{"report_id":"cd5bd771-29d4-4cc1-b143-0ff467cb053c","version":0,"status":"done","tags":[],"date":"2026-08-31T08:45:11Z","url":{"schema":"http","addr":"dpd.fwmqrf.icu/com","fqdn":"dpd.fwmqrf.icu","domain":"fwmqrf.icu","tld":"icu"},"ip":{"addr":"104.21.79.99","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"dpd.fwmqrf.icu/com/#/index","fqdn":"dpd.fwmqrf.icu","domain":"fwmqrf.icu","tld":"icu"},"title":"DPD Local","dom":{"size":43733,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (41277)","md5":"b4b2d4e4613681289b6648e84e5c73e0","sha1":"f111aa9ea0b3395ca7ff8579c43e260bb94da236","sha256":"9597eec0b5ebfc8a3080329fa3cadacd273006a5d18625637979a83519afc806","sha512":"c4eb0fa14eb0bcbeb72ff5af7b58140425f73131334d2dafb3d501173617081961bd9e0c52b37df82fec2654765370988fb4b398cf31245aece272aa75bb7d83","ssdeep":"768:dL07Yj7aLxAy2C2S1L8VTRQdZCmrZmJo/lCurdpaspOHeID1F1b/iH+qspKejnmd:MvcVYCWdOeM4HdexrHle77T7ul/BXTYV","tlshash":"96138435a71000bb912bc1c8e255bb5921e7f32bc11980e57eaf06726fc7d61f7129ab","dom_hash":"domhash097be87a7b7225f14ce9d9c9c8f02fe0","first_seen":"2026-08-31T08:45:13.743503Z","last_seen":"2026-08-31T08:45:13.743503Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"dpd.fwmqrf.icu/com","fqdn":"dpd.fwmqrf.icu","domain":"fwmqrf.icu","tld":"icu"},"ip":{"addr":"104.21.79.99","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-05T08:45:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"dpd.fwmqrf.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.fwmqrf.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"dpd.fwmqrf.icu","ip":{"addr":"104.21.79.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-22","domain_rank":0,"first_seen":"2026-08-31T08:15:15.939618Z","last_seen":"2026-08-31T08:15:15.939618Z","alert_count":24,"request_count":13,"received_data":1263793,"sent_data":6998,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dpd.fwmqrf.icu/com/assets/E8Ho6ETs.js","fqdn":"dpd.fwmqrf.icu","domain":"fwmqrf.icu","tld":"icu"},"ip":{"addr":"104.21.79.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5a950181b724cfe0c9c41e59d96f7a","sha1":"98c4b8694dbe285631cdd0ae5496e7553065b212","sha256":"4d54663f07ede37a41652214289ca67f13402ddad24b165f2fc18173e7d4570b","sha512":"c3863ff083b8ab92492ed0f0ac1f8758aa6457f4c2c6f644cc92e7ad37179f1686f5863deb449d7a19d4638d5fb82412c6dc100a2a84473a6569bd58100009bf","ssdeep":"1536:mwhVcjgFk3x6T5m9TATCLTaT4cTJprFZDbn4AJoAT4nNYnaHP9UYhh9bzF4BxJBQ:mwhVigFk3xEm9TAToTaT4cTJRF1n4MoP","tlshash":"7083080d5e01bdbe204b272934fb10e7346d2d97e056dbf089f18d785b1cea8a1dea94","size":84945,"data":"","first_seen":"2026-08-30T09:26:57.99213Z","last_seen":"2026-08-31T12:18:54.748958Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dpd.fwmqrf.icu/com/assets/DhqmAzot.js","fqdn":"dpd.fwmqrf.icu","domain":"fwmqrf.icu","tld":"icu"},"ip":{"addr":"104.21.79.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a1b4c52e6b45ca5bdba668c5b4cf187","sha1":"98950ae12d79ca781a696b3c67e39a11c7e7faa9","sha256":"65273d6f816e11b8e846c3dbeae4fdbeb9c48523951665e9835b33f0087c9915","sha512":"8b206123c7c0a63d9ccd17d44e5b6bcf3845d4306e540b7f7faa6d61c6a221cb33d062e490d4641e722c40afc2ef68c7f16ef79368764dc66a24279c56f25f8f","ssdeep":"3072:PLpSe/aSjhXSSS+SQ2UDPMaWTTLy5x294dRy:1//7j0SdxjMVTHy5xa4a","tlshash":"3b043bc53251b0a253fa15e3407b1007f3396925380d899cb25cfdef6c6a98a61b7f7a","size":183340,"data":"","first_seen":"2026-08-05T07:13:51.96529Z","last_seen":"2026-08-31T12:18:54.746552Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dpd.fwmqrf.icu/com/assets/DQdO6SN9.js","fqdn":"dpd.fwmqrf.icu","domain":"fwmqrf.icu","tld":"icu"},"ip":{"addr":"104.21.79.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"60e31f1c280c649ef902a76aaf94b175","sha1":"7034589d5ca7ab40262f5914f7c7d04b8af5c1ce","sha256":"8345cd86d15339dfc488a22f0533cc1b2d16553ea37098cae43aec8fcd5c112e","sha512":"164439754dff313c1b22ff49815d43dd33324a828c2ff851f666cdb634ef98bada3dc4417c04cc954e38aed8b46d1dcf0733a466788dad036d8a18936b528962","ssdeep":"6144:opw8G9FXkYxS8NM0r0O0Nrkb/Ew1a+XA9DPnYjHwLd+A7xAdSErehHWODhg7J49Z:op2kYx3B3Y35AUvoQTYK+9u","tlshash":"f1c418d22b4ff2ca016208a7439b30c6b10e7bab380ce5057ff4f5941ea5769796e934","size":554094,"data":"","first_seen":"2026-08-30T09:26:57.986512Z","last_seen":"2026-08-31T12:18:54.747225Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"dpd.fwmqrf.icu/com","fqdn":"dpd.fwmqrf.icu","domain":"fwmqrf.icu","tld":"icu"},"ip":{"addr":"104.21.79.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T08:43:39.110Z","timestamp":1788165819110,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fwmqrf.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 06:18:40 GMT","end":"Sat, 28 Nov 2026 07:16:20 GMT"},"fingerprint":{"sha1":"E8:02:B3:35:CE:AA:CC:F9:51:7D:BD:AA:ED:0C:61:41:FA:90:2C:19","sha256":"7A:CA:CD:5C:F9:73:F9:09:2D:4B:8D:4B:7A:70:31:3D:71:B6:83:57:4A:FF:9A:3C:A1:6E:A4:1E:7D:A9:EC:B5"}}},"request":{"raw":"GET /com HTTP/1.1\r\nHost: dpd.fwmqrf.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 08:43:39 GMT\r\ncontent-type: text/plain;charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=0,i\r\nlocation: /com/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TLUC63aEQ646RFyPyuAdySu6XUL4Gd3MIcfUKlEKnvJRN5eH9WX5PbsSEdugt%2B15CPPgUcqU7ooRqSnXU%2BMZN9c3RreXj0rpXAc9uIBengJ5OqXmT70%2BjDE8cHXncTfQxA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33abfb1ac244c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T13:32:54.913088Z","times_seen":18203002,"resource_available":true,"data":null}},"time_used":413,"timings":{"blocked":-1,"dns":22,"connect":12,"send":0,"wait":379,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"dpd.fwmqrf.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.fwmqrf.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.fwmqrf.icu/com/assets/Dw2Q-3X1.css","fqdn":"dpd.fwmqrf.icu","domain":"fwmqrf.icu","tld":"icu"},"ip":{"addr":"104.21.79.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dpd.fwmqrf.icu/com/","date":"2026-08-31T08:43:39.978Z","timestamp":1788165819978,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fwmqrf.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 06:18:40 GMT","end":"Sat, 28 Nov 2026 07:16:20 GMT"},"fingerprint":{"sha1":"E8:02:B3:35:CE:AA:CC:F9:51:7D:BD:AA:ED:0C:61:41:FA:90:2C:19","sha256":"7A:CA:CD:5C:F9:73:F9:09:2D:4B:8D:4B:7A:70:31:3D:71:B6:83:57:4A:FF:9A:3C:A1:6E:A4:1E:7D:A9:EC:B5"}}},"request":{"raw":"GET /com/assets/Dw2Q-3X1.css HTTP/1.1\r\nHost: dpd.fwmqrf.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.fwmqrf.icu/com/\r\nCookie: _vt=64abd30c-ca15-45ba-be8a-d19e201cf961\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 08:43:40 GMT\r\ncontent-type: text/css;charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nlast-modified: Mon, 31 Aug 2026 08:43:40 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v6lPiY%2BzHWhvTVFaTEGwtQ27OhxZrNB%2FekGmbYz%2F4m6oBhHQwQiqSlADuoDwNKXo3zUj4rl5nPHGHDyLerxCjZu2Blde%2B00lEwNuzrXSbJbbmleYw0ggcpqlXEoo1Y4tlQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a33abfb6dc9b4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8208\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60381,"size_decoded":8940,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (60380)","md5":"b68d450f564fa4095b39a4b7c57a0978","sha1":"58a3ea9eb890327d9c3a2e567eb0795ec5fbd376","sha256":"6a9cf39ffa1d41a393da1e5030b9b46c98bd11c4fe778081710dc6fbbbd0ed10","sha512":"0589959a1c2d7ef261fbc90d12ba4daa951e6bc1a786d0b33170561e739dd855252f9861f8cf1ff66e19ad2d8a7eeeb9125a7b471c5bf6f6cb87c3a68e2cac15","ssdeep":"768:1/fGmmVAL0uVYXEAFAtCbRgVaXp9jC8FpKdDm0pC59PwL3yVe0FpJvY:QOAuVYXt/tggP7a","tlshash":"de439561362c2038f97bd955b8d09bae3109f313d5235aeeee65a535cc870933b3269c","first_seen":"2026-08-22T02:48:44.572728Z","last_seen":"2026-08-31T12:18:54.74781Z","times_seen":27,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":383,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"dpd.fwmqrf.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.fwmqrf.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.fwmqrf.icu/com/assets/BOnPfxxG.woff","fqdn":"dpd.fwmqrf.icu","domain":"fwmqrf.icu","tld":"icu"},"ip":{"addr":"104.21.79.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dpd.fwmqrf.icu/com/","date":"2026-08-31T08:43:41.805Z","timestamp":1788165821805,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fwmqrf.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 06:18:40 GMT","end":"Sat, 28 Nov 2026 07:16:20 GMT"},"fingerprint":{"sha1":"E8:02:B3:35:CE:AA:CC:F9:51:7D:BD:AA:ED:0C:61:41:FA:90:2C:19","sha256":"7A:CA:CD:5C:F9:73:F9:09:2D:4B:8D:4B:7A:70:31:3D:71:B6:83:57:4A:FF:9A:3C:A1:6E:A4:1E:7D:A9:EC:B5"}}},"request":{"raw":"GET /com/assets/BOnPfxxG.woff HTTP/1.1\r\nHost: dpd.fwmqrf.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.fwmqrf.icu/com/assets/Ysl5gP_N.css\r\nCookie: _vt=64abd30c-ca15-45ba-be8a-d19e201cf961\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 08:43:42 GMT\r\ncontent-type: application/octet-stream;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EDZUBDs33849n87AExATuzmCOr%2F45iwUzbBXzpz3Y7AsRg%2BZGFCT2AETGSaA5LsJypTWnG8EYmMIwgg72e1YfThSvnJlU%2FhdwP71lkYLLurknIEVm3iB7FRGNGs%2FnX5NXg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nlast-modified: Mon, 31 Aug 2026 08:43:42 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33abfc2486b4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60781,"size_decoded":61461,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format, TrueType, length 60781, version 1.0","md5":"20398ebf2986259c88014178d7044844","sha1":"02422f7f86e44268579b2b3694ca72eaaa8a301a","sha256":"9e462606602d426b676f2b6f9c0b6629b02f91204214898f7d4a56749c4e00d0","sha512":"e353fbce67c1e46ecfc04c74e56d06f8916149d071700fee9cce2976987f2c5a5878dcd434590beeb02c417e9da0379696695f49ac9561ac423eb3d592438133","ssdeep":"1536:/mNyBIPLRqPeSDzYi5G0ChYnizF7Bz/bad7bSByIdPSE9:+VzRqbHT000iwz/bO7bjo9","tlshash":"3053026d635f1330ad5cb62770e8ea782d16fdbc61c2e9020351b2ca0e7a265e72d35d","first_seen":"2023-04-21T20:51:14Z","last_seen":"2026-08-31T12:18:54.749552Z","times_seen":2116,"resource_available":false,"data":null}},"time_used":738,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":383,"receive":355,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.fwmqrf.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"dpd.fwmqrf.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.fwmqrf.icu/com/assets/OwDWr5DG.woff","fqdn":"dpd.fwmqrf.icu","domain":"fwmqrf.icu","tld":"icu"},"ip":{"addr":"104.21.79.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dpd.fwmqrf.icu/com/","date":"2026-08-31T08:43:41.807Z","timestamp":1788165821807,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fwmqrf.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 06:18:40 GMT","end":"Sat, 28 Nov 2026 07:16:20 GMT"},"fingerprint":{"sha1":"E8:02:B3:35:CE:AA:CC:F9:51:7D:BD:AA:ED:0C:61:41:FA:90:2C:19","sha256":"7A:CA:CD:5C:F9:73:F9:09:2D:4B:8D:4B:7A:70:31:3D:71:B6:83:57:4A:FF:9A:3C:A1:6E:A4:1E:7D:A9:EC:B5"}}},"request":{"raw":"GET /com/assets/OwDWr5DG.woff HTTP/1.1\r\nHost: dpd.fwmqrf.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.fwmqrf.icu/com/assets/Ysl5gP_N.css\r\nCookie: _vt=64abd30c-ca15-45ba-be8a-d19e201cf961\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 08:43:42 GMT\r\ncontent-type: application/octet-stream;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bv4bOMnFZpkHi2bORhr6ui%2FAilJckc8ZqNixAIFFpiLBJN4rhghbO0AdYfIheO9rDknj2NhAvhaiB0OVWuedwcXoE7NY6cZRWGKkXTm8D4NPYz5F%2FTmw%2FVUCutZVPhlXIw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nlast-modified: Mon, 31 Aug 2026 08:43:42 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33abfc2486c4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60042,"size_decoded":60720,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format, TrueType, length 60042, version 1.0","md5":"32319d6149e2659c974fef61dfd5cc42","sha1":"e2aedccccdbad3f63b14e27941c59e7ba533cc51","sha256":"c99d0b5a290e48d4e4cbb86c29dd12436f465696702a81ded130a411f1e98cd3","sha512":"93a8d50361921549721c1313a53b122fd14fa7470c801bb1a785a72d0c022da4db26b650eb776ce0f9a2e4971363efc84095f0a8a30e57751d9a580454295e9a","ssdeep":"1536:yqdSnqzzEYachE4HiGuwH9wxpzLDFV6aP:yGKch0GFH9AxDH6G","tlshash":"7d4302dad28b50059c2ed4b12acdf4d8fe0516f58cdd75688eb4d1a823efddd9949030","first_seen":"2023-04-21T20:51:14Z","last_seen":"2026-08-31T12:18:54.745901Z","times_seen":2129,"resource_available":false,"data":null}},"time_used":728,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":374,"receive":354,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"dpd.fwmqrf.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.fwmqrf.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.fwmqrf.icu/com/assets/fS-WSyLf.jpg","fqdn":"dpd.fwmqrf.icu","domain":"fwmqrf.icu","tld":"icu"},"ip":{"addr":"104.21.79.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dpd.fwmqrf.icu/com/","date":"2026-08-31T08:43:41.812Z","timestamp":1788165821812,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fwmqrf.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 06:18:40 GMT","end":"Sat, 28 Nov 2026 07:16:20 GMT"},"fingerprint":{"sha1":"E8:02:B3:35:CE:AA:CC:F9:51:7D:BD:AA:ED:0C:61:41:FA:90:2C:19","sha256":"7A:CA:CD:5C:F9:73:F9:09:2D:4B:8D:4B:7A:70:31:3D:71:B6:83:57:4A:FF:9A:3C:A1:6E:A4:1E:7D:A9:EC:B5"}}},"request":{"raw":"GET /com/assets/fS-WSyLf.jpg HTTP/1.1\r\nHost: dpd.fwmqrf.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.fwmqrf.icu/com/\r\nCookie: _vt=64abd30c-ca15-45ba-be8a-d19e201cf961\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 08:43:42 GMT\r\ncontent-type: image/jpeg;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nlast-modified: Mon, 31 Aug 2026 08:43:42 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=chIT%2Fmo4xmqzXjgZHkH0mrH8lPDA%2FSWJiwfd%2FRMSz%2F9Jg%2F5k1BjI7O9uNPq1fjgOOzpW%2FGDHE91WOvTYcUVpqwFY%2BzATeeisZrnrnp%2BVx8yBmwPlS%2BE6S7n6Jw6PA1Q0cg%3D%3D\"}]}\r\ncf-ray: a33abfc2586e4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":134719,"size_decoded":135369,"mime_type":"image/jpeg; charset=utf-8","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1280x853, components 3","md5":"c9366d3c96a7e0b114309b0c71cf2ba0","sha1":"582b2fea1bd70cc908b82e33d07ffbafeb7a303a","sha256":"7e166c9fb31e3358ced873ed61e59da1e2e849a5193e27d5c4dab3a5a8ed1e44","sha512":"77d145beed6247975a6e419bf3606e9336fb06f22e552546b01ef82e34e5b7fc278113c49848d3f25148bf2fb772b4fbb4a381d4d0faff177727e61a78473909","ssdeep":"3072:JRiYiMREGUNgNtLewB/jxzWxE4Zn9T/JVIt6XnuG4D2zHCOr:aYiMqGAsCIFzWxE+9Nytkr","tlshash":"0bd312e45ea45412f401ee7a4cf05943c2423ee77bc5da48b38b3f10baa41619eeb8d7","first_seen":"2026-08-22T02:48:44.583554Z","last_seen":"2026-08-31T12:18:54.750854Z","times_seen":27,"resource_available":false,"data":null}},"time_used":911,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":530,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"dpd.fwmqrf.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.fwmqrf.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.fwmqrf.icu/com/assets/DhqmAzot.js","fqdn":"dpd.fwmqrf.icu","domain":"fwmqrf.icu","tld":"icu"},"ip":{"addr":"104.21.79.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dpd.fwmqrf.icu/com/","date":"2026-08-31T08:43:39.974Z","timestamp":1788165819974,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fwmqrf.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 06:18:40 GMT","end":"Sat, 28 Nov 2026 07:16:20 GMT"},"fingerprint":{"sha1":"E8:02:B3:35:CE:AA:CC:F9:51:7D:BD:AA:ED:0C:61:41:FA:90:2C:19","sha256":"7A:CA:CD:5C:F9:73:F9:09:2D:4B:8D:4B:7A:70:31:3D:71:B6:83:57:4A:FF:9A:3C:A1:6E:A4:1E:7D:A9:EC:B5"}}},"request":{"raw":"GET /com/assets/DhqmAzot.js HTTP/1.1\r\nHost: dpd.fwmqrf.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.fwmqrf.icu/com/\r\nCookie: _vt=64abd30c-ca15-45ba-be8a-d19e201cf961\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 08:43:40 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nvary: accept-encoding\r\npriority: u=1,i=?0\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 31 Aug 2026 08:43:40 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FM7cZESme%2B9n9Slx7MExiuyp5VKekZLldzpTriWzVbFCPO4mkPrgphFEM1alwlbe8iq7D1AzWk5AujAzEowobgBdivpwTBFcWyo6SL7fBjNs%2B3%2BB0TakfTb5rQiZTXtmuw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33abfb6dc984c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":183340,"size_decoded":67201,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2a1b4c52e6b45ca5bdba668c5b4cf187","sha1":"98950ae12d79ca781a696b3c67e39a11c7e7faa9","sha256":"65273d6f816e11b8e846c3dbeae4fdbeb9c48523951665e9835b33f0087c9915","sha512":"8b206123c7c0a63d9ccd17d44e5b6bcf3845d4306e540b7f7faa6d61c6a221cb33d062e490d4641e722c40afc2ef68c7f16ef79368764dc66a24279c56f25f8f","ssdeep":"3072:PLpSe/aSjhXSSS+SQ2UDPMaWTTLy5x294dRy:1//7j0SdxjMVTHy5xa4a","tlshash":"3b043bc53251b0a253fa15e3407b1007f3396925380d899cb25cfdef6c6a98a61b7f7a","first_seen":"2026-08-05T07:13:51.96529Z","last_seen":"2026-08-31T12:18:54.746552Z","times_seen":28,"resource_available":true,"data":null}},"time_used":752,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":416,"receive":336,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"dpd.fwmqrf.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.fwmqrf.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.fwmqrf.icu/com/assets/D6WjOvV9.png","fqdn":"dpd.fwmqrf.icu","domain":"fwmqrf.icu","tld":"icu"},"ip":{"addr":"104.21.79.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dpd.fwmqrf.icu/com/","date":"2026-08-31T08:43:41.811Z","timestamp":1788165821811,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fwmqrf.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 06:18:40 GMT","end":"Sat, 28 Nov 2026 07:16:20 GMT"},"fingerprint":{"sha1":"E8:02:B3:35:CE:AA:CC:F9:51:7D:BD:AA:ED:0C:61:41:FA:90:2C:19","sha256":"7A:CA:CD:5C:F9:73:F9:09:2D:4B:8D:4B:7A:70:31:3D:71:B6:83:57:4A:FF:9A:3C:A1:6E:A4:1E:7D:A9:EC:B5"}}},"request":{"raw":"GET /com/assets/D6WjOvV9.png HTTP/1.1\r\nHost: dpd.fwmqrf.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.fwmqrf.icu/com/\r\nCookie: _vt=64abd30c-ca15-45ba-be8a-d19e201cf961\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 08:43:41 GMT\r\ncontent-type: image/png;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nage: 0\r\nlast-modified: Mon, 31 Aug 2026 08:43:41 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pNWYA%2FDAAwSHy0IusV9Mpo923kH75I0Adg%2BjfhTu2iPgBjDbIYhLDDKLB17xeyIheJaBtIeI8TFgMm0qFuMcFDjq71Kfm70JGJUhADDPv%2BSeEHrt7dn4qEmlJOzHvaEtrQ%3D%3D\"}]}\r\ncf-ray: a33abfc2586d4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20781,"size_decoded":21425,"mime_type":"image/png; charset=utf-8","magic":"PNG image data, 141 x 67, 8-bit/color RGBA, non-interlaced","md5":"7fd40f3f20acbd2fdc7f81a77534ad38","sha1":"d55bfd5300bb1cb29316481db93002ed52dd00df","sha256":"6dcfd3f9716c0b3a5305ba18bcf64214c0b19b950f154e3c7a32bb51833a4ed6","sha512":"4eb176028f309ec5d3b608e15518add59fb854d0c69701973bdf9a2018c1628c8cd254729c48279db23937f1d2fc10d4bedbe29ebb189723757fca4863f2ef44","ssdeep":"192:vSNktOMOO0JLsMJ7bH+xwCOsb/w2T3X5erxHsk+m4:autOrNPexss42T3cdCm4","tlshash":"00926c60feb0319550cac2700dd97c188852aec788d28d07baec5a152f54fbc6e8f2e7","first_seen":"2025-10-14T22:06:20.884098Z","last_seen":"2026-08-31T12:18:54.744476Z","times_seen":840,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.fwmqrf.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"dpd.fwmqrf.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.fwmqrf.icu/com/","fqdn":"dpd.fwmqrf.icu","domain":"fwmqrf.icu","tld":"icu"},"ip":{"addr":"104.21.79.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T08:43:39.533Z","timestamp":1788165819533,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fwmqrf.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 06:18:40 GMT","end":"Sat, 28 Nov 2026 07:16:20 GMT"},"fingerprint":{"sha1":"E8:02:B3:35:CE:AA:CC:F9:51:7D:BD:AA:ED:0C:61:41:FA:90:2C:19","sha256":"7A:CA:CD:5C:F9:73:F9:09:2D:4B:8D:4B:7A:70:31:3D:71:B6:83:57:4A:FF:9A:3C:A1:6E:A4:1E:7D:A9:EC:B5"}}},"request":{"raw":"GET /com/ HTTP/1.1\r\nHost: dpd.fwmqrf.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 08:43:39 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: accept-encoding\r\npriority: u=0,i\r\nset-cookie: _vt=64abd30c-ca15-45ba-be8a-d19e201cf961; Path=/; Expires=Mon, 31-Aug-2026 08:53:39 GMT; Max-Age=600\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mzc3isR%2B524x1taPKnFo5vizYpPCH38WXZoYoNX57QP7QHx01C5VYt1mp2q5dBGPbWU3CZ2IMR%2FoknwOAZo02%2BPmPJHeMOLmrVvCqDkaOn3bhjLhHPcTvN32ifiKGwtLKw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33abfb41c694c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"_vt","value":"64abd30c-ca15-45ba-be8a-d19e201cf961","quoted":false,"path":"/","expires":"2026-08-31T08:53:39Z","raw_expires":"Mon, 31-Aug-2026 08:53:39 GMT","max_age":600,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"_vt=64abd30c-ca15-45ba-be8a-d19e201cf961; Path=/; Expires=Mon, 31-Aug-2026 08:53:39 GMT; Max-Age=600"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2386,"size_decoded":1736,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF, CR, LF line terminators","md5":"8bd131267af0372651771a75eb4ced76","sha1":"5e36a2f79023423e281a5f05662b2962f58ddc01","sha256":"b7fbe1e796e21d2e51bbd8c9296eefac4c393c05a33de90b2b00964b4ae04916","sha512":"ffdc4daca62dad0b621d6381341efcdfe09d933c75e1b982ff27abcf4bfeef30d9e8a01c45ca4f4aed8877d29d85a0dc8d3c9cdee82864504721e1815231fe86","ssdeep":"","tlshash":"8b41259205930c16132343a2dfd6a201d2f1d603c14ffc4479fd10ae4fa4a8599e7f38","first_seen":"2026-08-30T09:26:57.975241Z","last_seen":"2026-08-31T12:18:54.745166Z","times_seen":19,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.fwmqrf.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"dpd.fwmqrf.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.fwmqrf.icu/com/assets/E8Ho6ETs.js","fqdn":"dpd.fwmqrf.icu","domain":"fwmqrf.icu","tld":"icu"},"ip":{"addr":"104.21.79.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dpd.fwmqrf.icu/com/","date":"2026-08-31T08:43:39.973Z","timestamp":1788165819973,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fwmqrf.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 06:18:40 GMT","end":"Sat, 28 Nov 2026 07:16:20 GMT"},"fingerprint":{"sha1":"E8:02:B3:35:CE:AA:CC:F9:51:7D:BD:AA:ED:0C:61:41:FA:90:2C:19","sha256":"7A:CA:CD:5C:F9:73:F9:09:2D:4B:8D:4B:7A:70:31:3D:71:B6:83:57:4A:FF:9A:3C:A1:6E:A4:1E:7D:A9:EC:B5"}}},"request":{"raw":"GET /com/assets/E8Ho6ETs.js HTTP/1.1\r\nHost: dpd.fwmqrf.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.fwmqrf.icu/com/\r\nCookie: _vt=64abd30c-ca15-45ba-be8a-d19e201cf961\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 08:43:40 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nlast-modified: Mon, 31 Aug 2026 08:43:40 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=flqEK0BEWLC1%2FpTIyJ2oqRXfuCc85PNp2AJkSYwEy0TpN0Kiyoh6ybxobnjcuhRI3bX7v0mtPUCgQsU7u0%2B1Ct8JMOHzi%2BY2%2ByGsqyOdqywjjai8cHv4HyyKbhN8URj8Ug%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a33abfb6dc974c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 29735\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84945,"size_decoded":30475,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65523), with no line terminators","md5":"dc5a950181b724cfe0c9c41e59d96f7a","sha1":"98c4b8694dbe285631cdd0ae5496e7553065b212","sha256":"4d54663f07ede37a41652214289ca67f13402ddad24b165f2fc18173e7d4570b","sha512":"c3863ff083b8ab92492ed0f0ac1f8758aa6457f4c2c6f644cc92e7ad37179f1686f5863deb449d7a19d4638d5fb82412c6dc100a2a84473a6569bd58100009bf","ssdeep":"1536:mwhVcjgFk3x6T5m9TATCLTaT4cTJprFZDbn4AJoAT4nNYnaHP9UYhh9bzF4BxJBQ:mwhVigFk3xEm9TAToTaT4cTJRF1n4MoP","tlshash":"7083080d5e01bdbe204b272934fb10e7346d2d97e056dbf089f18d785b1cea8a1dea94","first_seen":"2026-08-30T09:26:57.99213Z","last_seen":"2026-08-31T12:18:54.748958Z","times_seen":19,"resource_available":true,"data":null}},"time_used":575,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":395,"receive":180,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.fwmqrf.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"dpd.fwmqrf.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.fwmqrf.icu/com/assets/DQdO6SN9.js","fqdn":"dpd.fwmqrf.icu","domain":"fwmqrf.icu","tld":"icu"},"ip":{"addr":"104.21.79.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dpd.fwmqrf.icu/com/","date":"2026-08-31T08:43:39.976Z","timestamp":1788165819976,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fwmqrf.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 06:18:40 GMT","end":"Sat, 28 Nov 2026 07:16:20 GMT"},"fingerprint":{"sha1":"E8:02:B3:35:CE:AA:CC:F9:51:7D:BD:AA:ED:0C:61:41:FA:90:2C:19","sha256":"7A:CA:CD:5C:F9:73:F9:09:2D:4B:8D:4B:7A:70:31:3D:71:B6:83:57:4A:FF:9A:3C:A1:6E:A4:1E:7D:A9:EC:B5"}}},"request":{"raw":"GET /com/assets/DQdO6SN9.js HTTP/1.1\r\nHost: dpd.fwmqrf.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.fwmqrf.icu/com/\r\nCookie: _vt=64abd30c-ca15-45ba-be8a-d19e201cf961\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 08:43:40 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nvary: accept-encoding\r\npriority: u=1,i=?0\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 31 Aug 2026 08:43:40 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mj9k98ziMgEiNCWTpuH1QO%2BRwQJGGiujzBmS5gHhizIARIUXdSN%2BJ9b6Wf%2B51yTPqHQHBCKL0Bxe5C7tGrXjlPC3CzBeJJqX5eITr4fPz8vyj0Zpu%2BNhOda22rQyT1JmXg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33abfb6dc9a4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":554094,"size_decoded":183555,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"60e31f1c280c649ef902a76aaf94b175","sha1":"7034589d5ca7ab40262f5914f7c7d04b8af5c1ce","sha256":"8345cd86d15339dfc488a22f0533cc1b2d16553ea37098cae43aec8fcd5c112e","sha512":"164439754dff313c1b22ff49815d43dd33324a828c2ff851f666cdb634ef98bada3dc4417c04cc954e38aed8b46d1dcf0733a466788dad036d8a18936b528962","ssdeep":"6144:opw8G9FXkYxS8NM0r0O0Nrkb/Ew1a+XA9DPnYjHwLd+A7xAdSErehHWODhg7J49Z:op2kYx3B3Y35AUvoQTYK+9u","tlshash":"f1c418d22b4ff2ca016208a7439b30c6b10e7bab380ce5057ff4f5941ea5769796e934","first_seen":"2026-08-30T09:26:57.986512Z","last_seen":"2026-08-31T12:18:54.747225Z","times_seen":19,"resource_available":true,"data":null}},"time_used":882,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":372,"receive":510,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.fwmqrf.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"dpd.fwmqrf.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.fwmqrf.icu/com/assets/Ysl5gP_N.css","fqdn":"dpd.fwmqrf.icu","domain":"fwmqrf.icu","tld":"icu"},"ip":{"addr":"104.21.79.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dpd.fwmqrf.icu/com/","date":"2026-08-31T08:43:39.982Z","timestamp":1788165819982,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fwmqrf.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 06:18:40 GMT","end":"Sat, 28 Nov 2026 07:16:20 GMT"},"fingerprint":{"sha1":"E8:02:B3:35:CE:AA:CC:F9:51:7D:BD:AA:ED:0C:61:41:FA:90:2C:19","sha256":"7A:CA:CD:5C:F9:73:F9:09:2D:4B:8D:4B:7A:70:31:3D:71:B6:83:57:4A:FF:9A:3C:A1:6E:A4:1E:7D:A9:EC:B5"}}},"request":{"raw":"GET /com/assets/Ysl5gP_N.css HTTP/1.1\r\nHost: dpd.fwmqrf.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.fwmqrf.icu/com/\r\nCookie: _vt=64abd30c-ca15-45ba-be8a-d19e201cf961\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 08:43:40 GMT\r\ncontent-type: text/css;charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nlast-modified: Mon, 31 Aug 2026 08:43:40 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GYAVq%2BKGjTG%2BvSdNdu3m4UmyeV0yxcYrHWwXgl3KONJXK5t0m5yVGXddwcXNKWePDSwKs3CYud48RWd4XQ8h11%2BQJlX04sJQQEkwDyFcnaBSHrg5bRdqIWkGg%2BcJSPPt3g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a33abfb6ec9f4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11921\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72646,"size_decoded":12654,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"24bbaa2d9a54ac50885af44427e3f442","sha1":"f8d69b5393ba572ccec98e09d1673c2bd0037f25","sha256":"d625a8a7223f626b8f0ed13fd8d9c3c4f21f0b29555ee1412c0459fb3ead42ba","sha512":"4692960f383cefe5e8c1b2ddfc43fcb24ac2ff16099bd2edbebd0ef881e05a37412b80b1389f352f098b5965be45d4033e591d7dca7fa1c2175f26746bbecb87","ssdeep":"768:rltO/xR1ySZjKKl1Qq5cZ+lMiRhONG1dJkG34mqWPlz/hBhcaa+V2:rlg/Hll1Qq5cZ+M+AG1f3IWPlz8","tlshash":"0b63c7b9775c2014f87bc99716e466cd01246326f113439cea27ba358ecf6933e72ad8","first_seen":"2026-08-30T09:26:57.979502Z","last_seen":"2026-08-31T12:18:54.748388Z","times_seen":19,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":370,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"dpd.fwmqrf.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.fwmqrf.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.fwmqrf.icu/com/assets/D6WjOvV9.png","fqdn":"dpd.fwmqrf.icu","domain":"fwmqrf.icu","tld":"icu"},"ip":{"addr":"104.21.79.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dpd.fwmqrf.icu/com/","date":"2026-08-31T08:43:40.959Z","timestamp":1788165820959,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fwmqrf.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 06:18:40 GMT","end":"Sat, 28 Nov 2026 07:16:20 GMT"},"fingerprint":{"sha1":"E8:02:B3:35:CE:AA:CC:F9:51:7D:BD:AA:ED:0C:61:41:FA:90:2C:19","sha256":"7A:CA:CD:5C:F9:73:F9:09:2D:4B:8D:4B:7A:70:31:3D:71:B6:83:57:4A:FF:9A:3C:A1:6E:A4:1E:7D:A9:EC:B5"}}},"request":{"raw":"GET /com/assets/D6WjOvV9.png HTTP/1.1\r\nHost: dpd.fwmqrf.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.fwmqrf.icu/com/\r\nCookie: _vt=64abd30c-ca15-45ba-be8a-d19e201cf961\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 08:43:41 GMT\r\ncontent-type: image/png;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nlast-modified: Mon, 31 Aug 2026 08:43:41 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fijd7rFMMNcxY45SUzB3KCD2CgIztZ5QSFw4L9rWh%2BHVJ28lXmtVmMrnGDOd3wfsEYqgsh3%2BF%2BHpcb6Jw6xgbPGu7meey9loqORVF%2FTu90mrFtSCqeUODmJGKAhUiklleA%3D%3D\"}]}\r\ncf-ray: a33abfbcff424c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20781,"size_decoded":21425,"mime_type":"image/png; charset=utf-8","magic":"PNG image data, 141 x 67, 8-bit/color RGBA, non-interlaced","md5":"7fd40f3f20acbd2fdc7f81a77534ad38","sha1":"d55bfd5300bb1cb29316481db93002ed52dd00df","sha256":"6dcfd3f9716c0b3a5305ba18bcf64214c0b19b950f154e3c7a32bb51833a4ed6","sha512":"4eb176028f309ec5d3b608e15518add59fb854d0c69701973bdf9a2018c1628c8cd254729c48279db23937f1d2fc10d4bedbe29ebb189723757fca4863f2ef44","ssdeep":"192:vSNktOMOO0JLsMJ7bH+xwCOsb/w2T3X5erxHsk+m4:autOrNPexss42T3cdCm4","tlshash":"00926c60feb0319550cac2700dd97c188852aec788d28d07baec5a152f54fbc6e8f2e7","first_seen":"2025-10-14T22:06:20.884098Z","last_seen":"2026-08-31T12:18:54.744476Z","times_seen":840,"resource_available":false,"data":null}},"time_used":551,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":379,"receive":172,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.fwmqrf.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"dpd.fwmqrf.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://dpd.fwmqrf.icu/console/?uuid=34d00a26-1afb-4925-a2cc-df87788748d3\u0026shopHost=\u0026EIO=4\u0026transport=websocket","fqdn":"dpd.fwmqrf.icu","domain":"fwmqrf.icu","tld":"icu"},"ip":{"addr":"104.21.79.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://dpd.fwmqrf.icu/com/","date":"2026-08-31T08:43:41.536Z","timestamp":1788165821536,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fwmqrf.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 06:18:40 GMT","end":"Sat, 28 Nov 2026 07:16:20 GMT"},"fingerprint":{"sha1":"E8:02:B3:35:CE:AA:CC:F9:51:7D:BD:AA:ED:0C:61:41:FA:90:2C:19","sha256":"7A:CA:CD:5C:F9:73:F9:09:2D:4B:8D:4B:7A:70:31:3D:71:B6:83:57:4A:FF:9A:3C:A1:6E:A4:1E:7D:A9:EC:B5"}}},"request":{"raw":"GET /console/?uuid=34d00a26-1afb-4925-a2cc-df87788748d3\u0026shopHost=\u0026EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: dpd.fwmqrf.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://dpd.fwmqrf.icu\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: ZQLAUmGl6l+DYlsDbHTbVw==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nCookie: _vt=64abd30c-ca15-45ba-be8a-d19e201cf961\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Mon, 31 Aug 2026 08:43:45 GMT\r\nConnection: upgrade\r\nServer: cloudflare\r\nupgrade: websocket\r\nsec-websocket-accept: QGpiOK+A4W2Zod4xN48nxGK/8OY=\r\nsec-websocket-extensions: permessage-deflate\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3dTmaxAeuoIj8JCBnnv3X9zP0zFPf%2Bs5BeMHqZ5Fi%2BCdzG7VoaylDdghSaKmH2PjlLr0LKZjQ5TMVdk6Q3jJWYt3htcMYbp4neXxRpmvAQGbnB7Pjz7OdhwqRrzPVJxfDA%3D%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCF-RAY: a33abfd47dcd783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":641,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T13:32:54.913088Z","times_seen":18203002,"resource_available":true,"data":null}},"time_used":6707,"timings":{"blocked":0,"dns":3167,"connect":3168,"send":0,"wait":366,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}