{"report_id":"d76efcbf-d723-49e7-86b4-f5bf848e0761","version":0,"status":"done","tags":[],"date":"2026-09-15T13:39:38Z","url":{"schema":"http","addr":"rndyqh.cc/","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rndyqh.cc/","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"title":"AMM","dom":{"size":8811,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"b2b3ad4ddedfeae5d05144f4ca9db8c3","sha1":"e5b0a78e7b042076218ec14b819ab5fc6ad2fe15","sha256":"a204e3264b8993b58e759e9013045f9af74d12919249dd8c7270b50e39296888","sha512":"e6ceffaa8a409c40e9a6c825fa92171a097f501aad65bb17b412d9b78cea312a6606bbc22689cd0cc4fc2da2157fd45d6fdfe37033eefb9121f2c6b37f818a69","ssdeep":"192:osIc1WH1ZjV7mwFedHX9ckqb4mr+/WoZ6/zHzRJs+NrKyZvHvhvavov+vnj:osIc1UmwFeNvmr+uosLHvsyhvHvhvavJ","tlshash":"d80296334cb340563c128095ab6e7b1daed5e113961fc916b8dc69d4cf82dd68a2bbcc","dom_hash":"domhashf0b8d38a8caa16add7eb64b12ca6c132","first_seen":"2026-09-15T13:39:47.941145Z","last_seen":"2026-09-15T13:39:47.941145Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rndyqh.cc/","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-20T13:39:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.moyu-a15.xyz","ip":{"addr":"104.21.26.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-09","domain_rank":0,"first_seen":"2026-03-13T15:05:56.044723Z","last_seen":"2026-09-15T13:29:18.446339Z","alert_count":0,"request_count":1,"received_data":9199,"sent_data":641,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"wss.moyukefu.vip","ip":{"addr":"47.243.31.15","port":2020,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2024-07-04","domain_rank":0,"first_seen":"2025-06-12T09:10:33.809538Z","last_seen":"2026-09-15T13:29:18.707794Z","alert_count":0,"request_count":2,"received_data":362,"sent_data":1308,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"rndyqh.cc","ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-10","domain_rank":0,"first_seen":"2026-09-15T13:29:17.60993Z","last_seen":"2026-09-15T13:29:17.60993Z","alert_count":83,"request_count":83,"received_data":5213543,"sent_data":72769,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]}]},{"fqdn":"static.moyukefu.vip","ip":{"addr":"172.67.189.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-07-04","domain_rank":0,"first_seen":"2025-02-26T17:18:15.819872Z","last_seen":"2026-09-15T13:29:18.28216Z","alert_count":0,"request_count":20,"received_data":596964,"sent_data":10422,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.moyu-a20.xyz","ip":{"addr":"172.67.166.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-05","domain_rank":0,"first_seen":"2026-06-22T10:55:36.09973Z","last_seen":"2026-09-15T13:26:26.888486Z","alert_count":0,"request_count":1,"received_data":5378,"sent_data":489,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/js/bignumber.min.js","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"220b87873ab81287f915af82e3ba9a33","sha1":"ced2ebc27d644716effa64115643dd1770ba04eb","sha256":"266103c2cedfaf94d60f5a638555639fb2b86f2b66386660fd3d057715ebf463","sha512":"ddd12920edadffa6de43bed4fda62056a26999291cbd6b9314ee1684242b4a2dad49057753e938a65c122a554ec4a89bb2777a67fd1ebe60a5b0c9782d567b22","ssdeep":"384:W/NxaJsOM+a9fxrSZwieoa+gPIbMPzvP22niiXuB/CeTa4pLG950/GrVh:0xdxcZ9epPzP2/VlTDiX0/6","tlshash":"e582fcd875e3f09d62ff20e100e75443e17a9f0ba84c1976a2509496b831ddba2aff35","size":18565,"data":"","first_seen":"2023-03-07T12:03:15Z","last_seen":"2026-09-15T13:39:47.981301Z","times_seen":830,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-09-15T16:52:13.661744Z","times_seen":756344,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/js/abi.js","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7686cb141a314863e4225a0459e04918","sha1":"d0c3408a5a3c1f7db38f9796eea2ae6d31f707d1","sha256":"239eaf9fdf247ae60f252352b6750733a3270b84075c455ad87464a935c15ac9","sha512":"bc8a2a470e2eac3dcfa4d78928685a2c49011e061f76efa494467cd169b7215b8c720d28645c7fb9fe7778ddc91a812fed8968291a80fc06ac307f53e647fd2f","ssdeep":"96:p8OOjUOj8lhj8VLMj8eLMj8HLMjMRLSOjtOjylZj+zjMtLMjUjVJMjqJntHeHwIX:AI+Z","tlshash":"a2a160b6e42e9c874889269419e90613756041a38ccdad037a9c463d5feec2f947f71f","size":4831,"data":"","first_seen":"2024-08-21T07:09:15.373416Z","last_seen":"2026-09-15T13:39:47.994083Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a8ed4b65007655ee40f3a0458aec31e5","sha1":"f27904d1efec760f689791b3e759ffefb8b5dfbc","sha256":"d04f4462c6dd9d66c10c7dfe07ec4709dcfb5990c22e8ae012b8f8d84458be36","sha512":"8b2a06e4ec3b51b56cbe7ca5621002a1e4728763339f9fd9a1844baff58c43cb17fcf389bd7ca4d7ad69e80eb28252f68d8e6fff388a4cab1b9cda6087d17c3f","ssdeep":"","tlshash":"a2e068c260a6294c02208016304ac1031bb608729ec149612c4c67a58fb9f4bc46e859","size":348,"data":"","first_seen":"2024-12-09T08:47:24.134165Z","last_seen":"2026-09-15T13:39:48.009254Z","times_seen":160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c4c93e0efdf3d3bd9aebb27f07fe923d","sha1":"e655b8f128124484b809043a9f85e0dd51343ab7","sha256":"59aa4a4b01674eecd28e29e3a7d04d1455a6b5211f91abda790f3efbe53555b3","sha512":"0355b0a20bd8bd3bfa17d155b0b82f7de188992bce49897b9e48f778988cd61c6f57b24a89187a4d5c6569d6a96c3d769517e6a401ce103b6e4c87ffd4f796c8","ssdeep":"","tlshash":"5a7000b0008328320000088e0a820803200a000802283022228002a00080c082230008","size":19,"data":"","first_seen":"2023-03-07T15:44:29Z","last_seen":"2026-09-15T13:39:48.009835Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3e66c76ab82594522b7535abec2a1387","sha1":"98a560567b0ddec316e7aa4bf2d5b365abb963b1","sha256":"3923ac7eb007ca4928962132b0f0c04f85072b24177d5aac3cf9dc3ee92b6e3d","sha512":"cd4f9c7b424074dba161d333a664b3593ba3a2526eb703f525314959f8df480fa9ebbba8a66bf7fd84a10b65d89c87a61a4e505b5b612fb02d86778e86ada6ad","ssdeep":"","tlshash":"7d810d5bf1f6542101b370288f2f6145b5b2605b2a4adc18fe8d1bd84f9da7dc1a6b44","size":3974,"data":"","first_seen":"2026-06-25T16:51:49.055644Z","last_seen":"2026-09-15T13:39:48.010445Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"05b585efc694396d763545bfce12740f","sha1":"c6d10db466e07b479ae7e0797d0cabfee11a338f","sha256":"931f448178fae44e75b503f51b86e43ec779feec4ee14d4b0a88a635ae00740e","sha512":"1dee6df934d35d60f65a865750377da777fb3b64c31cb936a7372f3d8867cd1d988229e1bc424a2fd978dd07f95fb02582784ef683c4913dd007b6f5739e2b18","ssdeep":"384:qPY1s8o13dl3sDPU32ZPc8xp5cubTRUe6BUofhQY0LVnV:qPOo1Nl3sDU32Z08pcuPCeV","tlshash":"41d28304b5f414151727707e597f3089a978b10b010eee44bf9da6e08f9ae3ae9e37d8","size":30749,"data":"","first_seen":"2026-06-25T16:51:49.05655Z","last_seen":"2026-09-15T13:39:48.011507Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f8bfa10843436c3406e4f85584a6f89b","sha1":"9985238b7608916579823e64b24b0bcc32ee4e5f","sha256":"274d9cc4c9811d5393f22e5ce0fbdcc4bd891eac252e8300f2c6ca8e802cd58a","sha512":"9ac168bafa50b95643724f59cf5adc8fe1c93df03ade4a9dffafeaace1f6851935c33579daca3443a4e6e9c2e562b151083cfc6792382bc02b782e9bbe7724d2","ssdeep":"","tlshash":"4401ff1971eaa8200877306c8e6a12462422a08b175dee2cbf5c22d4df19bbcc7a2306","size":848,"data":"","first_seen":"2026-06-25T16:51:49.057457Z","last_seen":"2026-09-15T13:39:48.012143Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/js/ethers-v4.min.js","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e66b864a27c5961a702e18683961608","sha1":"febc146fcf4c2d021f8635670ce4b2f35232e8e7","sha256":"2f426ca96f459f9229cf53665db2de4ec82d15ce49f767915378d87f733ccf9a","sha512":"917e5aa6a7aa64f2dadfe49152f1f6f3107cdc8bce974ed47e364bfcb060267081cfeb2f7cecee4a458828ed822ee9729d97d1bc2f8b47335553e1925ee4eecd","ssdeep":"3072:IMVv7CFGHyjUW15Co8psvoZ0pDrDQciPOP24fuayKqlKT4D2no:IvBfiqDQvPOP2TaytwTg2o","tlshash":"c0541b8472a0b062939629a4142f200bf27bb92d588d046cf745d8f77df99c99a3bf35","size":303580,"data":"","first_seen":"2023-03-07T14:42:37Z","last_seen":"2026-09-15T13:39:47.954765Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.moyukefu.vip/static/common/js/reconnecting-websocket.min.js","fqdn":"static.moyukefu.vip","domain":"moyukefu.vip","tld":"vip"},"ip":{"addr":"172.67.189.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dec3415f9f087d45dee5cbe16be01eb8","sha1":"710efd35c1e618ae1f60e3bf705b19c83cb945e2","sha256":"da24bffc7a68b97b735cd4aa603e028393d28f3b188f2ab930936a48396ca12c","sha512":"fa7f0f632dfcb396d98d22baaaea72f09ba44eeb6a121f1c50740113a0737256484a30ad2bf2ef8983bb3542bfcd0919cb7bf3874cbc4c7453e201685f2c6b8b","ssdeep":"","tlshash":"a351320cfa7a21b2a3e75071a01fb226732150b79f1107cd63619af45b79dc0267af9e","size":3099,"data":"","first_seen":"2023-03-07T15:44:29Z","last_seen":"2026-09-15T13:39:48.004132Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.moyukefu.vip/static/common/js/ai_service.v2.js?v=1","fqdn":"static.moyukefu.vip","domain":"moyukefu.vip","tld":"vip"},"ip":{"addr":"172.67.189.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8319f704ba5ab5df275740eef607f0ab","sha1":"4e25a2da705fa9511aeafaaa823b00777c7f5fc3","sha256":"007bf4875878557fac4aa27a77d21a1e5e644e22765274a8033ecc5a246febbb","sha512":"0d1235983b7c9b7b4eff104a148a1ba740971ccf14589449af6b883c3106ba43584bb02acf625568772963d2f559e8444f332920e6bae2894d51b41751944d0c","ssdeep":"192:QlNHvI3C5lyVfFfGQ4vIciNTN901E1Moz8IUpo3BaLPqN7AV6s9EUQsam:HSrvINTN21E1JIv2YqN7AVzF","tlshash":"425264387deb2853d51370aa9fab615c31748147855acd047e6c83aa2fe8b34135afbc","size":13279,"data":"","first_seen":"2026-01-31T07:13:57.382906Z","last_seen":"2026-09-15T13:39:47.958803Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.moyukefu.vip/static/layui/lay/modules/layer.js","fqdn":"static.moyukefu.vip","domain":"moyukefu.vip","tld":"vip"},"ip":{"addr":"172.67.189.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"45009cc8df8571cab2899ef4b4e88c14","sha1":"eb8bffd9e15522e0213e7b000d9253136537f131","sha256":"a79171506f7edfe59b24dccf0f5bb54d5d6d38ac804e3134fd04e278dc136cca","sha512":"97801b2e38ca11ba6b2e32bd500027e5bb7023479044d75009670169c199db51963e011931ec816d45de9694f8bbff7f2176715462a89aedcfd884ddbc37bbc1","ssdeep":"768:YGoEJ2gnJwDR9c8xGhyIWAkEA4VjrLzadrjKCCJ:noEwgnq9cHTVjrydrjKCCJ","tlshash":"78f2740a69e03879d133f336cd6fa909f1b21a2b53424815ba7d10780f7586456f6fbe","size":35187,"data":"","first_seen":"2025-02-26T17:18:19.555614Z","last_seen":"2026-09-15T13:39:48.004697Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/js/layer.js","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d128fbe65fa17f4ed6a5e2d627278a58","sha1":"9ea612138bca130087bc9fa8b0928a3b22fd4260","sha256":"d1375ea074b94b3a69861b9c7bda27ca759f4770ed631f8a6c663fab16c4c21a","sha512":"315f4427bc5aeba724074e1ec0e12df9b6d30985c7f5758af9b9ba37f51b81fa7758cb737b145fb67f82a198af2500671d2f83bc7253a62dd11d04cb39308179","ssdeep":"384:BxWCih5o93iKTtXSt/KrGriu46K+Lxz6PTElH0jlhpPtwo:BxDiW3i0QtvTKiFSb2o","tlshash":"32a2c76a754034976323906ad10fba0b31b11d24d7078128f22bb4be1dbcd99a2b7f5f","size":22696,"data":"","first_seen":"2025-10-07T03:26:06.270688Z","last_seen":"2026-09-15T13:39:47.950749Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/js/lang2.js","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"262b1e820d332d2db99c0a61bf464663","sha1":"79db9e235ffe8b6dd18beab6d8d164c288d6ed3c","sha256":"d9fa8156827a438971d8f1daacbdae62aed864de13525012b38d92bb4c92d3d1","sha512":"44c30846fbcd3f330e64afbe890fc0d7f7571d5d404fd6d697445e7065a6e4f0b9f4d1d1232d3f69d46d2f2a7b4eb15218119158a843d3a8c47ea4aef028f52e","ssdeep":"1536:Ik+5ysn90a77kA29BtcF76OZEcsE5hRwf:Ik+5pn90I7kA2q76OZlwf","tlshash":"e45371fb458b1485244e720ca5cd390ba52941bbaf1632453bddb1393fce09ec5bab6c","size":65280,"data":"","first_seen":"2026-07-28T18:18:20.008446Z","last_seen":"2026-09-15T13:39:48.006406Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.moyukefu.vip/static/common/js/jqueryWeui/jquery-weui.min.js","fqdn":"static.moyukefu.vip","domain":"moyukefu.vip","tld":"vip"},"ip":{"addr":"172.67.189.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c7bcbbeb838eabe8801befbb54f177c","sha1":"2c486e904bebe49b0bcea8e5d0b019533699a7a2","sha256":"e07b9a34158e94ba73df9e89768dce0e2846c984635a6fd4c4d7539c822b6bce","sha512":"dc5a2a219f4f7b3a29da600600c4666c18d0a9c3f77e256e3222387976b779cae0adaba0adfc72fb3991730c7a34b3f390fcbcf47977ca316fc5d94ca6de1f16","ssdeep":"1536:beyBPd2XiZAazT8DOCOB/j2kNleVRrI5CVam9P:beyBFTZZzfNleVRrI5C1","tlshash":"2d83f68e7651b63253f7217881af02052233a926644754a8b96ce8d51efcc4da3bff7c","size":84329,"data":"","first_seen":"2023-06-17T21:56:24Z","last_seen":"2026-09-15T13:39:48.003044Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/js/clipboard.min.js","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ada63b6e3a8a44f2b90b59ea02bcc76","sha1":"d95e207a62c5c223610cad1b3a8e01ac96a185ad","sha256":"6a570be3a0d236133803873c360529709de838739848397c76c9186ff6bf3bb0","sha512":"d9f26d0c63d1f4a7397d1e3ef622d6121f55da2c6685a45aeb647e53a32cea0ba833482630cb9b46a0ef25bc68c8c820378b8dbf8d3566956c2e114dcaad1269","ssdeep":"192:YCHX4U7153pB7BoWsBwuLJoHu4wamacW/C8ZU10QkAVJNeSjSUzo:YTe36WsB9LJqwPVWacJQnjSUzo","tlshash":"95229658729071b196e760a9513f424bf332a469609a80d4b239d8e1bdbcdce5427f38","size":10488,"data":"","first_seen":"2023-04-08T20:30:18Z","last_seen":"2026-09-15T13:39:47.944078Z","times_seen":116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"a399f5e88b3326a934fd6d6cc26c17e6","sha1":"edf7b3780c96fb8558236f673e8d094b6fcb8033","sha256":"220760f32dae60c534a24c99e96b36644f07679087bedd28e23db064763f5d26","sha512":"1fd166dfed8cc32f7d2ca57fac56ab7709f44dc1203c26505962b292ef4c0030f03ed129d8574f76e81da05dcdcb5bea29d1b7beadd624c20115344d60d22333","ssdeep":"","tlshash":"da800082a33a028002c8c0000cc80f022030082c02c0028cbc3880e000aec8820280b2","size":28,"data":"","first_seen":"2023-06-13T15:00:14Z","last_seen":"2026-09-15T13:39:48.012714Z","times_seen":8821,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/js/evmchain.js","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"103cf7a3766e010c9499d24721aaf984","sha1":"ca4e27f04aa5be91c32e0942583f39bca5277a1f","sha256":"d93c05813c158faf533a332c1b49f2a9f0432e0454fdefd1a2c9f11428b7a4e9","sha512":"373140cc684cfd8e2aaaf34a7da1e0a5f4bffd39a86c6979203068f9e2991f33be45968c05076b2d06042de30952e9076eb054c27bae0d4d5c91f94db5923b67","ssdeep":"384:3LyedkdCfFDM33MPH0mz7Cb4h/iUJbstZ4xWXZrTOHnf+RJvDqvGKifPauiy1Bes:SCtC8bh9gWe3FptN9Ra6SAzjQiKTsDn","tlshash":"daa2d9f3d354a98e8b7990cc1ce93719c1078c89c45e41feea964aded8f6067a119f23","size":22657,"data":"","first_seen":"2023-03-07T01:24:55Z","last_seen":"2026-09-15T14:15:47.95068Z","times_seen":736,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/js/w3model.js","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aac4569bbff2c557800aa919fb86114e","sha1":"d19621d1d38e488b417c28b3efd879b481566d80","sha256":"5851c751870f4d385689f84d0e346c92234a1c7776f98099222eb30565370864","sha512":"c7498c4cbc7f499a907eadf8de3895070e007505654dd31579067b2de7075a0fb5a1acf3b869d68e0e31ca3bd3c5b99c27a14e6cdf5401d5c25e546c579753a0","ssdeep":"6144:g76dr/jrE/0NNWS9UO2/HP2jz05O1HaeJ3qZEZDj9+b+Q88MzfFNo8vq5:O6d9DZzaneYZEl5+qQ8zztN85","tlshash":"8394aee93582f42157f366b740af1806b33d691b140c88a0f255edd5e8f84aa913bff9","size":429874,"data":"","first_seen":"2023-03-07T12:26:47Z","last_seen":"2026-09-15T13:39:47.986234Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/js/web3.min.js","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"50b331ceab5cb032bac85cf6eaf4c513","sha1":"9b4f1751f59e6fb18b266d96adefff3b32ecdf48","sha256":"efeff3f4191acfc1a20fef7e327521c4a696edf0dca7a2d86d4045a49a5cde17","sha512":"4bf3be807e6ccecffefdd532966d79269fc9649b08a169694953304fac804b8461ee46b36915314b3141c27a84dbf8c1a6172bef1a2f4d025aa29884640ce2f8","ssdeep":"6144:9ggS4Whgg8WMRelCSJ70OSJeXiqP70X+C8kSlXnfCM7XZfcwJ4ywB8b2IRQFwfCD:K/K+C8R67GFCamsZKpams2JKAF","tlshash":"1c55d9c4b6907061c3666a90442f900ee33ef96d384d016dfa57ecf77cb8a89552af39","size":1337884,"data":"","first_seen":"2023-04-20T20:54:22Z","last_seen":"2026-09-15T13:39:48.01349Z","times_seen":159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"973e831379b94d060af9b2e9bc78f49e","sha1":"83448e2204ac7f3afafeb07ffa3d2b92a7e31ce2","sha256":"814148cbc3bea44c7786594a53ca13a6326ad08dfd73abbb11e82c285a15109b","sha512":"45e6d9b25a24e2c9a1c34173df38587cad6d7d85753f8211d4e0dff58e73be9e4cb99724024ead994c6cef70aaa958f9f15fb628bc9d83a52b39ca44844f8080","ssdeep":"","tlshash":"5c90027528c2201060173256547658e601308030d4588d51010498a1985543156065ac","size":49,"data":"","first_seen":"2023-04-11T21:45:58Z","last_seen":"2026-09-15T14:57:52.700159Z","times_seen":39373,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/js/lottery.js","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"963d305e29398f9a04d9a3b457f76860","sha1":"a42b9f877bbaca04c8281adb273bfa0bcbf90942","sha256":"7930fcf9de55ffdb0d0ec986eb9c35c3e4c2a211531e4f8b9f0f89b2adce106f","sha512":"366accf3f6990c4497654dfa20ebc89cc6612446b814b60cc7a48829654e2636c65f50c2b42c1b5a6cf2ed9e190d40bce34a091b68c98278d5013d76c8e1698e","ssdeep":"","tlshash":"7541520ea8f719b1597330f88abf1151a161c0231208ef28bd0d22d84f4a57d97a67f8","size":2026,"data":"","first_seen":"2025-10-07T03:26:06.193078Z","last_seen":"2026-09-15T13:39:47.953094Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.moyu-a20.xyz/index/index/chatBoxJs/u/6a95565417a04?lang=zh-tw","fqdn":"www.moyu-a20.xyz","domain":"moyu-a20.xyz","tld":"xyz"},"ip":{"addr":"172.67.166.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"09e8b1055b9497dbe0c681f96344b09a","sha1":"c0e2256c81fe6bc87b959bd1be37853aae3fb3fb","sha256":"db6a1539900b0d6ea631df147c58deab13b180f154a58e75ad98aa41b6f09b91","sha512":"e6604de2933d3f39a166d099071ca70a6cc091898942fe0d28044a1bf72d0371876f6ce2aa41616f99622395fce779f0d2c3e9b341666d983f0c3ac708b0256e","ssdeep":"96:naLKMyC0YvGPrSjF4rXn0MNgkGIg2d/nMHF3n:nNBqGPu2TckGIg2dvMl3n","tlshash":"84a1833b01fb0c7262a734ab9fef3944792290131526c8247d6ccaa59fcccb94464b7c","size":4761,"data":"","first_seen":"2026-09-15T13:39:47.96053Z","last_seen":"2026-09-15T13:39:47.96053Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.moyukefu.vip/static/common/js/jquery.min.js","fqdn":"static.moyukefu.vip","domain":"moyukefu.vip","tld":"vip"},"ip":{"addr":"172.67.189.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9c7afd05729f10f55b689f36bb20172","sha1":"43dc554608df885a59ddeece1598c6ace434d747","sha256":"f16ab224bb962910558715c82f58c10c3ed20f153ddfaa199029f141b5b0255c","sha512":"3dcae1ff6e98c64e3586be3eb14dd486c51f7d4e9fa1b8f9a628be4fbb6a9ab562f31f9b50e16d2e0c72b942bdbe84eee8e0ef87fa730db1428b199a59d88232","ssdeep":"1536:/P10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrJ:++414Jiz6fh6lTqya98HrJ","tlshash":"ca83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","size":84345,"data":"","first_seen":"2023-03-07T01:06:48Z","last_seen":"2026-09-15T13:39:47.982467Z","times_seen":26592,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.moyukefu.vip/static/customer/js/ai_service.cli.v2.js?v=1.1","fqdn":"static.moyukefu.vip","domain":"moyukefu.vip","tld":"vip"},"ip":{"addr":"172.67.189.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"95691091c216d37ff4ea74af75221e22","sha1":"913b424b8f3d35987daf8c2d21c671e4584abbf1","sha256":"df809729bb6531aa0c1058828ecc9a04d0002d7f499e085c4086d752a480baec","sha512":"1d2a0d506ec7ce9b1fd656cf9fc56eef85df546acfce5632507b4cc29965364e2290f7b9f40a7796c1a9908093adb20d0cb043f4d652d5846e1d3f9682af2f78","ssdeep":"768:a/S6cRCWaeiaMVoV6NV1DV4VaIS8AgFV5azVPqfp9Q:a/S6cRCFaMVoV6NV1DV4Va3VChi","tlshash":"6913620d61f71461507334bd5fafb404a926901b010dee24be9d9bc4afc89bca6e1fda","size":44172,"data":"","first_seen":"2026-01-31T07:13:57.368616Z","last_seen":"2026-09-15T13:39:47.992364Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/js/web3provider.js","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecd0acbd0f232a69f443beec9cd608bf","sha1":"1bbb9cee94841cece182da632767fa43970eb013","sha256":"54335e7705b99ad9f87bd7296dfe88f6c8b78f16703f9ecc27e43a62b5be765e","sha512":"e632544468f0d6d6e6ff8dade483d70f2f3ba38dc222a1e7f1c1fdcdb7d2a1615df52fce2d909ff654d71b942306a50d1e62fdf430628e527e70ead3cc6dea68","ssdeep":"6144:W47GR6PGawV6G7MzqnTaO8V4bHEzQva4qUY2OhwznWoxACNvmsZ4KDGAmq+8q+2Z:XGwjw9nHAamsZ3GAOqwJGPv6","tlshash":"bc15f984b664b061839a65e0043f540ff27aba2d780b44bcf654d8f6bcbd989553bf38","size":955210,"data":"","first_seen":"2023-03-07T12:26:47Z","last_seen":"2026-09-15T13:39:47.989871Z","times_seen":514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/js/jquery-3.2.1.min.js","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0fca26b5a37a66d68d0f4406976be4b5","sha1":"ee000eb654b3bd37185665d3901e93b34ce1aa52","sha256":"8c2812ded6436715279f8fd8db58de307aa39ab0296fe3cf0e879067c51e9b18","sha512":"cf010995991a8f8b50cfb4b466d3b457b0a6addc4f2fd96c48c33d40ac251de400894828ccd99662b13fc9ca25c676ef0aee05faa4910530ff9996d03c411645","ssdeep":"1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp94:t4J+R3jL5TCOauTwD6FdnCVQNea98HrF","tlshash":"7a93d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","size":97162,"data":"","first_seen":"2023-03-07T01:06:51Z","last_seen":"2026-09-15T13:39:47.971304Z","times_seen":8304,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/js/qrcode.min.js","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"517b55d3688ce9ef1085a3d9632bcb97","sha1":"2d06c1f823f34c19981c6ae0b0eb0f5861c5e14b","sha256":"c541ef06327885a8415bca8df6071e14189b4855336def4f36db54bde8484f36","sha512":"08d80845e706a3b9e985b799d3849cd7791ad3ba5aa9d793bb4591d4833890d7299810144874905f416c94d8530da74be0ee520066a91ade05a1da8bf0ccb498","ssdeep":"384:WRQ2kvcAAdTRhQLThP2yO9/9G84U5xOiKQYHHHsglDep9m1yfB8dKLMyA+LyUyy9:xThP2V/9N4U/gQYPXa8CAPLyrZ","tlshash":"8c92c7e4f36542f6915e6cd4283f104b64a0a4636c1490acbfb5c1e6a9f8fe0647af74","size":19927,"data":"","first_seen":"2023-03-07T01:14:56Z","last_seen":"2026-09-15T14:49:16.144558Z","times_seen":72779,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/js/scroll.js","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf35d07d8e8152817269bc6fcb32c80c","sha1":"115bebd455b9bbc3de9a9d23ac1c35c210cdf47b","sha256":"b9743de589958ed4392a78726e1432fcc552687e08385ec1b8276de991bead7f","sha512":"52c51160f11ad2c0dd37e997923dd07b9e90888e810f66782ad9283f4b0b4fa837341fa21411dbd7297cfa77274ecb05b91c36ba22ad872099ecf635701f9d04","ssdeep":"","tlshash":"53119bf4ff5e209a6532306784af50c9782e94339c0648277d9459f94cf9d0ca27af39","size":1032,"data":"","first_seen":"2026-01-18T14:58:03.467977Z","last_seen":"2026-09-15T13:39:47.944932Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.moyu-a15.xyz/index/index/clibox/u/6a95565417a04/t/1789479529/tk/80c8c1c231f1b55c379545d44003467f?lang=zh-tw","fqdn":"www.moyu-a15.xyz","domain":"moyu-a15.xyz","tld":"xyz"},"ip":{"addr":"104.21.26.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"717f3df6e43a161b954f2ee4059f2bf0","sha1":"22afdbe75e707d6f6e4743ef8960000dbf7522b1","sha256":"6b585987bf4931435108959d84dd7f4ed8db1fd80df5d29aa48644752341a36a","sha512":"a0e3a7f17684799798af46014c3ae4e3b6cdb334145fd2385e9e450879d891b9935891a0331f3543631fc746d72fe8731cda8a6268f2938cc5f9debea77d25fe","ssdeep":"","tlshash":"7a3198b2cdb380e13c3a00282b9fb94439d91637024aca127d5cead45fc199b924ebc0","size":1670,"data":"","first_seen":"2026-09-15T13:39:48.014749Z","last_seen":"2026-09-15T13:39:48.014749Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.moyukefu.vip/static/layui/layui.js","fqdn":"static.moyukefu.vip","domain":"moyukefu.vip","tld":"vip"},"ip":{"addr":"172.67.189.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"055cb5361d0dadf75de67f6875def943","sha1":"97ddce827fedb8869a9d0248a16b70c14da2a8ec","sha256":"91ffac1a9d64f3dae4e8091b4feea25981e750d279cb71491b25dc24b33ecaf2","sha512":"3c074594a667484aa78b2227f834c4bebab07a6b4bd795f94570d3e3da911aa48275e13c54e1c6848cd2ec1fbb2bad5cb104e9a6bc1f71c967e93dfde62aa9b2","ssdeep":"192:TDTGeNtb7/j9Eg3JMunJYJjdlrr1+p8XqlPBOTXLLRUweK:TDTGeNtHj9Eg3JMunOJjdlP1+K6Pw7Lz","tlshash":"c7e1a898b5b27452473b306572af901ea67b44ad284c8090d1ced9e63cb6cbe4377f9c","size":7395,"data":"","first_seen":"2023-03-07T01:06:15Z","last_seen":"2026-09-15T13:39:47.958237Z","times_seen":604,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.moyukefu.vip/static/layui/lay/modules/upload.js","fqdn":"static.moyukefu.vip","domain":"moyukefu.vip","tld":"vip"},"ip":{"addr":"172.67.189.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4764cd260a2b1966a7b20a6c23b8ff3a","sha1":"d1aa3e4dfc368435578c6b5eea85d3280047b1af","sha256":"06c8c51ae47b56c60f8fda5e7570753bca2e487dfe84125efb6ad8fd04268bc8","sha512":"fc2519b7a6ecfa43d0a3f4a76329f52a048510100f79b2c77d3c6e1761649345e557e8ea696445cca1bdd7fe2ebcdf5f3ce9443f4aba7efe24382e3c286f633a","ssdeep":"96:Y4jcpetehsuIZo6qF3CS4pMrqwj+EV+L+CgegZzlUx9ugRFS3MZYCX3/niEs9L16:YvuDocMrp+QrC2UTduc/3/nARo/","tlshash":"03f1b55dba18b82322b374f5018f460d25bf046e590ac2c8b193d4ca9ebed6d1163ff9","size":7466,"data":"","first_seen":"2023-03-07T15:44:29Z","last_seen":"2026-09-15T13:39:48.00023Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj68 class:Object extensible:true frozen:false isError:false ownPropertyLength:5 preview:map[kind:Object ownProperties:map[0:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj69 class:HTMLDivElement contentDomReference:map[browsingContextId:3 id:0.12863308142363616] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[class:xuanxiang] attributesLength:1 isConnected:true kind:DOMNode nodeName:div nodeType:1] sealed:false type:object] writable:true] context:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj71 class:HTMLDocument contentDomReference:map[browsingContextId:3 id:0.5084476280378577] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[isConnected:true kind:DOMNode location:https://rndyqh.cc/ nodeName:#document nodeType:9] sealed:false type:object] writable:true] length:map[configurable:true enumerable:true value:1 writable:true] prevObject:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj70 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 sealed:false type:object] writable:true] selector:map[configurable:true enumerable:true value:.xuanxiang writable:true]] ownPropertiesLength:5] sealed:false type:object]","filename":"https://rndyqh.cc/assets/js/lottery.js","line_number":6,"column_number":13},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj72 class:Object extensible:true frozen:false isError:false ownPropertyLength:5 preview:map[kind:Object ownProperties:map[0:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj73 class:HTMLDivElement contentDomReference:map[browsingContextId:3 id:0.8746704742964428] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[class:nei] attributesLength:1 isConnected:true kind:DOMNode nodeName:div nodeType:1] sealed:false type:object] writable:true] context:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj75 class:HTMLDocument contentDomReference:map[browsingContextId:3 id:0.5084476280378577] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[isConnected:true kind:DOMNode location:https://rndyqh.cc/ nodeName:#document nodeType:9] sealed:false type:object] writable:true] length:map[configurable:true enumerable:true value:1 writable:true] prevObject:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj74 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 sealed:false type:object] writable:true] selector:map[configurable:true enumerable:true value:.nei writable:true]] ownPropertiesLength:5] sealed:false type:object]","filename":"https://rndyqh.cc/assets/js/lottery.js","line_number":7,"column_number":13},{"level":"log","text":"断开连接","filename":"https://static.moyukefu.vip/static/customer/js/ai_service.cli.v2.js?v=1.1","line_number":117,"column_number":13},{"level":"log","text":"链接成功","filename":"https://static.moyukefu.vip/static/customer/js/ai_service.cli.v2.js?v=1.1","line_number":104,"column_number":13},{"level":"log","text":"datamap[actor:server1.conn0.watcher17.process8//obj36 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:Object ownProperties:map[cmd:map[configurable:true enumerable:true value:customerIn writable:true] data:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process8//obj37 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 sealed:false type:object] writable:true]] ownPropertiesLength:2] sealed:false type:object]","filename":"https://static.moyukefu.vip/static/customer/js/ai_service.cli.v2.js?v=1.1","line_number":136,"column_number":13},{"level":"log","text":"datamap[actor:server1.conn0.watcher17.process8//obj38 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:Object ownProperties:map[cmd:map[configurable:true enumerable:true value:customerIn writable:true] data:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process8//obj39 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 sealed:false type:object] writable:true]] ownPropertiesLength:2] sealed:false type:object]","filename":"https://static.moyukefu.vip/static/customer/js/ai_service.cli.v2.js?v=1.1","line_number":136,"column_number":13},{"level":"log","text":"datamap[actor:server1.conn0.watcher17.process8//obj40 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[cmd:map[configurable:true enumerable:true value:pong writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://static.moyukefu.vip/static/customer/js/ai_service.cli.v2.js?v=1.1","line_number":136,"column_number":13}]},"http":[{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/css/index.a5c69d49.css","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.305Z","timestamp":1789479528305,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/css/index.a5c69d49.css HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B0QBjiln%2BS7RHRKKijCjaFmmz0PVbnX%2BZHk4K0uJdY4hMkS4fYJj03t7mOFBayGcnyc6FhNHQ7qciXXJ3fyccbakCS5xD1sszbqnu3qWOXei9IWRriU3Xeqt6ww%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-16f21\"\r\nexpires: Wed, 16 Sep 2026 01:38:48 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808abef8456c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93985,"size_decoded":26698,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1e29fb5b8c9d4b7f9b2888a33652fd9c","sha1":"528fcb33d3b1e7efc7c76b52368ca83fd6e870de","sha256":"90ee6634455ce38498e00377912a34269ad088d1e4eff9c5e467e564c7bab64d","sha512":"dd9117a6edee46e9f3ee636b581da63dd78e4ae1dfc853833aa16ce02dddef010a04ca4b67c6cf2604c799ac26508b249afbb766b00552787dccd0d04298d3af","ssdeep":"1536:BlIUpuK7hmVmg26S1Wu3xdynf7DhgnOhlNb0:wUpuK7hmVNS1Wu3iH6nOPi","tlshash":"5b93f83719012e3ae52bcd16b6c1ab4a1e60c133e15307adfbb476288bcf9c9167b745","first_seen":"2025-05-20T00:16:39.803029Z","last_seen":"2026-09-15T13:39:47.942683Z","times_seen":46,"resource_available":false,"data":null}},"time_used":1312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":325,"receive":987,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/js/clipboard.min.js","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.360Z","timestamp":1789479528360,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/js/clipboard.min.js HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bp2HDc%2BuxvmT1%2FOKUkvnK8mOZJ3mEIsb0ye7IFllZAT4%2BM2ygWVdqj6eebKg%2F8iZp3SuJtbUqdSsZ872ELV3vS%2Fu%2F9818LVsDPuzJoOJyxAaTAmMul4UNTfwAHY%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-28f9\"\r\nexpires: Wed, 16 Sep 2026 01:38:48 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808ac4f9e56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10489,"size_decoded":4146,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10396)","md5":"0ada63b6e3a8a44f2b90b59ea02bcc76","sha1":"d95e207a62c5c223610cad1b3a8e01ac96a185ad","sha256":"6a570be3a0d236133803873c360529709de838739848397c76c9186ff6bf3bb0","sha512":"d9f26d0c63d1f4a7397d1e3ef622d6121f55da2c6685a45aeb647e53a32cea0ba833482630cb9b46a0ef25bc68c8c820378b8dbf8d3566956c2e114dcaad1269","ssdeep":"192:YCHX4U7153pB7BoWsBwuLJoHu4wamacW/C8ZU10QkAVJNeSjSUzo:YTe36WsB9LJqwPVWacJQnjSUzo","tlshash":"95229658729071b196e760a9513f424bf332a469609a80d4b239d8e1bdbcdce5427f38","first_seen":"2023-04-08T20:30:18Z","last_seen":"2026-09-15T13:39:47.944078Z","times_seen":116,"resource_available":true,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":335,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/js/scroll.js","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.368Z","timestamp":1789479528368,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/js/scroll.js HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZrjBPYT9BxKve05OZfY6FtK1IpUrfayTGf4M9yKIUaeyw84wTLK2xf1%2Bjtr34z3XRz4IVN%2BI8%2BdhrXnj9soKhOkhSGFz7su9xpJewxDbfWecQ6BrXJ8qz30ER9M%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-408\"\r\nexpires: Wed, 16 Sep 2026 01:38:48 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808ac4fa556c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1032,"size_decoded":1209,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"bf35d07d8e8152817269bc6fcb32c80c","sha1":"115bebd455b9bbc3de9a9d23ac1c35c210cdf47b","sha256":"b9743de589958ed4392a78726e1432fcc552687e08385ec1b8276de991bead7f","sha512":"52c51160f11ad2c0dd37e997923dd07b9e90888e810f66782ad9283f4b0b4fa837341fa21411dbd7297cfa77274ecb05b91c36ba22ad872099ecf635701f9d04","ssdeep":"","tlshash":"53119bf4ff5e209a6532306784af50c9782e94339c0648277d9459f94cf9d0ca27af39","first_seen":"2026-01-18T14:58:03.467977Z","last_seen":"2026-09-15T13:39:47.944932Z","times_seen":29,"resource_available":true,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/transak.76404065.76404065.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.619Z","timestamp":1789479528619,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/transak.76404065.76404065.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YYgtN%2Bc2aJSO5tN7N7trEe1Uv02YsAfc%2B6MLjryvkD4r2jGOYV8mH%2Fv9B80FPtJczD2PgXYUYBXoFnpt%2FieIfNYWyaR6PkHLJjmtsMa96LRFWMwXhsTVjm0k2Jw%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-1027\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808adefd356c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4135,"size_decoded":2540,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7640406527e6e094f983fded77c6a408","sha1":"4ddeb11f92c941bd5482bc4b2fef5de5ce223ae5","sha256":"3e2f9a58dd6ac4bec258ba52ed0fd8b7f1b0439d20bd445cad0a37372ae4b5e8","sha512":"b7941250e6fc90e9a7777736fbf6a4211e26389deaf129291f3694a50f8e7b609da15daafc01b93aa84120924a4793da6301673375b0a6e24b45ee491041a355","ssdeep":"96:LKuDdG25zsIEw7prCzCRUa3yIqjSM/cbMZ:JgRozusfqjrcQZ","tlshash":"df81948937f451e9a008e2e867b670bc267e12a37e71c01843ff7964daa550d8a64c83","first_seen":"2025-10-07T03:26:06.252294Z","last_seen":"2026-09-15T13:39:47.945735Z","times_seen":35,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":370,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/svgexport-1.png","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.641Z","timestamp":1789479528641,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/svgexport-1.png HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\npriority: u=5,i\r\netag: \"6a3bbb22-2a4\"\r\nexpires: Thu, 15 Oct 2026 13:38:48 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MnPOKKaMHOcxDdGFEyZIid1%2B6hzv%2FyRxUTwnkn5Mt9qWbFffHrC8DKndFmQkIFKNeL75fN3JlRFxK%2Fr7TIkrzBisWXyauKuJlMrMK8j1Ixx3M0Xoz6ovu%2Fd05g0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808ae0fe756c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 676\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":676,"size_decoded":1398,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"31f7cb58938fbf83f5b8b573cd6e744c","sha1":"cb022f5a8492dca317d0da36955a0dfe67541309","sha256":"e9860ce56a643f34ce9ec445b3b873ad96ddc2b5131706dd4e8ce27a36c89bbd","sha512":"2872b3fa0fbdc444940bea3a77e93d03d364477ade392f1e444f0e5d9017dd4fc9e1f63692a810fa3c743ed357019cead9a85b37c441c2c435bda948df3db825","ssdeep":"","tlshash":"fb0123d703672b74c3c2ec310cf60663790c8a148118b90a9c857336a9339f8f794567","first_seen":"2025-10-07T03:26:06.178975Z","last_seen":"2026-09-15T13:39:47.946564Z","times_seen":33,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.moyukefu.vip/static/customer/css/ai_service.cli.v2.css","fqdn":"static.moyukefu.vip","domain":"moyukefu.vip","tld":"vip"},"ip":{"addr":"172.67.189.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.moyu-a15.xyz/index/index/clibox/u/6a95565417a04/t/1789479529/tk/80c8c1c231f1b55c379545d44003467f?lang=zh-tw","date":"2026-09-15T13:38:58.574Z","timestamp":1789479538574,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moyukefu.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 06:28:42 GMT","end":"Tue, 10 Nov 2026 07:28:37 GMT"},"fingerprint":{"sha1":"DD:5C:88:F4:12:76:B9:65:65:2F:53:18:99:C6:9C:6B:A7:EA:42:3C","sha256":"25:88:A7:A0:B3:CC:A4:BE:1A:B9:4D:09:85:C4:4F:BA:F2:88:31:9E:0C:CD:52:06:31:C7:59:F0:80:A6:B2:B1"}}},"request":{"raw":"GET /static/customer/css/ai_service.cli.v2.css HTTP/1.1\r\nHost: static.moyukefu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.moyu-a15.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 30 Jul 2024 14:50:54 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y0q%2B7YCITkzucKsL%2FgcYEIw8Qi5uiJxUPaIm9yDsr%2Fgh%2FGIUi8NdHYU4q9Qw7AevPqW3pzypS6PUOHZKzOfaPaZxnvmLVQvwbj4n1rjsYRWhYPGyE4YnNS7CZFjAH0rQZmFHa56b\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"66a8fdce-1ec0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808ec1c7876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7872,"size_decoded":2945,"mime_type":"text/css","magic":"ASCII text","md5":"e40cf037219f7ac6b9c7ed3e3d6dc02e","sha1":"5d30118a42b007eb5b75f9288358a7131fcd8f74","sha256":"6fe7cc3c6eaa303ca103162571ffe0ce3e14d94568730e0cfaf759a8535af317","sha512":"2fba1c160eb247dfdb835640ff2065748e03b8fc614651135645747d9c0cdb3f449c28c58d44b4b329331d2e577ddb9b652d79de7ff72cdb76b07a654540acd1","ssdeep":"96:QPPAbKiOxaRa6NfzkYQoN25Y2FjBg/I/Hxs:QPIOqZIto05YcGMHxs","tlshash":"42f120b7da630942781be5b93f79634a23299003910bd879bfc8771ccf819d99462fc9","first_seen":"2026-01-31T07:13:57.400014Z","last_seen":"2026-09-15T13:39:47.947374Z","times_seen":18,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/start-image.6b4395fb.6b4395fb.webp","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.346Z","timestamp":1789479528346,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/start-image.6b4395fb.6b4395fb.webp HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\npriority: u=5,i\r\netag: \"6a3bbb22-14ed9\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WuETlb1FbFJqvoa%2FuMEYyTJRHpVcNieZyhsfcYtVgfYnjQ8qsSGq9NyWLip75GDZTsZFIqbTJuDU4uP6PNFhu2VOCgydhrflv13ekIvl%2FEaAGR8wjM5Hzmy33QY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808ac2f9056c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 85721\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85721,"size_decoded":86402,"mime_type":"image/webp","magic":"PNG image data, 1088 x 642, 8-bit colormap, non-interlaced","md5":"6b4395fba6876488d6f21d92c0cd81d3","sha1":"e054dc67bae37dafbbba40a7b035d5ebaa029c7b","sha256":"a0983bad05ca4459fbdec8de902459b8893dbedd96f1862e34290182e27898d3","sha512":"2b511f3d52452593e6bad44f24642d0de3dc3500edabadc062e09c55f847211b88756053d6907a03e66989ad3a3d1ae2a2142331492a811a25623a28c7b91da9","ssdeep":"1536:KX0hQvcVey+GZ2aG+T/keMTM1shr1MlXAjEJ3CMlZbaHW7V/s8dGG7z7KF:KXNHGZrNsTMO5OvG279si3s","tlshash":"25830217253e9c293528de890627bcd5aeb04e91ef35821d94f2f5b0a0bb60db4c15be","first_seen":"2024-10-04T10:59:28.202883Z","last_seen":"2026-09-15T13:39:47.948116Z","times_seen":35,"resource_available":false,"data":null}},"time_used":561,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":257,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/peakdefi.2fce9c3f.2fce9c3f.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.615Z","timestamp":1789479528615,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/peakdefi.2fce9c3f.2fce9c3f.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lJrNRIzThAimmLqZ5aebmpxgT22O8s%2FjaqB6xKolJMPXLAboQdqK0eJ6x0luko1fB8lJXgHMrvETfHjhFve47IDIHnCt3DUc6UHS99OEnstMYF2ucxGoDkCHkkw%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-aa6\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808addfcd56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2726,"size_decoded":1783,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2fce9c3f9bc5965f0ef0a2e440eab492","sha1":"8dd6a5a9db732b2cf04e0666a9d6e777f8681e21","sha256":"456b5fb96813fff94bf7862878a461180a3a20303f0c71bdb582126d51b44ca7","sha512":"829035b71e4619a4bed7448ca2fa1b48658c3fb811bbd806cb98b153d97956f0b84af90cfc060212667a65808467f38b7a8c423bf4bb1c89995bb8a32a7398cb","ssdeep":"","tlshash":"cd5144d9529d61d4b904537a8f1a467e7a3288f69664e480cb622e1f3c104ff0d7cce3","first_seen":"2025-10-07T03:26:06.236414Z","last_seen":"2026-09-15T13:39:47.948905Z","times_seen":35,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":323,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/js/qrcode.min.js","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.359Z","timestamp":1789479528359,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/js/qrcode.min.js HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TYHh67TvTvIgUe8j8DrF2h0wbjYQnk36dvWWKnHyTEzcCDR29dNb%2BG8uJFUMsmgC909nHfOLm75%2FtIhCL80Kyiz%2FANFmHW8u%2FyAHV8HLrcH6c9b13fcEO7zw5j4%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-4dd7\"\r\nexpires: Wed, 16 Sep 2026 01:38:48 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808ac3f9d56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19927,"size_decoded":7768,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (19927), with no line terminators","md5":"517b55d3688ce9ef1085a3d9632bcb97","sha1":"2d06c1f823f34c19981c6ae0b0eb0f5861c5e14b","sha256":"c541ef06327885a8415bca8df6071e14189b4855336def4f36db54bde8484f36","sha512":"08d80845e706a3b9e985b799d3849cd7791ad3ba5aa9d793bb4591d4833890d7299810144874905f416c94d8530da74be0ee520066a91ade05a1da8bf0ccb498","ssdeep":"384:WRQ2kvcAAdTRhQLThP2yO9/9G84U5xOiKQYHHHsglDep9m1yfB8dKLMyA+LyUyy9:xThP2V/9N4U/gQYPXa8CAPLyrZ","tlshash":"8c92c7e4f36542f6915e6cd4283f104b64a0a4636c1490acbfb5c1e6a9f8fe0647af74","first_seen":"2023-03-07T01:14:56Z","last_seen":"2026-09-15T14:49:16.144558Z","times_seen":72779,"resource_available":true,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/security_audits__trailofbits.77c4cf4d.77c4cf4d.77c4cf4d.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.348Z","timestamp":1789479528348,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/security_audits__trailofbits.77c4cf4d.77c4cf4d.77c4cf4d.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P3ZWFhs2ekwBis2OULO%2BgdBQB08NbNPhHA%2BmVClsxZ61S3KZyy%2BwO8VLuc7JOCktzdFF3RTLrTm%2B3utRwIyuf46SHCk2uT84thZDd6YF22DAB8yi8ZRVPpv6i1o%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-4951\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808ac2f9156c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18769,"size_decoded":8873,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cc25d271093806a1e6f552ff08179d67","sha1":"fc827f3c0cd1968d19153c486ca2542048a6daf8","sha256":"1813597c661f35294198aca45389015e78bc957da91ea96aeacc600715962c0b","sha512":"2c64d428914597bb6e27e55bc574c60f1c3389b0f1fd2b53bad2ec693db39ad23d77026e8bdd3b3dadbd209fd9744e553fbafec306c810f3a349409458837cd4","ssdeep":"384:3t1c2EMqJGqzKPt69XOqulWRcKYbuqxJy8K+wxBBbv6vugvF:91cmsG7Oc3x2+w0pvF","tlshash":"158208f533e5c5f1b94886ec5a6550722a3234baf213db6cc9deada4fd028dc40698d3","first_seen":"2025-10-07T03:26:06.223244Z","last_seen":"2026-09-15T13:39:47.950217Z","times_seen":35,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/js/layer.js","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.361Z","timestamp":1789479528361,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/js/layer.js HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NL4IRaStKE9MhKLMd%2FYdiNhzxfOpe%2BOo5OE5YfxLQgYgErWGiELYcUeo34Jr1npQ9A%2FI4IRuOqLJbdFwGS3W0xn7c9Dcz3YA%2BrYtJdJxtpXRycc%2B6HVBy78TOE4%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-58b6\"\r\nexpires: Wed, 16 Sep 2026 01:38:48 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808ac4f9f56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22710,"size_decoded":8628,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22638)","md5":"d128fbe65fa17f4ed6a5e2d627278a58","sha1":"9ea612138bca130087bc9fa8b0928a3b22fd4260","sha256":"d1375ea074b94b3a69861b9c7bda27ca759f4770ed631f8a6c663fab16c4c21a","sha512":"315f4427bc5aeba724074e1ec0e12df9b6d30985c7f5758af9b9ba37f51b81fa7758cb737b145fb67f82a198af2500671d2f83bc7253a62dd11d04cb39308179","ssdeep":"384:BxWCih5o93iKTtXSt/KrGriu46K+Lxz6PTElH0jlhpPtwo:BxDiW3i0QtvTKiFSb2o","tlshash":"32a2c76a754034976323906ad10fba0b31b11d24d7078128f22bb4be1dbcd99a2b7f5f","first_seen":"2025-10-07T03:26:06.270688Z","last_seen":"2026-09-15T13:39:47.950749Z","times_seen":32,"resource_available":true,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":334,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/images/shadow-grey.png","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:52.666Z","timestamp":1789479532666,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/images/shadow-grey.png HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/assets/index/css/index.a5c69d49.css\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:52 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\npriority: u=4,i\r\netag: \"6a3bbb22-88\"\r\nexpires: Thu, 15 Oct 2026 13:38:52 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zKLoFVEAcjnmdpcYrk%2F%2FcQyrmx4TEYjEjF2R1EXQeJHfBkxJqzlMFk64L2y%2F4UjgfkY9lre6tFzeyqn8h9vC%2FwGkBLTOLqZs8VlpzftsyGVwmdyLPTD7T4LK4S0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808c72a4256c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 136\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":136,"size_decoded":857,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-09-15T14:03:11.531515Z","times_seen":20492,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.moyukefu.vip/static/common/js/jqueryWeui/weui.min.css","fqdn":"static.moyukefu.vip","domain":"moyukefu.vip","tld":"vip"},"ip":{"addr":"172.67.189.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.moyu-a15.xyz/index/index/clibox/u/6a95565417a04/t/1789479529/tk/80c8c1c231f1b55c379545d44003467f?lang=zh-tw","date":"2026-09-15T13:38:58.575Z","timestamp":1789479538575,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moyukefu.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 06:28:42 GMT","end":"Tue, 10 Nov 2026 07:28:37 GMT"},"fingerprint":{"sha1":"DD:5C:88:F4:12:76:B9:65:65:2F:53:18:99:C6:9C:6B:A7:EA:42:3C","sha256":"25:88:A7:A0:B3:CC:A4:BE:1A:B9:4D:09:85:C4:4F:BA:F2:88:31:9E:0C:CD:52:06:31:C7:59:F0:80:A6:B2:B1"}}},"request":{"raw":"GET /static/common/js/jqueryWeui/weui.min.css HTTP/1.1\r\nHost: static.moyukefu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.moyu-a15.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 02 Sep 2021 03:12:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FhVX5ICAgbNjp3OplLTfZljYuI9py8tvkkXgYj9xTXmmpmmdMqVF%2BY8kM8cKg9GAu80XwIdLaNxVu0%2B6XH4j5ZchAivSWspcm9G00tkFtwVEPbSS5na4gGFCKbGPYu9t3Kv5F6M8\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6130410c-c759\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808ec1c7976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51033,"size_decoded":13723,"mime_type":"text/css","magic":"ASCII text, with very long lines (50917)","md5":"0583e2c0d972f0dc8da2044894a703cf","sha1":"c734da7862c4c3ea4b7a634aebf30b962aa78193","sha256":"dd0e864bd7605658db1930286ef3ade510f8e61bacf8300b2e55ebd652cf6015","sha512":"3e7169109bca105ed7bd342aab99c05b2af696c00e06a418181bdc071059eac4a1158640a168ae80ccdff8431bae5e10d4c0197cc8581b872453148622ceb789","ssdeep":"1536:Ap6Kyu+1bZLhxtqPqjsKOamrfNy6rLQ+0b0hCeODOHMOH8wxAp2pY1zZI5pELD:Ap6KwXD","tlshash":"f533a53757493208b22fdb0ee7c66e296f28f11384630beef6053519cb8659a65d730b","first_seen":"2023-05-25T08:01:00Z","last_seen":"2026-09-15T13:39:47.951978Z","times_seen":88,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/security_audits__peckshield.17a6e4e1.17a6e4e1.17a6e4e1.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.367Z","timestamp":1789479528367,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/security_audits__peckshield.17a6e4e1.17a6e4e1.17a6e4e1.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=83Tdp8BoYzwUdX7FVtMu9En3qh6ASFHH0OMioA4wvXLSBaCGsOXZk%2BxoZwH4kCexQn6rXMnNCN6y4TV7uiXddCp60DAZUmiF9pWiULGzOD6nIyVUbjAI0j3lZsc%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-1ba9\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808ac4fa456c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7081,"size_decoded":3881,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"17a6e4e18e4b94902d4e4a446bf7daaf","sha1":"1cb133927c08d18185e6e2a6b5db264113912953","sha256":"a23509634cb6105cdd5fe6e6333e0a22305f2329a3aa2025aea192cd8012832d","sha512":"07760f8f8587a30fafcc85e0c78c854d0767174579fca197999b89def1f816c80513d66b4dfbee65ca4b61756604e31c3206d51819a911d593439abddf8ef57c","ssdeep":"192:/ne7BtCYd0S8drJRfjINruvu8sXzhNrr4/R:verC9xR+Trr4/R","tlshash":"c2e1e78033364cf5f94fcdae3e9052ba262514bfbb951015d4da39773e0b5c0aaa9c87","first_seen":"2025-10-07T03:26:06.230677Z","last_seen":"2026-09-15T13:39:47.952525Z","times_seen":35,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":391,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/js/lottery.js","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.369Z","timestamp":1789479528369,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/js/lottery.js HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9QsNfsEtbTPW4DgITf2CcAAzzte%2FXzgxAIr8ov0A997yJm4bMqMIS%2BCcHJlmmXiACK%2FC%2BnEjHizXP8437DAFVLz4JJhRFBjNIQOrfr712D%2ByuT%2BxnC%2B%2BFhg%2BH2k%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-7ea\"\r\nexpires: Wed, 16 Sep 2026 01:38:49 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808ac4fa656c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2026,"size_decoded":1320,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"963d305e29398f9a04d9a3b457f76860","sha1":"a42b9f877bbaca04c8281adb273bfa0bcbf90942","sha256":"7930fcf9de55ffdb0d0ec986eb9c35c3e4c2a211531e4f8b9f0f89b2adce106f","sha512":"366accf3f6990c4497654dfa20ebc89cc6612446b814b60cc7a48829654e2636c65f50c2b42c1b5a6cf2ed9e190d40bce34a091b68c98278d5013d76c8e1698e","ssdeep":"","tlshash":"7541520ea8f719b1597330f88abf1151a161c0231208ef28bd0d22d84f4a57d97a67f8","first_seen":"2025-10-07T03:26:06.193078Z","last_seen":"2026-09-15T13:39:47.953094Z","times_seen":32,"resource_available":true,"data":null}},"time_used":1318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/coinbase.7afd176d.7afd176d.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.609Z","timestamp":1789479528609,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/coinbase.7afd176d.7afd176d.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UcYqb0QPTedvB2JqSLSzMkBbetVlMQVk%2FdGcbmCoeEuoYsEjJQ%2FgNErE%2BRqzpB%2F2O4jT0Ap6iEU0wRrhQdCfHpYVWk9SB%2BC2MgsBtMSNw41UtXruOLYKOFoKnDY%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-1afd\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808addfc756c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6909,"size_decoded":3564,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7afd176d71947d5df9aa0481d754ecb1","sha1":"adb4dea5030a47c24be9e33a05914f4e567b521e","sha256":"dfbf25df895974c919b0c06d6b004a6d7768797f8094b1b2f3e3f96606d930a3","sha512":"8827f46dee0b5b2e4d13e9e4f6094e626721ef6c55ae54c062fb4441d5f7bba6137f1d9e97decc3a373e596b4340dcd794e28c9a0b4dca3851225db15dc75aa4","ssdeep":"192:vjROk4Uv241QmgtizjLMN1UaBLIYz78KHqF:v1EUvXQttWPMM","tlshash":"7ae193ed277581e8f58aa2f6c767a8f8bd924ed11d41c924c7a60c1fa8a101c8d75ccb","first_seen":"2025-10-07T03:26:06.233474Z","last_seen":"2026-09-15T13:39:47.953652Z","times_seen":35,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":325,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/crypto_com.06db3da2.06db3da2.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.627Z","timestamp":1789479528627,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/crypto_com.06db3da2.06db3da2.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ouyYdzI2Ya%2FfPairaV7RCwisd7CTUh6mKfRqWzLzAgipPLOEDO%2Fq6lMp2FsPklb2qrJy1n2RtA5Na3WLEka6Epl100X9xACDf2T4OGdXkclhW6gpiXCU7Gl6BPc%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-2bb9\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808adefd956c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11193,"size_decoded":4945,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"06db3da2fa90c10d1627fb27e004ab81","sha1":"c9c5c1071b6df0b05d83fb2ecca78ed7889572db","sha256":"56c10b4d5e146d0407c467421ac4eec805c9b2471f65536e5f9b17d7ff13dadb","sha512":"263a69c7d07943cc9578e568d76a5ce8d879429094a5322abae98539259746b98a93f6d7e0ef81640da74041299998da4535ab1e770cc748c74891a508c6427b","ssdeep":"192:SYXPsMz9Sbka6Ymt9qiNlF8nr2mAID49xWMjrZFwfsmMtR76JuQEbF7h1JsZk42G:1sM2Irir2mHNMPfCMtRGEbTsZcWSKunw","tlshash":"143286cd7b24d3f8e248e3ead69644b47b5a9ef07d62c5b4c7d01d4651a146e8c60cc3","first_seen":"2025-10-07T03:26:06.152079Z","last_seen":"2026-09-15T13:39:47.954239Z","times_seen":35,"resource_available":false,"data":null}},"time_used":909,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":357,"receive":552,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/js/ethers-v4.min.js","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.351Z","timestamp":1789479528351,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/js/ethers-v4.min.js HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7mAwKNl5Lgayha2kTWz%2FhhhS53a3%2BjtrIxqM5bo9l2u03BcB2wbfcjcCKr0%2B43lXZTFFiQPEnP7uku8g7wLid3S%2BTgDN668B5wKDE5YSIG949bXz4Mnbr3g7Lvo%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-4a1dc\"\r\nexpires: Wed, 16 Sep 2026 01:38:48 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808ac3f9656c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":303580,"size_decoded":96061,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0e66b864a27c5961a702e18683961608","sha1":"febc146fcf4c2d021f8635670ce4b2f35232e8e7","sha256":"2f426ca96f459f9229cf53665db2de4ec82d15ce49f767915378d87f733ccf9a","sha512":"917e5aa6a7aa64f2dadfe49152f1f6f3107cdc8bce974ed47e364bfcb060267081cfeb2f7cecee4a458828ed822ee9729d97d1bc2f8b47335553e1925ee4eecd","ssdeep":"3072:IMVv7CFGHyjUW15Co8psvoZ0pDrDQciPOP24fuayKqlKT4D2no:IvBfiqDQvPOP2TaytwTg2o","tlshash":"c0541b8472a0b062939629a4142f200bf27bb92d588d046cf745d8f77df99c99a3bf35","first_seen":"2023-03-07T14:42:37Z","last_seen":"2026-09-15T13:39:47.954765Z","times_seen":54,"resource_available":true,"data":null}},"time_used":753,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":329,"receive":424,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/enjin.ab823c16.ab823c16.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.603Z","timestamp":1789479528603,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/enjin.ab823c16.ab823c16.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8qb7iXMNvf4%2FVqqQpLI8H9w3XBwx1TABnVg8EKT5HucHxBYHuHXHIZNOevM9GlW3Ao8sxaW4YLGXkt1s72tlq74upBv9qcY%2Fi5NxvHiqSCiPKTTeFbZAxOwQVUs%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-c49\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808adcfc156c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3145,"size_decoded":1898,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ab823c164f59a3c140e962324fe51c77","sha1":"74601be1acb39ce75c1c0255b9e3e5853dacf288","sha256":"4f5d5e53c099006b1ad6bcd78be0b37e45eff793506f3b31ae05e157650ad0de","sha512":"98f92c3c973ae0a97a1d20b7f7fdf22d8263ce93ab3947898e5171a45db1876fb23327af7eb2245d221ab453ccad1b464410eab6b7247bcb5ee93f2327e5ebb6","ssdeep":"","tlshash":"e8512258662542bcb30ad7fcc74d98bc8dca68e0a55589e8c3d33e66a401ced5cb0dd3","first_seen":"2025-10-07T03:26:06.247655Z","last_seen":"2026-09-15T13:39:47.95537Z","times_seen":36,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/instaapp.70b374a3.70b374a3.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.606Z","timestamp":1789479528606,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/instaapp.70b374a3.70b374a3.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s1Dt%2BxRl3EsLpjzxql3sl12muSn8GVteoaXHbUGcAD%2F9GzP3%2F5raeEvWLomzNhA3iA1DGKQG5qbCnkzeX5aQeFJEFgkNDS1FDYckLfqqx0tDS%2ByC0Hswv6wyxOU%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-ec9\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808adcfc456c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3785,"size_decoded":2344,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"70b374a3db01bdf1a36a7e627fbcf351","sha1":"5ae8b81a6ec116babd794c4cf7b2f94122646898","sha256":"fa76ed841dd4943fcae5555438f258a160f90f686cad00a32339ca8732392704","sha512":"472b4291e4cc33fee8faa8c291256ef1a04648101fe3885196c0b32da30b69f5f293b6eb40dc7e051cf49fd67b4a523f2f2e33463cf3c19f4f7c7193ba54a75b","ssdeep":"","tlshash":"227174ceb76646f8e540b2fda31254b5258a8dc93c92e8eecba92d4ad01941c4d32dc3","first_seen":"2025-10-07T03:26:06.187705Z","last_seen":"2026-09-15T13:39:47.955972Z","times_seen":35,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":338,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/coingecko.1cb44723.1cb44723.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.621Z","timestamp":1789479528621,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/coingecko.1cb44723.1cb44723.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mKlu4HlIiSSqDc4ELyDH9XricF23BBpGsTgSneAxeVeYp7rLo3owuJ6gITeN78DJZrO5xHco5vJgewBnlIsP8oMiVgr70QbUGWlXKagOXD5EZwQQjLpX7CYbEhU%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-1e60\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808adefd156c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7776,"size_decoded":4088,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1cb44723956ef7a7d6e92a35c3094134","sha1":"c5caa33feafc60cf845b0873bd4f31e895a22a6f","sha256":"b43ed9d92d85f8c282c353bb9a72dd99ffaf4476154b37ea21d1db0c5cefe5cd","sha512":"3cf386ef4f8a62ac9d34eaa0054166d581ab9677545fec5fe217bf81eca3a128b44c8c5e918bfab2e04abc6d7ebdf033e243a17d8185152e197899dbaf48beac","ssdeep":"192:Wm5WGRlH/r5avC1D9yUUGJMIcr4duOyQSIGLr/fao+9skXkugv8:V5TRt/r5zlz/duPrG/kugv8","tlshash":"3ff1d7cc237962bcf10997f4829b98b5bb57aeb67511c518cba40c0fdd1206d0cb99d7","first_seen":"2025-10-07T03:26:06.190208Z","last_seen":"2026-09-15T13:39:47.95651Z","times_seen":35,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/polygon_2.58c43a30.58c43a30.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.635Z","timestamp":1789479528635,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/polygon_2.58c43a30.58c43a30.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9O1%2Fye2%2FJCZOYv2hjKaG0GjpUwv5%2BlmDarZjQnAxXaFOzK7c0ggIaNa4fmGtNLIntrZpiJtw1qV4CYmzJcnNbe1Ec7hpQmR7is6ZCLOKk9%2BYxL9kh9be3a7KJ2I%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-18aa\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808adffe356c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6314,"size_decoded":3391,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"58c43a30b560f393205402897ec27bee","sha1":"bff8ee96cc6e340c270a4e56c44d168c0b9790eb","sha256":"f5a9c80be68ab0f4f1b8dc8c5f8520ccf61bc25a9afb645cab9ba8f69370eb26","sha512":"1da1de7ec20dce504a5d61561fbf66d9286c3e59a8fa67b96dd58817182ec2aa37347da2b2c41cce307235a1f42f42b4dd5e6e59d2af25f54eaabf3fffe05072","ssdeep":"192:QAVKJyp/nWiA23QMqQHv1RQt5RoHodonTGLkoCWEEo2:FK2AkltQRoH9nTGIonZ","tlshash":"99d1a4ce67f15bf8f011f2b8d31b48b936876ef56922d829c3a95c16d26281d1824cc7","first_seen":"2025-10-07T03:26:06.286669Z","last_seen":"2026-09-15T13:39:47.95739Z","times_seen":35,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.moyukefu.vip/static/layui/layui.js","fqdn":"static.moyukefu.vip","domain":"moyukefu.vip","tld":"vip"},"ip":{"addr":"172.67.189.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.moyu-a15.xyz/index/index/clibox/u/6a95565417a04/t/1789479529/tk/80c8c1c231f1b55c379545d44003467f?lang=zh-tw","date":"2026-09-15T13:38:58.586Z","timestamp":1789479538586,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moyukefu.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 06:28:42 GMT","end":"Tue, 10 Nov 2026 07:28:37 GMT"},"fingerprint":{"sha1":"DD:5C:88:F4:12:76:B9:65:65:2F:53:18:99:C6:9C:6B:A7:EA:42:3C","sha256":"25:88:A7:A0:B3:CC:A4:BE:1A:B9:4D:09:85:C4:4F:BA:F2:88:31:9E:0C:CD:52:06:31:C7:59:F0:80:A6:B2:B1"}}},"request":{"raw":"GET /static/layui/layui.js HTTP/1.1\r\nHost: static.moyukefu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.moyu-a15.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 02 Sep 2021 03:12:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FIEEdqpXLhPAlbqTGSXyD%2FBgDoIH4ApUqu0FszS25CLUSA2j4Ly7NgVnc54fgPxJM5t86uSYDDqLD8C1w4kiSb9eO2kRXUmO2dWrlFyGQjuVGkAWVdkfNTmzOYHWhrvlWyv%2BEcFf\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"6130410a-1ce3\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808ec2c8076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7395,"size_decoded":4046,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7324)","md5":"055cb5361d0dadf75de67f6875def943","sha1":"97ddce827fedb8869a9d0248a16b70c14da2a8ec","sha256":"91ffac1a9d64f3dae4e8091b4feea25981e750d279cb71491b25dc24b33ecaf2","sha512":"3c074594a667484aa78b2227f834c4bebab07a6b4bd795f94570d3e3da911aa48275e13c54e1c6848cd2ec1fbb2bad5cb104e9a6bc1f71c967e93dfde62aa9b2","ssdeep":"192:TDTGeNtb7/j9Eg3JMunJYJjdlrr1+p8XqlPBOTXLLRUweK:TDTGeNtHj9Eg3JMunOJjdlP1+K6Pw7Lz","tlshash":"c7e1a898b5b27452473b306572af901ea67b44ad284c8090d1ced9e63cb6cbe4377f9c","first_seen":"2023-03-07T01:06:15Z","last_seen":"2026-09-15T13:39:47.958237Z","times_seen":604,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.moyukefu.vip/static/common/js/ai_service.v2.js?v=1","fqdn":"static.moyukefu.vip","domain":"moyukefu.vip","tld":"vip"},"ip":{"addr":"172.67.189.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.moyu-a15.xyz/index/index/clibox/u/6a95565417a04/t/1789479529/tk/80c8c1c231f1b55c379545d44003467f?lang=zh-tw","date":"2026-09-15T13:38:58.589Z","timestamp":1789479538589,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moyukefu.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 06:28:42 GMT","end":"Tue, 10 Nov 2026 07:28:37 GMT"},"fingerprint":{"sha1":"DD:5C:88:F4:12:76:B9:65:65:2F:53:18:99:C6:9C:6B:A7:EA:42:3C","sha256":"25:88:A7:A0:B3:CC:A4:BE:1A:B9:4D:09:85:C4:4F:BA:F2:88:31:9E:0C:CD:52:06:31:C7:59:F0:80:A6:B2:B1"}}},"request":{"raw":"GET /static/common/js/ai_service.v2.js?v=1 HTTP/1.1\r\nHost: static.moyukefu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.moyu-a15.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 05 Jul 2024 09:36:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Trfi6xTcXrljJzv%2BFiZ6gqaXwQjST7gTNPoV5wIz6oDM8H8cFaQ7pKiGzZWQOUs9UQ8FcwzkG5F1fXtrh5asXr0SKDKcdBLRvwYCHqPTT5y9QY%2B3ZYrCUFxL21VDHOoLJGh2wM1\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"6687bea9-3405\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808ec2c8276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13317,"size_decoded":4845,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"8319f704ba5ab5df275740eef607f0ab","sha1":"4e25a2da705fa9511aeafaaa823b00777c7f5fc3","sha256":"007bf4875878557fac4aa27a77d21a1e5e644e22765274a8033ecc5a246febbb","sha512":"0d1235983b7c9b7b4eff104a148a1ba740971ccf14589449af6b883c3106ba43584bb02acf625568772963d2f559e8444f332920e6bae2894d51b41751944d0c","ssdeep":"192:QlNHvI3C5lyVfFfGQ4vIciNTN901E1Moz8IUpo3BaLPqN7AV6s9EUQsam:HSrvINTN21E1JIv2YqN7AVzF","tlshash":"425264387deb2853d51370aa9fab615c31748147855acd047e6c83aa2fe8b34135afbc","first_seen":"2026-01-31T07:13:57.382906Z","last_seen":"2026-09-15T13:39:47.958803Z","times_seen":18,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-15T13:38:47.653Z","timestamp":1789479527653,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FS7R3kvErhOv8imprjg%2FYu0Pl8gluUlE9AZuzJzLoxb5twkWyMN5iZvdRrPOP%2F8osB0g5IUYPEubvVndJ63NYhFJDa3fmBkvGj6Fwgug23vygDcdWVMestTmEEY%3D\"}]}\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\nset-cookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D; expires=Tue, 15 Sep 2026 15:38:48 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3b808a80f5956c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"laravel_session","value":"eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-09-15T15:38:48Z","raw_expires":"Tue, 15 Sep 2026 15:38:48 GMT","max_age":7200,"secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D; expires=Tue, 15 Sep 2026 15:38:48 GMT; Max-Age=7200; path=/; httponly; samesite=lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]}],"data":{"size":207409,"size_decoded":44588,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"d92aea002b5d886e341a7b359c2f2650","sha1":"e48c28ae607824bb9cfdf66bd8fef7f7fccb2d32","sha256":"868924948f9e3e4b28036140fcd9ca0288cf401d8c57a71a8ce8ffb29c89c029","sha512":"56bade283cd8b4cc9f0826be7ed315d273ac85cd96225189ebd3861ade1de406a5517e6e3c0901a34cb3d773b8308941ff2b049e7405c117c107c4214d407072","ssdeep":"3072:1czETLaTzBKIGfqvbwa0HZhTPkrmQOirogvOKlN0z+btYc:HTqAI5vbE7z+btYc","tlshash":"5114a550b3b514d71077e4e1a9ba2d5f2a20f307e1055e843a9ca9da1fc7e72f4932e8","first_seen":"2026-09-15T13:26:33.242372Z","last_seen":"2026-09-15T13:39:47.959372Z","times_seen":4,"resource_available":false,"data":null}},"time_used":697,"timings":{"blocked":0,"dns":5,"connect":23,"send":0,"wait":411,"receive":258,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/security_audits__quantstamp.4e81de4b.4e81de4b.4e81de4b.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.365Z","timestamp":1789479528365,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/security_audits__quantstamp.4e81de4b.4e81de4b.4e81de4b.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I%2BR%2BF9DMXTET2TmE9RtzrC2A5RhlokyaDbkdp9wtJf2VfRVJj9Wq4w3wqvQ9kVgwrWOSpnh%2FudW05znJhSJJ841Nh7t6jlJdEeIGHQR0Ym%2FKRDn4dIIznSz8tdU%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-2a0a\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808ac4fa256c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10762,"size_decoded":4578,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"546af5bb29b1b454686a6d829e99b69d","sha1":"e71282d798cc7ef3a6621d8238cfe31b6f2f4d41","sha256":"56f86c257f64da034cbdcf73d4e1844f6728740f72b6989af9cdc61a532c1b96","sha512":"99aef09edcfdee859bd6bf3ee5c5841e584294dee3ad9efd7c0e39c1c3c967190d55c9b16f2110ce6e3b54f89e058071344241e4cb9a9a84527beb08c19614b3","ssdeep":"192:h6CayrCknQMeFEVmRZ0fc0TAN1f3gnykHjOvU8zqZf/zdfA5L3NxSgt9oo7s:X/QMaE4xf3gnyCYmZf/zdfA5LrNtKws","tlshash":"6b22a89da5a0adb169d58b5c4c36058436fd30ab7b728229ccedb7227f039d1047e747","first_seen":"2025-10-07T03:26:06.106102Z","last_seen":"2026-09-15T13:39:47.959943Z","times_seen":35,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.moyu-a20.xyz/index/index/chatBoxJs/u/6a95565417a04?lang=zh-tw","fqdn":"www.moyu-a20.xyz","domain":"moyu-a20.xyz","tld":"xyz"},"ip":{"addr":"172.67.166.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.597Z","timestamp":1789479528597,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moyu-a20.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 06:58:34 GMT","end":"Sun, 01 Nov 2026 07:58:30 GMT"},"fingerprint":{"sha1":"CE:CA:2A:8C:D7:22:84:59:9A:CB:89:6A:82:6E:23:D1:49:48:DD:98","sha256":"61:42:4F:76:EC:98:F9:32:50:C9:0D:5C:8F:CD:04:BB:49:38:FE:21:D5:1C:41:78:57:44:DD:78:F9:A7:0D:1D"}}},"request":{"raw":"GET /index/index/chatBoxJs/u/6a95565417a04?lang=zh-tw HTTP/1.1\r\nHost: www.moyu-a20.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:49 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eCFzfAqR6l6fbEKfVe9AI8Vu41119hJhE4aNH%2FZvRP03p1znHv9OWS7ydAD1IMxLbSnsgvOO1p%2Fm%2By6JdvFZp62Xmd8Asmxe%2BQ%2F8aKGZyxzpoqPpHFO8tgL%2Bg7nBwMPMfRHJ\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3b808aded9c3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4761,"size_decoded":2340,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"09e8b1055b9497dbe0c681f96344b09a","sha1":"c0e2256c81fe6bc87b959bd1be37853aae3fb3fb","sha256":"db6a1539900b0d6ea631df147c58deab13b180f154a58e75ad98aa41b6f09b91","sha512":"e6604de2933d3f39a166d099071ca70a6cc091898942fe0d28044a1bf72d0371876f6ce2aa41616f99622395fce779f0d2c3e9b341666d983f0c3ac708b0256e","ssdeep":"96:naLKMyC0YvGPrSjF4rXn0MNgkGIg2d/nMHF3n:nNBqGPu2TckGIg2dvMl3n","tlshash":"84a1833b01fb0c7262a734ab9fef3944792290131526c8247d6ccaa59fcccb94464b7c","first_seen":"2026-09-15T13:39:47.96053Z","last_seen":"2026-09-15T13:39:47.96053Z","times_seen":1,"resource_available":true,"data":null}},"time_used":624,"timings":{"blocked":-1,"dns":10,"connect":18,"send":0,"wait":596,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/pillar.dfa8413d.dfa8413d.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.618Z","timestamp":1789479528618,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/pillar.dfa8413d.dfa8413d.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9c3CI4Qb32yqK82iD6z1QdIxLPO1Bgp8OoMOchdCxZ8ukeALf%2BhBlQ99SW%2F8JtgDcAEBPkk0uNbsAoBYnk%2BLhSzPV074AgSrkk7HJV3zzpfYikrTchqAqSgNcJo%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-eba\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808adefd456c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3770,"size_decoded":2321,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dfa8413d4e5ae259c771202a8e99734b","sha1":"34a85331e662708c36dac086975fb9d1b6051213","sha256":"231e43068c62ef4413c5d0eb2a6c5c6bd7351de76d967451e5e7eb32bcc44803","sha512":"e73e83586f1aded13f6b00956d7e77f5623edb414135e6bb46e2ae17c46501d5b985b5c5d6bf835162bdc540f7a065b51e3c5ccbebf5b28f1663ab3e11cf8f07","ssdeep":"","tlshash":"837196cd935dc2d4f010b3f8c92a64fa7f2b98d95e50d93487a22d2ba44187f48285c7","first_seen":"2025-10-07T03:26:06.204322Z","last_seen":"2026-09-15T13:39:47.961512Z","times_seen":35,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/alpha_wallet.0700ec50.0700ec50.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.632Z","timestamp":1789479528632,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/alpha_wallet.0700ec50.0700ec50.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IjgYyB3nXy4l1Y7qDow1qKKWG8bDmedPGn1vhr%2F%2BUV9U2ZjIZgi4mKol9WXlG%2BfDRyAEATrawR74R82%2FCswSiGfhu1pb6k158FVDjCimuWYXkBvt6vhVKRAXIIw%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-18b0\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808adffdd56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6320,"size_decoded":3412,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0700ec50c33629832d667260c6df50b5","sha1":"3e72194305101995edb017984aaa2400952aff73","sha256":"25c38688cd27bb66e8c55b51686a8ff9cd759db77adf99877a673c76ffbc851e","sha512":"9bc8b4e78e162890aaba803f1be4ec6e35bb199c89667f6a5c4228638001632bb705ee3bdde89083bbb5dd96542ad660a2698e108926a545e6475be515b9c8f0","ssdeep":"96:Lwptpkx00Extgg8EbT6UOXIyEa1Sixq9UJosLcJZjGBepyzXxEmim/b7C:ykixz/bTmn/Y7206BEyNE5AO","tlshash":"3fd1a5c937b583fcf8069bb8936b90747a559dd63911e958c3900c66f8a106c8deeccb","first_seen":"2025-10-07T03:26:06.116496Z","last_seen":"2026-09-15T13:39:47.962063Z","times_seen":35,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/svgexport-3.png","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.643Z","timestamp":1789479528643,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/svgexport-3.png HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\npriority: u=5,i\r\netag: \"6a3bbb22-34f\"\r\nexpires: Thu, 15 Oct 2026 13:38:48 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=blTpkkioSYv76SKh4BfJ26jkotX1G1dluajFYYOJUBbHrBcta5yCx4261AT8umlJCnYhGVhhqs6JILdXDwgK9b9lUeItmMIqtjl2NnwDnfjaS07jyGk1DOXJY10%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808ae0fe956c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 847\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":847,"size_decoded":1561,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"30a9eb155e415d00d91e2f64d740d226","sha1":"56369fe70c47ec7cd0339ec1dca6b537d84843ea","sha256":"32103492ccceca92e1f27f1228ae1a68d885912385e79611e5810fc8d897ffde","sha512":"8e71d7665e83086285292856b15b819ea9b290355c8ae627aeb973b1c93d135a35e649ce697eae9911dc6a6c6729f3443ae2e22fa27dc29c354d51a3edb7bd89","ssdeep":"","tlshash":"6d0186dbe319292bc6c6a33081cea725a40959134737db2c03792025488acbe8da2607","first_seen":"2025-10-07T03:26:06.295631Z","last_seen":"2026-09-15T13:39:47.962608Z","times_seen":34,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":347,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/img/icon_eth.f763823b.png","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.725Z","timestamp":1789479528725,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/img/icon_eth.f763823b.png HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AkEQ6BiLWmNIGuznhcqEe7RyPd8zt6tFWdyfkBphDeblwUFyFXSpaXO2kOlbQahLM9Wz4YDWl9A7ODl3j8yA8h1RUQlezepGaLeBDHJ%2B4RRfHVYMvYvWKVD3CYk%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-141a\"\r\nexpires: Thu, 15 Oct 2026 13:38:48 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808ae8ff356c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5146,"size_decoded":5897,"mime_type":"image/png","magic":"PNG image data, 64 x 102, 8-bit/color RGBA, non-interlaced","md5":"f763823b6f779ff3c972a65d2b3d74e3","sha1":"bc7847ce616c57706a0011d46253cef8a16013ce","sha256":"9f549873c01c1815eeef9bf4cbdbf0351eb84f32c24940a9b5f31f687e7e93f2","sha512":"2e2078ac38d9affb45e52570ab6c813af5aa951111903bbfd81f8e39df40a1c4b7bd245a73e1d9d3d8d444abbc69993a32ac1cdc10bd3c4ace8a54eca84e8185","ssdeep":"96:IHj26FbfEQepmefNcjk4QdykY9k8kR/BW0OzRvH5bArY5PPqWmvUBswL:IHj7FToAkqV00fae/BswL","tlshash":"a4b18e70cabd372c9e1945669770246ba93c0489f368745e0ef6d03abc89f6e692c905","first_seen":"2023-05-17T06:30:29Z","last_seen":"2026-09-15T13:39:47.963215Z","times_seen":2043,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":335,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/tokenterminal.e42e1a63.e42e1a63.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.626Z","timestamp":1789479528626,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/tokenterminal.e42e1a63.e42e1a63.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hqah3lZad1xCXT0zMGTRJ8EIojH%2FHkea7tQzk1V6Z91ItCqLRNsJTCCwF5tAfiGXj7ojuFqQRjm7xTjGYV55OWiBmqD6KS3E%2Flxa4f72mfuQW8lvrsp6wSKWyXo%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-3a45\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808adefd856c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14917,"size_decoded":6828,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e42e1a63dedbc439f16ed25bc38ca100","sha1":"cc85f2b68d4add791234c4ab1fceeab952467cf3","sha256":"dfa4bfb5a710fb5e8a571ed1dd1d727ceba26ab7e1796d5c04f554118a2dc886","sha512":"ed3281598de4ae855ee96305ff40239cfb51ebbe0c981ce336fd549fa4aacc6eae76382c4653499b15d0c9ce3f865f31d5fb7740ea1ec7c3a06c2d6e1812c094","ssdeep":"384:/O0L48PRXFTbRa0G9xxTl6ZudZ5us5YZL5AC8A:/ldXF/00GZl6Zu3PWZtL","tlshash":"9762958db76493fcf044b2fbc56b9078ba46add12d01f868c7e40d47956206e4e62cd7","first_seen":"2025-10-07T03:26:06.206276Z","last_seen":"2026-09-15T13:39:47.963814Z","times_seen":35,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":324,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/bitquery.3647db62.3647db62.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.601Z","timestamp":1789479528601,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/bitquery.3647db62.3647db62.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RMF60fTf12sTSLPOgjJp%2FRMNAkatDr%2Br2W2UnwdeRqIPHla1S9TG9Uwp%2BP0xq2GVIjD6nRvoBQgv2F9KbgDjCpwOfVV%2FLr8CDZ63muh6LcZz1VLwI15ZyZhmJLs%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-20ca\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808adcfbf56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8394,"size_decoded":4144,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3647db629a4b18f06f992298bb23608d","sha1":"4be0e107de6f0298b6d4b6184d4eeb86de321112","sha256":"4bc1521371d37ab54e50b41b3b8bde27a03ec31f6d581c03e9ba148031054542","sha512":"ceef6d657e5b6916ae2f8039a32bcdd44634652935b85f9272f8e13880a83e69ea78f7b5b890d8863e44cb4abaa43c3df65707cf2aa3f8a7e2f1d0045e5dd54c","ssdeep":"192:PxOGmkvwYQ/MPaZMTB6pv2U0mTr4HQTOq9rwxlnC+SA57nq:PRQEPaSUDu+9w6co","tlshash":"9a02a4c567b5c2f8f544f3f84a1a9036bf5299d2ba23d4a983d50c0ee88141e5daccc7","first_seen":"2025-10-07T03:26:06.245143Z","last_seen":"2026-09-15T13:39:47.964367Z","times_seen":36,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/metamask.be3827d7.be3827d7.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.610Z","timestamp":1789479528610,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/metamask.be3827d7.be3827d7.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hAr%2BAnfD8zQZAnd3OrukfkhU9bUABQm6A6%2Fw1YfA9fJ3PMZq5F7OjXqCX4KcpW2jfZN9vH1kN4aRe9%2FGTzu5qcU9M5MuSbh%2Blhh10r9xhF50cZSpfdM61ClVPQc%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-1a93\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808addfc656c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6803,"size_decoded":3227,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"be3827d7ecbdb1fb9c86c18a645a5f7f","sha1":"3ae6cdb811a256ff7adfa6770478eedce6429580","sha256":"6061e0da6f3515225e499d1a6b965869dc94326b635784aa7a1caad33f4adba8","sha512":"5afe10c98475889955dacb06d35ab87db1c866ff7770924f21332304fa28907fa8eb0ebdd18e9fca8ae5758d937b84267e7f7cfada9ec73a0d197a76af480c45","ssdeep":"192:Lju2UQ/TgTEcf3tajvWIpQ0JCQ42uesQuiR:L6zQ/Tgo4tAelsq2gDg","tlshash":"62e174ce2b2481f8a5c5e2edd706ec29edd54de47641c439cbd91e139a900aecca5cd3","first_seen":"2025-10-07T03:26:06.167528Z","last_seen":"2026-09-15T13:39:47.964966Z","times_seen":35,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/images/logo333.png","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.335Z","timestamp":1789479528335,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/images/logo333.png HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sj7PTQ9YkFp8hIBdresMwlymkW0VtbotOGd7uIjt6lQKF9soFIp1oJS57%2FLY2Ce36AC6u7JHc75xSzeS44%2FjOeCawTjeeMzaHls6k%2FBrZLsMn4EfbAt%2BNXrueuc%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-3b6a2\"\r\nexpires: Thu, 15 Oct 2026 13:38:48 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808ac1f8956c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":243362,"size_decoded":238035,"mime_type":"image/png","magic":"PNG image data, 741 x 764, 8-bit/color RGBA, non-interlaced","md5":"f6b1f7f927c2e2f55a061c06e17422fd","sha1":"7876c103cd8a636c813555b22c4f723b70613749","sha256":"be2a0096a92ab226c30be1f6e28ac8a9452959e4136f2a8c16776427544b1dd9","sha512":"a3039118d6cb6da9237c58fa565c979bcd00ea9e38f25a865523789eff6d0f6b955ed90c4d9e8aa85419bec475bceb875f5c56f63a23831433d787d6e8e8c7b5","ssdeep":"6144:+Pkbwjs88k/fjAW8H4gMWizUesUNtyy1oGef9i5dmMw4TCJ:+swsDe8WUMWizUMcjGef+ALJ","tlshash":"833412eacf97a573a3b4c7e12671bcd361cc6987d505108c0e5dc3d21e7c0878aaa578","first_seen":"2026-06-25T16:51:49.029889Z","last_seen":"2026-09-15T13:39:47.965559Z","times_seen":28,"resource_available":false,"data":null}},"time_used":2681,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":350,"receive":2331,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/security_audits__diligence.da2ff2d5.da2ff2d5.da2ff2d5.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.349Z","timestamp":1789479528349,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/security_audits__diligence.da2ff2d5.da2ff2d5.da2ff2d5.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q8Tw1S0eRxOJU2lNdjppVWA1qsb2f1FsrkpsM%2BnwZKdA0Bc75Emc2utUG480U1EnSlBU2Z69Cn347Xu3lYR%2BXNfq6zpFL%2BnEXXLtu%2BN77UjWETNYr1voZScaVP8%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-428d\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808ac2f9256c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17037,"size_decoded":5934,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4bc64493786e69d228627d5ab6a4be43","sha1":"8195db0d384d909eb85f6ae9ea0328d122032a5a","sha256":"966bafc442eb6670c2cc5086724c2c46666f980c401b76a4a1c40ef6d587210c","sha512":"a9bd21e8806b9faff8dd3165daa5f958e004135552d9b5792a1e28d3560ecf4fa3148389b4ff22c5ae2cd0d28c64af25075185a7c249628df67932b9ee9c8c56","ssdeep":"192:YCiouQRGTTt2O0Mb18tp53Sk4kRXogvlIv4NoAB8ebiu3OrfNH9uSZ0ttgPQRJM:2lTk13Sz46v4iABriu3eFHcy03gPQRK","tlshash":"4072cadc923586faf80443ade979443274a90ce63b90d368f6de0d767f13ce5682858b","first_seen":"2025-10-07T03:26:06.160778Z","last_seen":"2026-09-15T13:39:47.966112Z","times_seen":35,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.moyu-a15.xyz/index/index/clibox/u/6a95565417a04/t/1789479529/tk/80c8c1c231f1b55c379545d44003467f?lang=zh-tw","fqdn":"www.moyu-a15.xyz","domain":"moyu-a15.xyz","tld":"xyz"},"ip":{"addr":"104.21.26.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:57.717Z","timestamp":1789479537717,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moyu-a15.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 10:33:05 GMT","end":"Sat, 31 Oct 2026 11:31:18 GMT"},"fingerprint":{"sha1":"F1:37:09:37:BD:1C:D1:44:6D:D8:D0:E7:EB:44:70:B8:81:93:B0:8E","sha256":"34:30:C8:AF:D6:5B:8C:67:05:49:26:C3:A0:F2:32:65:9F:AF:D8:DE:AD:F2:D0:3A:1F:E2:AA:0F:44:87:0D:15"}}},"request":{"raw":"GET /index/index/clibox/u/6a95565417a04/t/1789479529/tk/80c8c1c231f1b55c379545d44003467f?lang=zh-tw HTTP/1.1\r\nHost: www.moyu-a15.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:58 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gecjbbEyVi7uKFhpXj1oC0dKnpsv239wQF406S8UFx9KoMvHtbRoPwFAobehN%2FzZUrmAWWb2LZB5toiZcXcPZ6fiqWnjcpznYrtIEgDC16aV7RQxKEo5zRjYADk98jLSHrx%2B\"}]}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3b808e79c772efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":8590,"size_decoded":3739,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"9bd7dcdffbb42846a027d6dc59edbe61","sha1":"2bdf0048d333976e4ad875840b6fb07e8ede6f52","sha256":"3855104003ebd3b6efdd005dd587abc5dc63aa4602545c54186fb6db05c9c351","sha512":"07245e9fd48ea991c76df0faa0bfdade0e2296ce46e7c6b6d579d4d0230631b0fd02e5dedbc65208197a9ee0b046a8d061fc9ada0d16b8cc013c952eecef83ce","ssdeep":"192:XsIc1WH1ZjV7mwFedHX9ckqRio/WoZ2/qHzRJs+NrKyZvHvhvavov+vR:XsIc1UmwFeNkiouokSHvsyhvHvhvavoK","tlshash":"b80296334cb340563c1280556b6d7b1daee5e113d61fc916b8dc69d4cf82ed68a2bbc8","first_seen":"2026-09-15T13:39:47.966641Z","last_seen":"2026-09-15T13:39:47.966641Z","times_seen":1,"resource_available":false,"data":null}},"time_used":801,"timings":{"blocked":-1,"dns":112,"connect":22,"send":0,"wait":667,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/furucmb.1d88a0d9.1d88a0d9.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.617Z","timestamp":1789479528617,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/furucmb.1d88a0d9.1d88a0d9.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NXMvvQWi%2FteyPIJKVFSEsKWfEPsrTA8A6XtNqwX29hS4Lhl8dFIFYC3yerZS6OsrF%2BAMavH6jDtBXyftHaUAiZY%2F12Fyta8d5W8b6lPmmEIgllyXZ77XmOB2as0%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-1985\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808addfcf56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6533,"size_decoded":2953,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1d88a0d98b9c1b3ccb96db96db6300e5","sha1":"86eaefed96b705de4bddfc60c68e4cdfcfe86d7a","sha256":"1e7783111b6d9f0e484fb76f08de0b11aa01eabb6cd208f6de97e52bd6006194","sha512":"1eec810042475003a7b948701932f9120896189c6de294fa8e9c46f4edd8807594a24fb03ea6952e0328e0acb95a93c721bd2f39bfe9cecb42650389f142a023","ssdeep":"96:9Ic7x7Mmz1VU+j0KSjunp2ZdMdo46GwXyG5gIcvcU6JLxa0t7vMOzNjfqSWZ4SF:9j7x4o1++jFdnQZyVwCGXc27jFE","tlshash":"71d12359332dc2a86a09e77d0b0f987a6b6654e0ee94e0a8cb512507bd414ff0d6dec3","first_seen":"2025-10-07T03:26:06.264219Z","last_seen":"2026-09-15T13:39:47.967665Z","times_seen":35,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":380,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.moyukefu.vip/static/common/images/kefu.png","fqdn":"static.moyukefu.vip","domain":"moyukefu.vip","tld":"vip"},"ip":{"addr":"172.67.189.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.moyu-a15.xyz/index/index/clibox/u/6a95565417a04/t/1789479529/tk/80c8c1c231f1b55c379545d44003467f?lang=zh-tw","date":"2026-09-15T13:38:58.592Z","timestamp":1789479538592,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moyukefu.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 06:28:42 GMT","end":"Tue, 10 Nov 2026 07:28:37 GMT"},"fingerprint":{"sha1":"DD:5C:88:F4:12:76:B9:65:65:2F:53:18:99:C6:9C:6B:A7:EA:42:3C","sha256":"25:88:A7:A0:B3:CC:A4:BE:1A:B9:4D:09:85:C4:4F:BA:F2:88:31:9E:0C:CD:52:06:31:C7:59:F0:80:A6:B2:B1"}}},"request":{"raw":"GET /static/common/images/kefu.png HTTP/1.1\r\nHost: static.moyukefu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.moyu-a15.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 05 Jul 2024 03:50:35 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=612BVsG0CZA2u8fGSJ6HcLZiqAv43NqDU%2Fyh%2BGyuGS2Kml9KLl%2FNLLh7%2BtnhbRB9gZH%2Fxlz7ubJ5MPDjU3uNGbJO7QYN2cYtQ%2FSMOBQ3WEz%2BNwhPzp1QOugvIUdgxrpKhA9I%2FoBd\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: \"66876d8b-405e\"\r\nexpires: Sun, 27 Sep 2026 05:38:38 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 1584019\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808ec3c8476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16478,"size_decoded":17006,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"0ac6f3436b26ae8d9af2887d9cdcf670","sha1":"452d7139d08e146c564f6985fc9b49cd20619980","sha256":"b328b34f3416e66433fd72375f8d4f230ab64814203cafda953acb1d13e6888c","sha512":"2a0498a19b4cb5c6415591764289d4ee57ab03bc69436ac0fe668b01a1013cb0e421fc2594a510ef7e9200bb1e99ea050916aeffb6cc90657e1cd03966cb2d31","ssdeep":"384:omraz9+lnGpnBwoFnpcsZOFUe3mEt633ONP1z0ZdoPFd3:otZpBBcsze39tseIZed3","tlshash":"b072d10fe5a26235212ef34019c3002ed225ce78c9d1e8d5f5c9a477bb9e1657c466b7","first_seen":"2026-09-15T13:29:24.1376Z","last_seen":"2026-09-15T13:39:47.968137Z","times_seen":3,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/unstoppable_domains.36136ae4.36136ae4.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.633Z","timestamp":1789479528633,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/unstoppable_domains.36136ae4.36136ae4.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FWGOXc0EPELAIwmdodkOIH2%2F%2FtrM%2FYs6ZV%2F0xI8fXxF4JZ9V%2FMjhXPOt%2F5YDYSAg5tQMHmT4geDxjPeqLjXJI1LpOyIj3tickiLx6hXXLafmwprzvY3wFa6r7sA%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-2431\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808adffde56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9265,"size_decoded":4397,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"36136ae4926ba3ef3e3f6d8710488adf","sha1":"318f0a28f979436e757ab387adadd5f15fadab5e","sha256":"6a7dd1fa04c4f426af81a6930b98279cde06e4fa0904291129c1d27843a78da0","sha512":"845fcbd91678ad63136ae191637002d0c2103be9f4b8e158f1488615a4b468302096b9ecbc4675204f29a8d34e8974916d57e7e15a6be098f7d2a6c7a68268bb","ssdeep":"192:l/cJ0HeTiLR8G4FDCDJRQUaFEDSJMm5VknUdj05y4pyA+Dx:1cJYRr+bwSJ/8nIj0MQyhDx","tlshash":"a212a6d4a7d6a3f8e109b3f5871059a9be0a69fe3d01e210c7ec1c56be1106ec819ce7","first_seen":"2025-10-07T03:26:06.154309Z","last_seen":"2026-09-15T13:39:47.968942Z","times_seen":35,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/ethereum.db6645a5.db6645a5.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.644Z","timestamp":1789479528644,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/ethereum.db6645a5.db6645a5.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ALp%2FDpjkcUugb0uOmB%2BDjujS1snjJ7aFeR8fWCy%2BOIp%2Bbw9Eu6SrA5MXHBuf1Rdr2992ixzrs3p6BVQXNBZrsJGuLw48fLDOuEiAYHd8CKMtcGm6Q4WRs9GNIPo%3D\"}]}\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a3bbb22-2a3\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a3b808ae0fea56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":675,"size_decoded":1014,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"db6645a5a3c3388fa9dfca945cafa951","sha1":"d5a0d3530f81b5b8c037f6bf0f97e5531272d266","sha256":"25cb88faa997399f1dfe71653605c1403cb9c8e8fb2e3ecc29f14f6bcac8d8e3","sha512":"5078464f29a8550d4e6a0a460a1f9189d26a9531041edab83c8741f6c40d062ba2ff17106638ea003ac1f7d8859afb984cf2991ed159cafb0d93097f67310812","ssdeep":"","tlshash":"770126d67158e724b0001336ca6e703954a76dd8f9b802846ac7290bb2d8cb74ca4ad2","first_seen":"2023-09-30T03:41:35Z","last_seen":"2026-09-15T13:39:47.969481Z","times_seen":68,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":346,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/wallet-logo.16b11b36.16b11b36.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:58.334Z","timestamp":1789479538334,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/wallet-logo.16b11b36.16b11b36.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6Imh6YlBpcUduclJDWGJPR3lzZENnT2c9PSIsInZhbHVlIjoidzRITll1aERqeWgvdDMwVGk0L2lvRFVxdEMwUDVyU2NHTWpQelJvSXAvNEFuTTZlMGNsWFc2MG4ySnl3MzFHbUd2TWh5N3BSRzFodW5Tei9ydDRnZzdHTC9WZjRRVjNsZGt3cnRSbEgzSXE0UEZ3eFZTU1BJazJHUnAvd05UWDciLCJtYWMiOiJlNTgwMThjNWJiODJmMmVlOGQxNzI1MDliZDFjZWE2MDY0MzZiNmEyNmZhOTU3Y2VmMDQwNDRkZTJhZWExMjhjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:58 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=auUGk0irQORLr7AK0qE0TCpUHlXHqDcMn2rHjwkRMQNDEdoupNWzHr56pZ%2BjLhEi6bR%2B9o00TYwmtTrt6dbJP5gj7WY%2Fh%2BTU1rxpcdqdpAywq%2FuPBi3pDKKVZN4%3D\"}]}\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a3bbb22-1a3\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a3b808ea9c7456c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":419,"size_decoded":926,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"16b11b365146cdc9e93d5c9d51576add","sha1":"839d5139a86b77b0746ef547834ebfe07f4d0590","sha256":"083b3cb5805f57c4472e9796e52c050d053abdd3a0a3e7d699d9ace96a97e089","sha512":"0ff9435c110adb630d66bec7661a808b20a69660187ca5bf5c9a7305d3247ef15e1bbdbcf05a54b1675d72f06b7595ed14160543942273372759bbfaa03945ae","ssdeep":"","tlshash":"7fe02b7450fded044d14c1055a7f76762a5933d3878c0348b40c1a65ff05bdb38166ac","first_seen":"2025-10-07T03:26:06.15652Z","last_seen":"2026-09-15T13:39:47.970067Z","times_seen":32,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/usdt.png","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.342Z","timestamp":1789479528342,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/usdt.png HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=86hqP9%2ByTkTRjO%2Fp1mRnshZ8qYSF%2BReOV0lpJ1gPAr9l8WLzKAdYfWB8bUa8nn4iQl6qECRS6%2FtZmiFCG5uC3zNnWp1dCRzk3M05IsZSxq3TECz2Za4fDaLqgSE%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-480\"\r\nexpires: Thu, 15 Oct 2026 13:38:48 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808ac2f8e56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1152,"size_decoded":1908,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"5c93c13b17ff91e4076e941d98ed2359","sha1":"1644b78c16ffa8cf4e7cb2f46553ce2c64b3a87b","sha256":"8aebc90206ac845cb92de57670afb95018b7555f7feb7cf763b1afb684363923","sha512":"a91b8983967854dfe841081185d3583ab0086f1f4e4bc758cadc1cd848e53ef68d779c985376d948819be49774ca3b647521ae5968bc55e3a55a08cfdf61a8ed","ssdeep":"","tlshash":"1e21b95da508a581f16a4a48821fd335779d5c84da04e2193d1032acce78d204feff5f","first_seen":"2023-05-25T23:01:30Z","last_seen":"2026-09-15T13:39:47.970673Z","times_seen":69,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/js/jquery-3.2.1.min.js","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.358Z","timestamp":1789479528358,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/js/jquery-3.2.1.min.js HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0O9CFWo%2Fvo7g42MqZD8XXI5z%2Ffkt%2FMPC%2Bnc8u65RROhPM3KZ0S7zN4fuFNFOsvAjg3oDUJziqiWJqHkreOZ01%2Fq%2FJmRVTfAtp4LHtaXB8QscffxalWya8lDSRfY%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-17b8a\"\r\nexpires: Wed, 16 Sep 2026 01:38:48 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808ac3f9b56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97162,"size_decoded":34743,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32077)","md5":"0fca26b5a37a66d68d0f4406976be4b5","sha1":"ee000eb654b3bd37185665d3901e93b34ce1aa52","sha256":"8c2812ded6436715279f8fd8db58de307aa39ab0296fe3cf0e879067c51e9b18","sha512":"cf010995991a8f8b50cfb4b466d3b457b0a6addc4f2fd96c48c33d40ac251de400894828ccd99662b13fc9ca25c676ef0aee05faa4910530ff9996d03c411645","ssdeep":"1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp94:t4J+R3jL5TCOauTwD6FdnCVQNea98HrF","tlshash":"7a93d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","first_seen":"2023-03-07T01:06:51Z","last_seen":"2026-09-15T13:39:47.971304Z","times_seen":8304,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/trustwallet.c6f5bc8e.c6f5bc8e.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.612Z","timestamp":1789479528612,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/trustwallet.c6f5bc8e.c6f5bc8e.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JF%2FCxoPXV3%2FDpndCroqOLCJTrTLOhBzr7eVzqRsI2RaIgCebjxa3%2BtkSYr6RZXy1YFfPrpM29Ufx8EH%2BTzAhVt8U4VTuEPQv5wkyGRWALZxGxyzlNgYhDKlHuKY%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-1c35\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808addfca56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7221,"size_decoded":3818,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c6f5bc8e00aa0b451adadac30f696305","sha1":"ce688c85dd9fd7d8d5fa150c3fbdb76c7d22f43e","sha256":"06637c493c4e3b566c6b186ae6581ba1884b2b277fd37161407937ef7d87253b","sha512":"5aa917db29a92b1b8383445b6416189e19e5e8ceae00e432bf5f2334beeb2f7b30e45dc929cdcb5e939cde70e27d9094707787ca8dbd5b549a2220111a02622c","ssdeep":"192:LcKJuR4ER9jAC22HKDNniHrGzGMCbozAAlkuX:IKJ0HzjACxqDN8GGMCbozAAquX","tlshash":"c6e174ceab130778f141b1fca61248b93e82efeabd20d6a9c7a40c46956516c4d22cd7","first_seen":"2025-10-07T03:26:06.201321Z","last_seen":"2026-09-15T13:39:47.971894Z","times_seen":35,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/chainlink.441846ba.441846ba.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.623Z","timestamp":1789479528623,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/chainlink.441846ba.441846ba.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LcyBrEH2wqqUSOuOjeJnCDuT7vrHA%2B8pEt%2FR65cizZaimTfuCCRgHE6OGhJWgloiNCTHzwVpNQlAEB5%2BUsWI61PpEbF7C2KUa54WsRhI7F675PptWw4JIJ0lBd8%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-16fa\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808adefd556c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5882,"size_decoded":3278,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"441846baa4ce12c9b969be28de61942f","sha1":"b4057fcdca8697350aa224b24ab5a0def796678f","sha256":"5c1eb81359600f71bdf973ab20e35142cf2920d6a9d17416fd27834a49bfe912","sha512":"e44742d41ab020cf8dc4f6ac66d473816cd068d0b91e09a39adcc2f0da8c4c7ed73121b5730c6fb7474a95ddb9feb51627a7c12f482d869bbf751220d5b57f49","ssdeep":"96:L3CgyGRnGDjlCuzdWqGSF9+kZFetwtrf79pQqJECvZ6Jzw9afOjio6myNNymJQMl:7XyxNRzp+k6e79arIUJc9afOWo6BNgnK","tlshash":"afc1c78e7bb653a8f245e6fdd746507c3e0a48e4a981cd38c7a86c0b950a48ecc758c3","first_seen":"2025-10-07T03:26:06.173055Z","last_seen":"2026-09-15T13:39:47.972509Z","times_seen":35,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/api?address=false","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:57.735Z","timestamp":1789479537735,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /api?address=false HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Dy5GfdqQSrPsqNLMaj0xJyPGv9s51RYIcwipUAA61VzS%2FybjzxwCTPoTf3QADHZkUOYH0foGniionSjZetUpKbV8C7KZqmm3qKILCCBeKY4bo%2Fe0xCcIIMYBv0%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Tue, 15 Sep 2026 13:38:58 GMT\r\nset-cookie: laravel_session=eyJpdiI6Imh6YlBpcUduclJDWGJPR3lzZENnT2c9PSIsInZhbHVlIjoidzRITll1aERqeWgvdDMwVGk0L2lvRFVxdEMwUDVyU2NHTWpQelJvSXAvNEFuTTZlMGNsWFc2MG4ySnl3MzFHbUd2TWh5N3BSRzFodW5Tei9ydDRnZzdHTC9WZjRRVjNsZGt3cnRSbEgzSXE0UEZ3eFZTU1BJazJHUnAvd05UWDciLCJtYWMiOiJlNTgwMThjNWJiODJmMmVlOGQxNzI1MDliZDFjZWE2MDY0MzZiNmEyNmZhOTU3Y2VmMDQwNDRkZTJhZWExMjhjIiwidGFnIjoiIn0%3D; expires=Tue, 15 Sep 2026 15:38:58 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808e6dc4b56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"laravel_session","value":"eyJpdiI6Imh6YlBpcUduclJDWGJPR3lzZENnT2c9PSIsInZhbHVlIjoidzRITll1aERqeWgvdDMwVGk0L2lvRFVxdEMwUDVyU2NHTWpQelJvSXAvNEFuTTZlMGNsWFc2MG4ySnl3MzFHbUd2TWh5N3BSRzFodW5Tei9ydDRnZzdHTC9WZjRRVjNsZGt3cnRSbEgzSXE0UEZ3eFZTU1BJazJHUnAvd05UWDciLCJtYWMiOiJlNTgwMThjNWJiODJmMmVlOGQxNzI1MDliZDFjZWE2MDY0MzZiNmEyNmZhOTU3Y2VmMDQwNDRkZTJhZWExMjhjIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-09-15T15:38:58Z","raw_expires":"Tue, 15 Sep 2026 15:38:58 GMT","max_age":7200,"secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"laravel_session=eyJpdiI6Imh6YlBpcUduclJDWGJPR3lzZENnT2c9PSIsInZhbHVlIjoidzRITll1aERqeWgvdDMwVGk0L2lvRFVxdEMwUDVyU2NHTWpQelJvSXAvNEFuTTZlMGNsWFc2MG4ySnl3MzFHbUd2TWh5N3BSRzFodW5Tei9ydDRnZzdHTC9WZjRRVjNsZGt3cnRSbEgzSXE0UEZ3eFZTU1BJazJHUnAvd05UWDciLCJtYWMiOiJlNTgwMThjNWJiODJmMmVlOGQxNzI1MDliZDFjZWE2MDY0MzZiNmEyNmZhOTU3Y2VmMDQwNDRkZTJhZWExMjhjIiwidGFnIjoiIn0%3D; expires=Tue, 15 Sep 2026 15:38:58 GMT; Max-Age=7200; path=/; httponly; samesite=lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":10320,"size_decoded":4689,"mime_type":"application/json","magic":"JSON text data","md5":"0c69068d3d8c1ea5773761469b34d467","sha1":"f2507168bcde9c2dd311a2279a4309de319ea430","sha256":"3de02a4182737fd60693ca46ee3a5af9ff51a378885c4e01af0d45887db61fec","sha512":"490d4bdaa79ef248d568aefbb875686c5e56fc240d7c00c76d53a47c0366c41043d4b3be4037e2bfc29a219518c44c638a42d09bac7e8126b72daafd2065946a","ssdeep":"96:yj3xEsNM9bjNQMdQfTCQzspT9rPZp0D7HKu+alGglrCFgy4N8xfztd4Yfq5KNGLX:wisOBN8eQzsp5ZqPKuplGE/q8f5KNGLX","tlshash":"86226022840c7e6ab855bb24866f48265cc63bc84bbc4309509fd87356f077f9da72f9","first_seen":"2026-09-15T13:39:47.973092Z","last_seen":"2026-09-15T13:39:47.973092Z","times_seen":1,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":403,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.moyukefu.vip/static/common/images/chat-jia.png","fqdn":"static.moyukefu.vip","domain":"moyukefu.vip","tld":"vip"},"ip":{"addr":"172.67.189.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.moyu-a15.xyz/index/index/clibox/u/6a95565417a04/t/1789479529/tk/80c8c1c231f1b55c379545d44003467f?lang=zh-tw","date":"2026-09-15T13:38:58.595Z","timestamp":1789479538595,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moyukefu.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 06:28:42 GMT","end":"Tue, 10 Nov 2026 07:28:37 GMT"},"fingerprint":{"sha1":"DD:5C:88:F4:12:76:B9:65:65:2F:53:18:99:C6:9C:6B:A7:EA:42:3C","sha256":"25:88:A7:A0:B3:CC:A4:BE:1A:B9:4D:09:85:C4:4F:BA:F2:88:31:9E:0C:CD:52:06:31:C7:59:F0:80:A6:B2:B1"}}},"request":{"raw":"GET /static/common/images/chat-jia.png HTTP/1.1\r\nHost: static.moyukefu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.moyu-a15.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 18 Nov 2021 11:35:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6%2FyvcdqHR%2FVzQn74IiQH3LdbHUSZyOiKvX8zBcZyhfO%2BZULulRzEo1AFmKlM8WNba65R5tJWc6F5bouXmuoOujex8fDelECXtxtebETxjHhvVxQTbIudWAQdBEgN%2F46iZOwCEVA7\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: \"61963a8c-f98\"\r\nexpires: Sun, 27 Sep 2026 05:40:42 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 1583895\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808ec3c8776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3992,"size_decoded":4764,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"8323d3bb8c8adbe5e314aa7f2a17be77","sha1":"891b679109104b2cb25e6e279b41685645b3a371","sha256":"baea69b87dd71d79519cf4f2448dc59ecbead0151fe99f1ca4e46821f1e534d2","sha512":"2ce613e0affefbaa5417de929a28a12e3a41004b5d398c9884e55c7adc3f3a65339e27934ad93e8e2ca207f4f1f1c1a18101934844331c8f109dc1d6793ec8a5","ssdeep":"","tlshash":"67817e8a8061851610094b7e387f8e064a13ee8893691f0c9ebda25e85348907c3a26e","first_seen":"2026-09-15T13:29:24.139321Z","last_seen":"2026-09-15T13:39:47.974107Z","times_seen":3,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/synthetix.1dc7e151.1dc7e151.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.630Z","timestamp":1789479528630,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/synthetix.1dc7e151.1dc7e151.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BZ6YLQEZDdWSHOLxwSOm0DBC4oLFO8bFvFWlJ7B01i7RUnQmayvmDEdNTO4GJDGKYvI3WzXKoCMoradLezHz7VeRFVHCRf8BPbkB07uGemwKSv%2FKEdXNd1DB4%2BQ%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-200c\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808adffdb56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8204,"size_decoded":3621,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1dc7e151b9b2618f01e3d7059fd6baae","sha1":"2e967af03cbc6613bf53b06b614ce3b87d9ea2cf","sha256":"29e7e80b834f898f875afdb3d1e1e0abcd93dfbdb6cd9b175c9dd6549a144707","sha512":"dd83326683b0a024c5e71aa97698c808d39ff922e5056d5244a66ae321501ac16dfb4c6b38eb0750be6f07904b56b0fb1f0269d72bc603d0182a6744a3c767b4","ssdeep":"192:XV66/LMAzmmiMOfoUvtONSapsJ7dW29qxXfzDqhEIUGZmvTOK:XV669mmiMrOtOUaqWQqxvzK3svCK","tlshash":"c802a5cce7b051e4d1c4f7e9951bd4f463425d822e62bb2daba63c41ee210cf91a28c3","first_seen":"2025-10-07T03:26:06.133133Z","last_seen":"2026-09-15T13:39:47.974685Z","times_seen":35,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/calendar_today.8f7bc0bf.8f7bc0bf.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.645Z","timestamp":1789479528645,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/calendar_today.8f7bc0bf.8f7bc0bf.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DwRKVdHJBUSGikcYbfaEyqpf1cMWLokg6KmMpzuOF7PzH%2FrnbGcFF%2FT3bv%2BEFxA5gtTNMRcFIRfdvHGMOla9cfJKtCqSToxY73XqX%2FHRc97OEug1fBgOZY0UIY0%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-d21\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808ae0feb56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3361,"size_decoded":1656,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8f7bc0bfd125268a67b7976d6c872877","sha1":"19ca38b8315ffcec711035c27d9665cbbb9c5d39","sha256":"29941329072ba98cc33fe82fb98334899f44a2b85630256aa5dc9a536a5b567c","sha512":"ac3c44a44a793960d9de7b2dfbf8016b2b9fb7d3698031b826da36e4470d81bd7c8e55090e1a99f088f85b33be95589c51031068f2e8ded95b641adf5fca0783","ssdeep":"","tlshash":"83617648e6ceabb8ed0e5781d395f5ce383f20fbd9a8cd8648005853cd9117a2d199a2","first_seen":"2025-10-07T03:26:06.209Z","last_seen":"2026-09-15T13:39:47.975241Z","times_seen":33,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.moyukefu.vip/static/common/js/jqueryWeui/jquery-weui.min.css","fqdn":"static.moyukefu.vip","domain":"moyukefu.vip","tld":"vip"},"ip":{"addr":"172.67.189.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.moyu-a15.xyz/index/index/clibox/u/6a95565417a04/t/1789479529/tk/80c8c1c231f1b55c379545d44003467f?lang=zh-tw","date":"2026-09-15T13:38:58.577Z","timestamp":1789479538577,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moyukefu.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 06:28:42 GMT","end":"Tue, 10 Nov 2026 07:28:37 GMT"},"fingerprint":{"sha1":"DD:5C:88:F4:12:76:B9:65:65:2F:53:18:99:C6:9C:6B:A7:EA:42:3C","sha256":"25:88:A7:A0:B3:CC:A4:BE:1A:B9:4D:09:85:C4:4F:BA:F2:88:31:9E:0C:CD:52:06:31:C7:59:F0:80:A6:B2:B1"}}},"request":{"raw":"GET /static/common/js/jqueryWeui/jquery-weui.min.css HTTP/1.1\r\nHost: static.moyukefu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.moyu-a15.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 02 Sep 2021 03:12:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F3xGvfFantxG13US58svk1qtJVeUZ2k7Q7FhYqlC2E37jIf5NtKPgGZYIrVcshAH%2B27MZQHFnCHrDqMUvOLeqZCITRh%2B1EJdqnVxu7ZWeg%2FB7TTP%2BMU1X6R9rUjqVZ1%2FMRcrQgvD\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6130410c-dae4\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808ec1c7a76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56036,"size_decoded":10585,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (55936)","md5":"f1b1208d27520d1e416d2cc8afacf82c","sha1":"d24e4dc7f758795359fe1b490bcb528e5543bc58","sha256":"64bdd05bb3b85a2252a1e599d0f58b216d1cf611797bdca88809c46aaa1abac0","sha512":"a71d863b0dba6bda62474a7945352415872db9f36efd7f47192e0e4d5ef20aff35623365c0af7542a922e369160e9bceffb73187b30ea63010fffbe792e150e3","ssdeep":"768:ZFraDz6UL96OpVHfiMHtI7RzLI7pMDpLpeZ:ZFr6632HfiEt67pLpC","tlshash":"7d43991f4701326a7622471ee3d69f6c871ac5435f632ced22127d1acbcb64522eb98b","first_seen":"2025-04-14T15:50:03.341554Z","last_seen":"2026-09-15T13:39:47.975804Z","times_seen":32,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://wss.moyukefu.vip:2020/6a95565417a04-1789479538-02ba71cfdcfbc4baf2ab9d5e1ca12e12/websocket","fqdn":"wss.moyukefu.vip","domain":"moyukefu.vip","tld":"vip"},"ip":{"addr":"47.243.31.15","port":2020,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://www.moyu-a15.xyz/index/index/clibox/u/6a95565417a04/t/1789479529/tk/80c8c1c231f1b55c379545d44003467f?lang=zh-tw","date":"2026-09-15T13:38:58.855Z","timestamp":1789479538855,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wss.moyukefu.vip","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 15:19:43 GMT","end":"Sat, 28 Nov 2026 15:19:42 GMT"},"fingerprint":{"sha1":"9C:FD:BD:65:E2:D6:99:D9:BF:B4:8E:CA:A9:B8:7D:22:53:A1:CE:B1","sha256":"2F:B6:69:4E:0B:A5:E1:92:3D:84:71:E3:54:99:3F:BC:84:34:46:C6:0F:4F:32:1C:04:29:82:21:FB:66:B9:79"}}},"request":{"raw":"GET /6a95565417a04-1789479538-02ba71cfdcfbc4baf2ab9d5e1ca12e12/websocket HTTP/1.1\r\nHost: wss.moyukefu.vip:2020\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://www.moyu-a15.xyz\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: YiE2lqGkWVf3ZSR3xpIc3g==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nUpgrade: websocket\r\nSec-WebSocket-Version: 13\r\nConnection: Upgrade\r\nSec-WebSocket-Accept: EyZAEQJSe9EXTHE3gZKPjbICsxM=\r\nServer: workerman/4.0.4\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":181,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T16:51:39.996945Z","times_seen":18478937,"resource_available":true,"data":null}},"time_used":2259,"timings":{"blocked":0,"dns":3,"connect":272,"send":0,"wait":273,"receive":0,"ssl":1710},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://wss.moyukefu.vip:2020/6a95565417a04-1789479538-02ba71cfdcfbc4baf2ab9d5e1ca12e12/websocket","fqdn":"wss.moyukefu.vip","domain":"moyukefu.vip","tld":"vip"},"ip":{"addr":"47.243.31.15","port":2020,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://www.moyu-a15.xyz/index/index/clibox/u/6a95565417a04/t/1789479529/tk/80c8c1c231f1b55c379545d44003467f?lang=zh-tw","date":"2026-09-15T13:39:01.862Z","timestamp":1789479541862,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wss.moyukefu.vip","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 15:19:43 GMT","end":"Sat, 28 Nov 2026 15:19:42 GMT"},"fingerprint":{"sha1":"9C:FD:BD:65:E2:D6:99:D9:BF:B4:8E:CA:A9:B8:7D:22:53:A1:CE:B1","sha256":"2F:B6:69:4E:0B:A5:E1:92:3D:84:71:E3:54:99:3F:BC:84:34:46:C6:0F:4F:32:1C:04:29:82:21:FB:66:B9:79"}}},"request":{"raw":"GET /6a95565417a04-1789479538-02ba71cfdcfbc4baf2ab9d5e1ca12e12/websocket HTTP/1.1\r\nHost: wss.moyukefu.vip:2020\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://www.moyu-a15.xyz\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: KqUXTWi5ARIeWWuAVtRlpw==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nUpgrade: websocket\r\nSec-WebSocket-Version: 13\r\nConnection: Upgrade\r\nSec-WebSocket-Accept: cNnoSIYP5BegyZ38PkAaD7dv3Iw=\r\nServer: workerman/4.0.4\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":181,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T16:51:39.996945Z","times_seen":18478937,"resource_available":true,"data":null}},"time_used":1078,"timings":{"blocked":0,"dns":0,"connect":266,"send":0,"wait":272,"receive":0,"ssl":540},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/graph.6d284b0b.6d284b0b.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.624Z","timestamp":1789479528624,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/graph.6d284b0b.6d284b0b.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L%2F8HbOuUHGtpqk39kXzVJYWYPCYttlFCW8jbdXq56YSMi3GdXM0PbhzDUKsIVGo4ixaGpcmxYaKleUB2%2BLLtzMu0yi8gOVy3tkE8c0szPUyJBNhyA2F7bICokM8%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-282f\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808adefd656c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10287,"size_decoded":5102,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6d284b0b376ebde014370ec27dcb40d8","sha1":"ce3bc044bd2ccad1fe3eda013db2163c4067aeb1","sha256":"f08c55134bcd9173a8b6f7863e34940767e44a8360368663110b1e3fb9c8cf72","sha512":"569fa73d70fcda41629bf3492733a427e6de4f5424724fc9a44058164c932bda42a3fd38d6141c17af640b5e2cd80b0e22ff4f05f4263701f9df8b603eb6e6b2","ssdeep":"192:dFOItW9PP6wmleN3itJ94FikftBWTZL8eJtAxE2vblihnzRMGHutLCseRhsAX/9N:d0IwPylehgJ9OictAZoeJtkEUoMTxe7J","tlshash":"ab22b9cc775563f8e00ad3daca1d51a9771facfa2512cc78c7a92d4995624afca01cc3","first_seen":"2025-10-07T03:26:06.130613Z","last_seen":"2026-09-15T13:39:47.977127Z","times_seen":35,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/gnosis.130f219f.130f219f.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.629Z","timestamp":1789479528629,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/gnosis.130f219f.130f219f.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XnOe2PZjEcxHf9w6KnrnS92NPELQ3GtIWgHHzTyzYFPwsjOGTBBnmiBqaYhM2ziOArF6guL8uZ51LoBQ3V4qUL7G43sDkftOxHKamxvUyCJMJzVRZkkUdUo7QH4%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-1713\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808adefda56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5907,"size_decoded":3349,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"130f219fa7128dfe37d38ee62050b0d1","sha1":"0ae78c0c65d5dc2acb1abd46ff585acbf04b3b3c","sha256":"670fd67ba9be738032863f50d4633385047bf4e32bcf621ee6c73cadfccf0fb7","sha512":"8ba79098dea5565b4d7e5c17313541146d33e032eebdc9631c28abee4db3138e11d8cba54e81e11ce2580f65fdee76380022481bb796a90138c01f3e058f5df5","ssdeep":"96:LbcNgsh8bYyXUzv8L/MjmWLk0W8cprpkfeK4+X/6OXH+ySJFueVAEXjabXVJdmaa:HatqbYyXUWMjmW40qprpkfeK4U6OXK40","tlshash":"fbc161dd9b6082b8f005f2fdc65394b8be659cf22e46c835cbe90c0aa49509d9c64cd7","first_seen":"2025-10-07T03:26:06.254575Z","last_seen":"2026-09-15T13:39:47.977714Z","times_seen":35,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":361,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.moyukefu.vip/static/common/images/chat/chat-1.png","fqdn":"static.moyukefu.vip","domain":"moyukefu.vip","tld":"vip"},"ip":{"addr":"172.67.189.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:57.718Z","timestamp":1789479537718,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moyukefu.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 06:28:42 GMT","end":"Tue, 10 Nov 2026 07:28:37 GMT"},"fingerprint":{"sha1":"DD:5C:88:F4:12:76:B9:65:65:2F:53:18:99:C6:9C:6B:A7:EA:42:3C","sha256":"25:88:A7:A0:B3:CC:A4:BE:1A:B9:4D:09:85:C4:4F:BA:F2:88:31:9E:0C:CD:52:06:31:C7:59:F0:80:A6:B2:B1"}}},"request":{"raw":"GET /static/common/images/chat/chat-1.png HTTP/1.1\r\nHost: static.moyukefu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:58 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 02 Sep 2021 03:12:12 GMT\r\npriority: u=5,i\r\netag: \"6130410c-1cc\"\r\nexpires: Tue, 29 Sep 2026 21:11:18 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WeRIqRleBTKQb8uptY%2F%2BqYhEB3I7GOfSCw3F%2FU6v3kvOLmJrp2o3Ki7UfTy4ACC7iW6mrOGYw4%2FCYDwcQuaQ4sbAwnKMWG9V6M%2FyY4rbPqYwZe1SCCyZOecPcZc7dFMkRoi%2Fs0Mg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808e6eb4576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 460\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":460,"size_decoded":1195,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit gray+alpha, non-interlaced","md5":"9eca74c447e6baba2029366c9bebecc8","sha1":"ebf49fe7f771d0fe13f4d7b1414f7f9872908fd3","sha256":"0a188690ca51251a1660386a6ff2149cab036debc3f42d9db98170b915164eb3","sha512":"af1f5bef32efc749e57157dcf62921f57f0fd6b85d09179395790797a1b185bd6bffada8b2e9cebad6c411d45d97e5902ea971a68954022c4462f675e7cdec5b","ssdeep":"","tlshash":"9bf023121032ac3efd855f66473f44329833c5ff148571ac450644f22cf580090cab43","first_seen":"2023-06-17T21:56:25Z","last_seen":"2026-09-15T13:39:47.978543Z","times_seen":15,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":0,"dns":12,"connect":13,"send":0,"wait":273,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/unstoppablewallet.bef8a344.bef8a344.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.636Z","timestamp":1789479528636,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/unstoppablewallet.bef8a344.bef8a344.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1owgb%2B03KlLcDPkKiZZPEb0Cy2vqk8n%2BSQWt5l576wbFoS9sGqXh9yhQnhi%2F9V%2BegibHXpqL6aV9%2BWvRE3MVo4TYMxVsFNz2UW6e9sAsK2UzknZM9VL9%2F44dAnE%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-11b7\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808adffe456c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4535,"size_decoded":2450,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bef8a344b82e4388c07f419be684cf67","sha1":"a30a9e0d8b63bd0d1d565fcf23441f735d287a46","sha256":"eefe56b2253f78acdd6fa25d471f2bd4f32d6954e849b1aa9c4319c7a12750a4","sha512":"51362342e9afa65548aed7e74b48c62d96897385d85cf1400a1cffcc579aeed52585bb66e33eb556b079dfa07d0952fc81b090deb53eba91f0822fdba3988857","ssdeep":"96:L+Sf84RLvT6fXWoiOHt8mADKv1SkKVH5pSs6TAa7Sr4d2u/M0XzkSWEHRaX:AMTT6vZz8mADKv1SxH5AasScE0bWr","tlshash":"68916698777092fcbcc66378972158aea4272d9c39b1d07c83c96817e2d309e885c9d7","first_seen":"2025-10-07T03:26:06.216246Z","last_seen":"2026-09-15T13:39:47.97907Z","times_seen":35,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":353,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.moyukefu.vip/static/common/css/iconfont.css","fqdn":"static.moyukefu.vip","domain":"moyukefu.vip","tld":"vip"},"ip":{"addr":"172.67.189.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.moyu-a15.xyz/index/index/clibox/u/6a95565417a04/t/1789479529/tk/80c8c1c231f1b55c379545d44003467f?lang=zh-tw","date":"2026-09-15T13:38:58.579Z","timestamp":1789479538579,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moyukefu.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 06:28:42 GMT","end":"Tue, 10 Nov 2026 07:28:37 GMT"},"fingerprint":{"sha1":"DD:5C:88:F4:12:76:B9:65:65:2F:53:18:99:C6:9C:6B:A7:EA:42:3C","sha256":"25:88:A7:A0:B3:CC:A4:BE:1A:B9:4D:09:85:C4:4F:BA:F2:88:31:9E:0C:CD:52:06:31:C7:59:F0:80:A6:B2:B1"}}},"request":{"raw":"GET /static/common/css/iconfont.css HTTP/1.1\r\nHost: static.moyukefu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.moyu-a15.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 02 Sep 2021 03:12:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N7EHZ%2FLW4tA5uVQ1LydcCybpfRKbYzYjsv9kOXA2Pi6pVogwAAmR7Tswp1vgjzRQn9V%2FRyf4DSQcTw2wbAv8WtlaVdJjpkojzvro9DWFNtZcTGoUFhkqhqEuvU4aGZ3HXZltmSG7\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6130410c-794\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808ec2c7c76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1940,"size_decoded":2085,"mime_type":"text/css","magic":"ASCII text, with very long lines (1245)","md5":"cfd403fe22d90d4858fd76c352bc3894","sha1":"93ba9c459bb2529d258556e38c37ec1984bf99fa","sha256":"89621b7f8a3e4d3d36780420b18e7a94e17afdd35b8a8faa0701f24d1bc47b53","sha512":"0476226979cf90c8774f4c3a13d07090b97f483918ff2b1d6fd533bb51640db589c85d30ad34f701c36963eec214d600924828479de11b840f18e83e66ee1f8e","ssdeep":"","tlshash":"e841c87249dd7cb217c03c66b18b7d524e44318f4a0a889fe2781a395cf7fa0d20974c","first_seen":"2023-06-17T21:56:25Z","last_seen":"2026-09-15T13:39:47.97959Z","times_seen":33,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/css/lottery.css","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.308Z","timestamp":1789479528308,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/css/lottery.css HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6%2FNI4x4QdO9exs0QqfOzfvMoJj4GD1jjg4%2BEwsHmjVFUPrplaO9pNPN49xs5Yfm7RaQgg%2FB4kAjNf2FCqZtTDI6EzIamag%2BMY4o%2BcP%2BnXE42ddPm1ORJT%2B2VnZY%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-17eb\"\r\nexpires: Wed, 16 Sep 2026 01:38:48 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808abef8656c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6123,"size_decoded":1784,"mime_type":"text/css","magic":"ASCII text","md5":"627b01cc459f8fc5b7a5da5f86b0e506","sha1":"1eac7f9a9051aff4b5be072a335c4a7289182ecb","sha256":"8e949c1fb1a40c310740992b0d017a1e9472092b93743b4ff00371429caa335b","sha512":"0fb9a61cd74f43908fe5e736ff889da7dc2a4efb4a7b4e4ea7f9e04af0fde009dac3e6f74675d005255673b34dd09379233f403b74d676661df3d809e6d6d207","ssdeep":"96:XA0yBGAu4bHbJ2uQhHU5X+qfNMRqeZHFEaFICWrGo1p2A28q0Ng1a2TPxGJVBK7U:py4Au4bHbQuQhHU5X+qfNMRqeZHFEaFQ","tlshash":"1cc16a103a630a80bb3fd9c617ed47181209714b6dce8dadb79931190f4a9bce5dbbc8","first_seen":"2025-10-07T03:26:06.158344Z","last_seen":"2026-09-15T13:39:47.980156Z","times_seen":32,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/menu_2.a814613e.a814613e.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.338Z","timestamp":1789479528338,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/menu_2.a814613e.a814613e.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QP61bljYrJEo7BqrzLXrLjatIdDgRtxOhX2tnM4W7DOgSBXgNgSXU66%2F3%2Bvq367y76XRTuYCtjRvl0ITOOuMvDU9lDjkD9BkvC5DVKk9KWrLy%2F4jbpsI0P0HpS4%3D\"}]}\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a3bbb22-bb\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a3b808ac1f8a56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":187,"size_decoded":822,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a814613e14b69f731068d0365d6ada40","sha1":"61b6f95dbdcacde05d107c8655c6872fd4d43d83","sha256":"bb762b87855427b868822805bffde274eb434cd3803ab5a2a80e502870a4ef4d","sha512":"252487049bbf744f61b33fba0873def5aeca3494e5b6e09600be6429c7b42daeabca50f4bbb42c72b4bd49d0c9f15b669be828a2497ab54983f19856dec442ee","ssdeep":"","tlshash":"9dc0c04f511c4e2cf215c600e3ac3d22847d1083018c00f9cc134030510d569ac333ec","first_seen":"2023-05-18T20:29:20Z","last_seen":"2026-09-15T13:39:47.980717Z","times_seen":92,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":328,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/js/bignumber.min.js","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.352Z","timestamp":1789479528352,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/js/bignumber.min.js HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wvv%2BI3P61hQeAcL7t%2B8RryjlvjWVlQw5LeTK6C1mNYUjZ3rzeF5bhQbZxqliGbUjH56j20Vn5jwfXAmsvVI9MVVF%2FTNCFPxkUwqE49t0e7Bfq%2FcR2KkeNAkNGb4%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-4885\"\r\nexpires: Wed, 16 Sep 2026 01:38:48 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808ac3f9556c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18565,"size_decoded":8961,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18564), with no line terminators","md5":"220b87873ab81287f915af82e3ba9a33","sha1":"ced2ebc27d644716effa64115643dd1770ba04eb","sha256":"266103c2cedfaf94d60f5a638555639fb2b86f2b66386660fd3d057715ebf463","sha512":"ddd12920edadffa6de43bed4fda62056a26999291cbd6b9314ee1684242b4a2dad49057753e938a65c122a554ec4a89bb2777a67fd1ebe60a5b0c9782d567b22","ssdeep":"384:W/NxaJsOM+a9fxrSZwieoa+gPIbMPzvP22niiXuB/CeTa4pLG950/GrVh:0xdxcZ9epPzP2/VlTDiX0/6","tlshash":"e582fcd875e3f09d62ff20e100e75443e17a9f0ba84c1976a2509496b831ddba2aff35","first_seen":"2023-03-07T12:03:15Z","last_seen":"2026-09-15T13:39:47.981301Z","times_seen":830,"resource_available":true,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/svgexport-2.png","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.642Z","timestamp":1789479528642,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/svgexport-2.png HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\npriority: u=5,i\r\netag: \"6a3bbb22-34c\"\r\nexpires: Thu, 15 Oct 2026 13:38:48 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IZ%2BVnOvROakebCSgKVl33hq3lnP2EuM6%2FxgH7LMFqu%2F%2FveBE5viRoqOto3ZCBzRvUrpk4hGD84zruZI2DtQse%2FD%2FnyPFmu%2BPFCBLtLPZc4xNpGa%2Bykfaf5IG1%2B8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808ae0fe856c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 844\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":844,"size_decoded":1576,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"d96be76bb5d8d7657f2abd077de64379","sha1":"96f4499276e20886488e34fe641c2a3129551061","sha256":"a04a779c67646c86803f987bfd1fcadca2444b3d7834bd501cf55267b0e8b0d2","sha512":"3eadb8f3dc4df4e64a4d073b5b3d6d1eb9ab8ce2e35d207734e331f36c7d32b7fd7b7bd4160480738c0e2bba1356c6fd9ef69bb4356c3ec3ac7ab0fe5e203a59","ssdeep":"","tlshash":"d40175a3c71ba954c9dd6b314ccb6e720a0b917d4261062f020b7fc75c8777b20da207","first_seen":"2025-10-07T03:26:06.279142Z","last_seen":"2026-09-15T13:39:47.98189Z","times_seen":34,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.moyukefu.vip/static/common/js/jquery.min.js","fqdn":"static.moyukefu.vip","domain":"moyukefu.vip","tld":"vip"},"ip":{"addr":"172.67.189.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.moyu-a15.xyz/index/index/clibox/u/6a95565417a04/t/1789479529/tk/80c8c1c231f1b55c379545d44003467f?lang=zh-tw","date":"2026-09-15T13:38:58.583Z","timestamp":1789479538583,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moyukefu.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 06:28:42 GMT","end":"Tue, 10 Nov 2026 07:28:37 GMT"},"fingerprint":{"sha1":"DD:5C:88:F4:12:76:B9:65:65:2F:53:18:99:C6:9C:6B:A7:EA:42:3C","sha256":"25:88:A7:A0:B3:CC:A4:BE:1A:B9:4D:09:85:C4:4F:BA:F2:88:31:9E:0C:CD:52:06:31:C7:59:F0:80:A6:B2:B1"}}},"request":{"raw":"GET /static/common/js/jquery.min.js HTTP/1.1\r\nHost: static.moyukefu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.moyu-a15.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 02 Sep 2021 03:12:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ejzi7KViFn7EuRTQ2WganVa1Gdgss09VKwWuH5YVn1XABfXN2z3t2wfOcqpXZ7HxLGPhC7orqf3Ocdqi9mLsxBepdYZCH9B%2BYaV3YCiHOPd3bkWypJS0PMjhhvYaNAP3YXPQqI6g\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"6130410c-14979\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808ec2c7e76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84345,"size_decoded":34001,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025)","md5":"f9c7afd05729f10f55b689f36bb20172","sha1":"43dc554608df885a59ddeece1598c6ace434d747","sha256":"f16ab224bb962910558715c82f58c10c3ed20f153ddfaa199029f141b5b0255c","sha512":"3dcae1ff6e98c64e3586be3eb14dd486c51f7d4e9fa1b8f9a628be4fbb6a9ab562f31f9b50e16d2e0c72b942bdbe84eee8e0ef87fa730db1428b199a59d88232","ssdeep":"1536:/P10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrJ:++414Jiz6fh6lTqya98HrJ","tlshash":"ca83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","first_seen":"2023-03-07T01:06:48Z","last_seen":"2026-09-15T13:39:47.982467Z","times_seen":26592,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/security_audits__certora.156d1fcc.156d1fcc.156d1fcc.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.366Z","timestamp":1789479528366,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/security_audits__certora.156d1fcc.156d1fcc.156d1fcc.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=whA%2BkFM62Pi1RH9CfumpIDzNonqIqpEXj1736wT2pNwM57e4ljchujN1bDK%2B2wMXXaY9v6KRG3bSi2F8T0DZdhlvK8rA3AXSmVUHkdKnRjvN%2FdIXThFB9ip%2FQ9E%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-1146\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808ac4fa356c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4422,"size_decoded":2163,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"156d1fcc621739bbea76f12ab1ed3aa7","sha1":"3d12ebea79ffe1daec3b99ebdacdff4a79806477","sha256":"1657fa19eef7e9084ea5d810e12255e3fafebdefbaa1554cccec3fda9963619a","sha512":"6cca847a0107562e783d680fc627e529f20e47d7c4f2562d76b1e177eaa6015656514e85e5666ee4d343a1f8becb6fb528eef53c179414b3cb91dfa18d8ec216","ssdeep":"96:evCDQUtTBKzFVLoJYJjy6BnNco+omMjb0ARejb1:tDQUDEVLiSFBNco+oHG","tlshash":"6f91409d037d04daf5879690ea621a82396ea0a717f4c5a4f1ff1833bb138a5432f147","first_seen":"2025-10-07T03:26:06.198992Z","last_seen":"2026-09-15T13:39:47.983053Z","times_seen":35,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/ethereum-transparent.1ee60bb4.1ee60bb4.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.337Z","timestamp":1789479528337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/ethereum-transparent.1ee60bb4.1ee60bb4.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RU%2FgpwNH87AmUUNR%2FFgPih76V27gQLta4RBcJjbR5EgBNqXnRrwe4w8MLgF1br5t2R6suonZiihBOFq9riBziDgTPo8RGicIsiKdxkJY1v86yZxmWF5YxIj62qQ%3D\"}]}\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a3bbb22-390\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a3b808ac1f8b56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":912,"size_decoded":1101,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1ee60bb478fe138506830c04c6d139ed","sha1":"62038ceaebd598522ff880348711a12513ad9bf9","sha256":"f8a45232fcca122b5775ab21237d6691ef9232bbfc4c8553b9503e39fa8a7724","sha512":"8c1d2aaa52c4f0e74bf8db531f02a6ea7b0e2bcc82204ae97a5ef0fd907ebd92dc5546869cf326b9c0688045b4ebc4192b952703029de5db281ceb1e84d6990c","ssdeep":"","tlshash":"22116bf196fcd1845604f3b2551e3931783955eb46d492843b6c0a862ff8f564dafbc0","first_seen":"2023-05-18T20:29:20Z","last_seen":"2026-09-15T13:39:47.983579Z","times_seen":95,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/js/evmchain.js","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.353Z","timestamp":1789479528353,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/js/evmchain.js HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qQ60xHBo%2BeZik1bFTfCn7P5bQc%2FPds8ruptv6SClsbgI%2BqsG3EzYapCeggobVut26dxI7S8W%2FHVIjlu3SFEHAl59Ke%2BVm5Qu2x0dQ0%2FXMec0McQ9JzToL7p%2FbRQ%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-5881\"\r\nexpires: Wed, 16 Sep 2026 01:38:48 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808ac3f9756c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22657,"size_decoded":5683,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22655), with no line terminators","md5":"103cf7a3766e010c9499d24721aaf984","sha1":"ca4e27f04aa5be91c32e0942583f39bca5277a1f","sha256":"d93c05813c158faf533a332c1b49f2a9f0432e0454fdefd1a2c9f11428b7a4e9","sha512":"373140cc684cfd8e2aaaf34a7da1e0a5f4bffd39a86c6979203068f9e2991f33be45968c05076b2d06042de30952e9076eb054c27bae0d4d5c91f94db5923b67","ssdeep":"384:3LyedkdCfFDM33MPH0mz7Cb4h/iUJbstZ4xWXZrTOHnf+RJvDqvGKifPauiy1Bes:SCtC8bh9gWe3FptN9Ra6SAzjQiKTsDn","tlshash":"daa2d9f3d354a98e8b7990cc1ce93719c1078c89c45e41feea964aded8f6067a119f23","first_seen":"2023-03-07T01:24:55Z","last_seen":"2026-09-15T14:15:47.95068Z","times_seen":736,"resource_available":true,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/js/theme/default/layer.css?v=3.5.1","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:57.710Z","timestamp":1789479537710,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/js/theme/default/layer.css?v=3.5.1 HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Csbf3vC1aG1Xfzy3Ynb6zlk%2BUhq1VBc4BUrIGf5QXqz81g9YMePDeSSotQigA7%2Bn0SzgRWLAW8Y6Y8WFB90%2F3K72SGWmCRZP7SoDF5iP8TqPhX8FGnpZiq1azRk%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-37bf\"\r\nexpires: Wed, 16 Sep 2026 01:38:57 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808e6bc4756c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14271,"size_decoded":3539,"mime_type":"text/css","magic":"ASCII text, with very long lines (14271), with no line terminators","md5":"c234eb06d5f32055092294e78957f17d","sha1":"f15ee0bcb9694f32f5e1d524f2653aa0dd043402","sha256":"5cdf3edb27b0c9f8e48918c486e9ae65a9e5beab806b64c4a7bc5bac53c0f540","sha512":"3f06b51116d7f8026d81c7eb6a3c4d871462d09fe0a5b8cc8b7feaf20cbc88b0b6a545f0ec7cbc17566a9ff609405f58fad6eddfb3a8b3f6d530ede8fa3fad5c","ssdeep":"96:mp+Ntha8qNEp+wRY1vUPXi0nMLPD2OtLzAyPHL/LztJDzyv2OQ7KGx1j9d2/nWUU:1ELr2Otzrzzt42OQ7KGx1j8WUq4S3cU","tlshash":"f75242e144911299b0278721d6dc7eba32f88d43e5630caef2573c1f874c6dba2b6647","first_seen":"2023-03-10T11:40:20Z","last_seen":"2026-09-15T13:39:47.984986Z","times_seen":57946,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":326,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.moyukefu.vip/static/voice/default.wav","fqdn":"static.moyukefu.vip","domain":"moyukefu.vip","tld":"vip"},"ip":{"addr":"172.67.189.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://www.moyu-a15.xyz/index/index/clibox/u/6a95565417a04/t/1789479529/tk/80c8c1c231f1b55c379545d44003467f?lang=zh-tw","date":"2026-09-15T13:38:58.599Z","timestamp":1789479538599,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moyukefu.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 06:28:42 GMT","end":"Tue, 10 Nov 2026 07:28:37 GMT"},"fingerprint":{"sha1":"DD:5C:88:F4:12:76:B9:65:65:2F:53:18:99:C6:9C:6B:A7:EA:42:3C","sha256":"25:88:A7:A0:B3:CC:A4:BE:1A:B9:4D:09:85:C4:4F:BA:F2:88:31:9E:0C:CD:52:06:31:C7:59:F0:80:A6:B2:B1"}}},"request":{"raw":"GET /static/voice/default.wav HTTP/1.1\r\nHost: static.moyukefu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.moyu-a15.xyz/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:59 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 02 Sep 2021 03:12:12 GMT\r\npriority: u=4,i=?0\r\netag: \"6130410c-1c2dc\"\r\ncontent-range: bytes 0-115419/115420\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c1mB96ecadk3crtqW69a8aqc6ve17GZ6v4OZCN5PhCYWlmIHvp8JnOCVSK%2FVc3or6LPSDmzZtT%2FQJiuUPZ4DED%2B2KOAllJoQdYfl3QDdB5HkG2QEodS%2BQH5pqlZhoUqmL22uTyTX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808ec3c8a76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 115420\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43160,"size_decoded":43862,"mime_type":"audio/x-wav","magic":"RIFF (little-endian) data, WAVE audio, Microsoft PCM, 16 bit, stereo 22050 Hz","md5":"fa3c0799be129550604818cd6cea97f0","sha1":"199dbe56724574625e7643abc1c53d2a0ed17c72","sha256":"20de47d0730205873065cc052c60cadc52fc05604815722fd088579079732594","sha512":"7ec90d873df1b39a54ce5622cc88a6f1e0d9f4125e26842c27dbc63d1420bf8efb4f2cc8da8b2b25a8ab5cdf9f96713842b16fcfd433fc7cb81694ff7e1c2233","ssdeep":"768:i8l/Mo7cMkhTf1+IVp9JvfLdjo1/ya41ZLUNAUpsXuEX9aan7lpQsY2WEyc/BG/:EJjcaa41ZKAAsXuEXAan7nxY2WEFq","tlshash":"9e13d3137740c801d995a6329d52ebf80376fc19ee9a434b31d2bf9fbdb62c51d52288","first_seen":"2026-01-31T07:13:57.371123Z","last_seen":"2026-09-15T13:39:47.985665Z","times_seen":17,"resource_available":false,"data":null}},"time_used":732,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":489,"receive":243,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/js/w3model.js","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.354Z","timestamp":1789479528354,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/js/w3model.js HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L0bFwLlHQPZfNbRqlEAIPwFs4A7atB2NEFuWH0dyioOSwiZvjCRsZKqzTh2BT%2FyyDkVRNRAc5k8RMjYmOAkanYSqwZzPV1ymiXFLEesUSsMvFNxIhR%2F%2B6%2F7cz5M%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-68f32\"\r\nexpires: Wed, 16 Sep 2026 01:38:48 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808ac3f9856c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":429874,"size_decoded":205284,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (44112)","md5":"aac4569bbff2c557800aa919fb86114e","sha1":"d19621d1d38e488b417c28b3efd879b481566d80","sha256":"5851c751870f4d385689f84d0e346c92234a1c7776f98099222eb30565370864","sha512":"c7498c4cbc7f499a907eadf8de3895070e007505654dd31579067b2de7075a0fb5a1acf3b869d68e0e31ca3bd3c5b99c27a14e6cdf5401d5c25e546c579753a0","ssdeep":"6144:g76dr/jrE/0NNWS9UO2/HP2jz05O1HaeJ3qZEZDj9+b+Q88MzfFNo8vq5:O6d9DZzaneYZEl5+qQ8zztN85","tlshash":"8394aee93582f42157f366b740af1806b33d691b140c88a0f255edd5e8f84aa913bff9","first_seen":"2023-03-07T12:26:47Z","last_seen":"2026-09-15T13:39:47.986234Z","times_seen":66,"resource_available":true,"data":null}},"time_used":738,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":327,"receive":411,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/dapp.f3998a48.f3998a48.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.625Z","timestamp":1789479528625,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/dapp.f3998a48.f3998a48.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1Qz4vPdHy9QsmPL5keTeU%2FMAYk4Y4j4fLnKv1cnl65EthZeuwzZuw0102%2BAZQO2%2FudjQwAJxkttXh1Q6xOkGOAAvlW2opdORtSQEWGvCx%2F6tIFFf0A0KjNpxW%2FQ%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-1511\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808adefd756c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5393,"size_decoded":3007,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f3998a484b54ef6ffb419ea20fd53c22","sha1":"456bd44de0b65733e941c22f6a9e5bbb57f4d2ca","sha256":"df8d28e1d6967bcfd6b9da46542d8915c6a41d864b155cf931638309e43d0187","sha512":"3c7e55e6b6d5de5e7edddf4fefd4b7693090a37d1cd70722326bd7b5c1a3417a3777223cd83d1cf5807c3a505c2ac6f110b8672b35a41e6d8470c93641057f2d","ssdeep":"96:LgjHWiFf3xW4bBaz+pBPM+lu9t/UGGa87se1C:kf3xWMBaSpB0/tUGGa8ge1C","tlshash":"dcb14495276ea2a8b010a7e1830794bd7c86ece51de09871c3d02d19fe9709e1bc29e3","first_seen":"2025-10-07T03:26:06.290391Z","last_seen":"2026-09-15T13:39:47.986858Z","times_seen":35,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":328,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/zapper.f0f00f22.f0f00f22.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.607Z","timestamp":1789479528607,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/zapper.f0f00f22.f0f00f22.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=04hZZj8ozyye5UW5W5JNXvX67o8FBJ2JD9W%2F3IuGMceYFHlAS41DcILe7X24BR7%2B2y0H0Jw0dtla05jT77hr5a47QNTmiyWVlwuEEyjOtE8HVpqARfbVaFN%2FZ8g%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-b59\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808adcfc556c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2905,"size_decoded":1782,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f0f00f223be20098e497cffd2df45d4d","sha1":"e1630f052e682d72c2571179b531a18a52d53823","sha256":"81af6861c95d00b39b481e0ad7c7929b621818bd0f4fb8e305e093bd3dd021c6","sha512":"7f7955216a3fc99e4b54729c45d4da026e9a30b389fb8b4e751bd6331db012e8dd0c89ce4e9493529fe9a3507b1362e22b5dc618e71e901035bda257b64db298","ssdeep":"","tlshash":"ca5133de3a498394258c72fecf6d54fc740689e47513a879c3742c3668a597f88182d7","first_seen":"2025-10-07T03:26:06.226158Z","last_seen":"2026-09-15T13:39:47.987519Z","times_seen":35,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/venly.66445664.66445664.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.620Z","timestamp":1789479528620,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/venly.66445664.66445664.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1dnT%2FvZvXLqGefLugj8xT8%2FwwU4XGOT0VNIOIjEx%2BdIx%2FAfIQHGlk6zapDTWJeRC%2Bla6Hy6wKONfClco1eAliR0ydp0ngEDZS7M5mnAfNKMgnafXWCbDJBAH7ng%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-d62\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808adefd056c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3426,"size_decoded":2320,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6644566460fb1d5e5db1bad964f8a055","sha1":"b1906457147a43446bc99b6ab105fde22554eb29","sha256":"49e145fb2fc0b48a451e035b51180e57b83a05bc3aa15a4f694fcbe2249b2ab2","sha512":"44c640f88f9471b3370c7b980fb9e1ee1bb0e96927440ac89b2fcd92dbdecabd646061795cbffee1ef4d48621dfd1a4276ea50580804d6b4db8d626acdc4a47b","ssdeep":"","tlshash":"5a61944e87e283f8f186bbfdd10a60e52ad558a5b613d078c7c23c11d4a304e8ca18e7","first_seen":"2025-10-07T03:26:06.113696Z","last_seen":"2026-09-15T13:39:47.98813Z","times_seen":35,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/binance.bfd81e57.bfd81e57.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.602Z","timestamp":1789479528602,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/binance.bfd81e57.bfd81e57.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FRN4HI%2B1dmsmuGXOxSW0ICvuQDwmQPcovhFB0cWyyZskmSf1oYujmU4DgXOxaALQOhukGvCkEPIVpNL%2FOaD8bzW7REq2M9iwNWVbW%2FCxDaAzaBTxhrhp0eb%2FVEE%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-1df9\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808adcfc056c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7673,"size_decoded":4150,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bfd81e572476b6d13d4b3752ce5fe2dd","sha1":"44fb5a109015dbcc6b72749d2e36cbe1413f0812","sha256":"80a5301d2e03b46166abdff385e960ba13594e49ceb87f24305e520a939e2720","sha512":"208b22870b3db73a227a64de821f9409504f8ab26314b8aae308cb0a545f86ab251f4a287c3f0c5d0a1509031b81f3dd9d8f41a3ffd31e4500dd8354ddedfcf1","ssdeep":"192:pE94ulQiNDXJ0cjU+952z5CJV5QGGQMWxAiRG7Kie06ohA2L:um0C6oCJ7QG+WxBie0B","tlshash":"85f1a5cd67a5e2f4f400f3fac23254a877476af66f61d760cb9b6c12a55209c8826cc7","first_seen":"2025-10-07T03:26:06.163691Z","last_seen":"2026-09-15T13:39:47.988759Z","times_seen":36,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.moyukefu.vip/static/common/images/chat-face.png","fqdn":"static.moyukefu.vip","domain":"moyukefu.vip","tld":"vip"},"ip":{"addr":"172.67.189.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.moyu-a15.xyz/index/index/clibox/u/6a95565417a04/t/1789479529/tk/80c8c1c231f1b55c379545d44003467f?lang=zh-tw","date":"2026-09-15T13:38:58.594Z","timestamp":1789479538594,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moyukefu.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 06:28:42 GMT","end":"Tue, 10 Nov 2026 07:28:37 GMT"},"fingerprint":{"sha1":"DD:5C:88:F4:12:76:B9:65:65:2F:53:18:99:C6:9C:6B:A7:EA:42:3C","sha256":"25:88:A7:A0:B3:CC:A4:BE:1A:B9:4D:09:85:C4:4F:BA:F2:88:31:9E:0C:CD:52:06:31:C7:59:F0:80:A6:B2:B1"}}},"request":{"raw":"GET /static/common/images/chat-face.png HTTP/1.1\r\nHost: static.moyukefu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.moyu-a15.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 18 Nov 2021 11:35:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zIh%2BRfRmf7GNO8J8E0TBctPyq4cWT4CxSr2SDHfOVOyMh0SbXs%2FFA8leA0RqX9SLws9XcnUUXZAh4VL6QjmQoud9DMSGjm5BjcQ1I%2F1KGbvz8wEWpqAtpZBLhCkatETlcy2H4TjA\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: \"61963a8c-10ae\"\r\nexpires: Fri, 09 Oct 2026 13:21:25 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 519453\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808ec3c8576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4270,"size_decoded":5045,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"1648d20c7346a48b3df46d9bb97deaeb","sha1":"57ab6fbdc8a254d43e3e7f38e8114081ae613582","sha256":"0549da6d1b17427ae63cc30caaf6b1d914429f5dff64a8f6f94396cf865fba73","sha512":"bf4bbdc84a2fc0cd977b8581ceff199a3475bfb8702aebdf967491d1bfea7a2fa1c9a35343acc1c3fbc8c85c835653c1682f1a617f75eaf8946ae2ab272ee7fb","ssdeep":"96:DSMllcHitlIxv9vk7C1+I4wWHLihk/xW8MgJA1fhpazBKZ1l:DSHIIHUCD4waE8BA/paze","tlshash":"87919f8579c098dc244e02b539f69c518672aed4d3dd6e1c9bee020fcb21d003c75e5e","first_seen":"2026-09-15T13:29:24.073404Z","last_seen":"2026-09-15T13:39:47.9893Z","times_seen":3,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/js/web3provider.js","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.357Z","timestamp":1789479528357,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/js/web3provider.js HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EYR76ZDHHeQ6Z9f2v%2Bx68LC%2BcRBtIA27AZG9Oxyyov993S%2F%2Bpqo%2FjHCf%2BuTPl9caFRSe0PtPB7zBrsKLXZj2kR1wxOseZ2v4IOUH4Fw0Fq8bvaB3Mj3xyY%2BCcXA%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-e934a\"\r\nexpires: Wed, 16 Sep 2026 01:38:48 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808ac3f9a56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":955210,"size_decoded":288124,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (64169)","md5":"ecd0acbd0f232a69f443beec9cd608bf","sha1":"1bbb9cee94841cece182da632767fa43970eb013","sha256":"54335e7705b99ad9f87bd7296dfe88f6c8b78f16703f9ecc27e43a62b5be765e","sha512":"e632544468f0d6d6e6ff8dade483d70f2f3ba38dc222a1e7f1c1fdcdb7d2a1615df52fce2d909ff654d71b942306a50d1e62fdf430628e527e70ead3cc6dea68","ssdeep":"6144:W47GR6PGawV6G7MzqnTaO8V4bHEzQva4qUY2OhwznWoxACNvmsZ4KDGAmq+8q+2Z:XGwjw9nHAamsZ3GAOqwJGPv6","tlshash":"bc15f984b664b061839a65e0043f540ff27aba2d780b44bcf654d8f6bcbd989553bf38","first_seen":"2023-03-07T12:26:47Z","last_seen":"2026-09-15T13:39:47.989871Z","times_seen":514,"resource_available":true,"data":null}},"time_used":845,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":534,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/debank.5d89f0e4.5d89f0e4.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.605Z","timestamp":1789479528605,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/debank.5d89f0e4.5d89f0e4.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q0nsbK4aExDs7u0bUIMzS%2BrQ3m15MjwwFm1gXfdNIMx5JIJf7odzmyWVOGTBHUC2gQLFFN%2Bymf0epEYkv9ugmJ1d%2Bb5FH37HpURfXGe6THA3QTugnWtb9HCBXEM%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-4286\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808adcfc356c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17030,"size_decoded":7487,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5d89f0e4196d7295a6884f13471d590c","sha1":"e771df14fdc15ff0fec808714fd5b4a6d46e3340","sha256":"02339b6faee7733451bab9b08386470bedc337afb0cfb6af2c644cbf27e9b86d","sha512":"f6f5eafa5c508f14ddea321e907d586a78b9f9fe5edf4174bea885589803d30b817e8381c57e76cdb4299b090f59f779a3d778fa8d7dcf2133952b729ac54de8","ssdeep":"384:9XHM58i009VGMfA6nOAca3975t5NNFzenc2Vg1Bee4JBe:9XG009IMpHrjRNtVBeDJU","tlshash":"ba7294c8277a12fcf145e6fdc61a25f47f066ce56a02c674c3951e0aac4206dc996cdb","first_seen":"2025-10-07T03:26:06.14253Z","last_seen":"2026-09-15T13:39:47.990441Z","times_seen":35,"resource_available":false,"data":null}},"time_used":884,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":346,"receive":538,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/staker.5e2651ed.5e2651ed.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.616Z","timestamp":1789479528616,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/staker.5e2651ed.5e2651ed.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PF1iI5m%2FTsBYQHce7Z9XNjviuTMdY6VH5HmiSm6zNsOpaiweB3JTCRH2Fy%2B6%2BXSsX4zZpBTzJCZAiFBMpyD4oKi6duE1po7pDgdYjkO6zvXAbUoGjHFCoo6HBbc%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-e59\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808addfce56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3673,"size_decoded":2392,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5e2651ed94a97eb3f4196ea036235216","sha1":"74ee054a3f2a8462510f5e0aae136c0a643c5ec2","sha256":"6e9dcc62d2f0e0af6ca5041496a060ebea85ef7836dff0c576b70ff7dbe9a842","sha512":"1984977e71429caf6f8be69260f48cc5c1f76a3512b707001e46c66fd94221b34296b13ebdc447babf13b94a5b788a3e63291ce4e499a18374a9d29cba29619b","ssdeep":"","tlshash":"e67185c8472a96e8f608b3fa874da5794b238ce57e80d5d4cff82c13e99159d0da48d3","first_seen":"2025-10-07T03:26:06.276534Z","last_seen":"2026-09-15T13:39:47.990949Z","times_seen":35,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/livecoinwatch.44c48d4f.44c48d4f.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.638Z","timestamp":1789479528638,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/livecoinwatch.44c48d4f.44c48d4f.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qYCDbyiBnl%2F2qwowakFLWjtSaWMcpJPGL3MvgfwLHG1VbiBax7lrAMTb%2BMHn1kucvQQeiDmvdGoDi%2Fk95tQGgsM7NUM01Z2rkVEVOBF%2F6FGctiTCeI1NxQ8R2Bc%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-e83\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808adffe556c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3715,"size_decoded":2172,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"44c48d4f1c7308ab8f0d25ce77e4d5e8","sha1":"b2d634da220cafd9e60db35f56666dfbe6b3ad29","sha256":"6e779c1036a891bd7eb9dc494d05fe5ed4b5adf07639c873ac0874deb10d91cf","sha512":"6e46d9be181cf882be387f1dc31df0b5821f41d7b9b903763dbe48d074f7f6555eb959ba8ce25d92364d610578f775b9f74815c5fa1753e23af898e56cdb23ff","ssdeep":"","tlshash":"027186c976388ee87744d3fe0a56587a25178ee1ba97d48cc7812e06edd105f4c68dc3","first_seen":"2025-10-07T03:26:06.135742Z","last_seen":"2026-09-15T13:39:47.991509Z","times_seen":35,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.moyukefu.vip/static/customer/js/ai_service.cli.v2.js?v=1.1","fqdn":"static.moyukefu.vip","domain":"moyukefu.vip","tld":"vip"},"ip":{"addr":"172.67.189.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.moyu-a15.xyz/index/index/clibox/u/6a95565417a04/t/1789479529/tk/80c8c1c231f1b55c379545d44003467f?lang=zh-tw","date":"2026-09-15T13:38:58.590Z","timestamp":1789479538590,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moyukefu.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 06:28:42 GMT","end":"Tue, 10 Nov 2026 07:28:37 GMT"},"fingerprint":{"sha1":"DD:5C:88:F4:12:76:B9:65:65:2F:53:18:99:C6:9C:6B:A7:EA:42:3C","sha256":"25:88:A7:A0:B3:CC:A4:BE:1A:B9:4D:09:85:C4:4F:BA:F2:88:31:9E:0C:CD:52:06:31:C7:59:F0:80:A6:B2:B1"}}},"request":{"raw":"GET /static/customer/js/ai_service.cli.v2.js?v=1.1 HTTP/1.1\r\nHost: static.moyukefu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.moyu-a15.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Jul 2024 06:57:46 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dS66Gt%2Fo1NE6MMwSTfkqEzLRTSHw%2FZvW99iKX98%2FBRUYi%2BgVlzj2KccpuCxi9Fx%2FH0NYkJZSzekIQGOkZzQT4RjphZE0InzVJ1PyTgfcVs9cBuKgxtt6iGlXVLaiC9aglrEvHwQv\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"668cdf6a-ad64\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808ec3c8376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44388,"size_decoded":11891,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"95691091c216d37ff4ea74af75221e22","sha1":"913b424b8f3d35987daf8c2d21c671e4584abbf1","sha256":"df809729bb6531aa0c1058828ecc9a04d0002d7f499e085c4086d752a480baec","sha512":"1d2a0d506ec7ce9b1fd656cf9fc56eef85df546acfce5632507b4cc29965364e2290f7b9f40a7796c1a9908093adb20d0cb043f4d652d5846e1d3f9682af2f78","ssdeep":"768:a/S6cRCWaeiaMVoV6NV1DV4VaIS8AgFV5azVPqfp9Q:a/S6cRCFaMVoV6NV1DV4Va3VChi","tlshash":"6913620d61f71461507334bd5fafb404a926901b010dee24be9d9bc4afc89bca6e1fda","first_seen":"2026-01-31T07:13:57.368616Z","last_seen":"2026-09-15T13:39:47.992364Z","times_seen":18,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/zerion.5b3b1ed4.5b3b1ed4.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.608Z","timestamp":1789479528608,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/zerion.5b3b1ed4.5b3b1ed4.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:49 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fiWAYXGb6eVvuSz%2FNYVS3Yskz%2BqYWDG75V8vGY47YvaOClMYNbHEKDvHNm2SlkjxCS1DSzfi2v5OAc6OoH7FSDpl42wyFQamVA1%2BxZK5XECIYyJty8NaeCncRZQ%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-848\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808addfc856c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2120,"size_decoded":1566,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5b3b1ed49c1fde67f81d0387fb55cd6a","sha1":"cc94f8c8be0b99ebd9658ccdedf25faf5c2bb355","sha256":"c210d3972e754b80db04264ca89663ba70943b20e7622c44a333c0d4570d0b0f","sha512":"ee7b9447f7502a18321136f66c0f5df9a7d6fb9bebd1382ea6a818bc2c03972af3e7a113c0f7eb766ec82a66884dba59deca667043b11471d38441a333e83f0a","ssdeep":"","tlshash":"bc4124b413a9d190b41c727d8b1824fa2aeb18d9fd62d184d3737c662490a6c1c6bccb","first_seen":"2025-10-07T03:26:06.24985Z","last_seen":"2026-09-15T13:39:47.992906Z","times_seen":35,"resource_available":false,"data":null}},"time_used":738,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":738,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/usdt.png","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.340Z","timestamp":1789479528340,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/usdt.png HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x3vABfu6DOAXRNqLQMSWRtI71xSngW0mcWV73LHxasSKkwbSM%2BtCKB5nMbhXxCyznc%2Bphry72YXhvWo1LctJ2XBCHAxfCu69EC7u3TAiJHJSUcIjwI6Y2E%2BO5%2Bc%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-b25\"\r\nexpires: Thu, 15 Oct 2026 13:38:48 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808ac2f8c56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2853,"size_decoded":3593,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"76d0f364f0a5142e49d8349f156b9f2d","sha1":"018c96e4a7f6e80e8acd977ff3f1bc866296f295","sha256":"ee7aa2cdf100649a3521a082116258e862e6971261a39b5cd4e4354fcccbc54d","sha512":"81eb4d95300c50ac38b4c27cba5ff30b31bffbf3966b996621b2733bce21e196e59d4197d9756514d44607ba6504338b1fb12da424fd2a3aeebf8c8ea4e3b5cc","ssdeep":"","tlshash":"1a514a5928cb23881e438d374eadc72a70185b782e15638327489c799f11a891c0b9f9","first_seen":"2025-04-02T11:22:24.573179Z","last_seen":"2026-09-15T13:39:47.993499Z","times_seen":62,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/js/abi.js","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.362Z","timestamp":1789479528362,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/js/abi.js HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RpREl42AedfJXkNsaJn%2FDDi4pLeC8iH0%2BmRwydf1VOvHW1G66GhD0RtIWP9EHaZMyFmoUZ7FnvzSjZE0QEG1LDbKcS2anO13vE9%2BEy2n%2Bj4Jnw9MJd1sadXz70M%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-12df\"\r\nexpires: Wed, 16 Sep 2026 01:38:48 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808ac4fa056c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4831,"size_decoded":1228,"mime_type":"application/javascript","magic":"ASCII text","md5":"7686cb141a314863e4225a0459e04918","sha1":"d0c3408a5a3c1f7db38f9796eea2ae6d31f707d1","sha256":"239eaf9fdf247ae60f252352b6750733a3270b84075c455ad87464a935c15ac9","sha512":"bc8a2a470e2eac3dcfa4d78928685a2c49011e061f76efa494467cd169b7215b8c720d28645c7fb9fe7778ddc91a812fed8968291a80fc06ac307f53e647fd2f","ssdeep":"96:p8OOjUOj8lhj8VLMj8eLMj8HLMjMRLSOjtOjylZj+zjMtLMjUjVJMjqJntHeHwIX:AI+Z","tlshash":"a2a160b6e42e9c874889269419e90613756041a38ccdad037a9c463d5feec2f947f71f","first_seen":"2024-08-21T07:09:15.373416Z","last_seen":"2026-09-15T13:39:47.994083Z","times_seen":43,"resource_available":true,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":330,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/api/index/isRegister?address=false\u0026lang=tw\u0026currency=USDT","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:57.732Z","timestamp":1789479537732,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /api/index/isRegister?address=false\u0026lang=tw\u0026currency=USDT HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XNYjH%2BbnI1vkZ9GXNjTvuYOtWy8aamqBAlBaAAA29OP4%2FjwVIwpse%2Bl287oXf6%2FpaqEUc8r6sV1Tm7%2Fk5YDBwJlt133LCfVoo5kjPWPpEyQ2dUaYiqiFtIlCkR4%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Tue, 15 Sep 2026 13:38:57 GMT\r\naccess-control-allow-origin: *\r\nset-cookie: laravel_session=eyJpdiI6Inpxd2R3akZUZHZJTUtlRHo3Tmk2cmc9PSIsInZhbHVlIjoiTXlMOE9tVHJUZ2YyUnV1ZnBLMUdZRXBWQmFSYkg0WHgxdWozZWYrcUM0bHFCdzVnbUR1SkFiaUNiY3JCK3JsenpTaW1PYzM1NzBROUZnWW8xT2E0UEtLNGNKcTJRV1ErcWJHZWpXWmJZWFArRmtPZ2JCNEthaEs4cjdTY24yTVciLCJtYWMiOiJmNGZjNWY0NjUxZjQ5ZjMzYmJjN2U5NWZkYWI5ZWZkNmFkNTNmZTZkNjY0ZTg2MjI1MDI4ODJiNWY1ZTYyMTVjIiwidGFnIjoiIn0%3D; expires=Tue, 15 Sep 2026 15:38:57 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808e6dc4c56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"laravel_session","value":"eyJpdiI6Inpxd2R3akZUZHZJTUtlRHo3Tmk2cmc9PSIsInZhbHVlIjoiTXlMOE9tVHJUZ2YyUnV1ZnBLMUdZRXBWQmFSYkg0WHgxdWozZWYrcUM0bHFCdzVnbUR1SkFiaUNiY3JCK3JsenpTaW1PYzM1NzBROUZnWW8xT2E0UEtLNGNKcTJRV1ErcWJHZWpXWmJZWFArRmtPZ2JCNEthaEs4cjdTY24yTVciLCJtYWMiOiJmNGZjNWY0NjUxZjQ5ZjMzYmJjN2U5NWZkYWI5ZWZkNmFkNTNmZTZkNjY0ZTg2MjI1MDI4ODJiNWY1ZTYyMTVjIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-09-15T15:38:57Z","raw_expires":"Tue, 15 Sep 2026 15:38:57 GMT","max_age":7200,"secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"laravel_session=eyJpdiI6Inpxd2R3akZUZHZJTUtlRHo3Tmk2cmc9PSIsInZhbHVlIjoiTXlMOE9tVHJUZ2YyUnV1ZnBLMUdZRXBWQmFSYkg0WHgxdWozZWYrcUM0bHFCdzVnbUR1SkFiaUNiY3JCK3JsenpTaW1PYzM1NzBROUZnWW8xT2E0UEtLNGNKcTJRV1ErcWJHZWpXWmJZWFArRmtPZ2JCNEthaEs4cjdTY24yTVciLCJtYWMiOiJmNGZjNWY0NjUxZjQ5ZjMzYmJjN2U5NWZkYWI5ZWZkNmFkNTNmZTZkNjY0ZTg2MjI1MDI4ODJiNWY1ZTYyMTVjIiwidGFnIjoiIn0%3D; expires=Tue, 15 Sep 2026 15:38:57 GMT; Max-Age=7200; path=/; httponly; samesite=lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":47,"size_decoded":1187,"mime_type":"application/json","magic":"JSON text data","md5":"3df46e4bdc76ab3cf8661141de69b54c","sha1":"9a49786ddcad9cbd09c10a8ecb72e41902d116b1","sha256":"c8165b41121c8b7e73d37e65396c243a0b8ed824a24d9a7d4a0033b90851f63c","sha512":"3acdfed9c657bfc41d2de2a83df537259b09e302d1df1385d4785673225c8cbe12e13020e9112c73149923ec8984760350dde93cb9477fe04c57bb8afc8cdbbc","ssdeep":"","tlshash":"0e90024254282812451560ac650945d4725825660c1847208c489d1941580542200521","first_seen":"2026-09-15T13:39:47.994626Z","last_seen":"2026-09-15T13:39:47.994626Z","times_seen":1,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/table_logo_1.8c4cc969.8c4cc969.png","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.344Z","timestamp":1789479528344,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/table_logo_1.8c4cc969.8c4cc969.png HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CyrNpfGUbjOkJt9pPL3hD93OfyjZIvj4zbwT%2BhxMCEoles9s1t5boSx4a8Vg6Nu5kOMmVaInF7HqajXZXifkkn4wKaKil09O9eTZYfSH8qtb%2FcHxIhQU%2BhNVT7w%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-1627\"\r\nexpires: Thu, 15 Oct 2026 13:38:48 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808ac2f8d56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5671,"size_decoded":6426,"mime_type":"image/png","magic":"PNG image data, 104 x 104, 8-bit/color RGBA, non-interlaced","md5":"8c4cc969520be3717da2d9a10089840d","sha1":"f3d19cda7d5ba39d9d3104eb606b54d35616f25b","sha256":"7e9dec373babe17c9be30c9fe9aab084ba863bf587fa3837b8aeb2dcce4a53f4","sha512":"526c6f484340786269bdc92322b43cd73513938a0a58674f6e75ea7997f0fed4ff690ccfab7341f0f8e1dff0694c0f7c12a5d872ea696984aa0f7c948ed940d1","ssdeep":"96:xkyE9W44IMuSnFiIbhEgPO3FzjLgLW74PhrTz3i8uskDlyplkTcPro:5SW43y3bhhO3BjELW745OFSkTcPro","tlshash":"68c18c4a59579ce43f4c12a57288462137bcf0c91766e80065b2e1afdad9ece6623be0","first_seen":"2025-10-07T03:26:06.184906Z","last_seen":"2026-09-15T13:39:47.995633Z","times_seen":32,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/table_logo_2.6cda9012.png","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.345Z","timestamp":1789479528345,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/table_logo_2.6cda9012.png HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\npriority: u=5,i\r\netag: \"6a3bbb22-217\"\r\nexpires: Thu, 15 Oct 2026 13:38:48 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OfD5dyxxaPQVU7x1ge86YkM5tYnl%2BGtSuNYQiDhw%2FBfD%2BS9Nrp5abj65wnF01q7%2FsM6ZDtyhkXAw5esYDywo%2BrJlEwnAiaj48cnIyONO9tNg59lrvLlYpIrIJC8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808ac2f8f56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 535\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":535,"size_decoded":1259,"mime_type":"image/png","magic":"HTML document, ASCII text","md5":"a33e2bbd1ec20760a65fcaae9e353fa3","sha1":"ab0f93d461fe758d3d693219c5a87fc5f343d085","sha256":"36948e71d1048a445cb061f0c0ca9d4b37c4f7849ca99575f2997f67f7af54af","sha512":"c860f13d64dbef4fd7521f302d9da093c0da0b5a588fd78ee51381f1fe0e02174e9b1696b240cbba75c54ce1858a26fd6f8e6be89d0234f488ce3e35bbfb33db","ssdeep":"","tlshash":"a3f0909f6f1b207f2e238562f4c311a9cf640a5bbbd924e28749011f72c904588f5fad","first_seen":"2023-06-11T20:29:59Z","last_seen":"2026-09-15T13:39:47.996196Z","times_seen":169,"resource_available":true,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":353,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/js/web3.min.js","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.356Z","timestamp":1789479528356,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/js/web3.min.js HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4K08tx1MdvL1tiY7%2BrTwtsKZj9t6OAT1ryEe7%2BIYVwvzQqSR87ODjYCR%2BVxpagSgzWnjAcYtVWjTG4QirZMAIvCn9a%2B41s%2BOzvZEfxnu%2B%2FvGn9uOpb9ARkpVQdw%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-146a1c\"\r\nexpires: Wed, 16 Sep 2026 01:38:48 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808ac3f9956c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1337884,"size_decoded":390264,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (63842)","md5":"b8264772685dd79e72d854b4619a603b","sha1":"b96164dd553333d7894997093457f04b0c0766e8","sha256":"ececd85853602912a75e478ab98b9f5a0d8a21f3f6e392b475a37f920ebe7b6f","sha512":"73cbea194f7067ef594a90ff82a2ab7af43bf975d33c3e3ecd3c306a9747be19574451d882d36fd1397a9f69a72eb8fce38cd2e5e8499dc3a78d418d774d347c","ssdeep":"6144:9ggS4Whgg8WMRelCSJ70OSJeXiqP70X+C8kSlXnfCM7XZfcwJ4ywB8b2IRQFw3:K/K+C8R67GV","tlshash":"7f2597c0b6907056c3656e91442f900ae33efe693c4d0169fa57ecf37cb8a85552af3a","first_seen":"2025-08-21T03:25:46.594345Z","last_seen":"2026-09-15T13:39:47.996762Z","times_seen":88,"resource_available":false,"data":null}},"time_used":9050,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":338,"receive":8712,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/near.ec7210d5.ec7210d5.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.599Z","timestamp":1789479528599,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/near.ec7210d5.ec7210d5.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vMl6c8dqtu09Zr92Pmv6W6JlCH1pbcJAsQNJdVIRtvAtiJW%2F7cKUaCjIpZ%2BdBIZa0SFH0ddUDWq9xMygseJ6vurHMvAxwsIu8CQBU6yb5FmhvklVFJhyc6YO7PE%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-1b11\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808adcfbb56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6929,"size_decoded":3603,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ec7210d5edc9a15fb71bb3e84f608288","sha1":"a6842a5831960b31eeb1c034affb3a158f0517ad","sha256":"8ef3fc043ccf21834547b29bcaee9791012880707fc581e34105e8333610a172","sha512":"9f58dd491a996d3bc7d90ce622cfb3cdfdd81b16f7db15d040adc8c3f5ccc72dc1e89a4fe2e2c47bf34661c2893541366072c0e6c71a80bfe6fb4e1db4f56075","ssdeep":"96:QmZg4c81V4QBoSjHfHCAWhdFF/+5ofk8BflRu/WwjC/EeTlXqytceB+x/fEpUV:jG8L4xSTRWrFp6oHZufuVTl1tp+Nj","tlshash":"7ce172de777f42bcb040e6ede2931475b619adb63d52c92983e86c4ab81291c58d4c83","first_seen":"2025-10-07T03:26:06.256743Z","last_seen":"2026-09-15T13:39:47.99735Z","times_seen":36,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":343,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/info.7b6d0bab.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.650Z","timestamp":1789479528650,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/info.7b6d0bab.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kmtVvNZ7imeuaXam5sId%2FBH%2B6SuHA4FrxpvR8nmljNosH6G3leubzJUjLBdYJl6lquEvok%2BA2GCA%2BbL8M%2FMyUzgIS8a5qU4H1bIn3CN%2FCyiwcwjSq%2BsV7kvTt%2FI%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-1222ab\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808ae1fec56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112109,"size_decoded":14903,"mime_type":"image/svg+xml","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"ace88dcffca360bea8503a6220123526","sha1":"e8673cd326f467a801a993a570fe6d5e798ac5b0","sha256":"02b9617d8c37de91a3b81f3cfc72b1a320f59dd0bc378999ed122580442f2315","sha512":"d10fb13a3d0ec9e98c5eaaeae3f0440abf4ab612348f62c10c329f4c177e3c5fdf2f7bacc6aaafa13bec4a25eb921066841d58d75dbabcf30226f75b3f5e2da8","ssdeep":"768:qMgBDHbvr5JhbvDAWJbpNXsr3Y3Y313d2F+FNAnFpBSaR4bjapGIqIoyKvnnsvrL:opbYWSaEnnsvr4Z7c2ameIK2KKk","tlshash":"58b3232e4ba3214658035c786bee36402174d02b9649edec3ede5788cf9b7889ce179d","first_seen":"2026-06-29T15:02:06.696607Z","last_seen":"2026-09-15T13:39:47.997936Z","times_seen":13,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/safepal.3547235e.3547235e.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.604Z","timestamp":1789479528604,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/safepal.3547235e.3547235e.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hc03beHgEDQ2i4wGK0X5%2FaAWYScGWN8iVJt3lI9ZGcwAT5hGah1Jkq%2BeAU6NndNwbV%2FALy%2BpZLDJrblYNi9pEHKwH7oAbj0DhMnZ4jKYpGIs%2F52gy3YNLJGwquY%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-1488\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808adcfc256c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5256,"size_decoded":2928,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3547235eb5743afe4bb573e6b9f38f7c","sha1":"3b58fdc173ea7a388885e1057482795813737bd9","sha256":"898d656013f50b4148c5edc9a77620c7310b10c790e0b761dbab0c192f49a864","sha512":"c5aa003a7707798a1adfe9501c358f8e7528a100f28332afa9bc4bcfe7608bda589adfbf6dc7c929b5bd742ee9a0ff5061483bf229078207a2005d41e3d06b5c","ssdeep":"96:LarJYxqhnzuzEKaHaPvS1TRvt3ODsJ4rlzbHHyPiJUY6SJ/lIPx3e/KHS41JHRTc:7EKa6PvS1TRV3OUAlzbHHyPMaSJmx3eP","tlshash":"45b1838e6791c2fcb44171f99a1364a82b845ca83d81c9b6cff61c2ad5120aca873cd7","first_seen":"2025-10-07T03:26:06.25927Z","last_seen":"2026-09-15T13:39:47.998517Z","times_seen":36,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/dappradar.e1a29dea.e1a29dea.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.614Z","timestamp":1789479528614,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/dappradar.e1a29dea.e1a29dea.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BNlQdQPhLxrG3D3iMLOCE2YnfL1iKpVFm3qZo4pFQwISwGy2%2FUx0vFbZxv8GyP%2FdFDcY%2Bq9n0Up6Am2fc%2Fv5GxGvaPZ5A%2B1k0iqtbh8N5a7X5kipKw7Bb2PGoiE%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-1692\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808addfcc56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5778,"size_decoded":2815,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e1a29dea05b2432fdfc23063e39744b7","sha1":"1651ac9dfff529ae572aee96ae926a12366013f2","sha256":"894f6b7b1a561943c1e14b6ead6b00446a1a388ba429832c03b2e848c3240805","sha512":"bed4143b46aa85beb4f50e2c232ed052c91d858bae6ca3032936c9bc30587b67d77ad22aacbf8c0f2f338e330dca03cda71c77ec3d6352738e30db883f4c888c","ssdeep":"96:LwrzbPa3OZnVkmoL8rr+RwB7+6CISYvp6kHgrcZpxc5KoNVii:srzbPVHoLsaM+fYvpxHCKepb","tlshash":"cec185d8abb05268b508b0b9c699e4f93d225df57103e060d3fc2c1f6af112e8925ed3","first_seen":"2025-10-07T03:26:06.261741Z","last_seen":"2026-09-15T13:39:47.999099Z","times_seen":35,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/huobi_wallet.c6837656.c6837656.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.634Z","timestamp":1789479528634,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/huobi_wallet.c6837656.c6837656.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z%2BhdhBKBiEO3u7rlftKbRX9W32hmJoKO3Xq9P2%2Bow%2FLlXfiKsIzZ%2FtHMtVBcBvAwVzMMFKuCLztJTT%2FoQyhwlU7Xiu3UsgVfXrsm71AO2rmFAVjoowhbjQyjBCQ%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-1775\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808adffe156c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6005,"size_decoded":3137,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c6837656c6ff94a6255627b34c606b11","sha1":"dde6166b26e956da57efb73e2a28c6717dcbf62d","sha256":"1cb80613517f8fed11f69222c83bf4944be8c006ab55dba1e10eb561d7d28091","sha512":"a09cdbd93522af4d4c833f2be574bef1fa1d43b4bfa4f5d045ede26b04e730e7b1ff2e5a1a87c0909da2fca03ced439ab609606ab3cbece09c9d71e29d3b2af0","ssdeep":"96:LPql1FWhthG3pNSvqGsFx+KkhX5ehmmXYcHOt4ioEVq430iWfEv:bqjFWrIYyLghXmHI4ilVtDv","tlshash":"f2c1b8cc7ab897f9f002abbdc32614783a22b8eda9538814c7551e1bb46152d4c68cdf","first_seen":"2025-10-07T03:26:06.176316Z","last_seen":"2026-09-15T13:39:47.999655Z","times_seen":35,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.moyukefu.vip/static/layui/lay/modules/upload.js","fqdn":"static.moyukefu.vip","domain":"moyukefu.vip","tld":"vip"},"ip":{"addr":"172.67.189.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.moyu-a15.xyz/index/index/clibox/u/6a95565417a04/t/1789479529/tk/80c8c1c231f1b55c379545d44003467f?lang=zh-tw","date":"2026-09-15T13:38:58.850Z","timestamp":1789479538850,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moyukefu.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 06:28:42 GMT","end":"Tue, 10 Nov 2026 07:28:37 GMT"},"fingerprint":{"sha1":"DD:5C:88:F4:12:76:B9:65:65:2F:53:18:99:C6:9C:6B:A7:EA:42:3C","sha256":"25:88:A7:A0:B3:CC:A4:BE:1A:B9:4D:09:85:C4:4F:BA:F2:88:31:9E:0C:CD:52:06:31:C7:59:F0:80:A6:B2:B1"}}},"request":{"raw":"GET /static/layui/lay/modules/upload.js HTTP/1.1\r\nHost: static.moyukefu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.moyu-a15.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 02 Sep 2021 03:12:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=41GueUobyzTaNERpTRz%2F55LrixS4qXzhjqG%2F26SN6rJXKZQFmkEes40iHSx%2FC%2BwjdpTlBWtHQvumcMQQNPxYJV7FMT799YFlywvg2w8l3Imqoq90D59EXSCYUEc8sNX4Sq%2FBrLM8\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"6130410a-1d2a\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808eddcbb76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7466,"size_decoded":3937,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7185)","md5":"4764cd260a2b1966a7b20a6c23b8ff3a","sha1":"d1aa3e4dfc368435578c6b5eea85d3280047b1af","sha256":"06c8c51ae47b56c60f8fda5e7570753bca2e487dfe84125efb6ad8fd04268bc8","sha512":"fc2519b7a6ecfa43d0a3f4a76329f52a048510100f79b2c77d3c6e1761649345e557e8ea696445cca1bdd7fe2ebcdf5f3ce9443f4aba7efe24382e3c286f633a","ssdeep":"96:Y4jcpetehsuIZo6qF3CS4pMrqwj+EV+L+CgegZzlUx9ugRFS3MZYCX3/niEs9L16:YvuDocMrp+QrC2UTduc/3/nARo/","tlshash":"03f1b55dba18b82322b374f5018f460d25bf046e590ac2c8b193d4ca9ebed6d1163ff9","first_seen":"2023-03-07T15:44:29Z","last_seen":"2026-09-15T13:39:48.00023Z","times_seen":56,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.moyukefu.vip/static/layui/font/iconfont.woff2?v=256","fqdn":"static.moyukefu.vip","domain":"moyukefu.vip","tld":"vip"},"ip":{"addr":"172.67.189.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.moyu-a15.xyz/index/index/clibox/u/6a95565417a04/t/1789479529/tk/80c8c1c231f1b55c379545d44003467f?lang=zh-tw","date":"2026-09-15T13:38:59.518Z","timestamp":1789479539518,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moyukefu.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 06:28:42 GMT","end":"Tue, 10 Nov 2026 07:28:37 GMT"},"fingerprint":{"sha1":"DD:5C:88:F4:12:76:B9:65:65:2F:53:18:99:C6:9C:6B:A7:EA:42:3C","sha256":"25:88:A7:A0:B3:CC:A4:BE:1A:B9:4D:09:85:C4:4F:BA:F2:88:31:9E:0C:CD:52:06:31:C7:59:F0:80:A6:B2:B1"}}},"request":{"raw":"GET /static/layui/font/iconfont.woff2?v=256 HTTP/1.1\r\nHost: static.moyukefu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.moyu-a15.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://static.moyukefu.vip/static/layui/css/layui.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:59 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 02 Sep 2021 03:12:10 GMT\r\npriority: u=3,i=?0\r\netag: \"6130410a-656c\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZNI9Tk6%2Bd7AOCoZRe0S2Kx%2F8ymQRgGwzY1vSP4WGemfqRdAQ0SntLFBzn3rQiQlYacEUUi5q%2BoXbsDoVmS%2BqfhIAtc09GcmvolFQ1Se9DKY0E9fkrmBvQEog4zoDhBI%2FNtvzDNOT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808f1fd5276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25964\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25964,"size_decoded":26727,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25964, version 1.0","md5":"d8c214c89e33a7bea93d656bd865e869","sha1":"c188dbfc6951b7c305940ac3a279227aeb5617f4","sha256":"bef73f87b8a3972427dcece922ed8f59d1d01c4a3fd572316efa70de9aec9c09","sha512":"0e5897c1b874a714fbab221e97717c5bd8b6c525b539a24eca76391206f931abf5cad2441743c441239ca2830f3fb33c34d207e13ee4d1eb3eeba806763f8405","ssdeep":"768:4kZIXl8feK5HavVh7VQB+l9yDbzKu1eNxECo:4kZIV8fqxQB+l03zdeNq3","tlshash":"fbc2e1c340bb8ab8b077783c6a9e96b9d51134261dde919427cc096043feb49eace701","first_seen":"2023-04-14T13:17:16Z","last_seen":"2026-09-15T13:39:48.000755Z","times_seen":1075,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/mew.3963198e.3963198e.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.611Z","timestamp":1789479528611,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/mew.3963198e.3963198e.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:49 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CJS6YQAmHat%2FBFoPMrmVWD2kFdF1p5jzV9hMpHBgHFI2fZyxxz2ety4zV9dQ2wSjg91poMIEOd9XsAAjwWjnFVNQYi%2B3Wk91iHaqXmDGTMbDIDhsykLNbxka0Ag%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-630\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808addfc956c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1584,"size_decoded":1425,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3963198e20c6c396ccc5aa3e9a6f69b3","sha1":"a95b3bad300f7d0bc24c1837115faaea128e7cbb","sha256":"4b574df54f3eb29f5ea362f53466a517332c2f436b9652066c76329a90a9d2c4","sha512":"642a2de1e09368690fee57b5018a8721fdc934eec0b65f38b8dc0818f7ad09fb3f9236d46aa9962792b13121b6404b6e86a5d0292815703bbcda824c6ca06c28","ssdeep":"","tlshash":"15311fdc365580e9b804e4fcc2aa4a7a32a76cd6970bf048b791280fb18205d29297cb","first_seen":"2025-10-07T03:26:06.170448Z","last_seen":"2026-09-15T13:39:48.001308Z","times_seen":35,"resource_available":false,"data":null}},"time_used":745,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":745,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/atoken.30e72438.30e72438.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.613Z","timestamp":1789479528613,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/atoken.30e72438.30e72438.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x2BC%2Fnnje8ZCLEwTPo6StvHOkc1CUofJMsXB9O0DF%2BP27izKTDv2uRDYIIXJAIkCm1Pfyq7ZT%2BGxrrIg63UenKKl1pXx4m8QBrSv6uaRJLa00OGUmhpObGvbrK8%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-879\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808addfcb56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2169,"size_decoded":1564,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"30e724380c57dcd3c3da657ebb7a5d22","sha1":"6fc152e298837fcf2f81118a1a39da4acb47920d","sha256":"76e15e07fcf7764301f61e3ddd0ba74d468844d62235f6c36440ba20dca65d43","sha512":"9448e3b25f1a7f85105021834f94846ef77dfa885f9cfde8020c2733f40884754141c18012cf86399110e3dca6895ea6d3f38f3bea4bdb396f762099c19cdb3f","ssdeep":"","tlshash":"304142cc7734c6789920a2bcd71e1ab1bab75ce291c6825053554c2b3ca45ae8dbccc7","first_seen":"2025-10-07T03:26:06.125746Z","last_seen":"2026-09-15T13:39:48.001879Z","times_seen":35,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/o3_swap.a3a05a64.a3a05a64.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.631Z","timestamp":1789479528631,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/o3_swap.a3a05a64.a3a05a64.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NjJa9uk06S8mofHo6CFj8%2FkmzoAmhcFgmQ%2FxmlEbNhWKV9DEellGuXD4a5HQep%2BXsD9qKgMLzqB%2BkxAVAocJF1Ujb7an9Jsyvt%2FFhJrGeWBinKRUenotfxXUP0s%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-24d3\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808adffdc56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9427,"size_decoded":4873,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a3a05a64bf748786d2ffb51ece4efd74","sha1":"f678086f9e02ec09ac048deaf2232eba5d3b5686","sha256":"f6af7ecdb4d50060eed788178f8b8be90916d5e0f373170c25c5fab8df395d70","sha512":"09671ebb3914599c94f33c29d870d29c362cc9f5439753e33b10b55c5da11e29df64e459d3c6da4fad4b0785534c8867db50f4cf296cbb1c0266c3f0c7f89365","ssdeep":"192:CkNEnYKKd7x4D96XQ8xuvKvY2spgri2qWLW4HoPYFpFMDNMjggY:Ck+R+F44XQguv3Gi20YFApuW","tlshash":"ca12d39d9fb686fcf000a7f5c76388687d87aae16d038426cba51d2ed58545cc822cdf","first_seen":"2025-10-07T03:26:06.293154Z","last_seen":"2026-09-15T13:39:48.002448Z","times_seen":35,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.moyukefu.vip/static/common/js/jqueryWeui/jquery-weui.min.js","fqdn":"static.moyukefu.vip","domain":"moyukefu.vip","tld":"vip"},"ip":{"addr":"172.67.189.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.moyu-a15.xyz/index/index/clibox/u/6a95565417a04/t/1789479529/tk/80c8c1c231f1b55c379545d44003467f?lang=zh-tw","date":"2026-09-15T13:38:58.584Z","timestamp":1789479538584,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moyukefu.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 06:28:42 GMT","end":"Tue, 10 Nov 2026 07:28:37 GMT"},"fingerprint":{"sha1":"DD:5C:88:F4:12:76:B9:65:65:2F:53:18:99:C6:9C:6B:A7:EA:42:3C","sha256":"25:88:A7:A0:B3:CC:A4:BE:1A:B9:4D:09:85:C4:4F:BA:F2:88:31:9E:0C:CD:52:06:31:C7:59:F0:80:A6:B2:B1"}}},"request":{"raw":"GET /static/common/js/jqueryWeui/jquery-weui.min.js HTTP/1.1\r\nHost: static.moyukefu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.moyu-a15.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 02 Sep 2021 03:12:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VZvL1EGacW%2BbD71GjRbDkHZqd5BD9LXndkIec%2FMWiSuIoxrPdK8f1fNexd3XyULaV9fGfv9UzfgSBJkxaMFXhs7%2F51FBP%2B1TIBRAv7UuW5ojjafW%2Fx5I1JPh9n4QbOufUk79bC0c\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"6130410c-1496d\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808ec2c7f76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84333,"size_decoded":28420,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32007)","md5":"9c7bcbbeb838eabe8801befbb54f177c","sha1":"2c486e904bebe49b0bcea8e5d0b019533699a7a2","sha256":"e07b9a34158e94ba73df9e89768dce0e2846c984635a6fd4c4d7539c822b6bce","sha512":"dc5a2a219f4f7b3a29da600600c4666c18d0a9c3f77e256e3222387976b779cae0adaba0adfc72fb3991730c7a34b3f390fcbcf47977ca316fc5d94ca6de1f16","ssdeep":"1536:beyBPd2XiZAazT8DOCOB/j2kNleVRrI5CVam9P:beyBFTZZzfNleVRrI5C1","tlshash":"2d83f68e7651b63253f7217881af02052233a926644754a8b96ce8d51efcc4da3bff7c","first_seen":"2023-06-17T21:56:24Z","last_seen":"2026-09-15T13:39:48.003044Z","times_seen":39,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/chevron_right.59de6f6a.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.640Z","timestamp":1789479528640,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/chevron_right.59de6f6a.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:49 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tUKsEqbut%2F%2BnZI7L6XiLj5rrrWvai49WTM8Vp19ihGKq2d5rKkAUCvyB3%2F2DK9nujfGj9UMWdCyafQ0iuUxA9dPaiuNLq36Sy0r5m1oSov83MXgaDOn0a7Aa%2B%2FA%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3b808ae0fe656c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":699,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-09-15T16:47:42.358176Z","times_seen":559608,"resource_available":true,"data":null}},"time_used":501,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":501,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.moyukefu.vip/static/common/js/reconnecting-websocket.min.js","fqdn":"static.moyukefu.vip","domain":"moyukefu.vip","tld":"vip"},"ip":{"addr":"172.67.189.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.moyu-a15.xyz/index/index/clibox/u/6a95565417a04/t/1789479529/tk/80c8c1c231f1b55c379545d44003467f?lang=zh-tw","date":"2026-09-15T13:38:58.587Z","timestamp":1789479538587,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moyukefu.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 06:28:42 GMT","end":"Tue, 10 Nov 2026 07:28:37 GMT"},"fingerprint":{"sha1":"DD:5C:88:F4:12:76:B9:65:65:2F:53:18:99:C6:9C:6B:A7:EA:42:3C","sha256":"25:88:A7:A0:B3:CC:A4:BE:1A:B9:4D:09:85:C4:4F:BA:F2:88:31:9E:0C:CD:52:06:31:C7:59:F0:80:A6:B2:B1"}}},"request":{"raw":"GET /static/common/js/reconnecting-websocket.min.js HTTP/1.1\r\nHost: static.moyukefu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.moyu-a15.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 02 Sep 2021 03:12:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FJf6jpWdDWECtw%2FoPJhh3xGK%2BTKyZaLYogi7VEAVqBYF9Y60acQLga9r9vz3u8Z4WqzPeErpQILgnUPF78KRm%2FIm2Vv0uWSjqo3YQYkwSaOCYyJjpVjj2T%2BfPtXzjxEC7UeY9fdz\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"6130410c-c1b\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808ec2c8176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3099,"size_decoded":1869,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3099), with no line terminators","md5":"dec3415f9f087d45dee5cbe16be01eb8","sha1":"710efd35c1e618ae1f60e3bf705b19c83cb945e2","sha256":"da24bffc7a68b97b735cd4aa603e028393d28f3b188f2ab930936a48396ca12c","sha512":"fa7f0f632dfcb396d98d22baaaea72f09ba44eeb6a121f1c50740113a0737256484a30ad2bf2ef8983bb3542bfcd0919cb7bf3874cbc4c7453e201685f2c6b8b","ssdeep":"","tlshash":"a351320cfa7a21b2a3e75071a01fb226732150b79f1107cd63619af45b79dc0267af9e","first_seen":"2023-03-07T15:44:29Z","last_seen":"2026-09-15T13:39:48.004132Z","times_seen":50,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.moyukefu.vip/static/layui/lay/modules/layer.js","fqdn":"static.moyukefu.vip","domain":"moyukefu.vip","tld":"vip"},"ip":{"addr":"172.67.189.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.moyu-a15.xyz/index/index/clibox/u/6a95565417a04/t/1789479529/tk/80c8c1c231f1b55c379545d44003467f?lang=zh-tw","date":"2026-09-15T13:38:59.047Z","timestamp":1789479539047,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moyukefu.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 06:28:42 GMT","end":"Tue, 10 Nov 2026 07:28:37 GMT"},"fingerprint":{"sha1":"DD:5C:88:F4:12:76:B9:65:65:2F:53:18:99:C6:9C:6B:A7:EA:42:3C","sha256":"25:88:A7:A0:B3:CC:A4:BE:1A:B9:4D:09:85:C4:4F:BA:F2:88:31:9E:0C:CD:52:06:31:C7:59:F0:80:A6:B2:B1"}}},"request":{"raw":"GET /static/layui/lay/modules/layer.js HTTP/1.1\r\nHost: static.moyukefu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.moyu-a15.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 19 Nov 2021 12:36:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ygnqGrhquOzu3h4F%2FDH4%2BEiXuILSucs6%2FC%2Bu5jU6umb8c6CSr2lg3wzDHZkxgTypZ8Jk2T%2Bj%2BS%2BaneYK5QVEwS0G0TMuhXLPLUySdiU1MoMTW9lZEq%2FOX3zMkPWz6eLtwSH4jpf%2F\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"61979a30-897b\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808ef0ce676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35195,"size_decoded":10829,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1106), with CRLF line terminators","md5":"45009cc8df8571cab2899ef4b4e88c14","sha1":"eb8bffd9e15522e0213e7b000d9253136537f131","sha256":"a79171506f7edfe59b24dccf0f5bb54d5d6d38ac804e3134fd04e278dc136cca","sha512":"97801b2e38ca11ba6b2e32bd500027e5bb7023479044d75009670169c199db51963e011931ec816d45de9694f8bbff7f2176715462a89aedcfd884ddbc37bbc1","ssdeep":"768:YGoEJ2gnJwDR9c8xGhyIWAkEA4VjrLzadrjKCCJ:noEwgnq9cHTVjrydrjKCCJ","tlshash":"78f2740a69e03879d133f336cd6fa909f1b21a2b53424815ba7d10780f7586456f6fbe","first_seen":"2025-02-26T17:18:19.555614Z","last_seen":"2026-09-15T13:39:48.004697Z","times_seen":22,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.moyukefu.vip/static/layui/css/modules/layer/default/layer.css?v=3.1.1","fqdn":"static.moyukefu.vip","domain":"moyukefu.vip","tld":"vip"},"ip":{"addr":"172.67.189.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.moyu-a15.xyz/index/index/clibox/u/6a95565417a04/t/1789479529/tk/80c8c1c231f1b55c379545d44003467f?lang=zh-tw","date":"2026-09-15T13:38:59.257Z","timestamp":1789479539257,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moyukefu.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 06:28:42 GMT","end":"Tue, 10 Nov 2026 07:28:37 GMT"},"fingerprint":{"sha1":"DD:5C:88:F4:12:76:B9:65:65:2F:53:18:99:C6:9C:6B:A7:EA:42:3C","sha256":"25:88:A7:A0:B3:CC:A4:BE:1A:B9:4D:09:85:C4:4F:BA:F2:88:31:9E:0C:CD:52:06:31:C7:59:F0:80:A6:B2:B1"}}},"request":{"raw":"GET /static/layui/css/modules/layer/default/layer.css?v=3.1.1 HTTP/1.1\r\nHost: static.moyukefu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.moyu-a15.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 19 Nov 2021 12:41:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RHNvs8UBsQuR3vFd06dgz1KvohxLQ0%2FYeqHespFUBfNlfXPcdU84Y8NmLqBXKwCwNJZVJbRWV20Em9PY7KRrIs1YVtwesoz73wCiOIeimtOlBlpHdt2TOVnPeJRgsUhJmYy8Gbok\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"61979b5c-413f\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808f05d1976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16703,"size_decoded":4259,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"829d2a42f17c3f64d3b3456b17b0670f","sha1":"cb44053c712d3024d99240c08d9de733df01024f","sha256":"703562b7ef348cd137e3b03d9a0552e2a2ca51139e042a8a6ad2589b09799412","sha512":"74434850e8fc7709b6c03537c33a72b2275c0f6224b2ea6a8630e1dea6b97b2ede135c998eddc63b1371bb4bd84019eaede0844655368567201e276787b195d4","ssdeep":"192:9eBKRBTsLP0PSqjkYd769V67JQo2gay6SKf6JovOCuueBA+rHi:9eKnTY0qlYd7WAJbXmZf6JKOCMA+rHi","tlshash":"2e72fd91489221dcb2034f21d7fc66763dfc4ca2e92b4d5ef2563c1f8349a99b6b2253","first_seen":"2025-02-26T17:18:19.550148Z","last_seen":"2026-09-15T13:39:48.005259Z","times_seen":22,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/css/common2.css","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.306Z","timestamp":1789479528306,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/css/common2.css HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BEOV20YQk9VM5fSWmwDBODR96SxrLPq6NiF812uhyAGwb219KfbKwTfs0zXHw6HVSgqIHp1905%2F6X8D1xcz1Aa2gaJu4DZntbisYqo96oo%2Bn8hs2O4Dcek0ivqY%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-ba42e\"\r\nexpires: Wed, 16 Sep 2026 01:38:48 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808abef8556c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":762926,"size_decoded":147511,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"e56e90863c2203b9581da5e63922c0f8","sha1":"82a6e7b9bc2867392892e1bd17b07e888618bcc7","sha256":"119d66d11c48345a7012c7202b22ef3e03595cf20eccda2908ada3de6c20fdeb","sha512":"8a299395847f84905fed7681828b4f72eb7326aba3f2d3bf4481b2280d0e2a5b474dc5235ec17a68ee758954b5f727dc4756fa1722bacb284d39b827687d4e73","ssdeep":"12288:dc6ezh84aacrJtRlb8xewrVsa2S6rnCa4AVXlGEbzRnQdAbhs8kqmHotO8VgGyhs:+8kqmzVDg","tlshash":"4df4d8659af31988751b845c1bee671473289083c60acdbd7b8d7748cfca7e484a2f8d","first_seen":"2025-10-07T03:26:06.196318Z","last_seen":"2026-09-15T13:39:48.005811Z","times_seen":32,"resource_available":false,"data":null}},"time_used":771,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":352,"receive":419,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/js/lang2.js","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.364Z","timestamp":1789479528364,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/js/lang2.js HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 13 Jul 2026 11:27:51 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PLlhuY3QMilx2pvkoZALmL4TV1gVST8USuY7r6lZbuChnXRJw6OnvpPw4GqqWv%2FxgMCQudemzU8n7Egbr5rm9X6%2FXCIO%2Fukh%2BTqmNpePhsmq3c6op3iPp2UBqjM%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a54cbb7-1038c\"\r\nexpires: Wed, 16 Sep 2026 01:38:48 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808ac4fa156c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66444,"size_decoded":21572,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (916)","md5":"262b1e820d332d2db99c0a61bf464663","sha1":"79db9e235ffe8b6dd18beab6d8d164c288d6ed3c","sha256":"d9fa8156827a438971d8f1daacbdae62aed864de13525012b38d92bb4c92d3d1","sha512":"44c30846fbcd3f330e64afbe890fc0d7f7571d5d404fd6d697445e7065a6e4f0b9f4d1d1232d3f69d46d2f2a7b4eb15218119158a843d3a8c47ea4aef028f52e","ssdeep":"1536:Ik+5ysn90a77kA29BtcF76OZEcsE5hRwf:Ik+5pn90I7kA2q76OZlwf","tlshash":"e45371fb458b1485244e720ca5cd390ba52941bbaf1632453bddb1393fce09ec5bab6c","first_seen":"2026-07-28T18:18:20.008446Z","last_seen":"2026-09-15T13:39:48.006406Z","times_seen":15,"resource_available":true,"data":null}},"time_used":462,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":327,"receive":135,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/gnosissafe.f0966483.f0966483.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.600Z","timestamp":1789479528600,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/gnosissafe.f0966483.f0966483.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hAyZQrIj4E%2BCyjANudij5zA9S7u10CQIzFnt7iitVyjraaP5GepoVrNiy18v4L38xuWiH6atofkq5tKK51wkB8dUgMl2%2BbGjJqJGYMcNyYr9M5EsE%2Fu6P9oUV%2BM%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-14d5\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808adcfbc56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5333,"size_decoded":2655,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f09664836ed86e13225d8afd1bb502f0","sha1":"622dff92ecdf8cf78b618732daf2582798c6e4d7","sha256":"ebdc44a5596027ff8e815f4ecdc3cf9384e4a75a5e9292bab16822e989f706dc","sha512":"6d0377c57f7835ab7a3997dac6da26f35a4b9ed015b53f589348df438c8eb7fc88964a2ff78da0021619b73fcad079b9ed060d560db10d1c8e23a5776f8d9be7","ssdeep":"96:LaQ9PKn4jL1kMNJfj/WJbWnveWiGhotyUR6tgUzh2mxnszY1J1yAhQqlQYsEWF6g:eQpKi6MCEh2R0tVxnsMhngSzWou","tlshash":"cbb153cc6696c6b8f08573f8cb262cbaabd74ec4a040c46c97e61c46dd9106edc64dd7","first_seen":"2025-10-07T03:26:06.242712Z","last_seen":"2026-09-15T13:39:48.00697Z","times_seen":36,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/assets/index/picture/givingblock.a8b51a93.a8b51a93.svg","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:48.622Z","timestamp":1789479528622,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /assets/index/picture/givingblock.a8b51a93.a8b51a93.svg HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NRa0ThpIH2C4760qG2UR1WF2Coa6UVVT4AmWhPHwTfpkaJVLrbOwxe1ZCLXwxVdcweIZuLrsW2F5IuOjCvnqlj88Ypb2y9J637d0BzoPV02IyYxucgT83Apddv0%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3bbb22-2be8\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808adefd256c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11240,"size_decoded":5477,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a8b51a93ad679d09dfb657c493601ccc","sha1":"78db16a675eea412baffa917650f1b562fc3ee7b","sha256":"4d7874029160f86b00398737d1dcc9e9ba332e2ea3ae5a93b1eba21f2e284b6c","sha512":"f1439168e674633604b5d2c0db79b02362b2a0a5277fe7e0f0a8f5a333276cdee253832921d8ed656fd99ab604bccb371e2a3d2f98bbb4497cfcb7f0a58a3761","ssdeep":"192:oxZ+2yXrwsVv2Bh5+F3I2ztMQHCSO1zzRfOBj0Okhtlpr9XkTcm2IHe2pUy5v:UUhXrhycI2JMgjYpr9XkTgIHWOv","tlshash":"2f32b7cc9b7b96fcf044a2f9cb4a5478fd4aa9e06d0196a8c7b91c0be85007d5d21cdb","first_seen":"2025-10-07T03:26:06.127878Z","last_seen":"2026-09-15T13:39:48.007542Z","times_seen":35,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rndyqh.cc/favicon.ico","fqdn":"rndyqh.cc","domain":"rndyqh.cc","tld":"cc"},"ip":{"addr":"104.21.23.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rndyqh.cc/","date":"2026-09-15T13:38:52.220Z","timestamp":1789479532220,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rndyqh.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 07:00:53 GMT","end":"Wed, 09 Dec 2026 07:00:52 GMT"},"fingerprint":{"sha1":"05:97:7F:8B:B4:3F:46:08:7C:AB:2E:DC:97:C0:0C:F4:C8:7C:DC:8A","sha256":"AB:54:BB:35:35:61:43:6E:7F:3C:98:5C:DC:A9:B9:CA:CC:8B:DF:6F:2B:80:BC:E0:9C:E9:5B:38:2F:AA:26:78"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: rndyqh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rndyqh.cc/\r\nCookie: laravel_session=eyJpdiI6InhIVzdUdGdnbDN6YWUvWHBNRDVmOEE9PSIsInZhbHVlIjoiT00vWVFaRnUyRkdXbVE5UlU1bGk2a2VOVDZLamFpYXE4UHg4Ui9mTVFxWExIdU9TOEtxU1h2c25EeUV3VjZmRGZOdUFveEhrakw1dTZOei9iUWF1NTI3OFk0S1UwNW9tNDBVQmx3VldXOUttQ2ZWMUxQOG91VG81ZFJOcENHRVkiLCJtYWMiOiJkMzA1NzdlZTM2NTYyZmFiNTBiZWViODdkOWQzMDkwODRlOGY4ODM3MmQ5MmNlOGMzMDdhNzZkN2UyZjc3NmVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:52 GMT\r\ncontent-type: image/x-icon\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 24 Jun 2026 11:10:26 GMT\r\npriority: u=6,i=?0\r\netag: \"6a3bbb22-0\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iZ1Js3GtaC6KO%2Bi1kX3oq6lpHs7hEZTMILwKPkT73Pv%2BzSOrmnxzMOjCmSotkrLgfkjafUzfz5C0ouc%2BT4hdnHE%2BPOF4mHgOSMatK1xCs4cJH3%2Bvw2Y%2B5fWJPZ8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808c46a0656c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":686,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T16:51:39.996945Z","times_seen":18478937,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rndyqh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.moyukefu.vip/static/layui/css/layui.css","fqdn":"static.moyukefu.vip","domain":"moyukefu.vip","tld":"vip"},"ip":{"addr":"172.67.189.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.moyu-a15.xyz/index/index/clibox/u/6a95565417a04/t/1789479529/tk/80c8c1c231f1b55c379545d44003467f?lang=zh-tw","date":"2026-09-15T13:38:58.573Z","timestamp":1789479538573,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moyukefu.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 06:28:42 GMT","end":"Tue, 10 Nov 2026 07:28:37 GMT"},"fingerprint":{"sha1":"DD:5C:88:F4:12:76:B9:65:65:2F:53:18:99:C6:9C:6B:A7:EA:42:3C","sha256":"25:88:A7:A0:B3:CC:A4:BE:1A:B9:4D:09:85:C4:4F:BA:F2:88:31:9E:0C:CD:52:06:31:C7:59:F0:80:A6:B2:B1"}}},"request":{"raw":"GET /static/layui/css/layui.css HTTP/1.1\r\nHost: static.moyukefu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.moyu-a15.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:38:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 02 Sep 2021 03:12:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OmWyq7nHOIEDPhxM4ilLcb7IjmwUYWGXr94npMITbs3mewecQxNtVfaJ6lcQcfwEvpjmvwG12%2FzB7S1NMr5d9N4zz%2BmFd2AG0vtCQWnheDf1hNcqkbe4sI6UTYRJeowvNPo69SKY\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6130410a-1223f\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b808ec1c7776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74303,"size_decoded":17341,"mime_type":"text/css","magic":"ASCII text, with very long lines (65479)","md5":"cee0679a08e7be58082cc7593f275109","sha1":"aaa2d2455cdcadd94576fb67c150f0810b7ed59c","sha256":"09197e19b3139d3cc805873a68da8c0a869b3deadcd86e03804609ec76b21700","sha512":"fb141682440b660375ff722a138b70b40c5dfe8e31c6e0229ae75819e952a359acf4ef7a2b279e492684b87e5313e99d2d8faacb83da3208a34a58458d5d8f30","ssdeep":"768:f/nEWwcY/8zYbRzyclDj1JpZlwyQaIYKsR3zdVhlu9Tr1BpRBtfKb6G6nr4wdk7a:0WwcY/8ZG68weHgaXq5","tlshash":"c1739632e6012ca5762bd215b1dcbdfda0789512ea634e6df3823b1b87848471077f6b","first_seen":"2023-04-20T04:23:37Z","last_seen":"2026-09-15T13:39:48.008122Z","times_seen":430,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}