d6ccb9b6ece208454686ceffb59ff3488909a","sha256":"aed575550b95f01e598f32d319d7bab62b30be08c6982ee8c7ebc06ed18465bc","sha512":"2de9f0c80732d4a91f546e61e4d08f0ced0683e2bd526804564ea9e8ed352d26c30a1ea609dc57e946d9f0e9698f32f59e02924b77e172f54e1ae26355f176b0","ssdeep":"192:9tnfjo9wHvAIoLzZwx1hrKF+AViI8EBG7iDmSVBTJyPJBgPLUIYZF:no9wHvBqzZw1roViIVBGOMczUIYz","tlshash":"eb42973667112104b03bd2b6f9d1abed72348113e25746bcee926869c6ce0a915b3fcd","first_seen":"2026-04-20T03:27:54.272015Z","last_seen":"2026-04-22T13:06:49.16053Z","times_seen":2,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/themes/Yanzhengqi/css/3.webp","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleyzq1.com/","date":"2026-04-22T13:06:23.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET /wp-content/themes/Yanzhengqi/css/3.webp HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleyzq1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9142\r\nserver: cloudflare\r\nlast-modified: Fri, 11 Jul 2025 02:49:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68707bb9-23b6\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YE8wW6Q6wyrEOAcvnAXj0jaqpb4Q%2F5%2FLj%2F6n72IHttsWZz3ESkgnxJez%2BqbrrUKxNoHljSRIoYqrDWpigoHDMk8sA45%2F0oVhJ4IwLu9Q6y4e%2FtCBbFcP0NEt64KNkCDFcvlnWw%3D%3D\"}]}\r\ncf-ray: 9f04d86d9fa323eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9142,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 273x592, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c10f822b845eb11a340690d4aa061edc","sha1":"2794b0a12db18aadb1245d088f26dc1279a30f7f","sha256":"2ec84f9fe530bc36cc20d5c034c679c5652b9f0e260cb74c7ab044b41cea7484","sha512":"73528b0402a477905a1654ca658eb6a1cd0f6a6dd113b6cebabb30ec9870bc871b237a3948215c652f9bceae18f3b050237cbb8d28f690f2c33d875ab1241496","ssdeep":"192:0lORNvTRtKk8LYyn33PQ4NnocJo2SAQLpEhMzniU0ifAZG3rZQw/Pn:0w7p8xn3344NnoATaiMzntf73rrPn","tlshash":"1112aef81204cb22950a12b1ed3be6dde641b5047071bb3893d89f8da9618df30bd69d","first_seen":"2026-04-22T13:06:49.162634Z","last_seen":"2026-04-22T13:06:49.162634Z","times_seen":1,"resource_available":false,"data":null}},"time_used":575,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":575,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/themes/Yanzhengqi/css/15.webp","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleyzq1.com/","date":"2026-04-22T13:06:23.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET /wp-content/themes/Yanzhengqi/css/15.webp HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleyzq1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11962\r\nserver: cloudflare\r\nlast-modified: Fri, 11 Jul 2025 02:49:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68707bb9-2eba\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KznvZC7HApxw39TvbwG9W6ZEkDuq%2BwkKWg76XQI8j54cZSYElJMBSYkjNNJHXOZYjxDasuNusQ3cF2EzeuRt%2F1umGKEetAFHHri0ieqtOaFocu4oESDOywb6IG7C8ljw8Qz5rg%3D%3D\"}]}\r\ncf-ray: 9f04d86dd86623eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11962,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 842x592, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7e79038c21896f2ef80fa56348c3b3f8","sha1":"ea97a73a62d9e142a78262a1f961ef35aaf0e2d7","sha256":"ce336ee4a58805f1904a80acf4710028ffbfe63e01168b1748690871a14b3a54","sha512":"4459641f666c997a017c1da6e982766af790687b8c7538b5103cd238f0417b8464d7b7557d3912458e97d142a3ee47ffc11587a109104483db7666d273d4634d","ssdeep":"192:y3hR3hMe9oyF2MSGsMhQwgeus+jJqYfdXTms12CN1lIUcNtOoqOcnCLF4eWe2+Rb:UhR3+4FJSGNhQlY8b1TBInIXnQF11Rb","tlshash":"1732afc331ae22d3d598d9ec2aaec4c56f36c0a84e8cdf7d1943852fa26c8e5505bb54","first_seen":"2026-04-22T13:06:49.164618Z","last_seen":"2026-04-22T13:06:49.164618Z","times_seen":1,"resource_available":false,"data":null}},"time_used":553,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":553,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/uploads/2025/07/Google_Authenticator_April_2023.svg_.png","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleyzq1.com/","date":"2026-04-22T13:06:23.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/Google_Authenticator_April_2023.svg_.png HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleyzq1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:23 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 16 Jul 2025 12:52:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"6877a079-55cc\"\r\nexpires: Wed, 20 May 2026 09:45:34 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 184849\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N%2BFyEFPyLgAxXm4vCEusanakwIl69hi2pPgBaTwd8NQT%2B4k93Lf22GnmaOPgIG%2Bgk0OAVkq%2Fp8cFDKp5dvO%2Bs%2FAdgc%2F3rhKiT9sifFgEPElUicyE0acwyiXnkQYBWCUBhNAl7A%3D%3D\"}]}\r\ncf-ray: 9f04d87169e823eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21964,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 768 x 768, 8-bit/color RGBA, non-interlaced","md5":"fb46304f0f3e89869d646b41b2fe4305","sha1":"eebc22aac8617a248adbf8abedc5879bc1f7c6cc","sha256":"34449765e1fc3d787f9d5c1432dba406da28ddfb02c558330c978f2f5a248d6b","sha512":"7873d916b2bf6f378a3cfbe2c30c9441990c1f21bec6e0bbd0cbbed6a817a58abb22faf3a4f47c3ce66517d452a1e5c96d4607d78f2e85bd0990873659eb7fee","ssdeep":"384:4XBzFX6Q19E3clXWsOOdxJ8/Sws9vkslkmSWk:2ND1/RzJ8/ec6I","tlshash":"93a2d05b01e8f982d17925bcddef256a3b824b990586930671718de9ffa32e04c298f0","first_seen":"2026-04-22T13:06:49.166315Z","last_seen":"2026-04-22T13:06:49.166315Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/uploads/2025/09/google-authenticator.webp","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleyzq1.com/","date":"2026-04-22T13:06:23.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/google-authenticator.webp HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleyzq1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23234\r\nserver: cloudflare\r\nlast-modified: Sun, 14 Sep 2025 02:53:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68c62e3c-5ac2\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FYYHpG5djblckzxc1N4KklivuBhIMKjyasCrRykblWNHx%2BFZdDVPbznH%2F%2FagVa5zj%2Ffqd158BCkFTqeyGauBRNyGXt6WbPpaTi74Q%2BVXYOJAdkHwAu%2BeFtGOhkV5K3tlLD%2BnTw%3D%3D\"}]}\r\ncf-ray: 9f04d871aa7f23eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23234,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"69c0417cd9b23a187573e5687c4a6447","sha1":"74e5e06d54e5591cb701697ba57889b0888ae242","sha256":"a89ba0fa116d6be91bcd7cdc174be061d0ceeb9fc5e85e1cdf32041dc3a4776f","sha512":"96a84455a8bfd0e4a53bda73843a89d317f8369dda0ac9293b998877b50c97bfd0c86c330862c52750bff0492d2275905b7cc11b9e4e1bbe450e0531ae0809bf","ssdeep":"384:YwSAtk+ql1LIKpTzeWNFn33u4/ZFPERVCRPLSNBSKOo8CBrwuDWHK:dbql1s2zT3e4/T+VGP2Oo8C+uD","tlshash":"5ca25d0695f50f59ef33127a2212a2c2a98e4735d0e41f3259bc71cb7a10b71dfa5ea3","first_seen":"2026-04-22T13:06:49.168386Z","last_seen":"2026-04-22T13:06:49.168386Z","times_seen":1,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/uploads/2025/07/Screenshot-2023-04-24-at-64543-PM.webp","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleyzq1.com/","date":"2026-04-22T13:06:23.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/Screenshot-2023-04-24-at-64543-PM.webp HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleyzq1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:24 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18618\r\nserver: cloudflare\r\nlast-modified: Wed, 16 Jul 2025 12:53:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6877a0c6-48ba\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q%2B1MNhS2NdFtLNHcPVPt7cpnJi%2FI4AMhKo3QvVtLwVNl%2BgKsuX%2BivQdKQ4aN29fFMkWmMdjG2BeHAInA1%2FvrjbzEKaevcSHTiTaPle5LzlQvxetkHxq6OkTYV2dy%2B0mmcMQ6Uw%3D%3D\"}]}\r\ncf-ray: 9f04d871baaf23eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18618,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"14f232d1bb344c97c229c77dbed2e44c","sha1":"eacdce99dea6e3fe563f100fd6fee943e473e0fa","sha256":"a554bab88cad6b4e584fe3ce59df6e5afc96ec9a95626fb41b8766968450c1ae","sha512":"d9b70242973411dee44289bb2b13bded6733a28920da1f4fcbd9080086643d00876a80da3688c4b34b99b3274e7f12def925192a898ac81c81f793bc9aacf453","ssdeep":"384:qcQatWUtMKZs0aNHdFaXR5OiPj0xgW/bGH+nPfzunCg3GJi/e0vP:q1at3tMH6OiwCW/bHnPSnh3GJ56","tlshash":"bc82d073bd0205e1fe53366855626bc290bd9d5e48544c0e1bf88226a072af9ece48ff","first_seen":"2026-04-22T13:06:49.170264Z","last_seen":"2026-04-22T13:06:49.170264Z","times_seen":1,"resource_available":false,"data":null}},"time_used":584,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":583,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/uploads/2025/09/google-authenticator2.jpg","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleyzq1.com/","date":"2026-04-22T13:06:23.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/google-authenticator2.jpg HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleyzq1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:23 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Sun, 14 Sep 2025 02:55:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"68c62eab-1247c\"\r\nexpires: Wed, 20 May 2026 09:45:34 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 184849\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gns0xkAmGKGZPIO0wNW%2F6aDzRrgW3vJBrmrixM95pOWAU3X573mCSB%2F%2FgFV8zShnK%2F5UCC%2B%2B%2B3ituSvHHRa0ztWIRYHw4HMqRgA7DeiP%2BSGveOiuZqJyTuh6ZJI5y3YnLwz6WA%3D%3D\"}]}\r\ncf-ray: 9f04d871baae23eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74876,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1608x700, components 3","md5":"9abd9264614de4246688727cc1b9652d","sha1":"838369b096de0097440ccb77b2470cc6c976bd7f","sha256":"6139e2496c7e6ebf66e21cd9d17d34d8570189ddda6325c4ac0e29e57520ac70","sha512":"d3cd4b724e05775f6453ec89c263da290a6cdfae2b6cf7bb09fbbc1009b43c8b6e8ad1bfe408a8d7bce8d8a484b9974a9a5e47399df04bff9b0ed0d3c3b39d78","ssdeep":"1536:qEir2jH+amsu2iCFS62eD/MLW0ZZpR0hFOG:qEiKevsu2iCUNejM6+pRiOG","tlshash":"2d7301101f1c523afeca4b37167a5a60a757d9d1ba0630fca2b494d2150d3d3aa73b3b","first_seen":"2026-04-22T13:06:49.172226Z","last_seen":"2026-04-22T13:06:49.172226Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/page/2/","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.googleyzq1.com/","date":"2026-04-22T13:06:24.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET /page/2/ HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleyzq1.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:24 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Cookie\r\ncache-control: max-age=3, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7VrdVbQO7XVN34%2FFyP5IyKt%2BelXWnOipE%2FbdMQ9oC0sRvFMScnQDzBdNIBKdDgOacMQeiTUCE4q5xvxqRr6OMKVD5M2BYCneXexh3d0qX4v%2FuQNThhYWgg%2BImp5R2F1ewDv1vQ%3D%3D\"}]}\r\nlast-modified: Wed, 22 Apr 2026 12:50:56 GMT\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9f04d8774b1723eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Yoast SEO:25.4","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress Super Cache","description":"WordPress Super Cache is a static caching plugin for WordPress.","website":"https://z9.io/wp-super-cache/","common_platform_enumeration":"","icon":"wp_super_cache.png","categories":["Caching","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":44553,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8832)","md5":"c619b79f3141e49da51881772d9302b5","sha1":"a972a1eae354541fe009bf55f7521a6c06c88609","sha256":"f663daf35ba52e2dab663cd27b534815b2e197b0f768e18ca27c9e36f1176841","sha512":"9fce904f21f0a9919b63a1245711d961102bec0f5077d201eb9d3ee45b1d1cb560244979e7bc56c51a2d113d8423268449adc296bb2bb5f269b61fd9f853136a","ssdeep":"384:awEQBCK3sr/ZdSZUaAskWWlERcN5qz12fZMZAGehj+6LJmL6ujtR3DZqPx5yHAwM:aYwQUZdypJWKtR31kx5+A1","tlshash":"af1385f3b5d9a4231a89d3e4d9903718da5b9617ce0183b1b2fc1ca8afc0de744a719d","first_seen":"2026-04-22T13:06:49.174613Z","last_seen":"2026-04-22T13:06:49.174613Z","times_seen":1,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/themes/Yanzhengqi/css/19.webp","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleyzq1.com/","date":"2026-04-22T13:06:23.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET /wp-content/themes/Yanzhengqi/css/19.webp HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleyzq1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12386\r\nserver: cloudflare\r\nlast-modified: Fri, 11 Jul 2025 02:49:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68707bb9-3062\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9okFwQeW5OelM4zy425A6HJoTnH34Etm0jJy8B45x2EejsjI7w5Eekub1izUJlleNSe4lpBBTFsxI%2FoTWnO2Eb47deCFCyp6NbQmEDErZZocuqMSb4c6qo8M4cE%2Bou6vjApAnQ%3D%3D\"}]}\r\ncf-ray: 9f04d86de88b23eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12386,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 842x592, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d79c3efc73acf9da64884a5856ba3623","sha1":"761d6717c05d66c4a658194dde7be5ba3f97b7d9","sha256":"e31896f2780844ffdca7682764da809d600ea8b2e4628d2e4ab620f52e4780b9","sha512":"eb699b60858db709324dd6fc99c71836031fd88003e7e74b861422a1e0d7be29d98799da9ae912ef52d7b7e6baff451a0ac13bdd0c9abb5548253c7c7fc0a09d","ssdeep":"192:9VLGvySkmEwrvVXL60V4XzR3Xwgl81bnKC1minBEoYbybVMXUauPwVO55iFOBiT6:XLx0rdXLLaHlhYnVzHFXjWCMVskg99L","tlshash":"ed42be378b606386ecd0c49e5fa9e11a53dc622ab9f4174c6f9f733c382b543d498612","first_seen":"2026-04-22T13:06:49.176894Z","last_seen":"2026-04-22T13:06:49.176894Z","times_seen":1,"resource_available":false,"data":null}},"time_used":773,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":769,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/uploads/2025/09/google-1280-8d2d1bd9b2.webp","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleyzq1.com/","date":"2026-04-22T13:06:23.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/google-1280-8d2d1bd9b2.webp HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleyzq1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:24 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9598\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 13:56:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68c57819-257e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1pkIV%2FNbPuyFffvtalbaUP27Ue5EE%2FO0MkjLHMKhuQwxAIheDjloWrTIhRaxpvSMGuBQ066%2F7sMUf0H8ptywTpymXAauMtL%2Be6TVlZYhKHInxTj%2BLFSM3TOXnR%2BH2C4BVLrdFA%3D%3D\"}]}\r\ncf-ray: 9f04d871aa8123eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9598,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7e4491d3f15c37d6064e46fcfe6c18dd","sha1":"acbe8b6ae44b220a8628187d56d8ed2c8b151c5b","sha256":"813ca1648d2fc9b9861c9f1b04c6620d0bb95cc339a717580c4ca8faaf58520e","sha512":"2f71567ed7f6fa1a3456455a8bdab247766cd2eea9d02fcc5bf239f3f73b8323ce181ab5848325ccf0f412c7960591e49818638570151fb31f0f93296ee41b7e","ssdeep":"192:svrWprQgfs7a1hx/U7oDefk9dcZUQ4r8saGD/yX9og7J4xX2Y3:svK00hxJDeM9aTsRDEcX2Y3","tlshash":"5b127cc1c9b44a13e935a617fd2951ce363ed5bda23effb8c43654849243505800f7a3","first_seen":"2026-04-22T13:06:49.179789Z","last_seen":"2026-04-22T13:06:49.179789Z","times_seen":1,"resource_available":false,"data":null}},"time_used":509,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":508,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/uploads/2025/09/google-authenticator-backup-and-transfer-ios.jpg","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleyzq1.com/","date":"2026-04-22T13:06:23.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/google-authenticator-backup-and-transfer-ios.jpg HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleyzq1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:24 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 13:41:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"68c5749a-1a4db\"\r\nexpires: Fri, 22 May 2026 13:06:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wLzFJA5wcPn5lrE9S%2BkOqhvTzEMSCjPFvdxdhDlIWOCXKbUThMUXcoCkwjG3mrncpog%2FPRxcf6QlX803nXJC%2FE9XjXeBVyLd0RSXq%2FkP%2FFgJUcSSPJtkBidrIO8WMmBoqwMuBA%3D%3D\"}]}\r\ncf-ray: 9f04d871baac23eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107739,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1280x720, components 3","md5":"762164fa10afaa2346ceb4dd37d5e80c","sha1":"03a24b1ce183d2e0a9e70bc3c2a25327d8069755","sha256":"0e0600c1fc119011ae7dc495e93640cd090a91c7cc6aaa29fe6532b2ee3f76e7","sha512":"f473d1bd4f0aef55caa8a8b35f0694f1f04dea6ed1c937cd789506726bf3745eede060c3f7fa2b12b4f6c5110619a569054c811ba4a7d9b1acc0db7745a79519","ssdeep":"3072:Fj3kHoJ3oxBBupGDzyMnKO91Y/8k0g/HIptAA4BaQ:Fj3kIN0BupSzumy/oCaQ","tlshash":"7eb302b079be8711d7ec243e93590720ff835fd95168daa9f92c68043b76374ee14298","first_seen":"2026-04-22T13:06:49.182175Z","last_seen":"2026-04-22T13:06:49.182175Z","times_seen":1,"resource_available":false,"data":null}},"time_used":685,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":685,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/uploads/2025/07/google_authenticator-logo_brandlogos.net_01b5d-512x512-1-300x300.png","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleyzq1.com/","date":"2026-04-22T13:06:24.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/google_authenticator-logo_brandlogos.net_01b5d-512x512-1-300x300.png HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleyzq1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:25 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Tue, 08 Jul 2025 13:22:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"686d1b82-104e\"\r\nexpires: Fri, 22 May 2026 13:06:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ynixrRGQ6nfgL%2F3Bw0sIPkr5cPGw77AdVmuZnPpAzRgBerkotYoCKxTu8UXLU6rJSMNe3Nt6ilApzZjqK3zMBWHh6dz9gLj8QqnTo1O5hFRn0J2t5X7tzsx8QsZROQJXUuPb9w%3D%3D\"}]}\r\ncf-ray: 9f04d8773adc23eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4174,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit colormap, non-interlaced","md5":"b7134b169445285649b643e9a63a5193","sha1":"2dd2a6bbd590775626d27cbeaf6ec409310dfa7e","sha256":"e7abe78a053d9945fd359b50ff6784b20e8315cb4d0dbb1212273f892039fa0c","sha512":"3beb11dabbf5180970be332ea1d1c5e77ed2eaa66c04d152d5ed0fbdd2abf3c7826c686158b33bf3d0ad83b26b9a4c86bb68b715826a84fcd59037df285081c4","ssdeep":"96:oe9R00Gyxl5/x1M5LMvPACDG0U5HnkHJqUPQFiC:om0eH5/xg2IDLkHNoFR","tlshash":"cb813af083c4ba65f73796572423e54ec0e353432e9398476122624a0b536b33597af6","first_seen":"2026-04-20T03:27:54.267102Z","last_seen":"2026-04-22T13:06:49.184441Z","times_seen":2,"resource_available":false,"data":null}},"time_used":567,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":567,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/themes/Yanzhengqi/css/11.webp","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleyzq1.com/","date":"2026-04-22T13:06:23.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET /wp-content/themes/Yanzhengqi/css/11.webp HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleyzq1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5110\r\nserver: cloudflare\r\nlast-modified: Fri, 11 Jul 2025 02:49:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68707bb9-13f6\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Af9s7NV8cs37i0EJgAa%2FAnWut5mQ9ugqRDCUNCY4Rgc6XLuwH81QKcsm50tMbPMoMkTptH%2B2BCUv3TExe1QxHPo8PtPnSKJOEaDZSy8ALoryslwkUUEXGUTjJewFDBw4A6K0w%3D%3D\"}]}\r\ncf-ray: 9f04d86dc84823eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5110,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 370x592, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"dff222f74935cd46da512b0fd3190b52","sha1":"7623e1144b4c31c89c10bf8266fd6f85727df2af","sha256":"ad256003155c8402e8e01df990fbe6e7b0569f491344cec6dba96cb505258813","sha512":"b6c84ea0c0eefcb853d8523f0365080f443c6918f478b73f1947e5ee855319db4cec6df12e3f40c795c5c020427b259a9b96a95dc23cdd001e44e176ba8aa050","ssdeep":"96:wETG+QHXfRk0PZxGUYxd66IM6m0hq5g/uXqDmzFzKekpsO3m1qJ69xSUsSm05:LTG+IXBG9dVj0hP2XqWlGpsUm1Ke5","tlshash":"43b15c64abb1b418e1a3dff52ab50970d97f541e8bbf3455088885f74c5a042862ee2c","first_seen":"2026-04-22T13:06:49.186866Z","last_seen":"2026-04-22T13:06:49.186866Z","times_seen":1,"resource_available":false,"data":null}},"time_used":622,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":622,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/themes/Yanzhengqi/css/17.webp","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleyzq1.com/","date":"2026-04-22T13:06:23.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET /wp-content/themes/Yanzhengqi/css/17.webp HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleyzq1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10492\r\nserver: cloudflare\r\nlast-modified: Fri, 11 Jul 2025 02:49:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68707bb9-28fc\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bxKpUpxgPro8UXUreu4FGNh%2BYlxkAhP%2BuJwX82jrCacspmbGqZYI7leP0f8qJyOM6xKGNHrStfKx%2FBIyJL1%2Bh55Y4x083OM3OgvmQNWX%2BngmS6VxbkOsZ8rANDwDfcWT%2FFbTSA%3D%3D\"}]}\r\ncf-ray: 9f04d86dd87b23eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10492,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 842x592, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3a6d85e3d9d9740e27bff7288287217d","sha1":"ec96578cab8a314d5750c498793ace4d1e04c7c8","sha256":"d24c7aaf98d8c516752037341e7a4abec66fb5468113b39de32b9db5d52a0c5d","sha512":"2ab73f07c83be43bbf22222743cf65100f0b6168ceafe53372c0851695c1a051c43de1cc3a2662d46df1c126ac89956165b9cfa77511f565fb8df96d6117f106","ssdeep":"192:AEx0RnQ3scTHuN/uvfccFCKia6zIA5mhi9rKdhzJLy2zpO:AS0RWTHuN/uvfcc9iaDAIwedhz5y2zpO","tlshash":"13228f996a7c7581c04d4032b62545c73c635c4a067266d0df82e76379bbff3b80ba39","first_seen":"2026-04-22T13:06:49.189186Z","last_seen":"2026-04-22T13:06:49.189186Z","times_seen":1,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":524,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/uploads/2025/07/Depositphotos_242557576_L-1-1024x576-1.png","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleyzq1.com/","date":"2026-04-22T13:06:23.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/Depositphotos_242557576_L-1-1024x576-1.png HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleyzq1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:23 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 16 Jul 2025 12:51:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"6877a061-7cc33\"\r\nexpires: Wed, 20 May 2026 03:27:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 207541\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0kt4BYpx9%2BZksA%2FC4NR2kBWJqaCXHjR4I7vWWzttHvGpq%2Feyt%2FZgyEwSiYcQz8OJB78OYue9vSHptvnKVXFTUYg7jX2WxLUtY6hZnCq4wL%2Fgq0u7kn%2BDh2MOSV3%2BnXxf1P%2FA8A%3D%3D\"}]}\r\ncf-ray: 9f04d8718a2323eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":511027,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 576, 8-bit/color RGBA, non-interlaced","md5":"7e581ca74bfa1e9ea4f63a45dc955e7f","sha1":"1f3daf7cbd650d919142cf7ae3516afde57a472d","sha256":"23c15b163348f9f58d0c267a6bcc7266f23924582a186b91b944c976e11d1ef4","sha512":"982ebc7c923e3fedefedc0fc22d47bb9780bc55600ba888930c91b2b0d9f8c6608d6bba26e4c4ec0c56995027a54513fd5d9405c7db57366b6ba18558ef616ee","ssdeep":"12288:EhqrhnpG6FZ/b9hOgNIsUDCcMFNE4GgOHT6DDj8W:EypfFZjPOgCsBRuujh","tlshash":"2cb4335852c90bedd269f5815946bc313e71dd8f8b1cb09a6ccee7fa605fc9982a0f10","first_seen":"2026-04-20T03:27:54.284453Z","last_seen":"2026-04-22T13:06:49.191594Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/uploads/2025/09/unnamed.png","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleyzq1.com/","date":"2026-04-22T13:06:23.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/unnamed.png HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleyzq1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:23 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sun, 14 Sep 2025 03:29:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"68c636b2-57f6\"\r\nexpires: Wed, 20 May 2026 03:27:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 207541\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A3gmQ2PmsfWEyvlb5IhP1PUUW9zN6pJFuoTSvDAuNMOhRAhiueWPemTWAcVn8W3itkQKFkNc7Ass3FunDJN%2FHNu8PW5IM%2Bo%2FGdJzVIcG%2Byc2i7J8Oh6rlLtMwsZIIDdvhVxdcw%3D%3D\"}]}\r\ncf-ray: 9f04d871aa7a23eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22518,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 500, 8-bit/color RGBA, non-interlaced","md5":"7875cb02e9aa6f66af1a20eba16338d7","sha1":"a080fdba1b6a24d9573f7882385e0111ea8e4baf","sha256":"9d861db75a085ab71de44f0b9d09163c459b191cfd257e210614c3e76fb7eb3d","sha512":"5444b26db9561ce4ead44dee88973f4e01c81d81b958a9ebf50fc6652ecc72412370d5905be7891f3bb43c886f4fe462b5b51c301f281852aea364b304fee32c","ssdeep":"384:TEb3Yhmdc4lj/AitePSLsm/Qw3CXP5ZpTPykAHyAg6+rmvx/PSvty3Yzk:6Qkc4xoiLljSXVahT+Y3SvRk","tlshash":"68a2cf0848ec97cbfe92b1724ce7b6b680d232b4624400b7dfd101ea2caf95c6c79592","first_seen":"2026-04-20T03:27:54.28767Z","last_seen":"2026-04-22T13:06:49.194551Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/uploads/2025/07/rtaImage-1.png","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleyzq1.com/","date":"2026-04-22T13:06:23.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/rtaImage-1.png HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleyzq1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:23 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 16 Jul 2025 12:53:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"6877a0b9-77e28\"\r\nexpires: Wed, 20 May 2026 09:45:34 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 184848\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qi9NwR%2FG%2Fuh1w8wBRXqzX8Zp40LDeuSDTEFV6cjzufFarV2WobwYcDjvNi%2BQmwj8wQEuNQsaUkbQRa6JkpG5keKdb6Vm1RQDRtt6q4SnD0PVkBvuqnOcUnFOztS8Ov2LOp%2F99g%3D%3D\"}]}\r\ncf-ray: 9f04d871aa8023eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":491048,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1664 x 1410, 8-bit/color RGBA, non-interlaced","md5":"1ca62d4df85bb55b6ff58daeda40d57b","sha1":"c1a9c8c5115ce445d936cf404d250352f50eed02","sha256":"59c6eed13a51fd96c44a82eaf30d1cb4ff56909b60c37dd07bcb0fcba866757a","sha512":"dafcdcdc25d363f95b3a76d7e8b4efba3249b97a22107ba3c2e63698393c41dda1ffd2ac3ddcd6dad61b5e89d34b7f1afa41111c7ddb71559a45b0aa4025375f","ssdeep":"12288:tvgvml6W7QSRiZkE5X3yuPObhFF6z9TQlzV:tvKmlp7zzE5nIClIV","tlshash":"0aa4e073d970a85394b7523816865bf0537a2d9e10bcad6e2fb2ecd93e290d4f9c3406","first_seen":"2026-04-22T13:06:49.196977Z","last_seen":"2026-04-22T13:06:49.196977Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/themes/Yanzhengqi/images/logo.png","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleyzq1.com/","date":"2026-04-22T13:06:23.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET /wp-content/themes/Yanzhengqi/images/logo.png HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleyzq1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:22 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Fri, 11 Jul 2025 02:49:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"68707bb9-5657\"\r\nexpires: Wed, 20 May 2026 03:27:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 207541\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KhscBWb5st3nmJZU7XFSUlP%2FsBP%2B%2B0pS3pIW0JlXIJ05uL8GHEgeJVfx4LOt0en2RDXmwDuMQaiEd8WQsPlwkY0ompTFP%2Bwls4EXG%2BS03JYKaa1sumnbTuzDv1WDJnocTj3f3w%3D%3D\"}]}\r\ncf-ray: 9f04d86d8f9c23eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22103,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 480 x 480, 8-bit/color RGBA, non-interlaced","md5":"9e4b099f794f218e516d3644e9d98f03","sha1":"91f3137cb634a81a42ff3f06b50157fa50452da1","sha256":"59d83155ad47f1774f7bf689591a5081ae562d8a71661b6de7864d7e9b7b0809","sha512":"0fa9af95118b2379b1e1f497d2e09a8dc59a4b14ca86b7475b01c9e9edfb2a99c1e4ce2862dfe4b903b6ba6c6ea692af3adc7ce576a5590246c86b54472a9ce4","ssdeep":"384:jrZPGoyQ7sQwLFW8XwJ5DP+jMM1g9mmNXGkCpj3tlmLkBxP2+lNtnAp1RhtO:5YQ7ZwLQp8Fg9bXSpj3t0YPVlNc1RhtO","tlshash":"01a2d0406375f0345f3ec51bda11a49ba047e3c592e8afbf91585138e903ce825e16ed","first_seen":"2026-04-20T03:27:54.253599Z","last_seen":"2026-04-22T13:06:49.199152Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/themes/Yanzhengqi/css/2.webp","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleyzq1.com/","date":"2026-04-22T13:06:23.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET /wp-content/themes/Yanzhengqi/css/2.webp HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleyzq1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10606\r\nserver: cloudflare\r\nlast-modified: Fri, 11 Jul 2025 02:49:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68707bb9-296e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9g8PfK2zg10bC68CLBWm52eSk95EC8o2wJ5uTuXHZLebok3KH8R%2FK%2FTzI915fVnPcKpb9%2BplkMbBTY5NaXgNKHDO0jEbw5JIo3t2G%2BdotANTh8v2qiddccB%2FQnoVpjmm2Dv%2B6Q%3D%3D\"}]}\r\ncf-ray: 9f04d86d8fa023eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10606,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 273x592, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"42cc41c3e410d690c1e8ee8c333676a1","sha1":"6828b5e7c3655eeca68ec1b6f7a1eda5991568c1","sha256":"ca9e160ffe2a30adf4586d073e6439fbddebc499aa5f66e9714408775e3c5aa2","sha512":"c2ec991872a89360319f42b1dd999c585e09e071890a9badcef11d1fcdbac09f702f133f657f8980b3ea594a8189a5583bfcbc390fcb31cf6fbc314d60e43b1c","ssdeep":"192:UyMrJcxKTChLZbj2krk/oXLpx/4WBcfmUHY/ZaQFnA6PaGBxoNfvMzuUx3/iMw2b:Er64Tog/qx/4YcfmUHyUqA6PaGBxPyUH","tlshash":"1a22b0d0b40805c5d07a783797dc3dca2d6a60ab018caa8ed88b85b5198ecfd5d56e3b","first_seen":"2026-04-22T13:06:49.201502Z","last_seen":"2026-04-22T13:06:49.201502Z","times_seen":1,"resource_available":false,"data":null}},"time_used":600,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":599,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/uploads/2025/09/105325-1-1.png","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleyzq1.com/","date":"2026-04-22T13:06:23.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/105325-1-1.png HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleyzq1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:24 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sun, 14 Sep 2025 03:21:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"68c634cc-14be7\"\r\nexpires: Fri, 22 May 2026 13:06:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vzd%2FJesbA7mhboUzS5jJQ%2Bu0RaZKmmd03evakOpTXfgbbZru7yHIUTBz7vH5ZUGW9QO4jvQTG%2BbTqXoOiGVBpi7WfudeOwHkOodrAjtsOuPnf0sMA5JjWfIuppO6dtenIG0qgA%3D%3D\"}]}\r\ncf-ray: 9f04d87179f523eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":84967,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 720, 8-bit/color RGB, non-interlaced","md5":"edfa3f7583f71fc54e2175721c1fe25e","sha1":"52a767169df4a32175cee4169d10510b7fc7b583","sha256":"79db239399ee43c01b41bb95e3cc1cc220215dd9a1d8de1f22dcee09af972145","sha512":"eab508b3c94e34f200c68d22a351b7b0c82bbf9eb16f4729d0521ef04c098003f491991926d5b1c61add93d888c28cc4afa07fbd0e890e02559fa00efd0a7b59","ssdeep":"1536:a5rTWQloqzvk5ma9j4Qitwwk0FIrIBdCgzE5ow+cYYHuWRtcE:4TWQloEmma9jTi9hFIr8dCD5+cdOA","tlshash":"b683025da698e81e8fe4157152df4e3bb6234e3c140f8bb367296ce2be30c1d558a305","first_seen":"2026-04-20T03:27:54.248897Z","last_seen":"2026-04-22T13:06:49.137717Z","times_seen":2,"resource_available":false,"data":null}},"time_used":665,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":665,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/uploads/2025/07/google-authenticator-1.jpg","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleyzq1.com/","date":"2026-04-22T13:06:23.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/google-authenticator-1.jpg HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleyzq1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:23 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Wed, 16 Jul 2025 12:52:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"6877a086-d205\"\r\nexpires: Fri, 22 May 2026 13:06:23 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HlviPiguIM4deCkD4OFkjYFyWaeC3qGKFFOmJuC4vyY%2FQqY5tLabD13vw3Pvrdec0k4hm%2FS%2FGL0pDcnufqVlzhuk2UCf32lSUVQooMAry4osG6K%2FoiZFv9Jceo2mCp40VB732w%3D%3D\"}]}\r\ncf-ray: 9f04d8717a1923eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53765,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1608x700, components 3","md5":"d7d118c7fcf70dc670ad952116ae068c","sha1":"cbb3a7cf268dd34f3aeb143da01687d5f8234d40","sha256":"6448cfee2be8972f9c52984dc522ab24d2c0f143e4032b286ca23811c4df0fda","sha512":"07957175826371e23ab7b3e893cc84dcfb7e646225f4544c66ee3c5d83947ba615b4a6c5318aa356df8f6403c56a9c40d8eaafa2af114d3870c5afadf4b00a48","ssdeep":"1536:qE7LJoR/lC0nMTeSnF2myqEpEoVbKvrjn:qE7dnTz/Kpmz","tlshash":"8333c0dfea83d818d49b1b3419450e14cd6530f7035ee69f22aea5c0c9eedd67c43a8a","first_seen":"2026-04-20T03:27:54.280512Z","last_seen":"2026-04-22T13:06:49.204804Z","times_seen":2,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":369,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/uploads/2025/07/google_authenticator-logo_brandlogos.net_01b5d-512x512-1-150x150.png","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleyzq1.com/","date":"2026-04-22T13:06:24.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/google_authenticator-logo_brandlogos.net_01b5d-512x512-1-150x150.png HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleyzq1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:24 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Tue, 08 Jul 2025 13:22:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"686d1b82-962\"\r\nexpires: Wed, 20 May 2026 03:27:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 207541\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DsDZvW74DBcrqCMbjiAd3QXP7djwXw6fkS8xkxg%2FgyYydmoF%2BXhFMXy5j9yjacmD7DvgWR%2FHop%2BhbwpwYBPbgoHAu%2FDFmPEFmS63KQhl8KhsdS%2FdJYKFg57LXy4iqXhBV35o6Q%3D%3D\"}]}\r\ncf-ray: 9f04d8773ae123eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2402,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit colormap, non-interlaced","md5":"17909f86dd8f6d2640dd2bbf831a304a","sha1":"6bd6638f181c982c554dd1a6757fcfe25dd84ef8","sha256":"a29d368404b02d9b55093ebf918edb9ecc5446b76cddc4c8fa2e11bc104a18b1","sha512":"71d01ff92054ddec576e20f380a6ac3ca356f2f0c98d2e3e623b844e46816af45a34243ffde5803e3cdfc6aaf40e264aee6e4ec26c4ed16787c76844f1a82b28","ssdeep":"","tlshash":"9a4108d2c052b9019077687f13270aa9c1917b65be7394436672c00d8f2a36f8db2ac0","first_seen":"2026-04-20T03:27:54.290353Z","last_seen":"2026-04-22T13:06:49.207212Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/themes/Yanzhengqi/css/20.webp","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleyzq1.com/","date":"2026-04-22T13:06:23.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET /wp-content/themes/Yanzhengqi/css/20.webp HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleyzq1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13422\r\nserver: cloudflare\r\nlast-modified: Fri, 11 Jul 2025 02:49:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68707bb9-346e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=veU6KRdOupxsiyxMo86OBExQO41zXGltjR%2BH%2BD8D%2BXATZh0pxWNcX6d13yL6lch2nxKG4DuFq80a19O2WmuGcJDy49GdmFCveuyhhX43JvoFgCVva46B6nmaLe2CbybRp8uHPQ%3D%3D\"}]}\r\ncf-ray: 9f04d86de89023eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13422,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 842x592, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c4c6ba5c094841c9dd01e76a33fe1e9a","sha1":"b7129c9daa0121ac286379248a4960dd66c8b3cc","sha256":"93af875848daae9d03e6c8c272ab8a64a032687200a2e365d72ccae4e08a2b5c","sha512":"a92dda452804a4f7d3e0426b122b077c9d5015214ffb1042b30d4765b1ce229484a06e2ea0aef296a19457387e3581515d7a1e531827d61780daf1b89d33c1fe","ssdeep":"384:Xn3PPNLmhoF0zkLvzHfKIits4i414EyJnu:X3nJmudXizi41qg","tlshash":"d3528d31a141de31cc04cd3995c67a9a705e9930c524a9bcf705f6fcb774ab8392a2ec","first_seen":"2026-04-22T13:06:49.209442Z","last_seen":"2026-04-22T13:06:49.209442Z","times_seen":1,"resource_available":false,"data":null}},"time_used":608,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":608,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/themes/Yanzhengqi/css/swiper-bundle.min.css","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.googleyzq1.com/","date":"2026-04-22T13:06:23.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET /wp-content/themes/Yanzhengqi/css/swiper-bundle.min.css HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleyzq1.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:23 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 11 Jul 2025 02:49:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"68707bb9-4813\"\r\nexpires: Thu, 23 Apr 2026 01:06:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nT5dCEAZ562cN0r6YVvpCwtFPVuUxdjntk%2FNMlaQv0dhoBTUE3XOUROhGqKgp4rdGxWCV%2BZ3mXtdCF2UcylAEI1bwmD7qUPXmkEB1z17URjNYdlLo80HpPQzdWmVZiV5Efuuzg%3D%3D\"}]}\r\ncf-ray: 9f04d86d8f8523eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18451,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (18192)","md5":"82b31badc7e41870bdc356190e92ab9c","sha1":"692101ef7befdf5c511206e23bbb9311193549a2","sha256":"b1812417904dbffbd9dead841c6652cb347f49a4c57b385f3c717246b1ecb9c7","sha512":"af2c78416eac63242d861e8c2065b570311f36e2304ecbd6b4e457839b77b2a9a1dd348d9aa32bf9504de4dd13fb3d06aaab220c9e4ef1884fe1d8ae04699caf","ssdeep":"192:FtmUJbiKneSJTLdKSme+jeF474nQ7p/l2GZb0Q5RfufKDvAYfg5faeesedOJxX/A:F4UbeSJndKW+Sa0ni24tnWfz4cfQ","tlshash":"908255a45350182753274f374b71cbb9e97444c24f9389ae91c0ee58d7facb9132f2a9","first_seen":"2023-09-22T06:50:30Z","last_seen":"2026-08-10T07:23:37.023568Z","times_seen":833,"resource_available":false,"data":null}},"time_used":577,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":577,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/themes/Yanzhengqi/js/jquery.min.js","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.googleyzq1.com/","date":"2026-04-22T13:06:23.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET /wp-content/themes/Yanzhengqi/js/jquery.min.js HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleyzq1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 11 Jul 2025 02:49:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"68707bb9-14e7e\"\r\nexpires: Thu, 23 Apr 2026 01:06:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wIOOEVykkwozaelTgtRHoFkMKaegC%2Fbmq3zXS27TvD219OmDRif%2BtYmSfk%2F8mybUt4KYSI4dPRcoRBowyIEPuJZKXCUyTBV60d90fqDW9cj7OmZS94hhepkM5ZWFgINnX9HEkQ%3D%3D\"}]}\r\ncf-ray: 9f04d86d8f8b23eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85630,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32019)","md5":"6cbb321051a268424103cd4aea8ffa66","sha1":"7cb05e3d551cd61439337b2cb22f49b1955f9711","sha256":"82f420005cd31fab6b4ab016a07d623e8f5773de90c526777de5ba91e9be3b4d","sha512":"72165cd8cc7c0751b319234c7c9447eb78d6eee6195f35f46bf525591ad3be5e24c7162a50734cb724d303920343b8139780132e85e566d86c89a956de6b92d0","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIK6alrUnzZ6a4tsO7KixfWBP+qCddWHs3ghda98o:v4KZ+slsOuixfpwhda98HrU","tlshash":"4883d6d9b2d67062977734b850bf410bb17a98dab44c8c60f098d4e47eb4a8e507bf2d","first_seen":"2023-03-07T01:06:19Z","last_seen":"2026-08-13T01:52:46.406821Z","times_seen":1134,"resource_available":true,"data":null}},"time_used":562,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":562,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleyzq1.com/wp-content/themes/Yanzhengqi/css/6.webp","fqdn":"www.googleyzq1.com","domain":"googleyzq1.com","tld":"com"},"ip":{"addr":"104.26.0.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleyzq1.com/","date":"2026-04-22T13:06:23.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleyzq1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:09:20 GMT","end":"Sat, 30 May 2026 08:09:16 GMT"},"fingerprint":{"sha1":"7B:C9:23:91:F0:77:E4:5B:E3:AC:F3:6E:68:96:83:E9:99:3F:59:09","sha256":"40:3F:66:89:3F:FD:C9:82:C9:81:43:91:7A:50:4C:E3:77:A4:6E:95:8D:25:B1:9B:F9:2C:BB:F2:F9:21:7B:69"}}},"request":{"raw":"GET /wp-content/themes/Yanzhengqi/css/6.webp HTTP/1.1\r\nHost: www.googleyzq1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleyzq1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:06:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12570\r\nserver: cloudflare\r\nlast-modified: Fri, 11 Jul 2025 02:49:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68707bb9-311a\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nQ8nf5zwHYcNxZFD0LzGOdDjLckXfYifcuQj0DcbAqFwd%2Fws0H%2BT1MvoT2x4VthiQiF%2BgwpihfoCq80%2BSVJFFGwfB5VmjWuCvwExU6J5y0iHEkCJBHZa9hOy9j%2BEGOSElblxdw%3D%3D\"}]}\r\ncf-ray: 9f04d86d9fae23eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12570,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 273x592, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"eaffa46dd6cc5a9f2fb6d3ea3724d4eb","sha1":"fb6e54382c2737cf3deb746557715071aff3e3b5","sha256":"577336e80020a0917117257ef1a3adfe54383261da55bd9ee9a552a61ed4bc18","sha512":"f56e34d144edfc4e6f1b6b3cd6ef19c2c53eee2b75804db4d88f94b556706286d456d4f585c7583fa6e4b8c623b561c935f8c6b772d632be10dcaf84a6f7b93c","ssdeep":"384:FAFxIcqZMN3VINmtZuFG51v3fmsqXnpxM:mv5qGNKNmtZnv3u1Y","tlshash":"ad42c0d7b1958bdbd71b1532e881225ea3018a4312625db73d030486ef4c9f5ad47aee","first_seen":"2026-04-22T13:06:49.214282Z","last_seen":"2026-04-22T13:06:49.214282Z","times_seen":1,"resource_available":false,"data":null}},"time_used":523,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":522,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.googleyzq1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}