{"report_id":"dbfe5a57-2e90-415f-8b15-6df24dd1518c","version":0,"status":"done","tags":[],"date":"2026-07-12T20:59:11Z","url":{"schema":"https","addr":"quicketaonline.com/","fqdn":"quicketaonline.com","domain":"quicketaonline.com","tld":"com"},"ip":{"addr":"104.21.72.49","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.quicketaonline.com/","fqdn":"www.quicketaonline.com","domain":"quicketaonline.com","tld":"com"},"title":"UK ETA Application Support | Double-Checked \u0026 Secure Review Assistance","dom":{"size":362324,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (64079)","md5":"a863844401fbf9f3ee0c4c821d73686e","sha1":"2add9e5fd74af6cbe2d136d88c32f3fa7d5ef966","sha256":"30bc38121d0148097eafc5e302d76ab3aff12b02680e9cf78a30bd254031b28d","sha512":"d04aa52cad3f974ff04aa77c1a76b448f95f7173d5344483323414cd5d25d3a8974e652f060d8fb12dab743c07661bbf4b143e8e5b1c8fdd0cb0969f118c763d","ssdeep":"6144:7tz90f9hZLm8c4uHeD9573ihSNkgAvFnqPWxMthbFj8Mn76Qi:peD95SvErn7u","tlshash":"6974f896f584343dac67c199a290befc912fa591d7174aaaf02b633447c67d30933acc","dom_hash":"domhashb76d0504f2ce9c0e3985b09069911193","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"quicketaonline.com/","fqdn":"quicketaonline.com","domain":"quicketaonline.com","tld":"com"},"ip":{"addr":"104.21.72.49","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T20:59:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"www.quicketaonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"quicketaonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.quicketaonline.com","ip":{"addr":"104.21.72.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-07","domain_rank":0,"first_seen":"2026-07-11T14:22:59.643099Z","last_seen":"2026-07-11T14:22:59.643099Z","alert_count":5,"request_count":5,"received_data":491212,"sent_data":2791,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"Bootstrap:5.3.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-07-05T22:48:05.057169Z","alert_count":0,"request_count":2,"received_data":315098,"sent_data":1034,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"quicketaonline.com","ip":{"addr":"104.21.72.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-07","domain_rank":0,"first_seen":"2026-07-11T14:22:59.640202Z","last_seen":"2026-07-11T14:22:59.640202Z","alert_count":1,"request_count":1,"received_data":510,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2026-07-06T08:21:58.74978Z","alert_count":0,"request_count":1,"received_data":88517,"sent_data":508,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.quicketaonline.com/","fqdn":"www.quicketaonline.com","domain":"quicketaonline.com","tld":"com"},"ip":{"addr":"104.21.72.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"80131eabb16202787cf59864717bec99","sha1":"a31cc7718bcefb1049b8892868f1c091c014576a","sha256":"081b47d672ad090ad69ddf8ed7dc2f165a584369a85387434a1b6977c60ce3cb","sha512":"720d6eea19323e2bd26b010d2ce848c0d8515f8b8311b846c3512eb7313ecfa81132f8667e3a1df5d5f2208bc335ba02da11dca5a37475abce5c95cdbfc2f9f7","ssdeep":"","tlshash":"0611b47be21c1d3342fe7af172a96a4c3578c40a79458c132c0d8a09043bd95d1fa9f9","size":987,"data":"","first_seen":"2026-07-11T14:23:03.337492Z","last_seen":"2026-07-12T20:59:13.976025Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quicketaonline.com/","fqdn":"www.quicketaonline.com","domain":"quicketaonline.com","tld":"com"},"ip":{"addr":"104.21.72.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5bfbf58ab7c373cd18a53fabb4b4227d","sha1":"2cfc1d4de2df7ed5b18d2380c23ad78e9ead452d","sha256":"d4dab85134d92a18fce7b65e45bd09a611d9849a233103ee92f06984f9398556","sha512":"dd2b5ac54cae4a8a3c4884076e3d1deaf06667ed00351c74e7281619eb679602792a08112bf1db015d8e3721fd5b73738dd3a2810fc3e2f1a8178ca7c96dd3c6","ssdeep":"","tlshash":"9221797d602722732ab762e14b1775e435607253a003dc1e3a4cc3d48feae686c7f294","size":1360,"data":"","first_seen":"2026-07-11T14:23:03.338431Z","last_seen":"2026-07-12T20:59:13.977396Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","size":80721,"data":"","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-07-13T10:17:35.431637Z","times_seen":29049,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-07-13T10:16:53.160696Z","times_seen":178536,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quicketaonline.com/js/dd.min.js","fqdn":"www.quicketaonline.com","domain":"quicketaonline.com","tld":"com"},"ip":{"addr":"104.21.72.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d164a9dc6935af784c028dc3a73dd5f","sha1":"ded9a1d10e40c00f67b128132288347eb9cd19a4","sha256":"2fc23eaad51d463b4f98676ee3c6b8a69cf6b84c980eb1f8e597183f0052ce57","sha512":"fc1a30b1c5dfe01d0e51643de109ebd056407738e2e79206eb99773cbdc379d2ed7eccc2b71dfd5886cc510ab5c7a647aa77e961bc6629f71de3c2c93a48992c","ssdeep":"768:f4Bn+Cc8s3y+ugJ/hlNlll+LL+ZhxgusjR:NuQZlNT+DR","tlshash":"64d2a8122365752602fe90aba4f84543e37976dd5d0042acf5a8ecdf638ec40b2b7bb5","size":29823,"data":"","first_seen":"2023-05-30T19:57:02Z","last_seen":"2026-07-12T20:59:13.975361Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.quicketaonline.com/css/index2.css","fqdn":"www.quicketaonline.com","domain":"quicketaonline.com","tld":"com"},"ip":{"addr":"104.21.72.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.quicketaonline.com/","date":"2026-07-12T20:58:33.995Z","timestamp":1783889913995,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"quicketaonline.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 05:36:42 GMT","end":"Mon, 05 Oct 2026 06:35:00 GMT"},"fingerprint":{"sha1":"64:C4:D8:BF:0F:3E:DF:C7:E4:64:91:A9:AE:9F:4B:61:29:17:D2:BA","sha256":"B0:9E:C7:9D:32:75:EB:DA:B0:ED:69:E7:16:52:B8:63:59:08:CE:40:4F:E6:3E:26:A9:25:4F:72:A0:73:25:04"}}},"request":{"raw":"GET /css/index2.css HTTP/1.1\r\nHost: www.quicketaonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.quicketaonline.com/\r\nCookie: JSESSIONID=C185F20E982682185F0710E78988D1F0.node1; ROUTEID=.node1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 20:58:34 GMT\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\netag: W/\"87552-1783424960000\"\r\nlast-modified: Tue, 07 Jul 2026 11:49:20 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0CllxojJgMpje577oVPFmM7heGHZZkCIFpniJ%2FoNgD9R15Vmsa3OLK4ygwRglgHOxbPsRAY2%2FJUYnElUjivsd7W8q1%2FqN0EE9%2Fj2NJMpp1bNRZ5Rft%2BvYUEj6RB8fyMpoNNjB2aiN06a\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1a2f77a7a0d3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87552,"size_decoded":17673,"mime_type":"text/css","magic":"ASCII text","md5":"fe2866ba46967da5d28bbab8b16fb80d","sha1":"d1de110cec6d907b4a14628a82e1de84211a5f9e","sha256":"cf6313f8d1a31012ac104e4b0a36ff5ae20d7d9fceb1542a775b4ac748fc5705","sha512":"271ca029ebc416fded6b770aff79d9bb7c73bf3ce6281335f708a2da514ce8c6b8401682c93f07342f8493c0cbf3980b4f91ab580bb50d16bb443eb216ba4835","ssdeep":"768:sfEp26u5dtHyO72xH6g2lTWCu7FQZGu3oQasoCFt/:sfEp26u5Yag2+7FQUNQasoCL/","tlshash":"bd83b415f11a687d3d2fa0e89f8cbaad660eb0c09d2e0e65fa5e103463c62f54d77d84","first_seen":"2026-07-11T14:23:03.333924Z","last_seen":"2026-07-12T20:59:13.965426Z","times_seen":2,"resource_available":false,"data":null}},"time_used":601,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":235,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"www.quicketaonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.quicketaonline.com/","date":"2026-07-12T20:58:33.997Z","timestamp":1783889913997,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap@5.3.3/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.quicketaonline.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 5.3.3\r\nx-jsd-version-type: version\r\netag: W/\"38d63-xawd7pYctZoEUlbsID9p4xeHL3w\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 12 Jul 2026 20:58:34 GMT\r\nage: 981417\r\nx-served-by: cache-fra-eddf8230218-FRA, cache-bma-essb1270035-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 33206\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232803,"size_decoded":33986,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"a549af2a81cd9900ee897d8bc9c4b5e9","sha1":"c5ac1dee961cb59a045256ec203f69e317872f7c","sha256":"3c8f27e6009ccfd710a905e6dcf12d0ee3c6f2ac7da05b0572d3e0d12e736fc8","sha512":"8e74ae0384acd8f9248a448e2ed62cf0195821e7882b587df6dcb861fbd13c0973af7efbbebdc25c36fbb1bede1040588c3b5c623f808c11f714bbf9b9226e5e","ssdeep":"1536:O9YnIWbn98fdRfvO5wlP77k9P3EV98IsYRElV6V6pz600I41r:RnIw98fbV986I6V6pz600I41r","tlshash":"dc3482d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-07-13T10:16:43.416539Z","times_seen":24693,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":9,"receive":4,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.quicketaonline.com/","date":"2026-07-12T20:58:34.005Z","timestamp":1783889914005,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.quicketaonline.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 5.3.3\r\nx-jsd-version-type: version\r\netag: W/\"13b51-3cbp6tbRaukjc5nOQejBYgzFnDY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 12 Jul 2026 20:58:34 GMT\r\nage: 981417\r\nx-served-by: cache-fra-eddf8230066-FRA, cache-bma-essb1270035-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 24464\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80721,"size_decoded":25258,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-07-13T10:17:35.431637Z","times_seen":29049,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":13,"receive":6,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quicketaonline.com/images/quicketaonline%20logo.webp","fqdn":"www.quicketaonline.com","domain":"quicketaonline.com","tld":"com"},"ip":{"addr":"104.21.72.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.quicketaonline.com/","date":"2026-07-12T20:58:34.194Z","timestamp":1783889914194,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"quicketaonline.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 05:36:42 GMT","end":"Mon, 05 Oct 2026 06:35:00 GMT"},"fingerprint":{"sha1":"64:C4:D8:BF:0F:3E:DF:C7:E4:64:91:A9:AE:9F:4B:61:29:17:D2:BA","sha256":"B0:9E:C7:9D:32:75:EB:DA:B0:ED:69:E7:16:52:B8:63:59:08:CE:40:4F:E6:3E:26:A9:25:4F:72:A0:73:25:04"}}},"request":{"raw":"GET /images/quicketaonline%20logo.webp HTTP/1.1\r\nHost: www.quicketaonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.quicketaonline.com/\r\nCookie: JSESSIONID=C185F20E982682185F0710E78988D1F0.node1; ROUTEID=.node1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 20:58:34 GMT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: W/\"2416-1783424960000\"\r\nlast-modified: Tue, 07 Jul 2026 11:49:20 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H2gR9LA0XM2PWkORzeEzCJOLbeT0wvL1ItXSXHtnug205CI8xvAyxQUvLo8c3eBDz%2BmuQBJMWM0iVYhUJ9%2BmVZIr95qoDCnH%2B8ahS0TlNEi9RU5b84xnxUBIHI%2F5FFET6HvyxO8TgiW8\"}]}\r\ncf-ray: a1a2f77bba323181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2416\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2416,"size_decoded":3120,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"37a614140b625d86c5302ab2c1fe4ecf","sha1":"9d7a0686b0f9a8266436398e2cb5dcbc26d1fcc6","sha256":"edd901b6f1174d6d723a4dcc1e0e6ea683c0b74d43dea804644b55ee78f51fc3","sha512":"aef2875a079271727710aa68f043dcde57e8c9cac9ff623b6f36d597538708c548fe9dd5c1c4778ab0aa6420f93b05a85055b8093a4a3e6a1972f7557e284dc8","ssdeep":"","tlshash":"47410826c76bc589b500f090b39982be83d1b6543981a3041f34c5b6c7b4a68f6bce48","first_seen":"2026-07-11T14:23:03.336239Z","last_seen":"2026-07-12T20:59:13.970205Z","times_seen":2,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":369,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"www.quicketaonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.quicketaonline.com/images/favicon.png","fqdn":"www.quicketaonline.com","domain":"quicketaonline.com","tld":"com"},"ip":{"addr":"104.21.72.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.quicketaonline.com/","date":"2026-07-12T20:58:34.724Z","timestamp":1783889914724,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"quicketaonline.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 05:36:42 GMT","end":"Mon, 05 Oct 2026 06:35:00 GMT"},"fingerprint":{"sha1":"64:C4:D8:BF:0F:3E:DF:C7:E4:64:91:A9:AE:9F:4B:61:29:17:D2:BA","sha256":"B0:9E:C7:9D:32:75:EB:DA:B0:ED:69:E7:16:52:B8:63:59:08:CE:40:4F:E6:3E:26:A9:25:4F:72:A0:73:25:04"}}},"request":{"raw":"GET /images/favicon.png HTTP/1.1\r\nHost: www.quicketaonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.quicketaonline.com/\r\nCookie: JSESSIONID=C185F20E982682185F0710E78988D1F0.node1; ROUTEID=.node1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 20:58:35 GMT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: W/\"3743-1783424960000\"\r\nlast-modified: Tue, 07 Jul 2026 11:49:20 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t835olMNJY0E2cWotSVXiwHQsbtFZba1BwhuQ62jlL5Tad1Z3dRO%2BY117mOfXMT9agjzRMFLVnsogmvEfquaTwnSutOH%2FsznnTbTqQZ1z2hEYu%2F990DRhWOIKKVuhDVovPpggkWx9mt0\"}]}\r\ncf-ray: a1a2f77f0aa53181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3743\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3743,"size_decoded":4447,"mime_type":"image/png","magic":"PNG image data, 101 x 101, 8-bit/color RGBA, non-interlaced","md5":"19b1c936c700e88cefa949be18521372","sha1":"443dfdd9a457ee5bb26b6f44ea9e55fd7f1e004f","sha256":"572cd9dfc3cd2e463a062f50d247723b04ad8cfa75a2d3d7014d278073417489","sha512":"a56b13f6ffa6a73a979cd282e46fad76118fa11dc70db11a2be43c146040019bb081a3903fc83e7685670a3de5072c8acf9431d50bfbacf80d025325a4a743f8","ssdeep":"","tlshash":"4f717de07d13c06e7bd60cc89cb22f53d9d9ea0d7a1fc35ca248095eb9499c691c9c91","first_seen":"2026-07-11T14:23:03.332391Z","last_seen":"2026-07-12T20:59:13.971551Z","times_seen":2,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":348,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"www.quicketaonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"quicketaonline.com/","fqdn":"quicketaonline.com","domain":"quicketaonline.com","tld":"com"},"ip":{"addr":"104.21.72.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T20:58:33.299Z","timestamp":1783889913299,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"quicketaonline.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 05:36:42 GMT","end":"Mon, 05 Oct 2026 06:35:00 GMT"},"fingerprint":{"sha1":"64:C4:D8:BF:0F:3E:DF:C7:E4:64:91:A9:AE:9F:4B:61:29:17:D2:BA","sha256":"B0:9E:C7:9D:32:75:EB:DA:B0:ED:69:E7:16:52:B8:63:59:08:CE:40:4F:E6:3E:26:A9:25:4F:72:A0:73:25:04"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: quicketaonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 12 Jul 2026 20:58:33 GMT\r\nlocation: https://www.quicketaonline.com/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0jhEkJ0WhxYyOhzVIktIsSsgqtISwT3DILJWSdS19lK8iqTajTz%2BN0yosrYb%2Bn3cn8OV1o6XabnYRjJKVsasUXMCpJzXWWFN1DE2KBcN3A3cat2McSQ7Jl4XVeRXApL2t1NRerM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a1a2f776596f3181-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T10:17:50.754787Z","times_seen":17210635,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":18,"connect":13,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"quicketaonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.quicketaonline.com/","fqdn":"www.quicketaonline.com","domain":"quicketaonline.com","tld":"com"},"ip":{"addr":"104.21.72.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T20:58:33.348Z","timestamp":1783889913348,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"quicketaonline.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 05:36:42 GMT","end":"Mon, 05 Oct 2026 06:35:00 GMT"},"fingerprint":{"sha1":"64:C4:D8:BF:0F:3E:DF:C7:E4:64:91:A9:AE:9F:4B:61:29:17:D2:BA","sha256":"B0:9E:C7:9D:32:75:EB:DA:B0:ED:69:E7:16:52:B8:63:59:08:CE:40:4F:E6:3E:26:A9:25:4F:72:A0:73:25:04"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.quicketaonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 20:58:33 GMT\r\nserver: cloudflare\r\ncontent-type: text/html;charset=UTF-8\r\nset-cookie: JSESSIONID=C185F20E982682185F0710E78988D1F0.node1; Path=/; HttpOnly\nROUTEID=.node1; Max-Age=432000; path=/\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oG5XlcPDBKQK%2F4cVqjH7zPUK%2FrklEosx%2FsnZTq1SDToqchVWGOcWxyxx2zTWBXeQtggXkB484lj%2BexN2OImDW%2BePv4A%2FV8RKmWN8FOFXeliWmfpbDniu%2FAnjmoq2Uju2ErLVPr0RkyeT\"}]}\r\ncf-ray: a1a2f77689803181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"Bootstrap:5.3.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":364171,"size_decoded":69011,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (64063)","md5":"4d300618a4067ec5b81d4a14da055c30","sha1":"ab8f072f31a081da44830fbc63f8e9428ac892d6","sha256":"8a39b42d1ba73332e19fdb083d53efb06514774dfb7be7005fedd0a737b5221a","sha512":"2991507ca1b89d47751833dd064b3c9098885eb28b805d313d2bd4537c96b38a4d85c3964dcb950c071ba8beb766a53eb55cce276545f36800297ea50ce88c37","ssdeep":"6144:Etz90f9hZLm8c4uHeD9573ihSNkgAvFnqPWxMthbFj8Mn7qYM:+eD95SvErn7k","tlshash":"b174e896f588343dac67c199a190bffd912fa5a1d7124aaaf01b633447c77d30933a8c","first_seen":"2026-07-11T14:23:03.329898Z","last_seen":"2026-07-12T20:59:13.973507Z","times_seen":2,"resource_available":true,"data":null}},"time_used":952,"timings":{"blocked":-1,"dns":14,"connect":0,"send":0,"wait":365,"receive":573,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"www.quicketaonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.quicketaonline.com/","date":"2026-07-12T20:58:34.002Z","timestamp":1783889914002,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:24 GMT","end":"Mon, 14 Sep 2026 08:37:23 GMT"},"fingerprint":{"sha1":"85:D0:EC:C2:01:33:25:23:96:FB:2B:54:90:54:84:07:0A:49:1F:03","sha256":"9D:7C:1C:9C:6A:25:1E:17:E0:DC:FD:42:95:CA:47:3D:C1:9C:20:FB:22:47:02:E3:27:EC:7C:62:03:30:83:BA"}}},"request":{"raw":"GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.quicketaonline.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30462\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 08 Jul 2026 07:11:12 GMT\r\nexpires: Thu, 08 Jul 2027 07:11:12 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 395242\r\nlast-modified: Tue, 12 Sep 2023 02:38:22 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":87533,"size_decoded":31446,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-07-13T10:16:53.160696Z","times_seen":178536,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":16,"receive":15,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quicketaonline.com/js/dd.min.js","fqdn":"www.quicketaonline.com","domain":"quicketaonline.com","tld":"com"},"ip":{"addr":"104.21.72.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.quicketaonline.com/","date":"2026-07-12T20:58:34.003Z","timestamp":1783889914003,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"quicketaonline.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 05:36:42 GMT","end":"Mon, 05 Oct 2026 06:35:00 GMT"},"fingerprint":{"sha1":"64:C4:D8:BF:0F:3E:DF:C7:E4:64:91:A9:AE:9F:4B:61:29:17:D2:BA","sha256":"B0:9E:C7:9D:32:75:EB:DA:B0:ED:69:E7:16:52:B8:63:59:08:CE:40:4F:E6:3E:26:A9:25:4F:72:A0:73:25:04"}}},"request":{"raw":"GET /js/dd.min.js HTTP/1.1\r\nHost: www.quicketaonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.quicketaonline.com/\r\nCookie: JSESSIONID=C185F20E982682185F0710E78988D1F0.node1; ROUTEID=.node1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 20:58:34 GMT\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\netag: W/\"29823-1783409400000\"\r\nlast-modified: Tue, 07 Jul 2026 07:30:00 GMT\r\ncontent-type: text/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7EeLbH%2F6RTO3rlJJVG7Ul9SPNAAUdWk4j%2Fi3C%2Bp1kuxOrqtKuWkRDl9boJLOg5BUWAiMZrlGKPBZPG8RwA8EWmA6RIpgbKsiHQN7AfTUPgkp8ftBXCHiKn8m51hIQd7jJF4OhMgIl2Hp\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1a2f77a8a0f3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29823,"size_decoded":10009,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (29759)","md5":"8d164a9dc6935af784c028dc3a73dd5f","sha1":"ded9a1d10e40c00f67b128132288347eb9cd19a4","sha256":"2fc23eaad51d463b4f98676ee3c6b8a69cf6b84c980eb1f8e597183f0052ce57","sha512":"fc1a30b1c5dfe01d0e51643de109ebd056407738e2e79206eb99773cbdc379d2ed7eccc2b71dfd5886cc510ab5c7a647aa77e961bc6629f71de3c2c93a48992c","ssdeep":"768:f4Bn+Cc8s3y+ugJ/hlNlll+LL+ZhxgusjR:NuQZlNT+DR","tlshash":"64d2a8122365752602fe90aba4f84543e37976dd5d0042acf5a8ecdf638ec40b2b7bb5","first_seen":"2023-05-30T19:57:02Z","last_seen":"2026-07-12T20:59:13.975361Z","times_seen":25,"resource_available":true,"data":null}},"time_used":498,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":378,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"www.quicketaonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}