{"report_id":"ce0e7adf-6873-4440-ba61-0a79f8f9af80","version":0,"status":"done","tags":[],"date":"2026-07-19T07:21:51Z","url":{"schema":"http","addr":"quasar-engine.icu","fqdn":"quasar-engine.icu","domain":"quasar-engine.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":0,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"final":{"url":{"schema":"https","addr":"quasar-engine.icu/","fqdn":"quasar-engine.icu","domain":"quasar-engine.icu","tld":"icu"},"title":"Fundiquekol | Fundiquekol — программы инвестиционного обучения","dom":{"size":49863,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (739)","md5":"41400c2a911cadc980369d4707325158","sha1":"3858c56c3b814518b14255519ac06aa26f8eac8b","sha256":"22d4ebe8f88e7c7d9c846cfd7ccef38c9ac306e09b118b622c15781a81f67bfd","sha512":"9a83bbd02d84d9d53b4f5c88a792eb6da268b613cb1c2cdeef0e5382a91b33ffae5cc16b4237da5c47132ccb38fcd5ef1011f25ffdc5a18f23757da074747eac","ssdeep":"1536:3NxY47Wa/yFAxTUSPheRf5LKgLUj+PM50fsZirrlvRLWM+ZCp3o65:3NFXPhetXW50fsZQWQ3o65","tlshash":"3b23a5a156f6105e2103e059a905af0937b9c07bff0fda2832fc196d6fe64a8c92774d","dom_hash":"domhash9d750c72b9939939a6edaab4e10abd70","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"quasar-engine.icu","fqdn":"quasar-engine.icu","domain":"quasar-engine.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":0,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-23T07:21:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"quasar-engine.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-12T22:22:25.184057Z","alert_count":0,"request_count":2,"received_data":19257,"sent_data":1105,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"quasar-engine.icu","ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"domain_registered":"2026-03-13","domain_rank":0,"first_seen":"2026-07-19T07:21:52.065922Z","last_seen":"2026-07-19T07:21:52.065922Z","alert_count":18,"request_count":18,"received_data":776580,"sent_data":14047,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-12T22:19:35.511658Z","alert_count":0,"request_count":4,"received_data":160392,"sent_data":2257,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"quasar-engine.icu/","fqdn":"quasar-engine.icu","domain":"quasar-engine.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"db4fccc6b865d7276ea0e1f1f57b9f36","sha1":"970e8d6ee3d576a80744887dcb9cbb8e6ae6a09c","sha256":"6369aaab809759bba08a8a1e139e489b3047c1e9fcebf540aa6684087e9f1dd9","sha512":"0da6501c3e827eebae3e844d7f926817923188b2040edf8b67570e24df72bea80739a41f2c332732065c913561b402c498aa3acb0ac52948123159fd93986512","ssdeep":"","tlshash":"37f0d6676f7e253606ef9367b1cd5f66352400072541ca053fbc5ad52eb4e6058b64c1","size":626,"data":"","first_seen":"2026-07-19T07:21:55.459291Z","last_seen":"2026-07-19T07:27:20.623451Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quasar-engine.icu/","fqdn":"quasar-engine.icu","domain":"quasar-engine.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"050bfed3736763dbeb785fbead25320d","sha1":"0134699bc0af018bcc170446b5b75ca1f2cf3d3e","sha256":"ae2698be4a68798df339929a185237d48b3a9a9e70de8ff587599c11c7a7de3e","sha512":"1b2180a924622f2c50c2f8bb74f9a9116da0921ccd09c4bedf5b7ba79b933689742f0d3956d42b50642a2d3a29bff011561f648ec8f395d446542dbccae8bfa4","ssdeep":"","tlshash":"b6f0a77b55612a3141ff79f1334fa64c3a6894437901cc023d4c8a884f3be9490ba5dd","size":472,"data":"","first_seen":"2026-07-19T07:21:55.460262Z","last_seen":"2026-07-19T07:27:20.62511Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quasar-engine.icu/","fqdn":"quasar-engine.icu","domain":"quasar-engine.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"6af0603c7c9f6162b3700e300f1f7ab1","sha1":"f57d05adf665639ddafdf977b6bc8c1bbfa9dfc1","sha256":"95464c27463f7e9b02882bb5164da98108b6ad705757207671728bbfdccdd5bf","sha512":"8084e6f57478f643bea1ca3f4313211f8ff5773f32427b3e975d82aabbb7a3cb082a2bd13bcf5e0ce8bfdb9434a1277084593caf0a65e35b4fc58e9a6f672657","ssdeep":"","tlshash":"6f014e5d20b3003fcd2708bf764b4336262530033856991d79ecd2455fab8388d6975a","size":811,"data":"","first_seen":"2026-07-19T07:21:55.461227Z","last_seen":"2026-07-19T07:27:20.626625Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quasar-engine.icu/lander/fundiquekol_ru_wp/cookie.min.js","fqdn":"quasar-engine.icu","domain":"quasar-engine.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3340d710b2f46c423bbe18931e00adf","sha1":"3cdf856729c59eab0e6f1f1094feb7b01d17765d","sha256":"3fb5a95c2306df078ea08568f5d01d7365252cfd37a4c6b0a6f26743f2ac9117","sha512":"5a04cfa0eaa68d6d0c26797161aab55ff5d79b82d9c3e940dbae19ebea299f6d8cedea990b005f00755cceba54457221b099613cf4eca7f8f5fd1c1a99819d60","ssdeep":"","tlshash":"8ef02e377a2d0e3801edf5fb54d8678db9374045b400421ca438586018e9e871db4ecb","size":497,"data":"","first_seen":"2025-08-28T12:20:18.439269Z","last_seen":"2026-07-19T07:27:20.609459Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"quasar-engine.icu/lander/fundiquekol_ru_wp/cookie.min.js","fqdn":"quasar-engine.icu","domain":"quasar-engine.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://quasar-engine.icu/","date":"2026-07-19T07:21:15.565Z","timestamp":1784445675565,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quasar-engine.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Jun 2026 02:41:22 GMT","end":"Sat, 12 Sep 2026 02:41:21 GMT"},"fingerprint":{"sha1":"97:7F:4C:60:EE:3E:0D:A8:DE:5E:F2:36:10:B9:5B:6E:91:6D:10:3E","sha256":"6B:E0:48:BF:4A:21:0E:38:30:66:15:B3:B9:75:BC:8C:BF:D0:98:1B:5E:78:6C:2C:4F:5B:72:06:35:6E:E6:D2"}}},"request":{"raw":"GET /lander/fundiquekol_ru_wp/cookie.min.js HTTP/1.1\r\nHost: quasar-engine.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://quasar-engine.icu/\r\nCookie: _subid=18uumd059v8qv; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIzODhcIjoxNzg0NDQ1Njc0fSxcImNhbXBhaWduc1wiOntcIjkwN1wiOjE3ODQ0NDU2NzR9LFwidGltZVwiOjE3ODQ0NDU2NzR9In0.HeXzcj9G95rLERJGIKfi7MozvEW4X_S_NlKx92_aR6s\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:21:15 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 497\r\nLast-Modified: Thu, 20 Nov 2025 12:53:14 GMT\r\nConnection: keep-alive\r\nETag: \"691f0f3a-1f1\"\r\nExpires: Wed, 29 Jul 2026 07:21:15 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":497,"size_decoded":844,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (497), with no line terminators","md5":"d3340d710b2f46c423bbe18931e00adf","sha1":"3cdf856729c59eab0e6f1f1094feb7b01d17765d","sha256":"3fb5a95c2306df078ea08568f5d01d7365252cfd37a4c6b0a6f26743f2ac9117","sha512":"5a04cfa0eaa68d6d0c26797161aab55ff5d79b82d9c3e940dbae19ebea299f6d8cedea990b005f00755cceba54457221b099613cf4eca7f8f5fd1c1a99819d60","ssdeep":"","tlshash":"8ef02e377a2d0e3801edf5fb54d8678db9374045b400421ca438586018e9e871db4ecb","first_seen":"2025-08-28T12:20:18.439269Z","last_seen":"2026-07-19T07:27:20.609459Z","times_seen":31,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":62,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"quasar-engine.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"quasar-engine.icu/lander/fundiquekol_ru_wp/graphics/female-yNhU5-0.webp","fqdn":"quasar-engine.icu","domain":"quasar-engine.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://quasar-engine.icu/","date":"2026-07-19T07:21:15.592Z","timestamp":1784445675592,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quasar-engine.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Jun 2026 02:41:22 GMT","end":"Sat, 12 Sep 2026 02:41:21 GMT"},"fingerprint":{"sha1":"97:7F:4C:60:EE:3E:0D:A8:DE:5E:F2:36:10:B9:5B:6E:91:6D:10:3E","sha256":"6B:E0:48:BF:4A:21:0E:38:30:66:15:B3:B9:75:BC:8C:BF:D0:98:1B:5E:78:6C:2C:4F:5B:72:06:35:6E:E6:D2"}}},"request":{"raw":"GET /lander/fundiquekol_ru_wp/graphics/female-yNhU5-0.webp HTTP/1.1\r\nHost: quasar-engine.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://quasar-engine.icu/\r\nCookie: _subid=18uumd059v8qv; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIzODhcIjoxNzg0NDQ1Njc0fSxcImNhbXBhaWduc1wiOntcIjkwN1wiOjE3ODQ0NDU2NzR9LFwidGltZVwiOjE3ODQ0NDU2NzR9In0.HeXzcj9G95rLERJGIKfi7MozvEW4X_S_NlKx92_aR6s\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:21:16 GMT\r\nContent-Type: image/webp\r\nContent-Length: 80392\r\nLast-Modified: Thu, 20 Nov 2025 12:53:14 GMT\r\nConnection: keep-alive\r\nETag: \"691f0f3a-13a08\"\r\nExpires: Wed, 29 Jul 2026 07:21:16 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":80392,"size_decoded":80731,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x800, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9d54696e8227d660ecbcfc09d422691c","sha1":"1ea24ebe98552ba5c254f184c5c697a508ad4af4","sha256":"64bae261d997b639a867acfab4454dfb32cb357236ae5214ccc7d511cce9b493","sha512":"4c20c6244cea727506f8618b29cc94438586006c23c9dd2e8e73a78314205fc01ad96077e1fbf39e397f151bb8c6c9512b8b5a5e0ea272b4a593f8c954551912","ssdeep":"1536:A4nSNnH9qNCsRuP1vuvIIkjZu4ZwYZoaxl6icsMaskSI0I:B0CUviIv17yiVxl6iu3kS4","tlshash":"4b73022caa07e94556468270ddceccde3b6161beeb220dcb9da02d3287385ffd61d605","first_seen":"2026-01-13T16:18:09.392798Z","last_seen":"2026-07-19T07:27:20.618179Z","times_seen":5,"resource_available":false,"data":null}},"time_used":543,"timings":{"blocked":481,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"quasar-engine.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://quasar-engine.icu/","date":"2026-07-19T07:21:15.925Z","timestamp":1784445675925,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://quasar-engine.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 17 Jul 2026 18:12:11 GMT\r\nexpires: Sat, 17 Jul 2027 18:12:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 133744\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48320,"size_decoded":49133,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-07-21T10:24:03.369837Z","times_seen":312216,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":2,"connect":33,"send":0,"wait":44,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWvU6F15M.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://quasar-engine.icu/","date":"2026-07-19T07:21:15.930Z","timestamp":1784445675930,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/opensans/v44/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWvU6F15M.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://quasar-engine.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32016\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Jul 2026 11:07:10 GMT\r\nexpires: Mon, 12 Jul 2027 11:07:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 591245\r\nlast-modified: Mon, 15 Sep 2025 16:31:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":32016,"size_decoded":32829,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32016, version 1.0","md5":"c5e3aaed82981838372df4b2582096a9","sha1":"9b81cbb103841fd2693f4a1c645ed9fa23aef9c4","sha256":"9dbf8ed5c11ef7e7e80a08cb18d7f7e0e93eea2f77345ee8a73d6e08e122c36e","sha512":"e69fdee5f629f78456ef5c2642b478e17cefcfb01b5ede77ae1e7c5d39c60dc54582ea289fa31e40f581da22d406465c388974093cf99b08c9dfe22ae0394168","ssdeep":"768:P7YXSkS38xUQiRmnfTdTPJqw2rEudLAmV3Vtea9E9UI6Z/t8LEBdh:P8X1uQiSNRerEuGQsaTZJqLEvh","tlshash":"4be2e10d3cd24e884bf5e23d0139598d14836de6f994df696e747bf540a0949c18bc9b","first_seen":"2025-06-03T03:37:24.589421Z","last_seen":"2026-07-20T20:01:12.165516Z","times_seen":726,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":36,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quasar-engine.icu/lander/fundiquekol_ru_wp/brand.png","fqdn":"quasar-engine.icu","domain":"quasar-engine.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://quasar-engine.icu/","date":"2026-07-19T07:21:16.283Z","timestamp":1784445676283,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quasar-engine.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Jun 2026 02:41:22 GMT","end":"Sat, 12 Sep 2026 02:41:21 GMT"},"fingerprint":{"sha1":"97:7F:4C:60:EE:3E:0D:A8:DE:5E:F2:36:10:B9:5B:6E:91:6D:10:3E","sha256":"6B:E0:48:BF:4A:21:0E:38:30:66:15:B3:B9:75:BC:8C:BF:D0:98:1B:5E:78:6C:2C:4F:5B:72:06:35:6E:E6:D2"}}},"request":{"raw":"GET /lander/fundiquekol_ru_wp/brand.png HTTP/1.1\r\nHost: quasar-engine.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://quasar-engine.icu/\r\nCookie: _subid=18uumd059v8qv; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIzODhcIjoxNzg0NDQ1Njc0fSxcImNhbXBhaWduc1wiOntcIjkwN1wiOjE3ODQ0NDU2NzR9LFwidGltZVwiOjE3ODQ0NDU2NzR9In0.HeXzcj9G95rLERJGIKfi7MozvEW4X_S_NlKx92_aR6s\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:21:16 GMT\r\nContent-Type: image/png\r\nContent-Length: 12429\r\nLast-Modified: Thu, 20 Nov 2025 12:53:14 GMT\r\nConnection: keep-alive\r\nETag: \"691f0f3a-308d\"\r\nExpires: Wed, 29 Jul 2026 07:21:16 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12429,"size_decoded":12766,"mime_type":"image/png","magic":"PNG image data, 400 x 617, 8-bit/color RGBA, non-interlaced","md5":"6267f5198ad8f26af4227a33d9932608","sha1":"5baa1edb722ce2fbcd667d357ea41cb03b718cd1","sha256":"b24d37a7b4dbd87689d887d677c7bd6a3f538073a31657e3e570ed14cf5bc8a5","sha512":"66db8ac414b93f8e3f6199fa5bd36966a95870bee7e64e2d4f3b93191da2c33ba5e28848cf6e4d825a6043f836c3191cf72dd7024324e9830414f85a1762d864","ssdeep":"192:cciRf+ARq/yiZpiX6XPcdwpOZc/nXgrb/XMtKLNpT15qkprx6M6lBliKf4n1IBgL:3jXTpI6XPrVwfktKLNpygX6Flf4nyBgL","tlshash":"2042c068462073add93e86086f849ead7f7b024702a0e465e6bfc77052bbd0d9413a58","first_seen":"2026-01-13T16:18:09.404403Z","last_seen":"2026-07-19T07:27:20.61579Z","times_seen":5,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"quasar-engine.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"quasar-engine.icu/lander/fundiquekol_ru_wp/cookie.min.css","fqdn":"quasar-engine.icu","domain":"quasar-engine.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://quasar-engine.icu/","date":"2026-07-19T07:21:15.559Z","timestamp":1784445675559,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quasar-engine.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Jun 2026 02:41:22 GMT","end":"Sat, 12 Sep 2026 02:41:21 GMT"},"fingerprint":{"sha1":"97:7F:4C:60:EE:3E:0D:A8:DE:5E:F2:36:10:B9:5B:6E:91:6D:10:3E","sha256":"6B:E0:48:BF:4A:21:0E:38:30:66:15:B3:B9:75:BC:8C:BF:D0:98:1B:5E:78:6C:2C:4F:5B:72:06:35:6E:E6:D2"}}},"request":{"raw":"GET /lander/fundiquekol_ru_wp/cookie.min.css HTTP/1.1\r\nHost: quasar-engine.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://quasar-engine.icu/\r\nCookie: _subid=18uumd059v8qv; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIzODhcIjoxNzg0NDQ1Njc0fSxcImNhbXBhaWduc1wiOntcIjkwN1wiOjE3ODQ0NDU2NzR9LFwidGltZVwiOjE3ODQ0NDU2NzR9In0.HeXzcj9G95rLERJGIKfi7MozvEW4X_S_NlKx92_aR6s\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:21:15 GMT\r\nContent-Type: text/css\r\nContent-Length: 592\r\nLast-Modified: Thu, 20 Nov 2025 12:53:14 GMT\r\nConnection: keep-alive\r\nETag: \"691f0f3a-250\"\r\nExpires: Wed, 29 Jul 2026 07:21:15 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":592,"size_decoded":925,"mime_type":"text/css","magic":"ASCII text, with very long lines (592), with no line terminators","md5":"f751e6940201b741694b43d2b6568c2e","sha1":"e9c16220078777b6b442208145fbb2b98e3c0dde","sha256":"7342d644301c2f6bac626abd90947170bac42a0ff06958df09e399457568653b","sha512":"7410b4b8b1b80a5f26616071870c5b8ad3fbfd8b086ee50f2d771d5645608903a7974f3548409f5193d9faa868dedaa5dda2a8a821def70e8d58b44f54a663a3","ssdeep":"","tlshash":"7df0f4017a0d123a708f80adac61c60783366865e129efbc646934b0db6d1913cad2d6","first_seen":"2026-01-13T16:18:09.46495Z","last_seen":"2026-07-19T07:27:20.604639Z","times_seen":5,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"quasar-engine.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"quasar-engine.icu/lander/fundiquekol_ru_wp/brand.png","fqdn":"quasar-engine.icu","domain":"quasar-engine.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://quasar-engine.icu/","date":"2026-07-19T07:21:15.579Z","timestamp":1784445675579,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quasar-engine.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Jun 2026 02:41:22 GMT","end":"Sat, 12 Sep 2026 02:41:21 GMT"},"fingerprint":{"sha1":"97:7F:4C:60:EE:3E:0D:A8:DE:5E:F2:36:10:B9:5B:6E:91:6D:10:3E","sha256":"6B:E0:48:BF:4A:21:0E:38:30:66:15:B3:B9:75:BC:8C:BF:D0:98:1B:5E:78:6C:2C:4F:5B:72:06:35:6E:E6:D2"}}},"request":{"raw":"GET /lander/fundiquekol_ru_wp/brand.png HTTP/1.1\r\nHost: quasar-engine.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://quasar-engine.icu/\r\nCookie: _subid=18uumd059v8qv; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIzODhcIjoxNzg0NDQ1Njc0fSxcImNhbXBhaWduc1wiOntcIjkwN1wiOjE3ODQ0NDU2NzR9LFwidGltZVwiOjE3ODQ0NDU2NzR9In0.HeXzcj9G95rLERJGIKfi7MozvEW4X_S_NlKx92_aR6s\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:21:16 GMT\r\nContent-Type: image/png\r\nContent-Length: 12429\r\nLast-Modified: Thu, 20 Nov 2025 12:53:14 GMT\r\nConnection: keep-alive\r\nETag: \"691f0f3a-308d\"\r\nExpires: Wed, 29 Jul 2026 07:21:16 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12429,"size_decoded":12766,"mime_type":"image/png","magic":"PNG image data, 400 x 617, 8-bit/color RGBA, non-interlaced","md5":"6267f5198ad8f26af4227a33d9932608","sha1":"5baa1edb722ce2fbcd667d357ea41cb03b718cd1","sha256":"b24d37a7b4dbd87689d887d677c7bd6a3f538073a31657e3e570ed14cf5bc8a5","sha512":"66db8ac414b93f8e3f6199fa5bd36966a95870bee7e64e2d4f3b93191da2c33ba5e28848cf6e4d825a6043f836c3191cf72dd7024324e9830414f85a1762d864","ssdeep":"192:cciRf+ARq/yiZpiX6XPcdwpOZc/nXgrb/XMtKLNpT15qkprx6M6lBliKf4n1IBgL:3jXTpI6XPrVwfktKLNpygX6Flf4nyBgL","tlshash":"2042c068462073add93e86086f849ead7f7b024702a0e465e6bfc77052bbd0d9413a58","first_seen":"2026-01-13T16:18:09.404403Z","last_seen":"2026-07-19T07:27:20.61579Z","times_seen":5,"resource_available":false,"data":null}},"time_used":475,"timings":{"blocked":414,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"quasar-engine.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"quasar-engine.icu/lander/fundiquekol_ru_wp/graphics/thumb-854x4802.webp","fqdn":"quasar-engine.icu","domain":"quasar-engine.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://quasar-engine.icu/","date":"2026-07-19T07:21:15.589Z","timestamp":1784445675589,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quasar-engine.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Jun 2026 02:41:22 GMT","end":"Sat, 12 Sep 2026 02:41:21 GMT"},"fingerprint":{"sha1":"97:7F:4C:60:EE:3E:0D:A8:DE:5E:F2:36:10:B9:5B:6E:91:6D:10:3E","sha256":"6B:E0:48:BF:4A:21:0E:38:30:66:15:B3:B9:75:BC:8C:BF:D0:98:1B:5E:78:6C:2C:4F:5B:72:06:35:6E:E6:D2"}}},"request":{"raw":"GET /lander/fundiquekol_ru_wp/graphics/thumb-854x4802.webp HTTP/1.1\r\nHost: quasar-engine.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://quasar-engine.icu/\r\nCookie: _subid=18uumd059v8qv; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIzODhcIjoxNzg0NDQ1Njc0fSxcImNhbXBhaWduc1wiOntcIjkwN1wiOjE3ODQ0NDU2NzR9LFwidGltZVwiOjE3ODQ0NDU2NzR9In0.HeXzcj9G95rLERJGIKfi7MozvEW4X_S_NlKx92_aR6s\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:21:15 GMT\r\nContent-Type: image/webp\r\nContent-Length: 46588\r\nLast-Modified: Thu, 20 Nov 2025 12:53:14 GMT\r\nConnection: keep-alive\r\nETag: \"691f0f3a-b5fc\"\r\nExpires: Wed, 29 Jul 2026 07:21:15 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46588,"size_decoded":46926,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x675, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b809c2cc97ad41bd663820af574044ec","sha1":"4177ac8e1f7de4694fe0b0152fe80c8cfc3bcb10","sha256":"b248b638db142628289c42bb1401da62998586fc54ad4167ea1880d26f226252","sha512":"302d0e691e8f12dd0b0d101b0cc565ee12f03f19e80a499e061bb2c8ad49e0369fcd2d459160d131c33428b209226bc461a61251b5f314d866cccf2fc0c5c9a4","ssdeep":"768:oEp9JzINWBpJ/bpVdQwlDr2YiPUszbd0qQk+6iDZizVeXFdRmdX9T2GoDNd:oCeW/JjpvQK9sd0q9+6gYzODITxCb","tlshash":"ce23f28a126ba07ac54fece0b02f54834a97592472637afc0d0f5a265f542ce2c355fb","first_seen":"2026-01-13T16:18:09.407784Z","last_seen":"2026-07-19T07:27:20.606721Z","times_seen":5,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":231,"dns":0,"connect":0,"send":0,"wait":124,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"quasar-engine.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"quasar-engine.icu/lander/fundiquekol_ru_wp/graphics/female-yNhU5-1.webp","fqdn":"quasar-engine.icu","domain":"quasar-engine.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://quasar-engine.icu/","date":"2026-07-19T07:21:15.594Z","timestamp":1784445675594,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quasar-engine.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Jun 2026 02:41:22 GMT","end":"Sat, 12 Sep 2026 02:41:21 GMT"},"fingerprint":{"sha1":"97:7F:4C:60:EE:3E:0D:A8:DE:5E:F2:36:10:B9:5B:6E:91:6D:10:3E","sha256":"6B:E0:48:BF:4A:21:0E:38:30:66:15:B3:B9:75:BC:8C:BF:D0:98:1B:5E:78:6C:2C:4F:5B:72:06:35:6E:E6:D2"}}},"request":{"raw":"GET /lander/fundiquekol_ru_wp/graphics/female-yNhU5-1.webp HTTP/1.1\r\nHost: quasar-engine.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://quasar-engine.icu/\r\nCookie: _subid=18uumd059v8qv; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIzODhcIjoxNzg0NDQ1Njc0fSxcImNhbXBhaWduc1wiOntcIjkwN1wiOjE3ODQ0NDU2NzR9LFwidGltZVwiOjE3ODQ0NDU2NzR9In0.HeXzcj9G95rLERJGIKfi7MozvEW4X_S_NlKx92_aR6s\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:21:16 GMT\r\nContent-Type: image/webp\r\nContent-Length: 80284\r\nLast-Modified: Thu, 20 Nov 2025 12:53:14 GMT\r\nConnection: keep-alive\r\nETag: \"691f0f3a-1399c\"\r\nExpires: Wed, 29 Jul 2026 07:21:16 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":80284,"size_decoded":80623,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x800, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d59e18de5fd2f2eafd5bcf3a3e5fd781","sha1":"6d8b192b50d8323b5eb9ee760f85e673b92985d2","sha256":"21785915f15957411aeef40e5f9907b67e8cdac78a1fa6d17ec348bb06e6192e","sha512":"5423ee67a35b73d7066f9e66d13804b9b9dfd619c57233d2c8d5dbabba599cacd35208b69fbefedf284e37cf40d500776c7b143c4e626f09f11566d84bf79c5a","ssdeep":"1536:r77G/lGw9GeYtZBIIKwhYDT3yehO6M4OC8PDqwqnog2iivflgCNlY5+XGo95+E:/7G/lGuGeYtLxrYDT3RhOnnrqwGXWprf","tlshash":"4c730111530502e8efe9de219a8b189f11be9488e565f780fc523f6606053fff6b25b2","first_seen":"2026-01-13T16:18:09.498073Z","last_seen":"2026-07-19T07:27:20.621782Z","times_seen":5,"resource_available":false,"data":null}},"time_used":607,"timings":{"blocked":230,"dns":0,"connect":65,"send":0,"wait":122,"receive":62,"ssl":127},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"quasar-engine.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"quasar-engine.icu/lander/fundiquekol_ru_wp/graphics/thumb-854x4804.webp","fqdn":"quasar-engine.icu","domain":"quasar-engine.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://quasar-engine.icu/","date":"2026-07-19T07:21:15.599Z","timestamp":1784445675599,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quasar-engine.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Jun 2026 02:41:22 GMT","end":"Sat, 12 Sep 2026 02:41:21 GMT"},"fingerprint":{"sha1":"97:7F:4C:60:EE:3E:0D:A8:DE:5E:F2:36:10:B9:5B:6E:91:6D:10:3E","sha256":"6B:E0:48:BF:4A:21:0E:38:30:66:15:B3:B9:75:BC:8C:BF:D0:98:1B:5E:78:6C:2C:4F:5B:72:06:35:6E:E6:D2"}}},"request":{"raw":"GET /lander/fundiquekol_ru_wp/graphics/thumb-854x4804.webp HTTP/1.1\r\nHost: quasar-engine.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://quasar-engine.icu/\r\nCookie: _subid=18uumd059v8qv; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIzODhcIjoxNzg0NDQ1Njc0fSxcImNhbXBhaWduc1wiOntcIjkwN1wiOjE3ODQ0NDU2NzR9LFwidGltZVwiOjE3ODQ0NDU2NzR9In0.HeXzcj9G95rLERJGIKfi7MozvEW4X_S_NlKx92_aR6s\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:21:15 GMT\r\nContent-Type: image/webp\r\nContent-Length: 31024\r\nLast-Modified: Thu, 20 Nov 2025 12:53:14 GMT\r\nConnection: keep-alive\r\nETag: \"691f0f3a-7930\"\r\nExpires: Wed, 29 Jul 2026 07:21:15 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31024,"size_decoded":31362,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x800, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2ef78c9f10e484f969022ff1d35e4865","sha1":"b2e297693e558e775366e4ad7ef4870a0f06cada","sha256":"ceb59d39ca853a90c3594e3285cf46b42595bd7dd82166ea38fae782398d780d","sha512":"e172af9389d7cbd98882f5e09e743b85dc2ebf4deff663fb59e6e51163a52697ae64c564cee8e008a1c77c7239d6f3650366429a57f43ca5900f20d0c3d21430","ssdeep":"768:gjrLKUQX7SHoDKrMlyEdmGvcLR0mn8EklKZekn69cn:gWUc7EooSFxlS","tlshash":"96d20265b8ed76525bf306d23cfc42481e1299078faf750a9402e9943f3dcd88baa9d1","first_seen":"2026-01-13T16:18:09.444643Z","last_seen":"2026-07-19T07:27:20.597109Z","times_seen":6,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":230,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"quasar-engine.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"quasar-engine.icu/lander/fundiquekol_ru_wp/graphics/thumb-854x4806.webp","fqdn":"quasar-engine.icu","domain":"quasar-engine.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://quasar-engine.icu/","date":"2026-07-19T07:21:15.602Z","timestamp":1784445675602,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quasar-engine.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Jun 2026 02:41:22 GMT","end":"Sat, 12 Sep 2026 02:41:21 GMT"},"fingerprint":{"sha1":"97:7F:4C:60:EE:3E:0D:A8:DE:5E:F2:36:10:B9:5B:6E:91:6D:10:3E","sha256":"6B:E0:48:BF:4A:21:0E:38:30:66:15:B3:B9:75:BC:8C:BF:D0:98:1B:5E:78:6C:2C:4F:5B:72:06:35:6E:E6:D2"}}},"request":{"raw":"GET /lander/fundiquekol_ru_wp/graphics/thumb-854x4806.webp HTTP/1.1\r\nHost: quasar-engine.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://quasar-engine.icu/\r\nCookie: _subid=18uumd059v8qv; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIzODhcIjoxNzg0NDQ1Njc0fSxcImNhbXBhaWduc1wiOntcIjkwN1wiOjE3ODQ0NDU2NzR9LFwidGltZVwiOjE3ODQ0NDU2NzR9In0.HeXzcj9G95rLERJGIKfi7MozvEW4X_S_NlKx92_aR6s\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:21:16 GMT\r\nContent-Type: image/webp\r\nContent-Length: 48292\r\nLast-Modified: Thu, 20 Nov 2025 12:53:14 GMT\r\nConnection: keep-alive\r\nETag: \"691f0f3a-bca4\"\r\nExpires: Wed, 29 Jul 2026 07:21:16 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48292,"size_decoded":48630,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x768, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f7ece3d4194e8f4f894d81734b05bb04","sha1":"16d1c8e7733bd0ea19898bdbbcd9978f06fbc7e0","sha256":"c4d9cedcaf80746eae65eb023c7078e8a20a82b5ed232373853d81ac4008d40e","sha512":"826ff3874cae8cb47f712e7302c010c4eee8f946bd534b071b26e73e7a9607da8c9137a6e49b7b6911f3373485e8d907f4b9392c731e2e0011c5e4ebb4784600","ssdeep":"768:56HYM6/4FUCrdExIKWISSxR1awHTXqv7lsZhGRuJCOi5:56Rk4vE4rEX/nrT4","tlshash":"3f2302b314fe17e8e367a76646fc574aefc0c174142b4cba8481ab2545e98af132c6f1","first_seen":"2026-01-13T16:18:09.5379Z","last_seen":"2026-07-19T07:27:20.611336Z","times_seen":5,"resource_available":false,"data":null}},"time_used":667,"timings":{"blocked":598,"dns":0,"connect":0,"send":0,"wait":66,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"quasar-engine.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"quasar-engine.icu/lander/fundiquekol_ru_wp/graphics/thumb-854x4800.webp","fqdn":"quasar-engine.icu","domain":"quasar-engine.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://quasar-engine.icu/","date":"2026-07-19T07:21:15.915Z","timestamp":1784445675915,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quasar-engine.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Jun 2026 02:41:22 GMT","end":"Sat, 12 Sep 2026 02:41:21 GMT"},"fingerprint":{"sha1":"97:7F:4C:60:EE:3E:0D:A8:DE:5E:F2:36:10:B9:5B:6E:91:6D:10:3E","sha256":"6B:E0:48:BF:4A:21:0E:38:30:66:15:B3:B9:75:BC:8C:BF:D0:98:1B:5E:78:6C:2C:4F:5B:72:06:35:6E:E6:D2"}}},"request":{"raw":"GET /lander/fundiquekol_ru_wp/graphics/thumb-854x4800.webp HTTP/1.1\r\nHost: quasar-engine.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://quasar-engine.icu/\r\nCookie: _subid=18uumd059v8qv; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIzODhcIjoxNzg0NDQ1Njc0fSxcImNhbXBhaWduc1wiOntcIjkwN1wiOjE3ODQ0NDU2NzR9LFwidGltZVwiOjE3ODQ0NDU2NzR9In0.HeXzcj9G95rLERJGIKfi7MozvEW4X_S_NlKx92_aR6s\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:21:15 GMT\r\nContent-Type: image/webp\r\nContent-Length: 45096\r\nLast-Modified: Thu, 20 Nov 2025 12:53:14 GMT\r\nConnection: keep-alive\r\nETag: \"691f0f3a-b028\"\r\nExpires: Wed, 29 Jul 2026 07:21:15 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45096,"size_decoded":45434,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x683, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4a92c404b37fcf99b41d33dd4e68fb6c","sha1":"2a610307b031b4cd04fae285aa01b88921496749","sha256":"635e67d92e9dc1a960a3f107ef2846fa99d078813f3eb00fb61597114a710cda","sha512":"ed56dc777b93b69fa84ad4a33b805346c8af7c6c29a605f4ad62adc3d307f71a255e916dc774c24d896543606687360de08951e0228575dfff763dbb91591b99","ssdeep":"768:Mntc9rKuaYFkaKh0aZzDqT936QvXDg/lJKVb6AczBYJYz518JySd6:Mtc5zkgaZzDE9zzcJwb6rBYmz5a96","tlshash":"4913f1d3368ed6f0ef0a27345162b8b6b2fc0b5b95e0815fe79c71aa908f593245d409","first_seen":"2026-01-13T16:18:09.421397Z","last_seen":"2026-07-19T07:27:20.620023Z","times_seen":10,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":65,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"quasar-engine.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://quasar-engine.icu/","date":"2026-07-19T07:21:15.929Z","timestamp":1784445675929,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/opensans/v44/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://quasar-engine.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 50216\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 17 Jul 2026 10:28:25 GMT\r\nexpires: Sat, 17 Jul 2027 10:28:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 161570\r\nlast-modified: Mon, 15 Sep 2025 16:31:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":50216,"size_decoded":51029,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50216, version 1.0","md5":"b577bb8d8c25082a9a50522f5ec995e5","sha1":"b3e5bd7b3c40d97eeefad7837daa986857596070","sha256":"186836b74ceac07b2764c07c0379420e3014efb30fe918461c235e0ef6cbc4a2","sha512":"54d26a07921bc6ea7c90b3d810c3e1e965e6dbc227b002cc385c07d2f3878ec42c7580663b8663638d7cad3ff50a8402dd64673aec5452d26d30760fb5c871c9","ssdeep":"1536:fTniLxNYt7dypMNb88NcWU5a91c+D+ZXA:Ti1NYtRyp2g8iW4atkXA","tlshash":"4a33f10bc7bbaa5ec58c1bb5cd55d311a980b0f1c028bf2724230b8537a899c62b65f9","first_seen":"2025-09-17T00:16:45.72892Z","last_seen":"2026-07-21T10:09:12.365436Z","times_seen":53152,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":18,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,300..800;1,300..800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://quasar-engine.icu/","date":"2026-07-19T07:21:15.554Z","timestamp":1784445675554,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Open+Sans:ital,wght@0,300..800;1,300..800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://quasar-engine.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 19 Jul 2026 07:21:15 GMT\r\ndate: Sun, 19 Jul 2026 07:21:15 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12137,"size_decoded":2405,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"7fbc57b14bea8d6561fdb50fc9c3008c","sha1":"9c9ed86aaf4ca655f083c9c80db324d053d3dd11","sha256":"d90d7d2947e295cba230edef392df55e276c2f3c87e04908d093aeb005da805a","sha512":"d70400de88d9d540ba4e871b2c2c4b997f81bdf1765150d65c2ab18a959c9efa4f910735b3873d43e1eabc646c078533972106c111a4838357f866b44cf57c40","ssdeep":"192:+foOfcfLf9L5fMfgqvfZbqGIwV49fOnf+ofjCXXS2asrqAnbqGIwV4uxzBY:+QOkTltULv1qY49GnDu6SqY47","tlshash":"9f420c910417144096835dd233de7e34ee0fa6616044c0baabfd9bdbeecad69a3b435c","first_seen":"2025-09-17T08:42:41.023406Z","last_seen":"2026-07-21T04:49:57.331595Z","times_seen":7286,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":34,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Big+Shoulders+Stencil+Display:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://quasar-engine.icu/","date":"2026-07-19T07:21:15.556Z","timestamp":1784445675556,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Big+Shoulders+Stencil+Display:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://quasar-engine.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 19 Jul 2026 07:21:15 GMT\r\ndate: Sun, 19 Jul 2026 07:21:15 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5772,"size_decoded":1251,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"1249c53e2a7655c2a988a06624e2f4ea","sha1":"f35d28e2427843473c9ef421ac2086f3b6a733dd","sha256":"922717c79d2d9cc878ce69f90dbfb40255e16cb16a19529e457700e9427663a2","sha512":"38d0396268447e49af6f8d0c2de8d48be8cccad36852c23a8e8d2ced0dbbda87c5c26ff82cfe24ac03b14f2307804a1760f26d0e6a5cda1eb115c75a577b9cbe","ssdeep":"96:c5IOEa0IOEaeJc+udIOEaHND5IOXa0IOXaeJc+udIOXaHND5IOxMa0IOxMaeJc+V:c5H0HOaHh5g0gOagh5Z0ZOaZh5q0qOaf","tlshash":"77c13094046ad70c974b5cc363cd7f369d2e222065a0d63d6ffd0d885c0ee29636471e","first_seen":"2025-09-04T12:26:24.291333Z","last_seen":"2026-07-19T07:27:20.614958Z","times_seen":18,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":34,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quasar-engine.icu/lander/fundiquekol_ru_wp/graphics/thumb-854x4801.webp","fqdn":"quasar-engine.icu","domain":"quasar-engine.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://quasar-engine.icu/","date":"2026-07-19T07:21:15.586Z","timestamp":1784445675586,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quasar-engine.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Jun 2026 02:41:22 GMT","end":"Sat, 12 Sep 2026 02:41:21 GMT"},"fingerprint":{"sha1":"97:7F:4C:60:EE:3E:0D:A8:DE:5E:F2:36:10:B9:5B:6E:91:6D:10:3E","sha256":"6B:E0:48:BF:4A:21:0E:38:30:66:15:B3:B9:75:BC:8C:BF:D0:98:1B:5E:78:6C:2C:4F:5B:72:06:35:6E:E6:D2"}}},"request":{"raw":"GET /lander/fundiquekol_ru_wp/graphics/thumb-854x4801.webp HTTP/1.1\r\nHost: quasar-engine.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://quasar-engine.icu/\r\nCookie: _subid=18uumd059v8qv; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIzODhcIjoxNzg0NDQ1Njc0fSxcImNhbXBhaWduc1wiOntcIjkwN1wiOjE3ODQ0NDU2NzR9LFwidGltZVwiOjE3ODQ0NDU2NzR9In0.HeXzcj9G95rLERJGIKfi7MozvEW4X_S_NlKx92_aR6s\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:21:16 GMT\r\nContent-Type: image/webp\r\nContent-Length: 50018\r\nLast-Modified: Thu, 20 Nov 2025 12:53:14 GMT\r\nConnection: keep-alive\r\nETag: \"691f0f3a-c362\"\r\nExpires: Wed, 29 Jul 2026 07:21:16 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50018,"size_decoded":50356,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x683, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9435ae0086f3bc6e1fe1feeb94f767cb","sha1":"d470432b2e7c08f9ca3af1845305f5308b5b9915","sha256":"b6a4c990741f5e5231877702edc39b21b9be397cffe24f6ffe23e5b620a575e1","sha512":"24898802a5f5adc1927ec7b0a4bd5004567784cbe0d5b78d8fa692b0d6974a8ac9a2cd2c48004d9d1c9fbdc063ed1bfbbfbe7a4249cde9d1393c1f235c074d39","ssdeep":"1536:VBDZikRqTLHZ1R4D5AflFDtnpmLFlzSP0XN/NVRssjbB:LrETdP4D52FDtisP0XNlVasjl","tlshash":"1123f26a72cac6c67bc358767510a88253d3ff8a9024881d8d8578499683fe7cfc8775","first_seen":"2026-01-13T16:18:09.432493Z","last_seen":"2026-07-19T07:27:20.605832Z","times_seen":6,"resource_available":false,"data":null}},"time_used":605,"timings":{"blocked":231,"dns":0,"connect":65,"send":0,"wait":120,"receive":62,"ssl":128},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"quasar-engine.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"quasar-engine.icu/lander/fundiquekol_ru_wp/product-images/Investments-2025-11-10-1.jpg","fqdn":"quasar-engine.icu","domain":"quasar-engine.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://quasar-engine.icu/","date":"2026-07-19T07:21:15.590Z","timestamp":1784445675590,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quasar-engine.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Jun 2026 02:41:22 GMT","end":"Sat, 12 Sep 2026 02:41:21 GMT"},"fingerprint":{"sha1":"97:7F:4C:60:EE:3E:0D:A8:DE:5E:F2:36:10:B9:5B:6E:91:6D:10:3E","sha256":"6B:E0:48:BF:4A:21:0E:38:30:66:15:B3:B9:75:BC:8C:BF:D0:98:1B:5E:78:6C:2C:4F:5B:72:06:35:6E:E6:D2"}}},"request":{"raw":"GET /lander/fundiquekol_ru_wp/product-images/Investments-2025-11-10-1.jpg HTTP/1.1\r\nHost: quasar-engine.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://quasar-engine.icu/\r\nCookie: _subid=18uumd059v8qv; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIzODhcIjoxNzg0NDQ1Njc0fSxcImNhbXBhaWduc1wiOntcIjkwN1wiOjE3ODQ0NDU2NzR9LFwidGltZVwiOjE3ODQ0NDU2NzR9In0.HeXzcj9G95rLERJGIKfi7MozvEW4X_S_NlKx92_aR6s\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:21:16 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 57994\r\nLast-Modified: Thu, 20 Nov 2025 12:53:14 GMT\r\nConnection: keep-alive\r\nETag: \"691f0f3a-e28a\"\r\nExpires: Wed, 29 Jul 2026 07:21:16 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57994,"size_decoded":58332,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80\", baseline, precision 8, 792x446, components 3","md5":"374a0f3dc32773c328f7ee5c13559e14","sha1":"405768e117b529323b41ac500dc647c05bf86cce","sha256":"14d9444b4a8224862b8f96d2ff85ebfa3f606b0b93e22c15bed5ffc30127f894","sha512":"537405f9b681d295996448bc01fa4099d456305b6519d7f8e53d050fe0a06b26d94b37a31997680a21594e255d5cc1aa2e51b1bf96ba6ed8c1d749f7d170a0c5","ssdeep":"1536:N5xT6Q21TS3nAQ6BAjVAPGkRn2naqxlEN+XeQq3GsuZd1iNcEp/n:XBd6TwnzWVRn2npnEIXeQ/sg1ad","tlshash":"ca43013df1d313a1fe86c7b79684306623592add39363afd40784d6118322752deb0ea","first_seen":"2026-01-13T16:18:09.468623Z","last_seen":"2026-07-19T07:27:20.616605Z","times_seen":5,"resource_available":false,"data":null}},"time_used":537,"timings":{"blocked":475,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"quasar-engine.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"quasar-engine.icu/lander/fundiquekol_ru_wp/graphics/thumb-854x4803.webp","fqdn":"quasar-engine.icu","domain":"quasar-engine.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://quasar-engine.icu/","date":"2026-07-19T07:21:15.597Z","timestamp":1784445675597,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quasar-engine.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Jun 2026 02:41:22 GMT","end":"Sat, 12 Sep 2026 02:41:21 GMT"},"fingerprint":{"sha1":"97:7F:4C:60:EE:3E:0D:A8:DE:5E:F2:36:10:B9:5B:6E:91:6D:10:3E","sha256":"6B:E0:48:BF:4A:21:0E:38:30:66:15:B3:B9:75:BC:8C:BF:D0:98:1B:5E:78:6C:2C:4F:5B:72:06:35:6E:E6:D2"}}},"request":{"raw":"GET /lander/fundiquekol_ru_wp/graphics/thumb-854x4803.webp HTTP/1.1\r\nHost: quasar-engine.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://quasar-engine.icu/\r\nCookie: _subid=18uumd059v8qv; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIzODhcIjoxNzg0NDQ1Njc0fSxcImNhbXBhaWduc1wiOntcIjkwN1wiOjE3ODQ0NDU2NzR9LFwidGltZVwiOjE3ODQ0NDU2NzR9In0.HeXzcj9G95rLERJGIKfi7MozvEW4X_S_NlKx92_aR6s\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:21:16 GMT\r\nContent-Type: image/webp\r\nContent-Length: 23070\r\nLast-Modified: Thu, 20 Nov 2025 12:53:14 GMT\r\nConnection: keep-alive\r\nETag: \"691f0f3a-5a1e\"\r\nExpires: Wed, 29 Jul 2026 07:21:16 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23070,"size_decoded":23408,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x800, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0253f339a0177d83b435f7d878d3e865","sha1":"7ef8d9bd7fac6ca718a9ff6878a60cfece75a57d","sha256":"5aadb8e082dd89b6d21a1e34cbf78ed467ae0359366d15c2ebd16df0caa64f4d","sha512":"49f3b6e3c64e51bfdb3e34c7df662d3ba79ed3af6676bc89e3839b1080f67a1763d4b5bce47fea83398d2c83973832798bc776089a3e100a59bc0c71156911b8","ssdeep":"384:ElGwQbZETZ5xfDkIQmZ7IDijtqSBkefcwD2MPztmdziNKJ9mrEAhTgFL4+CC3241:d5qF5xL77qiD4Q2Mrtwzi4JeuFLlhUoZ","tlshash":"1ba2e17e7c22d78b13bcab4567107e096f930fe1e82c677525012db8f053646aa18f42","first_seen":"2026-01-13T16:18:09.410798Z","last_seen":"2026-07-19T07:27:20.60223Z","times_seen":5,"resource_available":false,"data":null}},"time_used":606,"timings":{"blocked":543,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"quasar-engine.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://quasar-engine.icu/","date":"2026-07-19T07:21:15.927Z","timestamp":1784445675927,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://quasar-engine.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26588\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 14 Jul 2026 23:01:09 GMT\r\nexpires: Wed, 14 Jul 2027 23:01:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 375606\r\nlast-modified: Mon, 15 Sep 2025 16:30:52 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":26588,"size_decoded":27401,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26588, version 1.0","md5":"0b3ff9e42ed8f3d4aa72ecaf5f58712c","sha1":"5d5fa3b85a1745e867e44a8c6dd3877e651491fd","sha256":"2809606237a64bd9c1461e727f369ddfd77a350e4900fffe64e8bfe16a2b3454","sha512":"d52db55e34a037109cbce299aa0bf2771075c5c6374d4f07c694eba8baa3f754ba44c61bc606843b35ce5185b868639bea806a58b7c03eb334a3e3c9ce0de746","ssdeep":"768:BCn6FX/v/3NEpCoX1GmFP2LbalbkV0Fu3m6JQ:B1H/NEtX1GA3G0I3FJQ","tlshash":"9bc2e171e3572970f96da8b119f6600146c07204f71e8376e4466b29b7b3dbc7dae820","first_seen":"2025-05-29T18:22:03.145431Z","last_seen":"2026-07-21T10:21:38.570423Z","times_seen":12212,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":28,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quasar-engine.icu/","fqdn":"quasar-engine.icu","domain":"quasar-engine.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-19T07:21:14.583Z","timestamp":1784445674583,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quasar-engine.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Jun 2026 02:41:22 GMT","end":"Sat, 12 Sep 2026 02:41:21 GMT"},"fingerprint":{"sha1":"97:7F:4C:60:EE:3E:0D:A8:DE:5E:F2:36:10:B9:5B:6E:91:6D:10:3E","sha256":"6B:E0:48:BF:4A:21:0E:38:30:66:15:B3:B9:75:BC:8C:BF:D0:98:1B:5E:78:6C:2C:4F:5B:72:06:35:6E:E6:D2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: quasar-engine.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:21:15 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, no-store, must-revalidate\r\nContent-Encoding: gzip\r\nExpires: Sun, 19 Jul 2026 07:21:14 GMT\r\nSet-Cookie: _subid=18uumd059v8qv; expires=Wed, 19 Aug 2026 07:21:15 GMT; path=/\n7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIzODhcIjoxNzg0NDQ1Njc0fSxcImNhbXBhaWduc1wiOntcIjkwN1wiOjE3ODQ0NDU2NzR9LFwidGltZVwiOjE3ODQ0NDU2NzR9In0.HeXzcj9G95rLERJGIKfi7MozvEW4X_S_NlKx92_aR6s; expires=Mon, 20 Jul 2026 07:21:15 GMT; path=/\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/7.4.33\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50071,"size_decoded":13810,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (739)","md5":"51c7ca4e80f3c53ef38d3a635369d21c","sha1":"4ceb4f5469f7df34f6e1c90082ba28006405e227","sha256":"8887221543055ff86fb6e8da955ec886a9466c7520a4b5e911f2b4fa2e4326e8","sha512":"2cfcb32c562da172e04cf4bef4e98bbbcca117fc85523da562ae41120b95e39cbeb04953a59b2dde4b49a14d5e11fdbf731cf0bd6664783734dec0550ed13762","ssdeep":"1536:qNxY47Wa/yFAxTUSPheRf5LKgLUj+PM50fsWNrrlvRLWM+ZCp9a6s:qNFXPhetXW50fsWVWQ9a6s","tlshash":"3d23a5a156f610592103e059a905af093bb9c0bbff0fda2831fc196d6fe64a8c92774d","first_seen":"2026-01-13T16:18:09.541258Z","last_seen":"2026-07-19T07:27:20.603464Z","times_seen":5,"resource_available":true,"data":null}},"time_used":697,"timings":{"blocked":-1,"dns":86,"connect":62,"send":0,"wait":359,"receive":61,"ssl":128},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"quasar-engine.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"quasar-engine.icu/lander/fundiquekol_ru_wp/graphics/female-yNhU5-2.webp","fqdn":"quasar-engine.icu","domain":"quasar-engine.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://quasar-engine.icu/","date":"2026-07-19T07:21:15.596Z","timestamp":1784445675596,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quasar-engine.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Jun 2026 02:41:22 GMT","end":"Sat, 12 Sep 2026 02:41:21 GMT"},"fingerprint":{"sha1":"97:7F:4C:60:EE:3E:0D:A8:DE:5E:F2:36:10:B9:5B:6E:91:6D:10:3E","sha256":"6B:E0:48:BF:4A:21:0E:38:30:66:15:B3:B9:75:BC:8C:BF:D0:98:1B:5E:78:6C:2C:4F:5B:72:06:35:6E:E6:D2"}}},"request":{"raw":"GET /lander/fundiquekol_ru_wp/graphics/female-yNhU5-2.webp HTTP/1.1\r\nHost: quasar-engine.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://quasar-engine.icu/\r\nCookie: _subid=18uumd059v8qv; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIzODhcIjoxNzg0NDQ1Njc0fSxcImNhbXBhaWduc1wiOntcIjkwN1wiOjE3ODQ0NDU2NzR9LFwidGltZVwiOjE3ODQ0NDU2NzR9In0.HeXzcj9G95rLERJGIKfi7MozvEW4X_S_NlKx92_aR6s\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:21:16 GMT\r\nContent-Type: image/webp\r\nContent-Length: 52572\r\nLast-Modified: Thu, 20 Nov 2025 12:53:14 GMT\r\nConnection: keep-alive\r\nETag: \"691f0f3a-cd5c\"\r\nExpires: Wed, 29 Jul 2026 07:21:16 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52572,"size_decoded":52910,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x800, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bcfc4bc4865467b5de2504ecea388c3d","sha1":"4cc2c7ef5e55be3375f86674af41163c4dc42f54","sha256":"0c559fb6531ede9b16f5bf2c11260f115e9626b1cec6d6556b4dfbeaa0fe8409","sha512":"ae9f97a6d64f2c1b7c34643858e1bed2cb4eaedd6e48974fb0428d7b1aa3a9979c968f1e9953dc3f59ef1d4457790365ed86df48aefdc080196a92c5b1995f3e","ssdeep":"1536:giLzV7knseaPDz8bZOQ/sSHU1RoJVfPUAWyuH1:g4zV7knsZPP8bsEsaaRKFnWjV","tlshash":"0333028c78781ca2507c2b2cdadfc823326e2496dd290f6b492f95612918a2d5dd877d","first_seen":"2026-01-13T16:18:09.434852Z","last_seen":"2026-07-19T07:27:20.622617Z","times_seen":5,"resource_available":false,"data":null}},"time_used":598,"timings":{"blocked":537,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"quasar-engine.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"quasar-engine.icu/lander/fundiquekol_ru_wp/graphics/thumb-854x4805.webp","fqdn":"quasar-engine.icu","domain":"quasar-engine.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://quasar-engine.icu/","date":"2026-07-19T07:21:15.600Z","timestamp":1784445675600,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quasar-engine.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Jun 2026 02:41:22 GMT","end":"Sat, 12 Sep 2026 02:41:21 GMT"},"fingerprint":{"sha1":"97:7F:4C:60:EE:3E:0D:A8:DE:5E:F2:36:10:B9:5B:6E:91:6D:10:3E","sha256":"6B:E0:48:BF:4A:21:0E:38:30:66:15:B3:B9:75:BC:8C:BF:D0:98:1B:5E:78:6C:2C:4F:5B:72:06:35:6E:E6:D2"}}},"request":{"raw":"GET /lander/fundiquekol_ru_wp/graphics/thumb-854x4805.webp HTTP/1.1\r\nHost: quasar-engine.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://quasar-engine.icu/\r\nCookie: _subid=18uumd059v8qv; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIzODhcIjoxNzg0NDQ1Njc0fSxcImNhbXBhaWduc1wiOntcIjkwN1wiOjE3ODQ0NDU2NzR9LFwidGltZVwiOjE3ODQ0NDU2NzR9In0.HeXzcj9G95rLERJGIKfi7MozvEW4X_S_NlKx92_aR6s\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:21:16 GMT\r\nContent-Type: image/webp\r\nContent-Length: 85482\r\nLast-Modified: Thu, 20 Nov 2025 12:53:14 GMT\r\nConnection: keep-alive\r\nETag: \"691f0f3a-14dea\"\r\nExpires: Wed, 29 Jul 2026 07:21:16 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85482,"size_decoded":85821,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x682, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"63a2bc86ca975da1976d9771878089c7","sha1":"7d3088f730bd4bc690220c129a3bab3d2232a8c4","sha256":"eb33718de0a62d631d0582d02b2fe97acc09bfe817517388c9e90594c6b3b10a","sha512":"63680f67ce3da9ff7e4ddc9ed338a4255489163d4b86d29b479f555f1be5aaa3a7b978cb5dd377c2072e1e9527f2fab1f075f6304c3932211285d612e4cb07ea","ssdeep":"1536:bpxqlvITrDtGMHFTvCJwluenZ2D6MvB1hTzCZZhP9olkKMY8AayiTMj2NIEEq/11:bpxqlKrDtK+MeGBvB1h3CZZhl4MY6yiB","tlshash":"3683127e9afb6478d7ba28b7438c702b74fb4170759005939828fcc2c521e5e066adec","first_seen":"2026-01-13T16:18:09.534723Z","last_seen":"2026-07-19T07:27:20.619134Z","times_seen":5,"resource_available":false,"data":null}},"time_used":663,"timings":{"blocked":230,"dns":0,"connect":61,"send":0,"wait":122,"receive":121,"ssl":127},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"quasar-engine.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"quasar-engine.icu/lander/fundiquekol_ru_wp/graphics/thumb-854x4807.webp","fqdn":"quasar-engine.icu","domain":"quasar-engine.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://quasar-engine.icu/","date":"2026-07-19T07:21:15.603Z","timestamp":1784445675603,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quasar-engine.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Jun 2026 02:41:22 GMT","end":"Sat, 12 Sep 2026 02:41:21 GMT"},"fingerprint":{"sha1":"97:7F:4C:60:EE:3E:0D:A8:DE:5E:F2:36:10:B9:5B:6E:91:6D:10:3E","sha256":"6B:E0:48:BF:4A:21:0E:38:30:66:15:B3:B9:75:BC:8C:BF:D0:98:1B:5E:78:6C:2C:4F:5B:72:06:35:6E:E6:D2"}}},"request":{"raw":"GET /lander/fundiquekol_ru_wp/graphics/thumb-854x4807.webp HTTP/1.1\r\nHost: quasar-engine.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://quasar-engine.icu/\r\nCookie: _subid=18uumd059v8qv; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIzODhcIjoxNzg0NDQ1Njc0fSxcImNhbXBhaWduc1wiOntcIjkwN1wiOjE3ODQ0NDU2NzR9LFwidGltZVwiOjE3ODQ0NDU2NzR9In0.HeXzcj9G95rLERJGIKfi7MozvEW4X_S_NlKx92_aR6s\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:21:16 GMT\r\nContent-Type: image/webp\r\nContent-Length: 51408\r\nLast-Modified: Thu, 20 Nov 2025 12:53:14 GMT\r\nConnection: keep-alive\r\nETag: \"691f0f3a-c8d0\"\r\nExpires: Wed, 29 Jul 2026 07:21:16 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":51408,"size_decoded":51746,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x800, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"04e0f0a80734eedecbcbf2bab6694333","sha1":"22d3f61c67e53042787430a6e1d0cf1890145295","sha256":"a71f14c440c06a703e162f7e8cd6085406d7440ee55000a46914e38c913b5258","sha512":"d95420d88a3774750d5d54c14c1f84a235ba721e3eb1441d9202a6fc0d2cbfeff845490de6191cc73392b1c7c80c33142a0e156ca4f6348fb3afc3cbeba195e1","ssdeep":"1536:oQi1XdDOv5y366aqoAayrIaX2rgmVs8KOk368lTxBC:oQIIvs3IqoArsaEKNfLC","tlshash":"74330233763f9214f074c52da74ed4bf70bb981286d9e2a9bbc0355940e5b1458e4fb1","first_seen":"2026-01-13T16:18:09.557084Z","last_seen":"2026-07-19T07:27:20.600047Z","times_seen":5,"resource_available":false,"data":null}},"time_used":670,"timings":{"blocked":601,"dns":0,"connect":0,"send":0,"wait":64,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"quasar-engine.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"quasar-engine.icu/lander/fundiquekol_ru_wp/graphics/thumb-854x4808.webp","fqdn":"quasar-engine.icu","domain":"quasar-engine.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://quasar-engine.icu/","date":"2026-07-19T07:21:15.604Z","timestamp":1784445675604,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quasar-engine.icu","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Jun 2026 02:41:22 GMT","end":"Sat, 12 Sep 2026 02:41:21 GMT"},"fingerprint":{"sha1":"97:7F:4C:60:EE:3E:0D:A8:DE:5E:F2:36:10:B9:5B:6E:91:6D:10:3E","sha256":"6B:E0:48:BF:4A:21:0E:38:30:66:15:B3:B9:75:BC:8C:BF:D0:98:1B:5E:78:6C:2C:4F:5B:72:06:35:6E:E6:D2"}}},"request":{"raw":"GET /lander/fundiquekol_ru_wp/graphics/thumb-854x4808.webp HTTP/1.1\r\nHost: quasar-engine.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://quasar-engine.icu/\r\nCookie: _subid=18uumd059v8qv; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIzODhcIjoxNzg0NDQ1Njc0fSxcImNhbXBhaWduc1wiOntcIjkwN1wiOjE3ODQ0NDU2NzR9LFwidGltZVwiOjE3ODQ0NDU2NzR9In0.HeXzcj9G95rLERJGIKfi7MozvEW4X_S_NlKx92_aR6s\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:21:16 GMT\r\nContent-Type: image/webp\r\nContent-Length: 41880\r\nLast-Modified: Thu, 20 Nov 2025 12:53:14 GMT\r\nConnection: keep-alive\r\nETag: \"691f0f3a-a398\"\r\nExpires: Wed, 29 Jul 2026 07:21:16 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41880,"size_decoded":42218,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1000x667, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d25bbd5f10667d596e1a0987e4473f2d","sha1":"aafa99f636c07c17c7e69f36d0fa1553898bd52a","sha256":"e1bf44c5b1796cfc0a43fbbc013f9bb2a3d1241e7380244ffa5a974288f73732","sha512":"519fd16168b0873b6b4bcb680c5e40f874d756f5da943eb0f886bcb7ca94a13ac2643671a4c8b53c2797e65a692c1d9b054525e77fc6c86eb5f8ff53aa22470a","ssdeep":"768:SqjWZQG0N0nQKYpK2RytoQ28Cp2LhlmHW+nC/TnVRqWwI+ItKP+of:XjWZQvF2N29yyQYWwI+gKPv","tlshash":"cc1302d39c1a2014e33e268e48d0e4adc865ce9f6d34e703ba1d6051de42d0b46d77fa","first_seen":"2026-01-13T16:18:09.554519Z","last_seen":"2026-07-19T07:27:20.607646Z","times_seen":5,"resource_available":false,"data":null}},"time_used":599,"timings":{"blocked":229,"dns":0,"connect":62,"send":0,"wait":121,"receive":60,"ssl":127},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"quasar-engine.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}