{"report_id":"08ecd516-e28c-4e71-b8d7-3b136bfc14cb","version":0,"status":"done","tags":[],"date":"2026-06-18T11:06:10Z","url":{"schema":"http","addr":"xrunrelyx-ia.com","fqdn":"xrunrelyx-ia.com","domain":"xrunrelyx-ia.com","tld":"com"},"ip":{"addr":"104.21.58.49","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"xrunrelyx-ia.com/","fqdn":"xrunrelyx-ia.com","domain":"xrunrelyx-ia.com","tld":"com"},"title":"XrunRelyx – Análisis impulsado por IA para los mercados de criptomonedas y acciones","dom":{"size":33176,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (30927)","md5":"c457a60c941ba13305a9a67bdd2d2e08","sha1":"76dc580197101b0400df1e95a6979d98bf67367f","sha256":"23a137d89322b895cc4fdfdc575688a88f22b74c756932943d1b76320c507cfb","sha512":"e04a4f4ec97130c530149073cfe64112a2764d26d02cb24e20590d84f632bd9614b160baed6c158c6ea57a9e6f120ec12d5e5afa7a82b62cc6d9c5088bd5b045","ssdeep":"768:6mB6qmjvziRQmwgFQLSnznEHcT4Zlgoxp:DMqmjvziRQmDKLyznE8T4j","tlshash":"87e25f3080801a238b2b29d9f675eb5f709b930cde13885993fc8bc95fd2de1cd156a9","dom_hash":"domhashc7f4432e02e0aa668d1f35c9c82de66d","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"xrunrelyx-ia.com","fqdn":"xrunrelyx-ia.com","domain":"xrunrelyx-ia.com","tld":"com"},"ip":{"addr":"104.21.58.49","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-23T11:06:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"xrunrelyx-ia.com","ip":{"addr":"104.21.58.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-10","domain_rank":0,"first_seen":"2026-06-18T11:06:12.022512Z","last_seen":"2026-06-18T11:06:12.022512Z","alert_count":68,"request_count":34,"received_data":554597,"sent_data":18419,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-06-14T22:45:09.968061Z","alert_count":0,"request_count":1,"received_data":260058,"sent_data":491,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-06-14T22:29:33.380889Z","alert_count":0,"request_count":1,"received_data":425088,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"region1.google-analytics.com","ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-07-18","domain_rank":19689,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2026-06-11T12:52:23.268017Z","alert_count":0,"request_count":1,"received_data":840,"sent_data":1013,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"xrunrelyx-ia.com/assets/js/block-opportunities.js","fqdn":"xrunrelyx-ia.com","domain":"xrunrelyx-ia.com","tld":"com"},"ip":{"addr":"104.21.58.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8bc11f354d28a47828366e5ed0170135","sha1":"84f0a8b5b7a7d288a40d113482693285dcfc84c4","sha256":"584c17b9f6bd2233d5cd69fb1e2b53339ed16e820dfe16bc957bd64ced812271","sha512":"13beac077df72c45814c5d6ef940b7615d9ffc7ffa1c4b2199fd363da6fc68f738ca98eb29ff8c6b996306efc0893a99e65caf09b8efdfbcdd3acde2efe7a68e","ssdeep":"","tlshash":"34f0500b30706036904f093d49ebea4ef7a5d0039804ba15f98c51099fddbbd94f29c9","size":621,"data":"","first_seen":"2026-05-29T11:19:07.323421Z","last_seen":"2026-06-18T11:09:57.579309Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xrunrelyx-ia.com/assets/js/block-benefits.js","fqdn":"xrunrelyx-ia.com","domain":"xrunrelyx-ia.com","tld":"com"},"ip":{"addr":"104.21.58.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8dbd35fd0037e320d43d218945f8874b","sha1":"948cbefcbc63b66d735502e83db7d11da289b1e7","sha256":"827de3e56f86d46f3624f5ade3700be6217b8fd710a0158b737806bf25c814d1","sha512":"24ee97be54894d6e98c7196521c542787ae70813482240e4cb34dc1a0311f132baced53a0a813bcf752caa52d6d356c9a2b08f080e83e8fdd8b416f8069a740a","ssdeep":"","tlshash":"80f0ed1704b16036521b141d1aaaea49b6d8c0079801ba01becc5a09afdea6e96b71cf","size":471,"data":"","first_seen":"2026-05-29T11:19:07.344329Z","last_seen":"2026-06-18T11:09:57.581908Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/utils.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6eae88fad6fe723d8c8d2386a63dd152","sha1":"42046e250c7f2eeff4619a89b0be7b83e01e5edf","sha256":"a4000409a897003b1c5a8e1f9f32e18a11b022452151cc47c17ecdcb76d5223b","sha512":"d356bd87f7170499fbf445353afeda69dbaccc391eb41826290a30752475735a27d56ce1d642af1dcb02f93a1405926a440add5cb38000b7d112cab0f918bd6e","ssdeep":"3072:9klM0hpJjFs3OwPss3MwPKm7i9T2xFM8Mp2xHsNBWUsD56kmLNTg/QKWVRphmVEw:9klMipBKxxFM8Mp2qbZQ","tlshash":"1144f1ebd63c9737a1e97b35968eb3cd5a8cbca3c848567826c3b54f52784e0706c205","size":258914,"data":"","first_seen":"2024-07-10T10:54:41Z","last_seen":"2026-06-20T23:45:13.085378Z","times_seen":1737,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xrunrelyx-ia.com/assets/js/header.js","fqdn":"xrunrelyx-ia.com","domain":"xrunrelyx-ia.com","tld":"com"},"ip":{"addr":"104.21.58.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b1cb4df07c706865f9f3e1e87a5fe1e","sha1":"d0a99437af32bc85e451472f5270c468abce92eb","sha256":"6489e9e41e19b9b7693c57212863f0b3fcd805056339e7cc85b169d1aeff1e86","sha512":"16adfd45b8a53ea3e9dc12e2f2d45b44c763bd83d67734fea468dd8103941c786efcc0f866099a3d4ac708be1567a22a8de89bd7654df339b809835477752541","ssdeep":"768:/gA16IhTp6BfAVbxtMDKgi0rzjqU7Z+Nr8Vyq0RdCa5dcAXUj9gjUVLISSQzzmWr:L1FR4BQxiDK5u4ic5dcpj9EUVz8i","tlshash":"aa43a65966e13134d303b03b969fcd08b339945b564ace483d2ca6986f4983897b7fec","size":56838,"data":"","first_seen":"2026-05-29T11:19:07.331319Z","last_seen":"2026-06-18T11:09:57.575545Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xrunrelyx-ia.com/assets/js/block-hero.js","fqdn":"xrunrelyx-ia.com","domain":"xrunrelyx-ia.com","tld":"com"},"ip":{"addr":"104.21.58.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7c2d08766df94c49ffbfb33ca3aaeb5","sha1":"649f951bd6cd3a9492f5e71dc8599da6ff4467c6","sha256":"8bc146b03f6083f6f19f33e314bc52270887407cca4345b09909af5952e83f11","sha512":"90ead8d0fc8cce98a011c51d33c5247962d400f40fd27b72e374f46ec3dd331b57a74d6e4e8c21725292071c0c93d27147142220f12f1c3047dae983c16a8dde","ssdeep":"","tlshash":"5b318f9a72f310708767a23abbaf5785253491033442ed9c7ddd42102f51d52a6f7fe8","size":1752,"data":"","first_seen":"2026-05-29T11:19:07.333343Z","last_seen":"2026-06-18T11:09:57.586074Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xrunrelyx-ia.com/assets/js/block-partners.js","fqdn":"xrunrelyx-ia.com","domain":"xrunrelyx-ia.com","tld":"com"},"ip":{"addr":"104.21.58.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ffe7c551deb8250a1cc07cc442dc122","sha1":"4f9add75741d9bca4fe00e157daae6c9b0badb02","sha256":"06f965a8bffba0d054c5f78abedb30db7b5455fe6e46967680a6c7a0171c3a1f","sha512":"0ad46f632dc295a66d947b96a5dd8b9c829bac0cba4375823d5eee9aa60b2788d74db37fe44ad098bbc6286eee65f27a56b53ae868bbbeba4e2a0a7bc767d7c4","ssdeep":"","tlshash":"bbe07d0385711035550b282c09eef700269cc0038c04be417e5d4d044fce21e5af71cb","size":389,"data":"","first_seen":"2026-05-29T11:19:07.301011Z","last_seen":"2026-06-18T11:09:57.576609Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-LT2QK2PF18","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"37d879fab361b4f5f0c076eda6e810e8","sha1":"44db506d27aa8ba577a1ed8f44971b2b8d6dffa6","sha256":"0e3c03cd842889cc526d90cd81835a19050766bdfe5de00732f75a3de9665d6a","sha512":"b42a1e1051410c58c9fcbdd2d4e2154b46c0824be90f048228e62aa8c5fb98a14867ee4ff70c5c8cec178e8a21db66ab33fa7cac3be2055bf18e41f6d1f7253f","ssdeep":"6144:fjPEADAFmvq/uYJycf7paX9Z08hdAYOyuInyBLJ81oK:LsT/uYy86+4","tlshash":"0e94f9cdb3da74629392f478503f018ba17a69e2f448c899f186ccd42e746998277f7c","size":424484,"data":"","first_seen":"2026-06-18T11:06:16.262943Z","last_seen":"2026-06-18T11:06:16.262943Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xrunrelyx-ia.com/","fqdn":"xrunrelyx-ia.com","domain":"xrunrelyx-ia.com","tld":"com"},"ip":{"addr":"104.21.58.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c650cfd5162d4c41815353b1ef3605ba","sha1":"992969c7369e3ae53b8e131e25d1aed8bad6959d","sha256":"a1d80acb361c93cbe799854e8280fee1d2e29fcbccac3409476f36c06aaaf483","sha512":"b302a612baaaf1b9cbb79c4ce4bc5029cbb825e4eff31981cadb1b67fd068aa08470113991c44bddac859a858bf401f3dbf46ed23e9455c5d011aab65a8707dc","ssdeep":"","tlshash":"54c0228c22230cb002eb2b000baff300b00233a0e8a02c300c023388aa22c23ab08820","size":142,"data":"","first_seen":"2026-06-18T11:06:16.284697Z","last_seen":"2026-06-18T11:06:16.284697Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xrunrelyx-ia.com/validation/intlTelInput.min.js","fqdn":"xrunrelyx-ia.com","domain":"xrunrelyx-ia.com","tld":"com"},"ip":{"addr":"104.21.58.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"475fdc0630d2997afd1f230b7d5617de","sha1":"e57c798a7aac45a8a049481a330893ad9224e39e","sha256":"df2fca8c5e5a0a3455ceb3530594a8ff13548a5ced799d73c234012f05b3bf11","sha512":"ec662d5dafc77f1925bed23f0860675f33b5093b6f47031504fbb3596278ef79855b7b791e05476bd43ff709f47ef257c2b4ef84b6d8aeab588fb15a3d0e981b","ssdeep":"768:c603Xlqn/kiIzJT9FSRzA4xXnT2nYdn24X68ikl/7LOpQn2Vits8Zb:cDiIz8A4knYdYk9bs2","tlshash":"4cf209ae737116376abe82fa30e74503aeae34465604442d389c8fcd0b98ed571f6778","size":37503,"data":"","first_seen":"2026-05-29T11:19:07.321122Z","last_seen":"2026-06-20T07:48:12.717999Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xrunrelyx-ia.com/assets/js/block-cards.js","fqdn":"xrunrelyx-ia.com","domain":"xrunrelyx-ia.com","tld":"com"},"ip":{"addr":"104.21.58.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c79a6e82ca664a022fe0ba27a3aa92a1","sha1":"5456648e933a8fb5764c05c00687af8dd2d4cabb","sha256":"710ab8e8b52be5f2338f028f9e60c41b7228905970305f20a55b9edb3776307b","sha512":"637c4e582589f43468f8c2f63a25e115e21408f2b9fe660ac4d0f752072275ff3d99576843d198df00919c7a9e3f0a2f95fe154d82fedd1bcfc40cd0d74ce7e3","ssdeep":"","tlshash":"7bf0e51700b05031515b203d4aeee649b7e490036808ba11b98c4109efd9b7a65f65c9","size":532,"data":"","first_seen":"2026-05-29T11:19:07.308261Z","last_seen":"2026-06-18T11:09:57.593813Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"xrunrelyx-ia.com/assets/img/coinbase-logo.svg","fqdn":"xrunrelyx-ia.com","domain":"xrunrelyx-ia.com","tld":"com"},"ip":{"addr":"104.21.58.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xrunrelyx-ia.com/","date":"2026-06-18T11:05:39.260Z","timestamp":1781780739260,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrunrelyx-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 09:53:42 GMT","end":"Tue, 08 Sep 2026 10:50:00 GMT"},"fingerprint":{"sha1":"B0:A1:82:A9:4A:A4:9B:D9:FD:C0:29:C5:B4:A9:1D:FE:1A:A2:B8:37","sha256":"B7:69:6C:96:77:C1:F5:CD:7C:B6:A0:6E:72:7F:31:9D:70:D6:F1:EA:A5:60:35:E4:83:33:65:71:73:E9:FE:B4"}}},"request":{"raw":"GET /assets/img/coinbase-logo.svg HTTP/1.1\r\nHost: xrunrelyx-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xrunrelyx-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=no6p63v41oor8rj7d30et7g97j; _ga_LT2QK2PF18=GS2.1.s1781780739$o1$g0$t1781780739$j60$l0$h0; _ga=GA1.1.1663968461.1781780739\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:05:39 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 10 Jun 2026 11:27:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a294a0d-eff\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W1GLTiQ5S9zq3kMx%2B8uI%2BKR%2FgsmU45JaXdI0HhHEFsZOBcb6J6JJGGLJTGMZwqp7TZmJXIRM4coHhMB6w3BxN9RJ%2B8sY6sLBaQBSG8j8Fct58pTO976rmijQTRhXcC%2F69zmo\"}]}\r\ncf-ray: a0d9d1f46f668be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3839,"size_decoded":2481,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"28bd94ed1796c03e587a0a98a90e16dc","sha1":"651cd56ae54c37e8ceef0d94a61eecb6fe236247","sha256":"cc6b71738a6a1f8c4b55137201c8568470c0b586c4a542c2d1f858c338b4b0b8","sha512":"b1c22b60ca273873017296be230927129e7bf66da4b2f4d1cc578dd06fddb6c634b9a314cc7eab745bc215c99d63e9dc024b2f14edceb6901ab86490a942b35e","ssdeep":"","tlshash":"c78162ef23f855e9f0c5d3e3ef4340393d4aa1f20a58cb5453585e6793820ac686ad67","first_seen":"2026-02-01T05:35:27.993963Z","last_seen":"2026-06-20T05:04:37.025353Z","times_seen":84,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrunrelyx-ia.com/assets/img/coindesk-logo.svg","fqdn":"xrunrelyx-ia.com","domain":"xrunrelyx-ia.com","tld":"com"},"ip":{"addr":"104.21.58.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xrunrelyx-ia.com/","date":"2026-06-18T11:05:39.263Z","timestamp":1781780739263,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrunrelyx-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 09:53:42 GMT","end":"Tue, 08 Sep 2026 10:50:00 GMT"},"fingerprint":{"sha1":"B0:A1:82:A9:4A:A4:9B:D9:FD:C0:29:C5:B4:A9:1D:FE:1A:A2:B8:37","sha256":"B7:69:6C:96:77:C1:F5:CD:7C:B6:A0:6E:72:7F:31:9D:70:D6:F1:EA:A5:60:35:E4:83:33:65:71:73:E9:FE:B4"}}},"request":{"raw":"GET /assets/img/coindesk-logo.svg HTTP/1.1\r\nHost: xrunrelyx-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xrunrelyx-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=no6p63v41oor8rj7d30et7g97j; _ga_LT2QK2PF18=GS2.1.s1781780739$o1$g0$t1781780739$j60$l0$h0; _ga=GA1.1.1663968461.1781780739\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:05:39 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 10 Jun 2026 11:27:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a294a0d-1a06\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z%2FOYAFVtEsXvDhy4GKJVA5GJ06IBP4Mv4ERTfI2%2B%2FyZzuPJYp04TYanWxvZQSeskUv8zCtgIoUQuNP3ANN6Thg%2B%2BTmAaU4b7EYmZMQ0TjlUBhB%2FR%2B4oCQnr0R0HnZYhLPyEl\"}]}\r\ncf-ray: a0d9d1f46f688be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6662,"size_decoded":3512,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"98204686e236109e0306d0e23510cb67","sha1":"0a3a2a2832fe38f81ab58c3c97af79c1a35ae2b2","sha256":"fdb470fec4ed878417026c27211c08dfa773248688c135cd1fe4c5e7825ba259","sha512":"3a3ac622b85daf630a18d0db786e8b2faeaa5db7d95d62e4f487a695a4243ef01100dddefb9212610e59c65d2ec6010c103fb0dad15d1f14c6f03ed454e4144b","ssdeep":"192:8rg6THKrsJ2Fax+lSzJR+uyqsyPyT+DD9VZ/Naatg:gRr8F++lKR+uxpPyTykatg","tlshash":"6bd109ee63e4a2e4f002c3f5d917049a3ea73cf92b51c504cb808e69ec5959d4d98ed3","first_seen":"2026-02-01T05:35:27.99183Z","last_seen":"2026-06-20T05:04:37.016713Z","times_seen":84,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrunrelyx-ia.com/assets/js/header.js","fqdn":"xrunrelyx-ia.com","domain":"xrunrelyx-ia.com","tld":"com"},"ip":{"addr":"104.21.58.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xrunrelyx-ia.com/","date":"2026-06-18T11:05:38.634Z","timestamp":1781780738634,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrunrelyx-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 09:53:42 GMT","end":"Tue, 08 Sep 2026 10:50:00 GMT"},"fingerprint":{"sha1":"B0:A1:82:A9:4A:A4:9B:D9:FD:C0:29:C5:B4:A9:1D:FE:1A:A2:B8:37","sha256":"B7:69:6C:96:77:C1:F5:CD:7C:B6:A0:6E:72:7F:31:9D:70:D6:F1:EA:A5:60:35:E4:83:33:65:71:73:E9:FE:B4"}}},"request":{"raw":"GET /assets/js/header.js HTTP/1.1\r\nHost: xrunrelyx-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xrunrelyx-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:05:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 10 Jun 2026 11:27:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a294a0d-de06\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wcGIq2%2Bslt1tcZEedBhb2XouzAWE4I1hElF4XddSjJRuAX%2FPLzK19pZMVvADkBKs2x5nVQJw%2BIQP6azBWih7f4kNhGocjDTEib5GaICssAjx2HePS1tBkWtxBc97IRnV4sK%2F\"}]}\r\ncf-ray: a0d9d1f07edf8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56838,"size_decoded":16167,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (724)","md5":"1b1cb4df07c706865f9f3e1e87a5fe1e","sha1":"d0a99437af32bc85e451472f5270c468abce92eb","sha256":"6489e9e41e19b9b7693c57212863f0b3fcd805056339e7cc85b169d1aeff1e86","sha512":"16adfd45b8a53ea3e9dc12e2f2d45b44c763bd83d67734fea468dd8103941c786efcc0f866099a3d4ac708be1567a22a8de89bd7654df339b809835477752541","ssdeep":"768:/gA16IhTp6BfAVbxtMDKgi0rzjqU7Z+Nr8Vyq0RdCa5dcAXUj9gjUVLISSQzzmWr:L1FR4BQxiDK5u4ic5dcpj9EUVz8i","tlshash":"aa43a65966e13134d303b03b969fcd08b339945b564ace483d2ca6986f4983897b7fec","first_seen":"2026-05-29T11:19:07.331319Z","last_seen":"2026-06-18T11:09:57.575545Z","times_seen":22,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrunrelyx-ia.com/assets/js/block-partners.js","fqdn":"xrunrelyx-ia.com","domain":"xrunrelyx-ia.com","tld":"com"},"ip":{"addr":"104.21.58.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xrunrelyx-ia.com/","date":"2026-06-18T11:05:38.865Z","timestamp":1781780738865,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrunrelyx-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 09:53:42 GMT","end":"Tue, 08 Sep 2026 10:50:00 GMT"},"fingerprint":{"sha1":"B0:A1:82:A9:4A:A4:9B:D9:FD:C0:29:C5:B4:A9:1D:FE:1A:A2:B8:37","sha256":"B7:69:6C:96:77:C1:F5:CD:7C:B6:A0:6E:72:7F:31:9D:70:D6:F1:EA:A5:60:35:E4:83:33:65:71:73:E9:FE:B4"}}},"request":{"raw":"GET /assets/js/block-partners.js HTTP/1.1\r\nHost: xrunrelyx-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xrunrelyx-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:05:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"6a294a0d-185\"\r\nlast-modified: Wed, 10 Jun 2026 11:27:09 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h2Sj2frqgCeRq%2FTbSlCmKGiS%2BgVcgVxBfvOGS0uoSsqv07C4YRiTOHW%2BLlEo%2FFwatMMW%2FRlPgvU9WqpyiMG6%2FbcWrvSdcUsfMvilNCNoubFm5MER1IJAAjkhsQJ55zav8SSJ\"}]}\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0d9d1f1ef1c8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":389,"size_decoded":970,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"2ffe7c551deb8250a1cc07cc442dc122","sha1":"4f9add75741d9bca4fe00e157daae6c9b0badb02","sha256":"06f965a8bffba0d054c5f78abedb30db7b5455fe6e46967680a6c7a0171c3a1f","sha512":"0ad46f632dc295a66d947b96a5dd8b9c829bac0cba4375823d5eee9aa60b2788d74db37fe44ad098bbc6286eee65f27a56b53ae868bbbeba4e2a0a7bc767d7c4","ssdeep":"","tlshash":"bbe07d0385711035550b282c09eef700269cc0038c04be417e5d4d044fce21e5af71cb","first_seen":"2026-05-29T11:19:07.301011Z","last_seen":"2026-06-18T11:09:57.576609Z","times_seen":22,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrunrelyx-ia.com/assets/img/trading-view.svg","fqdn":"xrunrelyx-ia.com","domain":"xrunrelyx-ia.com","tld":"com"},"ip":{"addr":"104.21.58.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xrunrelyx-ia.com/","date":"2026-06-18T11:05:39.265Z","timestamp":1781780739265,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrunrelyx-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 09:53:42 GMT","end":"Tue, 08 Sep 2026 10:50:00 GMT"},"fingerprint":{"sha1":"B0:A1:82:A9:4A:A4:9B:D9:FD:C0:29:C5:B4:A9:1D:FE:1A:A2:B8:37","sha256":"B7:69:6C:96:77:C1:F5:CD:7C:B6:A0:6E:72:7F:31:9D:70:D6:F1:EA:A5:60:35:E4:83:33:65:71:73:E9:FE:B4"}}},"request":{"raw":"GET /assets/img/trading-view.svg HTTP/1.1\r\nHost: xrunrelyx-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xrunrelyx-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=no6p63v41oor8rj7d30et7g97j; _ga_LT2QK2PF18=GS2.1.s1781780739$o1$g0$t1781780739$j60$l0$h0; _ga=GA1.1.1663968461.1781780739\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:05:39 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 10 Jun 2026 11:27:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a294a0d-e9b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ri5B4%2FP9PAHnqOkAeerSKAhDWjCgYTFRpkWcV4Yy0dPbgURzCPtQNwRr9PQsr9kHl3Pdop9emgwcFzJOg%2BqaTc1BTX%2BpfcgsMvgs%2BHOF4GXjZjvpsaHSuy0uPfyxCF7uWlGC\"}]}\r\ncf-ray: a0d9d1f46f698be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3739,"size_decoded":2256,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"79b1b46b6609cfb200a845d186a4bd62","sha1":"8d65ce42eb0b3ae30e367db942849d55a58ae4e5","sha256":"44eb37cb71b7e5bc0f39d8f030dcde80db60544b1f2cb3e62a89c684d107fefc","sha512":"3bc573e38ce7006b7d795bd16783812d0d838e86c653ff53337d98e8b4076df279e5033600b55fa7907aea4deec0e406602e8bc4440f8433c170c767017f3b7e","ssdeep":"","tlshash":"207197fe97f4c6e4fe10c762a851252d3607437af537c99c82184eacbba449ca8458c9","first_seen":"2026-02-01T05:35:27.99094Z","last_seen":"2026-06-20T05:04:37.012532Z","times_seen":84,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/utils.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xrunrelyx-ia.com/","date":"2026-06-18T11:05:39.316Z","timestamp":1781780739316,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/intl-tel-input@23.0.12/build/js/utils.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xrunrelyx-ia.com/\r\nOrigin: https://xrunrelyx-ia.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 18 Jun 2026 11:05:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 56438\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 23.0.12\r\nx-jsd-version-type: version\r\netag: W/\"3f362-QgRuJQx/Lu/0YZqJsL57g+AeXt8\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230139-FRA, cache-bma-essb1270049-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 2688048\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sim9jJU9ZCYu2ArsgUQNhanMDvc4KyDY9IBnR8jzoJeygXjQ2ZuH1mLJBWiZG6zzQr3SXyBxObAogtH5cm6iSJ5DVZTZVqxHhKntgseQN0CqVqHoUkSKBJn6KvfuGzQAZsw%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a0d9d1f4db205689-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":258914,"size_decoded":57582,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1903)","md5":"6eae88fad6fe723d8c8d2386a63dd152","sha1":"42046e250c7f2eeff4619a89b0be7b83e01e5edf","sha256":"a4000409a897003b1c5a8e1f9f32e18a11b022452151cc47c17ecdcb76d5223b","sha512":"d356bd87f7170499fbf445353afeda69dbaccc391eb41826290a30752475735a27d56ce1d642af1dcb02f93a1405926a440add5cb38000b7d112cab0f918bd6e","ssdeep":"3072:9klM0hpJjFs3OwPss3MwPKm7i9T2xFM8Mp2xHsNBWUsD56kmLNTg/QKWVRphmVEw:9klMipBKxxFM8Mp2qbZQ","tlshash":"1144f1ebd63c9737a1e97b35968eb3cd5a8cbca3c848567826c3b54f52784e0706c205","first_seen":"2024-07-10T10:54:41Z","last_seen":"2026-06-20T23:45:13.085378Z","times_seen":1737,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":2,"connect":2,"send":0,"wait":10,"receive":1,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xrunrelyx-ia.com/assets/css/index-mob.css","fqdn":"xrunrelyx-ia.com","domain":"xrunrelyx-ia.com","tld":"com"},"ip":{"addr":"104.21.58.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xrunrelyx-ia.com/","date":"2026-06-18T11:05:38.638Z","timestamp":1781780738638,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrunrelyx-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 09:53:42 GMT","end":"Tue, 08 Sep 2026 10:50:00 GMT"},"fingerprint":{"sha1":"B0:A1:82:A9:4A:A4:9B:D9:FD:C0:29:C5:B4:A9:1D:FE:1A:A2:B8:37","sha256":"B7:69:6C:96:77:C1:F5:CD:7C:B6:A0:6E:72:7F:31:9D:70:D6:F1:EA:A5:60:35:E4:83:33:65:71:73:E9:FE:B4"}}},"request":{"raw":"GET /assets/css/index-mob.css HTTP/1.1\r\nHost: xrunrelyx-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xrunrelyx-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:05:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 10 Jun 2026 11:27:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a294a0d-3e43\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wrG7LmXNLclTTcudUnsSRrXmNWLmyjmSHywNTPXmmLLhgFQetq3vmBJIPCUoakax6kjYmliN37fv5PVSoWCB4a3TAyL7yF1Uwkt95YtNOhCN6aMo9v8gIq4o%2F1uFOsBjlnoM\"}]}\r\ncf-ray: a0d9d1f08ee18be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15939,"size_decoded":3694,"mime_type":"text/css","magic":"ASCII text, with very long lines (15939), with no line terminators","md5":"cec98a79a19bc73520c0fe6015402e72","sha1":"5aa3cf9414acf223f5d745b37d94502935e507d7","sha256":"ab55cc4546ada02e037c55d7beb9c27eaa5639d5da33027cd6f3754b4bf4a6eb","sha512":"d77f4708c2b29e93cd5074dbd05d7a871cd6ff3caf7b7fac455b1b876991554135859b22c1546e47f997e5275adc4a80268f6e17fcd3db61c95f00d09047ef07","ssdeep":"192:hCi9TdXhfvN3h/O7xtsMRZX0w7IFWQJa4zXKHwv8XYJcSxcniHlS/SvRuzL7yT1r:Qodx3FVLOuJJcaezw8uKQStPcBaIT","tlshash":"7762642892142115f293e8793f96bfc6d306e571a707e0bdcad9312dc2ce56606b2bcd","first_seen":"2026-05-29T11:19:07.339613Z","last_seen":"2026-06-18T11:09:57.585555Z","times_seen":22,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrunrelyx-ia.com/assets/img/phone.webp","fqdn":"xrunrelyx-ia.com","domain":"xrunrelyx-ia.com","tld":"com"},"ip":{"addr":"104.21.58.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xrunrelyx-ia.com/","date":"2026-06-18T11:05:38.859Z","timestamp":1781780738859,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrunrelyx-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 09:53:42 GMT","end":"Tue, 08 Sep 2026 10:50:00 GMT"},"fingerprint":{"sha1":"B0:A1:82:A9:4A:A4:9B:D9:FD:C0:29:C5:B4:A9:1D:FE:1A:A2:B8:37","sha256":"B7:69:6C:96:77:C1:F5:CD:7C:B6:A0:6E:72:7F:31:9D:70:D6:F1:EA:A5:60:35:E4:83:33:65:71:73:E9:FE:B4"}}},"request":{"raw":"GET /assets/img/phone.webp HTTP/1.1\r\nHost: xrunrelyx-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xrunrelyx-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:05:38 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 10 Jun 2026 11:27:09 GMT\r\npriority: u=3,i\r\netag: \"6a294a0d-420a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LJ%2BFISpUMMmAXwTXKPx168bl0mOGG4NA6Qo%2BKZI7MOInMP%2BnfS9SrjxPoeAo8JA8Aw3i4CC95%2FSlv53GF4Pu%2FCZDwzHBqFzlEDptiGSjx06SN7H%2B82alX%2BRhfPduZGcfUbAl\"}]}\r\ncontent-length: 16906\r\ncf-ray: a0d9d1f1ef188be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16906,"size_decoded":17645,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c334ed25ee125a3a0acd8829568b9f9a","sha1":"8ce713ff656d9956f2bb9d0299b04e68201c2e21","sha256":"12b05a7ae2cc672765bc338b9756fa581d21fb7bb12690c4539e80949e071f8e","sha512":"c23b461315bfc48eaffb986a172d7e87f9a59d1dc40f424649a4a4eed171bbfc67f804330ce0fca099260d957e2e152ebb5a4cf33677ecb488179954a940fc72","ssdeep":"384:Y13qlNJOzV0p5cVX4OVelnIorrZtn670tJhuqG0:ASNCVqS4WeprrtJcj0","tlshash":"1472c0fe2b0a0076cd0a79f6c9417588ec8f264952e4c566d94d5cd2cbacc5e813bedc","first_seen":"2026-02-01T05:35:27.977673Z","last_seen":"2026-06-20T05:04:37.015708Z","times_seen":84,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrunrelyx-ia.com/assets/css/style.css","fqdn":"xrunrelyx-ia.com","domain":"xrunrelyx-ia.com","tld":"com"},"ip":{"addr":"104.21.58.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xrunrelyx-ia.com/","date":"2026-06-18T11:05:38.637Z","timestamp":1781780738637,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrunrelyx-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 09:53:42 GMT","end":"Tue, 08 Sep 2026 10:50:00 GMT"},"fingerprint":{"sha1":"B0:A1:82:A9:4A:A4:9B:D9:FD:C0:29:C5:B4:A9:1D:FE:1A:A2:B8:37","sha256":"B7:69:6C:96:77:C1:F5:CD:7C:B6:A0:6E:72:7F:31:9D:70:D6:F1:EA:A5:60:35:E4:83:33:65:71:73:E9:FE:B4"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: xrunrelyx-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xrunrelyx-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:05:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 10 Jun 2026 11:27:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a294a0d-318c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GPsNbH%2B94uTwPxRugSOyWBJWV4Z9jK28hWE1bTjVoM7yP%2BBK865AEsI%2B9pD7LJuIteoqjGoVVyiMmuhFnHYDb9aGlpHZVllQmhSOaInJjhWHPpJ8ouHcS1k7%2BIOM45YjGsgQ\"}]}\r\ncf-ray: a0d9d1f07ee08be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12684,"size_decoded":3748,"mime_type":"text/css","magic":"ASCII text, with very long lines (12684), with no line terminators","md5":"10987acfda4791e45892c100fb3eb9fc","sha1":"d1059c6900632856fbb8910866b9b323d214a98a","sha256":"bc11191d335bd9bd4e0af727b83287e6ad03242380b49af7f8d24809555f24a4","sha512":"82cfb4c55b45d91491adc0acb4d685c7665f20f9d2e1ee72654612c3f19fb32d53dd451e4fa187e357338797c9cd062c048501b3a0e4daa6c2d998fb39aa4946","ssdeep":"96:1ojX+/UZ7pI4L1j4fXjRO4ReEn7lBNupEv/YD836oi0GNN3LL1vTeherZ7qx+5oE:MzM4JCsrEnOX17eIrZaEvbJvgFc","tlshash":"2642322572052304a61be158bfda4b1c533ca511e217d2febf9e3a0e96cf16416b2bcd","first_seen":"2026-05-29T11:19:07.294053Z","last_seen":"2026-06-18T11:09:57.576138Z","times_seen":22,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrunrelyx-ia.com/assets/img/decrypt-logo.svg","fqdn":"xrunrelyx-ia.com","domain":"xrunrelyx-ia.com","tld":"com"},"ip":{"addr":"104.21.58.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xrunrelyx-ia.com/","date":"2026-06-18T11:05:39.270Z","timestamp":1781780739270,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrunrelyx-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 09:53:42 GMT","end":"Tue, 08 Sep 2026 10:50:00 GMT"},"fingerprint":{"sha1":"B0:A1:82:A9:4A:A4:9B:D9:FD:C0:29:C5:B4:A9:1D:FE:1A:A2:B8:37","sha256":"B7:69:6C:96:77:C1:F5:CD:7C:B6:A0:6E:72:7F:31:9D:70:D6:F1:EA:A5:60:35:E4:83:33:65:71:73:E9:FE:B4"}}},"request":{"raw":"GET /assets/img/decrypt-logo.svg HTTP/1.1\r\nHost: xrunrelyx-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xrunrelyx-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=no6p63v41oor8rj7d30et7g97j; _ga_LT2QK2PF18=GS2.1.s1781780739$o1$g0$t1781780739$j60$l0$h0; _ga=GA1.1.1663968461.1781780739\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:05:39 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 10 Jun 2026 11:27:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a294a0d-2b2f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d%2BnVxLomG4dtW9%2BLHWZ%2Bg67UuJ0hyTYioRTp5tnW485m6M4rthjzF3u8VY327vtzuToi9cfpD2mwJIWHBhR30E%2BZNdqDH%2FlJ0V3i4sT3r21og7KWR1oPQTTUQ8lHLkJ3pCXv\"}]}\r\ncf-ray: a0d9d1f47f6d8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11055,"size_decoded":5746,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a0bfdb82b88bfdaca38a61b92992c6b4","sha1":"537966a938067e93b5a528d51a39d9a4acddb1e5","sha256":"84dae5d901c30dfd7212656608dc68da3880b37925e412ed231a31ce0379b3bf","sha512":"ff009f66936f92de9aadfc9a427744c393b2cbb749e8d054ac3503417c9bf0be873b26e2d1791753fb609e312373d1cef0180fda411011b577290bb61df95f09","ssdeep":"192:/W0rqAs/vpx++UdglW3ob5GBAhUDJ0t9VFkkTccJlPiWMFPA38pCNmf7aW0OA7iQ:+qIps4FxUS5kpcJlPOFPbpAbOATXi7WR","tlshash":"9132e9ddbbb462f8f940f3eec31268787a0668e73912ca6cc7ac1d06951244cd996cd7","first_seen":"2026-02-01T05:35:27.968664Z","last_seen":"2026-06-20T05:04:37.021537Z","times_seen":84,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrunrelyx-ia.com/assets/css/index-desk.css","fqdn":"xrunrelyx-ia.com","domain":"xrunrelyx-ia.com","tld":"com"},"ip":{"addr":"104.21.58.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xrunrelyx-ia.com/","date":"2026-06-18T11:05:38.854Z","timestamp":1781780738854,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrunrelyx-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 09:53:42 GMT","end":"Tue, 08 Sep 2026 10:50:00 GMT"},"fingerprint":{"sha1":"B0:A1:82:A9:4A:A4:9B:D9:FD:C0:29:C5:B4:A9:1D:FE:1A:A2:B8:37","sha256":"B7:69:6C:96:77:C1:F5:CD:7C:B6:A0:6E:72:7F:31:9D:70:D6:F1:EA:A5:60:35:E4:83:33:65:71:73:E9:FE:B4"}}},"request":{"raw":"GET /assets/css/index-desk.css HTTP/1.1\r\nHost: xrunrelyx-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xrunrelyx-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:05:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 10 Jun 2026 11:27:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a294a0d-3b95\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PLf2Y1PFs7zb43cBSoztTQTaaktib%2BCT34aSwPJVK%2F6%2B5j63XO1IbnF57AdWEslhdbY%2BspgUDEYltjqouf38zHfd0kJZwjoI0huFXOHWysQ9LD1DnmznC%2BJjCDuBfxztxeG7\"}]}\r\ncf-ray: a0d9d1f1df178be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15253,"size_decoded":3200,"mime_type":"text/css","magic":"ASCII text, with very long lines (15253), with no line terminators","md5":"dc2f0f8acd342088b0e6d5876f73c3df","sha1":"8d82f24195867228a2a078db72f83c99e2fd09cf","sha256":"5abe5d5b844996e5b8537d508d28c24a361a77b2d7d9a548db3b35f9ae70de4c","sha512":"ccd0549c9d6e6dee700e1bd84943d960f378cb4a9892152d8e672314c4f9024d09995eed7517b0af4edaaf9e52aa49209ae749c43f181721542df672b1fc5cae","ssdeep":"384:gGcEzQEUm3qzw9Wby/v9XUqMyfUqwVdhMMQMCIAO6PWV:gG/QEUm38w9Wby/vBUqMyf0","tlshash":"a262b198a1103209e657e43b3c9f6e488617a230e777a5bda573311ccbde3a51063bde","first_seen":"2026-05-29T11:19:07.315021Z","last_seen":"2026-06-18T11:09:57.592782Z","times_seen":22,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrunrelyx-ia.com/validation/intlTelInput.min.js","fqdn":"xrunrelyx-ia.com","domain":"xrunrelyx-ia.com","tld":"com"},"ip":{"addr":"104.21.58.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xrunrelyx-ia.com/","date":"2026-06-18T11:05:38.862Z","timestamp":1781780738862,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrunrelyx-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 09:53:42 GMT","end":"Tue, 08 Sep 2026 10:50:00 GMT"},"fingerprint":{"sha1":"B0:A1:82:A9:4A:A4:9B:D9:FD:C0:29:C5:B4:A9:1D:FE:1A:A2:B8:37","sha256":"B7:69:6C:96:77:C1:F5:CD:7C:B6:A0:6E:72:7F:31:9D:70:D6:F1:EA:A5:60:35:E4:83:33:65:71:73:E9:FE:B4"}}},"request":{"raw":"GET /validation/intlTelInput.min.js HTTP/1.1\r\nHost: xrunrelyx-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xrunrelyx-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:05:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 10 Jun 2026 11:27:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a294a0d-927f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YGsjbPVhigiqvRPLHay2OVn%2FWiAl%2BmCXsb9nmt%2B%2FWFNVGbuAzLQ8fvBBXzt9XDcXd%2BEjWTZ4WuA6R9ggRcK96QuEWIdPKW84i3ErIoaHW%2BHfVK3zkCymbbGvwO0jTuoHlrie\"}]}\r\ncf-ray: a0d9d1f1ef1a8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37503,"size_decoded":14037,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29515)","md5":"475fdc0630d2997afd1f230b7d5617de","sha1":"e57c798a7aac45a8a049481a330893ad9224e39e","sha256":"df2fca8c5e5a0a3455ceb3530594a8ff13548a5ced799d73c234012f05b3bf11","sha512":"ec662d5dafc77f1925bed23f0860675f33b5093b6f47031504fbb3596278ef79855b7b791e05476bd43ff709f47ef257c2b4ef84b6d8aeab588fb15a3d0e981b","ssdeep":"768:c603Xlqn/kiIzJT9FSRzA4xXnT2nYdn24X68ikl/7LOpQn2Vits8Zb:cDiIz8A4knYdYk9bs2","tlshash":"4cf209ae737116376abe82fa30e74503aeae34465604442d389c8fcd0b98ed571f6778","first_seen":"2026-05-29T11:19:07.321122Z","last_seen":"2026-06-20T07:48:12.717999Z","times_seen":30,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrunrelyx-ia.com/assets/img/rating-pp.webp","fqdn":"xrunrelyx-ia.com","domain":"xrunrelyx-ia.com","tld":"com"},"ip":{"addr":"104.21.58.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xrunrelyx-ia.com/","date":"2026-06-18T11:05:38.886Z","timestamp":1781780738886,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrunrelyx-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 09:53:42 GMT","end":"Tue, 08 Sep 2026 10:50:00 GMT"},"fingerprint":{"sha1":"B0:A1:82:A9:4A:A4:9B:D9:FD:C0:29:C5:B4:A9:1D:FE:1A:A2:B8:37","sha256":"B7:69:6C:96:77:C1:F5:CD:7C:B6:A0:6E:72:7F:31:9D:70:D6:F1:EA:A5:60:35:E4:83:33:65:71:73:E9:FE:B4"}}},"request":{"raw":"GET /assets/img/rating-pp.webp HTTP/1.1\r\nHost: xrunrelyx-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xrunrelyx-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:05:38 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 10 Jun 2026 11:27:09 GMT\r\npriority: u=5,i\r\netag: \"6a294a0d-972\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JMXBePU47myTVMk1%2Bc1lpuzXJCkDH9SdPcs0x%2FmILT0Y87%2FlB72Eybu8Cr2HD3eaq8QJ%2BIl9dMTM16UZEmHfvm7nT9dALtJ3Vksc3x%2FADeIIuHK%2BRBGX3iW%2BUaHFnz4fDnxG\"}]}\r\ncontent-length: 2418\r\ncf-ray: a0d9d1f20f278be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2418,"size_decoded":3155,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ecbfd9b2102df0bcbb14d9acc7e7287c","sha1":"125335a93ea3e114508002341f179497c5e27c2f","sha256":"ae280ad98a0105059fb781e96b09b40559b11c2bcd3367f6410ebd0379924e92","sha512":"22f56b4ad73f3673c4131e0fb8ebea0e6d42a304765819fdfb54ade5867e34b7fe60cd192214bfda0c24a0ec02bebd02592e178b1269a00315e133be7c715f7e","ssdeep":"","tlshash":"70413d44cef6ecf38db6ec6bd1365a727226dee51a75cd7600d18d20c07963149d4500","first_seen":"2026-02-01T05:35:27.996355Z","last_seen":"2026-06-20T05:04:37.006837Z","times_seen":84,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrunrelyx-ia.com/assets/img/sec-b.webp","fqdn":"xrunrelyx-ia.com","domain":"xrunrelyx-ia.com","tld":"com"},"ip":{"addr":"104.21.58.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xrunrelyx-ia.com/","date":"2026-06-18T11:05:39.258Z","timestamp":1781780739258,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrunrelyx-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 09:53:42 GMT","end":"Tue, 08 Sep 2026 10:50:00 GMT"},"fingerprint":{"sha1":"B0:A1:82:A9:4A:A4:9B:D9:FD:C0:29:C5:B4:A9:1D:FE:1A:A2:B8:37","sha256":"B7:69:6C:96:77:C1:F5:CD:7C:B6:A0:6E:72:7F:31:9D:70:D6:F1:EA:A5:60:35:E4:83:33:65:71:73:E9:FE:B4"}}},"request":{"raw":"GET /assets/img/sec-b.webp HTTP/1.1\r\nHost: xrunrelyx-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xrunrelyx-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=no6p63v41oor8rj7d30et7g97j; _ga_LT2QK2PF18=GS2.1.s1781780739$o1$g0$t1781780739$j60$l0$h0; _ga=GA1.1.1663968461.1781780739\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:05:39 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 10 Jun 2026 11:27:09 GMT\r\npriority: u=5,i\r\netag: \"6a294a0d-6f86\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LkCYBiZ%2BsC%2FT3iQtgpHoRYrNZ1AosfNBemlijTQkng1ibQNDWznO9MGtPN5itrqwFu%2Ff6LEYBCQucq%2FS8MkWxEyjHzWv7DQZ2c8wZCKb7kpDCT%2FzIzoynVx%2B4wqARv0jDqlP\"}]}\r\ncontent-length: 28550\r\ncf-ray: a0d9d1f46f658be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28550,"size_decoded":29287,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"47970bfc7e827a72c5144644617bf884","sha1":"10d90d462c590e9ca2240da4e99fb5034c04ba2c","sha256":"be1ec2a169b943a5297c2d04b74014b72763b06edd0d6a5da02584c60a8a1b15","sha512":"7a5630d58d7697318510757f869a62c2ab732fd9f61f447b3358cca4e24dcde01e7d950f6ad5a7c97165fd7bf702e6b21859596745c6d9e1265611486c30b3f8","ssdeep":"768:ESizQmpupxgHPrgYCz54lSeRFzgDMAMwOlSE:ESgQmp5PYdmDzgDM6ISE","tlshash":"d3d2e1b761d71f632c72c1b86e48e80976ec84be0f4a3886c360757e7615724d2f4ca2","first_seen":"2026-02-01T05:35:27.999381Z","last_seen":"2026-06-20T05:04:37.026988Z","times_seen":84,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrunrelyx-ia.com/assets/img/ledger-logo.svg","fqdn":"xrunrelyx-ia.com","domain":"xrunrelyx-ia.com","tld":"com"},"ip":{"addr":"104.21.58.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xrunrelyx-ia.com/","date":"2026-06-18T11:05:39.268Z","timestamp":1781780739268,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrunrelyx-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 09:53:42 GMT","end":"Tue, 08 Sep 2026 10:50:00 GMT"},"fingerprint":{"sha1":"B0:A1:82:A9:4A:A4:9B:D9:FD:C0:29:C5:B4:A9:1D:FE:1A:A2:B8:37","sha256":"B7:69:6C:96:77:C1:F5:CD:7C:B6:A0:6E:72:7F:31:9D:70:D6:F1:EA:A5:60:35:E4:83:33:65:71:73:E9:FE:B4"}}},"request":{"raw":"GET /assets/img/ledger-logo.svg HTTP/1.1\r\nHost: xrunrelyx-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xrunrelyx-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=no6p63v41oor8rj7d30et7g97j; _ga_LT2QK2PF18=GS2.1.s1781780739$o1$g0$t1781780739$j60$l0$h0; _ga=GA1.1.1663968461.1781780739\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:05:39 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 10 Jun 2026 11:27:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a294a0d-d5c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5tyHByLA8NA4KTyIkb%2BYhMhZzcoLSz8s%2FauBpd0vd7MxvsUL9wo8pS%2BchIHP6TyNllTBHYE8S8xT6HQlSzLq%2Fz%2BdZ6czJjwc3VgrbKsA0mNzzEzN5wmqEOdfO%2FwA%2FVrMQNZw\"}]}\r\ncf-ray: a0d9d1f47f6b8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3420,"size_decoded":2316,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e2701dd236218c68e506257127151a98","sha1":"dbb9c8e8d180f2edb5caad16017adeb99ad24637","sha256":"a188ab0cb689c9d51976cced1034636b097d5bd4fbd49854cf3261c08e583db0","sha512":"928b21138b211639a30345ec3bda91164f8d727cb9e7e348b453da15469a37dc30cfa95932c313269a68d2c0993e7e10659e4eab0e496775eefc69f29fe8213d","ssdeep":"","tlshash":"b36185ce5fbb19e8f84ae3fddb0268bc341678bca562db50d3081a46f14245c8531d87","first_seen":"2026-02-01T05:35:28.000228Z","last_seen":"2026-06-20T05:04:37.007337Z","times_seen":84,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrunrelyx-ia.com/assets/img/logo.svg","fqdn":"xrunrelyx-ia.com","domain":"xrunrelyx-ia.com","tld":"com"},"ip":{"addr":"104.21.58.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xrunrelyx-ia.com/","date":"2026-06-18T11:05:39.400Z","timestamp":1781780739400,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrunrelyx-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 09:53:42 GMT","end":"Tue, 08 Sep 2026 10:50:00 GMT"},"fingerprint":{"sha1":"B0:A1:82:A9:4A:A4:9B:D9:FD:C0:29:C5:B4:A9:1D:FE:1A:A2:B8:37","sha256":"B7:69:6C:96:77:C1:F5:CD:7C:B6:A0:6E:72:7F:31:9D:70:D6:F1:EA:A5:60:35:E4:83:33:65:71:73:E9:FE:B4"}}},"request":{"raw":"GET /assets/img/logo.svg HTTP/1.1\r\nHost: xrunrelyx-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xrunrelyx-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=no6p63v41oor8rj7d30et7g97j; _ga_LT2QK2PF18=GS2.1.s1781780739$o1$g0$t1781780739$j60$l0$h0; _ga=GA1.1.1663968461.1781780739\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:05:39 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 10 Jun 2026 11:27:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a294a0d-48d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 84713\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iwSH4ulyJoGgrUkicb4CbCgQiD0Ak%2BJRFB%2BsldLMhxAyciUV2SlNWbfytEeE3L2aaxzAoFJswR9e0Dj5vyMGWU1wl2fokPd%2BqcvJnJuZjAq9nG3N0%2FcYE2FE%2BBCAXdcrfOgb\"}]}\r\ncf-ray: a0d9d1f54f858be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1165,"size_decoded":1231,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2ecc52ba801200f4e6e07bce14f5b2c0","sha1":"22f3381961dda0a6f700233be04ab2e1dec173aa","sha256":"476889f1bd277c069ef21987bc4af168c0cf339d1f1c775ddcae5af482c7460a","sha512":"e059f288819e5d94ac593d24e90948529e4e8ab7541deac613b50833e008235c2a3ad87b72ab9bcc5fea6192114179242ee0cd58108273bec7c36530d0372af5","ssdeep":"","tlshash":"77216b66b22ca418d32383ce224638e9303fa0ea771603c4c5c42e6f96646c61c3f6dd","first_seen":"2026-02-01T05:35:27.974168Z","last_seen":"2026-06-20T05:04:37.006369Z","times_seen":82,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrunrelyx-ia.com/assets/img/1-logo.svg","fqdn":"xrunrelyx-ia.com","domain":"xrunrelyx-ia.com","tld":"com"},"ip":{"addr":"104.21.58.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xrunrelyx-ia.com/","date":"2026-06-18T11:05:38.889Z","timestamp":1781780738889,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrunrelyx-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 09:53:42 GMT","end":"Tue, 08 Sep 2026 10:50:00 GMT"},"fingerprint":{"sha1":"B0:A1:82:A9:4A:A4:9B:D9:FD:C0:29:C5:B4:A9:1D:FE:1A:A2:B8:37","sha256":"B7:69:6C:96:77:C1:F5:CD:7C:B6:A0:6E:72:7F:31:9D:70:D6:F1:EA:A5:60:35:E4:83:33:65:71:73:E9:FE:B4"}}},"request":{"raw":"GET /assets/img/1-logo.svg HTTP/1.1\r\nHost: xrunrelyx-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xrunrelyx-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:05:38 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a294a0d-1e6\"\r\nlast-modified: Wed, 10 Jun 2026 11:27:09 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iQMWCVhv0j35Zt8uZEFpEbhv%2BVXpa8uNV7wnQv8BgfP9nq3%2B6UmP7qpC8agAi5se%2B7snbw%2FkV3kKeC%2F7Jo23ZUicOo2Amgb12ClGNczppt7jrv7fXRKBSytYFqQYxkZqTW70\"}]}\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0d9d1f21f298be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":486,"size_decoded":994,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ac489bc5c3a0c31fda739db8195d2bf6","sha1":"afd67eb161da250eeaff7e488b40fa83be41bc92","sha256":"fc0435ed03a3ecce1cfb22a835bc7f22c709a67b06c1158029011a011c755eba","sha512":"9187198bb54b90ecddb30734784dfec4ba7378602cc27fe45d440f791394f833c79f453beb5c52a0ce6a8127cead65d30ceb853ec833eca411aca0241d362542","ssdeep":"","tlshash":"73f0e9f9b3088f88830347355f086576159f30fb668e156751402d87724ded6ded6dac","first_seen":"2026-02-01T05:35:27.983504Z","last_seen":"2026-06-20T05:04:37.016256Z","times_seen":82,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrunrelyx-ia.com/validation/style.php","fqdn":"xrunrelyx-ia.com","domain":"xrunrelyx-ia.com","tld":"com"},"ip":{"addr":"104.21.58.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xrunrelyx-ia.com/","date":"2026-06-18T11:05:39.094Z","timestamp":1781780739094,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrunrelyx-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 09:53:42 GMT","end":"Tue, 08 Sep 2026 10:50:00 GMT"},"fingerprint":{"sha1":"B0:A1:82:A9:4A:A4:9B:D9:FD:C0:29:C5:B4:A9:1D:FE:1A:A2:B8:37","sha256":"B7:69:6C:96:77:C1:F5:CD:7C:B6:A0:6E:72:7F:31:9D:70:D6:F1:EA:A5:60:35:E4:83:33:65:71:73:E9:FE:B4"}}},"request":{"raw":"POST /validation/style.php HTTP/1.1\r\nHost: xrunrelyx-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xrunrelyx-ia.com/\r\nOrigin: https://xrunrelyx-ia.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:05:39 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: PHPSESSID=no6p63v41oor8rj7d30et7g97j; path=/\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5z2sbsbK9l08Ef2FaT2L1%2BDFUu%2BebCRGuLB2THkyCbdlK6Ka96%2FDcObwcADf%2BrNjvWX4n4Dx%2BDd9qVXHYcehMYtroCIln4pjrDdqzPvikP%2FHikGxw6bdiICUpMf942i1ge8s\"}]}\r\ncontent-length: 42\r\ncf-ray: a0d9d1f35f458be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":22,"size_decoded":1057,"mime_type":"application/json","magic":"JSON text data","md5":"c9a6a35e5c9c850f8df6f18a311b23de","sha1":"6bd05f97292807c331e7c5d1fa0702d4951a67a7","sha256":"77bdff46df24692e68db588fc5002dc3ae0cd8991a062ddaa372fa5a97e30a6f","sha512":"b247e691589be986ebf4c2f135087da9701492f6fbcb3f3a5e4d0ae6373e98d6001ee1fb0840be22f05a86216978373799d71f60d66279159505c490a4b0867b","ssdeep":"","tlshash":"75700000888a00c80e08020b000823e2c0022020c0000aba0008030080380280000880","first_seen":"2026-06-18T11:06:16.258177Z","last_seen":"2026-06-18T11:06:16.258177Z","times_seen":1,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrunrelyx-ia.com/assets/img/binance-logo.svg","fqdn":"xrunrelyx-ia.com","domain":"xrunrelyx-ia.com","tld":"com"},"ip":{"addr":"104.21.58.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xrunrelyx-ia.com/","date":"2026-06-18T11:05:39.262Z","timestamp":1781780739262,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrunrelyx-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 09:53:42 GMT","end":"Tue, 08 Sep 2026 10:50:00 GMT"},"fingerprint":{"sha1":"B0:A1:82:A9:4A:A4:9B:D9:FD:C0:29:C5:B4:A9:1D:FE:1A:A2:B8:37","sha256":"B7:69:6C:96:77:C1:F5:CD:7C:B6:A0:6E:72:7F:31:9D:70:D6:F1:EA:A5:60:35:E4:83:33:65:71:73:E9:FE:B4"}}},"request":{"raw":"GET /assets/img/binance-logo.svg HTTP/1.1\r\nHost: xrunrelyx-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xrunrelyx-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=no6p63v41oor8rj7d30et7g97j; _ga_LT2QK2PF18=GS2.1.s1781780739$o1$g0$t1781780739$j60$l0$h0; _ga=GA1.1.1663968461.1781780739\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:05:39 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 10 Jun 2026 11:27:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a294a0d-118d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YC3rOBuBVeqWL%2Fkwd5xg19g5qzg9z0CGCJKqMdujmMAaT8uWXB8w9d1z2r5kITtU5wYkcgALHaL3LP2J7xreY1%2B7YYjQ41zMpECFrpdsHkNH8N5M1krlgX9swA8PWrzd%2FGdK\"}]}\r\ncf-ray: a0d9d1f46f678be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4493,"size_decoded":2770,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"35a001dceb5d304e217ae7dcde7b9328","sha1":"756564a2c8c1eee3b30be5389524025e57c6f9c5","sha256":"744973c7abb9be82e61288f0dfd09338adba6076c6dbbdac4463755ac20a776f","sha512":"e99c6d04081a34e672fb23b806931d2c261d5a1338f09e4c81740969a711d0353d8b8a85eba1f003a298407aab72c842dbc8e26913903bec6fe5dfece9a60a37","ssdeep":"96:r4Na2W38JZDx1cvUGHW+cyeDtnIT2aNAS79XJJcQDkHij3bmMXSu:r4NSup82h5UmQp3bmc","tlshash":"c49193c87bec22f0e802abd7d917643a7d1727ff6b81c611c7d09e86549406d4c5adc6","first_seen":"2026-02-01T05:35:27.975741Z","last_seen":"2026-06-20T05:04:37.020228Z","times_seen":84,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrunrelyx-ia.com/assets/img/deloitte-logo.svg","fqdn":"xrunrelyx-ia.com","domain":"xrunrelyx-ia.com","tld":"com"},"ip":{"addr":"104.21.58.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xrunrelyx-ia.com/","date":"2026-06-18T11:05:39.267Z","timestamp":1781780739267,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrunrelyx-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 09:53:42 GMT","end":"Tue, 08 Sep 2026 10:50:00 GMT"},"fingerprint":{"sha1":"B0:A1:82:A9:4A:A4:9B:D9:FD:C0:29:C5:B4:A9:1D:FE:1A:A2:B8:37","sha256":"B7:69:6C:96:77:C1:F5:CD:7C:B6:A0:6E:72:7F:31:9D:70:D6:F1:EA:A5:60:35:E4:83:33:65:71:73:E9:FE:B4"}}},"request":{"raw":"GET /assets/img/deloitte-logo.svg HTTP/1.1\r\nHost: xrunrelyx-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xrunrelyx-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=no6p63v41oor8rj7d30et7g97j; _ga_LT2QK2PF18=GS2.1.s1781780739$o1$g0$t1781780739$j60$l0$h0; _ga=GA1.1.1663968461.1781780739\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:05:39 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 10 Jun 2026 11:27:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a294a0d-114f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DuYQG3rvNAIwA2bPiy%2FRGrbY7H2ylAZM%2BzCjdrilCJqBNjfbKnuKMWiE6VTVk7SODnqGXzOe345mgDDeZ5N%2B9nPJ8nXEz9htMM0LYpz5VV80uepFTBQw20wzcnkb%2FOjPC7sh\"}]}\r\ncf-ray: a0d9d1f47f6a8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4431,"size_decoded":2727,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c6285a881129c28fdb30de641e1e0816","sha1":"c8b507f3d04b7f79b30dacfb19d83c9a2ab826b8","sha256":"13813c91955ef07765d51425c95d2e6acef3a7ce1556743f112325dcaafc85ae","sha512":"4b4e1a78eeb05c591bb2202c3f1eceb1b42298b79b5cb9d45ab06695588c7c2409c4936a6f58962783d759f47ff9db15ac3c6713f962efc8b1a7dc5e4d27e2c1","ssdeep":"96:QZa2bP+VaZKmCFIf7go6gVh3QJvvwwoQwS+e5Rm6dfHI0X:QZbFXJfXVgRYwolSHzhd//","tlshash":"4091a6fe4be9256cf908a7eef616846d3e822aec2751cb91c3185e4d345581cec21ce7","first_seen":"2026-02-01T05:35:27.986972Z","last_seen":"2026-06-20T05:04:37.021071Z","times_seen":84,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrunrelyx-ia.com/assets/js/block-benefits.js","fqdn":"xrunrelyx-ia.com","domain":"xrunrelyx-ia.com","tld":"com"},"ip":{"addr":"104.21.58.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xrunrelyx-ia.com/","date":"2026-06-18T11:05:38.869Z","timestamp":1781780738869,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrunrelyx-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 09:53:42 GMT","end":"Tue, 08 Sep 2026 10:50:00 GMT"},"fingerprint":{"sha1":"B0:A1:82:A9:4A:A4:9B:D9:FD:C0:29:C5:B4:A9:1D:FE:1A:A2:B8:37","sha256":"B7:69:6C:96:77:C1:F5:CD:7C:B6:A0:6E:72:7F:31:9D:70:D6:F1:EA:A5:60:35:E4:83:33:65:71:73:E9:FE:B4"}}},"request":{"raw":"GET /assets/js/block-benefits.js HTTP/1.1\r\nHost: xrunrelyx-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xrunrelyx-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:05:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"6a294a0d-1d7\"\r\nlast-modified: Wed, 10 Jun 2026 11:27:09 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D8utsoY2eUjykNvVOteIRYLropbs3L0NStDLCuf%2FwtoGmZmq3mC8rBxN3gV0KHfaBg1C9rdyCXlNlNQorhrLYrIi63PhSZllInIztKsQVMOrBUm5U3QUYHDLTXg7fS3RdXV0\"}]}\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0d9d1f1ff218be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":471,"size_decoded":998,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"8dbd35fd0037e320d43d218945f8874b","sha1":"948cbefcbc63b66d735502e83db7d11da289b1e7","sha256":"827de3e56f86d46f3624f5ade3700be6217b8fd710a0158b737806bf25c814d1","sha512":"24ee97be54894d6e98c7196521c542787ae70813482240e4cb34dc1a0311f132baced53a0a813bcf752caa52d6d356c9a2b08f080e83e8fdd8b416f8069a740a","ssdeep":"","tlshash":"80f0ed1704b16036521b141d1aaaea49b6d8c0079801ba01becc5a09afdea6e96b71cf","first_seen":"2026-05-29T11:19:07.344329Z","last_seen":"2026-06-18T11:09:57.581908Z","times_seen":22,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-LT2QK2PF18","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xrunrelyx-ia.com/","date":"2026-06-18T11:05:38.856Z","timestamp":1781780738856,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:36:26 GMT","end":"Mon, 17 Aug 2026 08:36:25 GMT"},"fingerprint":{"sha1":"B1:69:2D:8A:87:48:5C:47:05:41:5B:52:3B:0E:2C:E9:BD:CC:03:75","sha256":"91:1E:26:69:78:6C:F7:F4:05:E8:B1:07:F4:04:FB:66:B9:20:6A:EB:43:9D:02:70:C8:AF:60:8C:BB:58:30:4F"}}},"request":{"raw":"GET /gtag/js?id=G-LT2QK2PF18 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xrunrelyx-ia.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Thu, 18 Jun 2026 11:05:38 GMT\r\nexpires: Thu, 18 Jun 2026 11:05:38 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 149362\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":424484,"size_decoded":149966,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"37d879fab361b4f5f0c076eda6e810e8","sha1":"44db506d27aa8ba577a1ed8f44971b2b8d6dffa6","sha256":"0e3c03cd842889cc526d90cd81835a19050766bdfe5de00732f75a3de9665d6a","sha512":"b42a1e1051410c58c9fcbdd2d4e2154b46c0824be90f048228e62aa8c5fb98a14867ee4ff70c5c8cec178e8a21db66ab33fa7cac3be2055bf18e41f6d1f7253f","ssdeep":"6144:fjPEADAFmvq/uYJycf7paX9Z08hdAYOyuInyBLJ81oK:LsT/uYy86+4","tlshash":"0e94f9cdb3da74629392f478503f018ba17a69e2f448c899f186ccd42e746998277f7c","first_seen":"2026-06-18T11:06:16.262943Z","last_seen":"2026-06-18T11:06:16.262943Z","times_seen":1,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":2,"connect":17,"send":0,"wait":40,"receive":49,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xrunrelyx-ia.com/assets/img/stars.svg","fqdn":"xrunrelyx-ia.com","domain":"xrunrelyx-ia.com","tld":"com"},"ip":{"addr":"104.21.58.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xrunrelyx-ia.com/","date":"2026-06-18T11:05:38.888Z","timestamp":1781780738888,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrunrelyx-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 09:53:42 GMT","end":"Tue, 08 Sep 2026 10:50:00 GMT"},"fingerprint":{"sha1":"B0:A1:82:A9:4A:A4:9B:D9:FD:C0:29:C5:B4:A9:1D:FE:1A:A2:B8:37","sha256":"B7:69:6C:96:77:C1:F5:CD:7C:B6:A0:6E:72:7F:31:9D:70:D6:F1:EA:A5:60:35:E4:83:33:65:71:73:E9:FE:B4"}}},"request":{"raw":"GET /assets/img/stars.svg HTTP/1.1\r\nHost: xrunrelyx-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xrunrelyx-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:05:38 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 10 Jun 2026 11:27:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a294a0d-1d22\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6xjAiFdFfZbf%2Fmoh%2FfW94NSjqVAXp%2B7XKuPUPiFgQ1amPgIpq1hHgbTJ%2F63YCplm4Fo4fU4%2FcmxZ308%2BA4rBX9PdqIIikSTwx1%2F1Yeawz5A%2FUsCOXFPkYdAo9C3JefOvgAxS\"}]}\r\ncf-ray: a0d9d1f21f288be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7458,"size_decoded":2743,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"014a0e3b61fba37a9c6fc12662901ef6","sha1":"d54b604534f25a15a46beaadf4254ce5f88e15bf","sha256":"e90bf9cc25d153355a41b65e010557055032a2dedeb905362b340bfa267b10ff","sha512":"48a788a683542461581ef176642bebf818a7888cf87d99bf38b09ecf80181de494d92dec96ae36d8cbf56008f8f9966c9542dd2fa6a55e00b25e7c1dad54a4c1","ssdeep":"96:T53xYfmhdJbQep+MA0NoKlUR3t573bcIhue1fRqzlGNv5yDa/vt:d+gAMA0N83t5ncaJqzlGjN/1","tlshash":"e5f1a6f4159cb3a8c302dfc1cf6922f469ac76fd67de8b61e3b06896783819ac5448c5","first_seen":"2026-02-01T05:35:27.98436Z","last_seen":"2026-06-20T05:04:37.019726Z","times_seen":84,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrunrelyx-ia.com/assets/img/nansen-logo.svg","fqdn":"xrunrelyx-ia.com","domain":"xrunrelyx-ia.com","tld":"com"},"ip":{"addr":"104.21.58.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xrunrelyx-ia.com/","date":"2026-06-18T11:05:39.271Z","timestamp":1781780739271,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrunrelyx-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 09:53:42 GMT","end":"Tue, 08 Sep 2026 10:50:00 GMT"},"fingerprint":{"sha1":"B0:A1:82:A9:4A:A4:9B:D9:FD:C0:29:C5:B4:A9:1D:FE:1A:A2:B8:37","sha256":"B7:69:6C:96:77:C1:F5:CD:7C:B6:A0:6E:72:7F:31:9D:70:D6:F1:EA:A5:60:35:E4:83:33:65:71:73:E9:FE:B4"}}},"request":{"raw":"GET /assets/img/nansen-logo.svg HTTP/1.1\r\nHost: xrunrelyx-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xrunrelyx-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=no6p63v41oor8rj7d30et7g97j; _ga_LT2QK2PF18=GS2.1.s1781780739$o1$g0$t1781780739$j60$l0$h0; _ga=GA1.1.1663968461.1781780739\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:05:39 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 10 Jun 2026 11:27:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a294a0d-7650\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K%2BUYBrC60Ya7zcGqgBz0wKjVmN5QOZhAcHuHB2b%2FnDxc6zZ3Nqnlr889zK8JDCByz4b77uJDNo2WYBoGcUiwJpn0im5dJ7o3PPcniktEaZb8BX5jK3R3sEDfpFxsVKYiqMjV\"}]}\r\ncf-ray: a0d9d1f47f6e8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30288,"size_decoded":21652,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c92487a071ec8e517841d889a171d30e","sha1":"1b3711a1fd64d38374b60426b0202c7440216a3e","sha256":"546847d1e6ac7d68a88d48eaa30654ce3db328d647677611e0b7244208de0100","sha512":"b9eec3ddab5533900f2fe20fc4eec9d16f6f7beb828584f5f937e89c00c1f3c3facca900cb9d49adedb579d7f382d50215bd9dbd7cd9374d612a61ac1df92596","ssdeep":"768:QXhUJYmWWUkWhMnEED38PJtr0YeZEAFCNFbx:QXhUJT4M5D30JHemAFsFbx","tlshash":"9bd248622883cfbeefe54c20f656edf6ed6228ddc09b9148da1511614ba6240d6c0ff0","first_seen":"2026-02-01T05:35:27.994907Z","last_seen":"2026-06-20T05:04:37.007857Z","times_seen":84,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"region1.google-analytics.com/g/collect?v=2\u0026tid=G-LT2QK2PF18\u0026gtm=45je66g1v9255093408za200zd9255093408\u0026_p=1781780738984\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026cid=1663968461.1781780739\u0026frm=0\u0026pscdl=noapi\u0026rcb=8\u0026sr=1280x1024\u0026ul=en-us\u0026_s=1\u0026tag_exp=115616986~115938465~115938468~119392696~119392704~119456239~119456247\u0026sid=1781780739\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fxrunrelyx-ia.com%2F\u0026dt=XrunRelyx%20%E2%80%93%20An%C3%A1lisis%20impulsado%20por%20IA%20para%20los%20mercados%20de%20criptomonedas%20y%20acciones\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026tfd=1146","fqdn":"region1.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xrunrelyx-ia.com/","date":"2026-06-18T11:05:39.274Z","timestamp":1781780739274,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:36:19 GMT","end":"Mon, 17 Aug 2026 08:36:18 GMT"},"fingerprint":{"sha1":"5C:CA:77:C1:0E:54:63:9A:9C:25:2F:54:7A:70:43:2A:C5:6E:1B:75","sha256":"64:72:3D:A6:4A:AB:7E:31:41:4B:87:CC:0D:55:CC:76:4A:62:1E:CE:81:FB:E5:60:31:40:11:6F:C4:95:72:F1"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-LT2QK2PF18\u0026gtm=45je66g1v9255093408za200zd9255093408\u0026_p=1781780738984\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026cid=1663968461.1781780739\u0026frm=0\u0026pscdl=noapi\u0026rcb=8\u0026sr=1280x1024\u0026ul=en-us\u0026_s=1\u0026tag_exp=115616986~115938465~115938468~119392696~119392704~119456239~119456247\u0026sid=1781780739\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fxrunrelyx-ia.com%2F\u0026dt=XrunRelyx%20%E2%80%93%20An%C3%A1lisis%20impulsado%20por%20IA%20para%20los%20mercados%20de%20criptomonedas%20y%20acciones\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026tfd=1146 HTTP/1.1\r\nHost: region1.google-analytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xrunrelyx-ia.com/\r\nOrigin: https://xrunrelyx-ia.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 \r\naccess-control-allow-origin: https://xrunrelyx-ia.com\r\ndate: Thu, 18 Jun 2026 11:05:39 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:138:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:138:0\r\nreport-to: {\"group\":\"ascnsrsggc:138:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:138:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":840,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T00:29:48.592548Z","times_seen":16594319,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":2,"connect":8,"send":0,"wait":18,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xrunrelyx-ia.com/assets/js/block-opportunities.js","fqdn":"xrunrelyx-ia.com","domain":"xrunrelyx-ia.com","tld":"com"},"ip":{"addr":"104.21.58.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xrunrelyx-ia.com/","date":"2026-06-18T11:05:38.868Z","timestamp":1781780738868,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrunrelyx-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 09:53:42 GMT","end":"Tue, 08 Sep 2026 10:50:00 GMT"},"fingerprint":{"sha1":"B0:A1:82:A9:4A:A4:9B:D9:FD:C0:29:C5:B4:A9:1D:FE:1A:A2:B8:37","sha256":"B7:69:6C:96:77:C1:F5:CD:7C:B6:A0:6E:72:7F:31:9D:70:D6:F1:EA:A5:60:35:E4:83:33:65:71:73:E9:FE:B4"}}},"request":{"raw":"GET /assets/js/block-opportunities.js HTTP/1.1\r\nHost: xrunrelyx-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xrunrelyx-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:05:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"6a294a0d-26d\"\r\nlast-modified: Wed, 10 Jun 2026 11:27:09 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DBHNIQwEAsUSUvDYDBNsEC1t6s7Y7voYDAlDYk7BM2yz4O4DZkKHjIy9%2FJEco5aAjcSXQys4hGEyvL4Ycv005oLK52VZjDa3ZBWczS3ggga%2FUoMLZibvAgHmsfY9N4keqV4Q\"}]}\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0d9d1f1ff208be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":621,"size_decoded":1063,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"8bc11f354d28a47828366e5ed0170135","sha1":"84f0a8b5b7a7d288a40d113482693285dcfc84c4","sha256":"584c17b9f6bd2233d5cd69fb1e2b53339ed16e820dfe16bc957bd64ced812271","sha512":"13beac077df72c45814c5d6ef940b7615d9ffc7ffa1c4b2199fd363da6fc68f738ca98eb29ff8c6b996306efc0893a99e65caf09b8efdfbcdd3acde2efe7a68e","ssdeep":"","tlshash":"34f0500b30706036904f093d49ebea4ef7a5d0039804ba15f98c51099fddbbd94f29c9","first_seen":"2026-05-29T11:19:07.323421Z","last_seen":"2026-06-18T11:09:57.579309Z","times_seen":22,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrunrelyx-ia.com/assets/img/logo.svg","fqdn":"xrunrelyx-ia.com","domain":"xrunrelyx-ia.com","tld":"com"},"ip":{"addr":"104.21.58.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xrunrelyx-ia.com/","date":"2026-06-18T11:05:38.885Z","timestamp":1781780738885,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrunrelyx-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 09:53:42 GMT","end":"Tue, 08 Sep 2026 10:50:00 GMT"},"fingerprint":{"sha1":"B0:A1:82:A9:4A:A4:9B:D9:FD:C0:29:C5:B4:A9:1D:FE:1A:A2:B8:37","sha256":"B7:69:6C:96:77:C1:F5:CD:7C:B6:A0:6E:72:7F:31:9D:70:D6:F1:EA:A5:60:35:E4:83:33:65:71:73:E9:FE:B4"}}},"request":{"raw":"GET /assets/img/logo.svg HTTP/1.1\r\nHost: xrunrelyx-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xrunrelyx-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:05:38 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 10 Jun 2026 11:27:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a294a0d-48d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pXJWVV0c6FbFKxOiNDq%2Ff6YhC1fNe1Ig6S4ttaVjQRKB5x8PWJyKOg0FJdEktcfJci6niA%2BZgkIKMn0yvXTu2ZMn%2BVEc%2BwAeCUf7417SOS6FmUqQzvG8mBLYGJPtBP%2FINLH%2B\"}]}\r\ncf-ray: a0d9d1f20f268be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1165,"size_decoded":1218,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2ecc52ba801200f4e6e07bce14f5b2c0","sha1":"22f3381961dda0a6f700233be04ab2e1dec173aa","sha256":"476889f1bd277c069ef21987bc4af168c0cf339d1f1c775ddcae5af482c7460a","sha512":"e059f288819e5d94ac593d24e90948529e4e8ab7541deac613b50833e008235c2a3ad87b72ab9bcc5fea6192114179242ee0cd58108273bec7c36530d0372af5","ssdeep":"","tlshash":"77216b66b22ca418d32383ce224638e9303fa0ea771603c4c5c42e6f96646c61c3f6dd","first_seen":"2026-02-01T05:35:27.974168Z","last_seen":"2026-06-20T05:04:37.006369Z","times_seen":82,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrunrelyx-ia.com/assets/img/x-logo.svg","fqdn":"xrunrelyx-ia.com","domain":"xrunrelyx-ia.com","tld":"com"},"ip":{"addr":"104.21.58.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xrunrelyx-ia.com/","date":"2026-06-18T11:05:38.890Z","timestamp":1781780738890,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrunrelyx-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 09:53:42 GMT","end":"Tue, 08 Sep 2026 10:50:00 GMT"},"fingerprint":{"sha1":"B0:A1:82:A9:4A:A4:9B:D9:FD:C0:29:C5:B4:A9:1D:FE:1A:A2:B8:37","sha256":"B7:69:6C:96:77:C1:F5:CD:7C:B6:A0:6E:72:7F:31:9D:70:D6:F1:EA:A5:60:35:E4:83:33:65:71:73:E9:FE:B4"}}},"request":{"raw":"GET /assets/img/x-logo.svg HTTP/1.1\r\nHost: xrunrelyx-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xrunrelyx-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:05:38 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a294a0d-164\"\r\nlast-modified: Wed, 10 Jun 2026 11:27:09 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GDTMHMnix9r1upX2kcANM4IyY2Z495avSg9l7Eqwq0nJyh5hPqklAhILfIECmxV5A0Fvm3h2gAwqWb25hrda8SArLXm7P5IGK7xsH68EYk7bdEn1%2By%2BQvJiTMvvk5dZoEEZv\"}]}\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0d9d1f21f2a8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":356,"size_decoded":963,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f9d288b6a62efbb46adf6c414e894b91","sha1":"32d0325ebf05205f61a3d4cbf24532df4fa42855","sha256":"805f0ebb3ed4c45904f1b5b3dd4fb17ec8a13133d95f703f14e16278a860eaf5","sha512":"b5f06d02f99625d7f575fa9ea5f587c5a9b76a3ea1cb0d3a23764ac215178dcacb0b2ad9af1c053d012402f95917b305ec353295d438d95a0912238683768bb1","ssdeep":"","tlshash":"28e068e9114df384840d8ed04229333212da71e2abc4d34cc1526202f8841499c1d5d9","first_seen":"2026-02-01T05:35:27.974946Z","last_seen":"2026-06-20T05:04:37.025957Z","times_seen":83,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrunrelyx-ia.com/assets/fonts/RobotoCondensed-Regular.woff2","fqdn":"xrunrelyx-ia.com","domain":"xrunrelyx-ia.com","tld":"com"},"ip":{"addr":"104.21.58.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xrunrelyx-ia.com/","date":"2026-06-18T11:05:39.080Z","timestamp":1781780739080,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrunrelyx-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 09:53:42 GMT","end":"Tue, 08 Sep 2026 10:50:00 GMT"},"fingerprint":{"sha1":"B0:A1:82:A9:4A:A4:9B:D9:FD:C0:29:C5:B4:A9:1D:FE:1A:A2:B8:37","sha256":"B7:69:6C:96:77:C1:F5:CD:7C:B6:A0:6E:72:7F:31:9D:70:D6:F1:EA:A5:60:35:E4:83:33:65:71:73:E9:FE:B4"}}},"request":{"raw":"GET /assets/fonts/RobotoCondensed-Regular.woff2 HTTP/1.1\r\nHost: xrunrelyx-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xrunrelyx-ia.com/assets/css/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:05:39 GMT\r\ncontent-type: font/woff2\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 10 Jun 2026 11:27:09 GMT\r\npriority: u=3,i=?0\r\netag: \"6a294a0d-f8b8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZgtZ1bDPp5ZtQh4%2FosBXVyNwmuK%2BNE%2Fb6bqonXpdmtbPakVYAJHDTQeu7vHhvt7j%2FgwGmC%2FDrthAdEOyycVs0ZEr%2BJhMs9ru%2BBCu4fpWsQK36cneyL%2Fldc3dNskIN4ip1LTr\"}]}\r\ncontent-length: 63672\r\ncf-ray: a0d9d1f34f428be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63672,"size_decoded":64416,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63672, version 1.0","md5":"e813ab562ab74cf2fea116f6573ec2a1","sha1":"3a5d2faa0d673b8839df26a76735aa1ee0c02bce","sha256":"07fe1001734bda1c26b3773008f02e54a9998bdb7c0592eabbc4e948bebeebf5","sha512":"07f1505bf8d636d373fd7780425aceddf78ba39f09e3733a9acd82dd39f5a41f6fc8d92a4ad3ff379180b87e09c6da8e8ba7c2718666dc57be2d7f54bbc41b80","ssdeep":"768:ovBaPod+pexZSKCbG0eOyDF4ZkNAjjmhDQEVo8mb8rJXErm+jvRfYOdRMgvV0Dzp:bq+pCubtyR4ZiD/GIXEC+Igqgy/b3Lv","tlshash":"7a530249b6d53a262a3fd2cc958280c3c419ba72e8383c7bf92dd6dac85dda264515cc","first_seen":"2026-02-01T05:35:27.981516Z","last_seen":"2026-06-20T05:04:37.008864Z","times_seen":141,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrunrelyx-ia.com/assets/fonts/RobotoCondensed-ExtraBold.woff2","fqdn":"xrunrelyx-ia.com","domain":"xrunrelyx-ia.com","tld":"com"},"ip":{"addr":"104.21.58.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xrunrelyx-ia.com/","date":"2026-06-18T11:05:39.082Z","timestamp":1781780739082,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrunrelyx-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 09:53:42 GMT","end":"Tue, 08 Sep 2026 10:50:00 GMT"},"fingerprint":{"sha1":"B0:A1:82:A9:4A:A4:9B:D9:FD:C0:29:C5:B4:A9:1D:FE:1A:A2:B8:37","sha256":"B7:69:6C:96:77:C1:F5:CD:7C:B6:A0:6E:72:7F:31:9D:70:D6:F1:EA:A5:60:35:E4:83:33:65:71:73:E9:FE:B4"}}},"request":{"raw":"GET /assets/fonts/RobotoCondensed-ExtraBold.woff2 HTTP/1.1\r\nHost: xrunrelyx-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xrunrelyx-ia.com/assets/css/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:05:39 GMT\r\ncontent-type: font/woff2\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 10 Jun 2026 11:27:09 GMT\r\npriority: u=3,i=?0\r\netag: \"6a294a0d-1010c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iyBhtfKWsWG3JprNysvsF1MeS4BEuKesu5hrawSH%2BnUB6Q4FTbNZgivKkw8okTzucX8P%2BblYC%2Bmn0Us0TiLD7qo%2FPBFvTSCCzKhrKJWThRmmiUEIf62aJqRi9R%2FSOsQwit76\"}]}\r\ncontent-length: 65804\r\ncf-ray: a0d9d1f35f438be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65804,"size_decoded":66544,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 65804, version 1.0","md5":"53069609c1d8fa3047a0c102c5391c2a","sha1":"2c4110fbf89c85ebcadb7501b9e52402824db4dd","sha256":"fb6a5fc89213242e7024a41384ebc611d31a9d7da67867c25bf033c7bad44174","sha512":"321d7f90a43c75fec00f503dfa27ac8e8fa089ba13f91007895ca2749df49dae9ca3f220abb7c96dcf922c710cccf8d3b56b31e04084a149421dc91bedce896e","ssdeep":"1536:b2n+VaO4AWR/0tMgc4jhgQhZboogEbg9X6eHGnD2vhj7e:bAwaOW9gc49RhZbooiMeOKvhjC","tlshash":"3f530190cfc2d39be6b02a375831ae4c2ed21d1bd82a7e9291fae446f4274e65490cc4","first_seen":"2026-02-01T05:35:27.976591Z","last_seen":"2026-06-20T05:04:37.01349Z","times_seen":83,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrunrelyx-ia.com/validation/imgs/flags.webp","fqdn":"xrunrelyx-ia.com","domain":"xrunrelyx-ia.com","tld":"com"},"ip":{"addr":"104.21.58.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xrunrelyx-ia.com/","date":"2026-06-18T11:05:39.095Z","timestamp":1781780739095,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrunrelyx-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 09:53:42 GMT","end":"Tue, 08 Sep 2026 10:50:00 GMT"},"fingerprint":{"sha1":"B0:A1:82:A9:4A:A4:9B:D9:FD:C0:29:C5:B4:A9:1D:FE:1A:A2:B8:37","sha256":"B7:69:6C:96:77:C1:F5:CD:7C:B6:A0:6E:72:7F:31:9D:70:D6:F1:EA:A5:60:35:E4:83:33:65:71:73:E9:FE:B4"}}},"request":{"raw":"GET /validation/imgs/flags.webp HTTP/1.1\r\nHost: xrunrelyx-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xrunrelyx-ia.com/validation/intlTellInput.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:05:39 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 10 Jun 2026 11:27:09 GMT\r\npriority: u=4,i\r\netag: \"6a294a0d-400e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xjWESRs1w2efzxDJNsEtcpiivbTnZ0odDk2piQn8hTo6DOEQHEbjtDUBiv0c0Il%2FgDrXXUbrfS7kjwGbAjpRi5yIbYpUGl%2Bp%2Bhw9WqXDB6%2F94aNq%2BZ1thSLIcKqfRm0WNy5%2B\"}]}\r\ncontent-length: 16398\r\ncf-ray: a0d9d1f35f468be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16398,"size_decoded":17135,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e04a429f047bf49a416645746b6ab9ee","sha1":"81f328617acadbd6fd07ab50977feffa2da3efca","sha256":"760f6774dabb35d9d7cdfb1c748ffd5e37eacf2c2dd4e750b53e66e3b9246ac7","sha512":"06dd1ace2a0776c044f5d8109db05e4fc4ee1d5b676a9da24b7178288f8baae7efc67232370baf3eba849789a93e5c92675354e6ec750fa452b5f8238252642b","ssdeep":"384:CpLvGfOAKQ6wUyvTOaqso3jEAgjZ50AxMD5enKY/M:27DQWUTPqso3YfZ5HCLYk","tlshash":"ea72d08d72fc585cfa36d9021277b18da086ce24b576d9394ac3f985b4b3c98f5cc492","first_seen":"2025-11-06T16:28:10.856082Z","last_seen":"2026-06-20T19:26:50.822747Z","times_seen":947,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrunrelyx-ia.com/assets/js/block-cards.js","fqdn":"xrunrelyx-ia.com","domain":"xrunrelyx-ia.com","tld":"com"},"ip":{"addr":"104.21.58.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xrunrelyx-ia.com/","date":"2026-06-18T11:05:38.866Z","timestamp":1781780738866,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrunrelyx-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 09:53:42 GMT","end":"Tue, 08 Sep 2026 10:50:00 GMT"},"fingerprint":{"sha1":"B0:A1:82:A9:4A:A4:9B:D9:FD:C0:29:C5:B4:A9:1D:FE:1A:A2:B8:37","sha256":"B7:69:6C:96:77:C1:F5:CD:7C:B6:A0:6E:72:7F:31:9D:70:D6:F1:EA:A5:60:35:E4:83:33:65:71:73:E9:FE:B4"}}},"request":{"raw":"GET /assets/js/block-cards.js HTTP/1.1\r\nHost: xrunrelyx-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xrunrelyx-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:05:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"6a294a0d-214\"\r\nlast-modified: Wed, 10 Jun 2026 11:27:09 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7MAlcB9XCOLSpLelhIFwtbcjTeQxdLKhd%2FYE6e%2BDwJ2otVTq5EPIFAXuA%2B5%2F6mY0mZye1Lb36fbTMeY%2Bf3v2HZudEj1%2BUB%2BpVI2sgwFitfIe1OPdW7SlnHXHrpkWKgfc4AAd\"}]}\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0d9d1f1ef1e8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":532,"size_decoded":1014,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"c79a6e82ca664a022fe0ba27a3aa92a1","sha1":"5456648e933a8fb5764c05c00687af8dd2d4cabb","sha256":"710ab8e8b52be5f2338f028f9e60c41b7228905970305f20a55b9edb3776307b","sha512":"637c4e582589f43468f8c2f63a25e115e21408f2b9fe660ac4d0f752072275ff3d99576843d198df00919c7a9e3f0a2f95fe154d82fedd1bcfc40cd0d74ce7e3","ssdeep":"","tlshash":"7bf0e51700b05031515b203d4aeee649b7e490036808ba11b98c4109efd9b7a65f65c9","first_seen":"2026-05-29T11:19:07.308261Z","last_seen":"2026-06-18T11:09:57.593813Z","times_seen":22,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrunrelyx-ia.com/","fqdn":"xrunrelyx-ia.com","domain":"xrunrelyx-ia.com","tld":"com"},"ip":{"addr":"104.21.58.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-18T11:05:38.129Z","timestamp":1781780738129,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrunrelyx-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 09:53:42 GMT","end":"Tue, 08 Sep 2026 10:50:00 GMT"},"fingerprint":{"sha1":"B0:A1:82:A9:4A:A4:9B:D9:FD:C0:29:C5:B4:A9:1D:FE:1A:A2:B8:37","sha256":"B7:69:6C:96:77:C1:F5:CD:7C:B6:A0:6E:72:7F:31:9D:70:D6:F1:EA:A5:60:35:E4:83:33:65:71:73:E9:FE:B4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xrunrelyx-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:05:38 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\npriority: u=0,i\r\nlast-modified: Wed, 10 Jun 2026 11:27:09 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1no89kI%2BsJ5%2ByA6jO10WWljoBnE%2FFvEdIgcShB81oXaEtwDAV3bEtFuC%2BQvNS%2FfgEaBD%2FLwzjG4gR5Y996mZOkY8KVXOhk%2BkuJYQfggXRnVqoUDxbmXKfHnMfVzXlgLu6pOK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: zstd\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-ray: a0d9d1ed8e458be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31949,"size_decoded":8545,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (29820)","md5":"5b01afba13e1683fc3fe16248321c91e","sha1":"e5da8682d283c9d8bfc01ee897f5fb7f449fc606","sha256":"7f302e45736cf2e916caf8b34a9e592f759969ad2a75b0ade6e8f7cf27d88c9e","sha512":"c9a28b35a0cc42c34f2364b7f8e29a3357ca555f695a67de1f1807522e022ff4743c5a6e4651b67840288a909376c15ad06249f59c34af98f8344ac7d8ca1a7f","ssdeep":"768:8Hnj6qCHtDYMTDhw/hU/m7DrQjYQlgoxp:8+qCHtDYMvS/q/m7D8jYq","tlshash":"abe22034818499238b6b39e5b675ab5f7097d30cde13489993fc8fc85fc2da0cd246a9","first_seen":"2026-06-18T11:06:16.275317Z","last_seen":"2026-06-18T11:06:16.275317Z","times_seen":1,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":14,"connect":17,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrunrelyx-ia.com/validation/intlTellInput.min.css","fqdn":"xrunrelyx-ia.com","domain":"xrunrelyx-ia.com","tld":"com"},"ip":{"addr":"104.21.58.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xrunrelyx-ia.com/","date":"2026-06-18T11:05:38.632Z","timestamp":1781780738632,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrunrelyx-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 09:53:42 GMT","end":"Tue, 08 Sep 2026 10:50:00 GMT"},"fingerprint":{"sha1":"B0:A1:82:A9:4A:A4:9B:D9:FD:C0:29:C5:B4:A9:1D:FE:1A:A2:B8:37","sha256":"B7:69:6C:96:77:C1:F5:CD:7C:B6:A0:6E:72:7F:31:9D:70:D6:F1:EA:A5:60:35:E4:83:33:65:71:73:E9:FE:B4"}}},"request":{"raw":"GET /validation/intlTellInput.min.css HTTP/1.1\r\nHost: xrunrelyx-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xrunrelyx-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:05:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 10 Jun 2026 11:27:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a294a0d-3bfe\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=38ZcSEjb8gIbXu9zmFs6VFxT%2Bfc7l1FOkxfRgGXUuyFRzC4iqfLse5Vb7hG6ngxL5JBkGG%2FzcORmCW0UwAyU7NfJkSHxsvdaYxRbf0Fxv%2BgKQxxABQAR6vt3tSD%2Bwav2IQlO\"}]}\r\ncf-ray: a0d9d1f07ede8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15358,"size_decoded":4145,"mime_type":"text/css","magic":"ASCII text, with very long lines (15358), with no line terminators","md5":"27f3ca4ca9a401438a0ce7df6b4fdb75","sha1":"ddf04596ee636e5af007dd41f26d224157612207","sha256":"504af9f2b61d09f92ce112c6a35100f32fcfc456a0e7e701a31a1ff1e71627b0","sha512":"68a83d4fed5935da504ce784fac4276b8ab3598a25497306ebd1b8f36205f9a826537d6540396ac9cbb97596e10b61e57b6f437be5f2900bd83f916ea89e48f5","ssdeep":"192:eRjvqrrF59XnX/zSuOhOFhs+bpmTYCM9oRZJiEnJWoCdsPyj9KKaJWRCl8:F93vIhOEM7egCl8","tlshash":"9862a8130308953ee716c1397072d5fd3fbfab4178d6cad5e6c8821f988798089aba59","first_seen":"2026-05-06T12:51:42.484911Z","last_seen":"2026-06-20T07:48:12.727386Z","times_seen":35,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrunrelyx-ia.com/assets/js/block-hero.js","fqdn":"xrunrelyx-ia.com","domain":"xrunrelyx-ia.com","tld":"com"},"ip":{"addr":"104.21.58.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xrunrelyx-ia.com/","date":"2026-06-18T11:05:38.863Z","timestamp":1781780738863,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrunrelyx-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 09:53:42 GMT","end":"Tue, 08 Sep 2026 10:50:00 GMT"},"fingerprint":{"sha1":"B0:A1:82:A9:4A:A4:9B:D9:FD:C0:29:C5:B4:A9:1D:FE:1A:A2:B8:37","sha256":"B7:69:6C:96:77:C1:F5:CD:7C:B6:A0:6E:72:7F:31:9D:70:D6:F1:EA:A5:60:35:E4:83:33:65:71:73:E9:FE:B4"}}},"request":{"raw":"GET /assets/js/block-hero.js HTTP/1.1\r\nHost: xrunrelyx-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xrunrelyx-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:05:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 10 Jun 2026 11:27:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a294a0d-6d8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JzHtSF33G5NkEwZvPRwf8DmD0UBgQuGD3v4eGr2g%2FNnnmrgeigr96gOe%2BTNuuh%2FIzXRyWc0Zvz9wsp6uFu69CvirG73aDbWV4YteMJuSXpBEae0kfSMdE%2F6IWrlk033kU5I%2F\"}]}\r\ncf-ray: a0d9d1f1ef1b8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1752,"size_decoded":1360,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"e7c2d08766df94c49ffbfb33ca3aaeb5","sha1":"649f951bd6cd3a9492f5e71dc8599da6ff4467c6","sha256":"8bc146b03f6083f6f19f33e314bc52270887407cca4345b09909af5952e83f11","sha512":"90ead8d0fc8cce98a011c51d33c5247962d400f40fd27b72e374f46ec3dd331b57a74d6e4e8c21725292071c0c93d27147142220f12f1c3047dae983c16a8dde","ssdeep":"","tlshash":"5b318f9a72f310708767a23abbaf5785253491033442ed9c7ddd42102f51d52a6f7fe8","first_seen":"2026-05-29T11:19:07.333343Z","last_seen":"2026-06-18T11:09:57.586074Z","times_seen":22,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrunrelyx-ia.com/assets/img/yt-logo.svg","fqdn":"xrunrelyx-ia.com","domain":"xrunrelyx-ia.com","tld":"com"},"ip":{"addr":"104.21.58.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xrunrelyx-ia.com/","date":"2026-06-18T11:05:38.891Z","timestamp":1781780738891,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrunrelyx-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 09:53:42 GMT","end":"Tue, 08 Sep 2026 10:50:00 GMT"},"fingerprint":{"sha1":"B0:A1:82:A9:4A:A4:9B:D9:FD:C0:29:C5:B4:A9:1D:FE:1A:A2:B8:37","sha256":"B7:69:6C:96:77:C1:F5:CD:7C:B6:A0:6E:72:7F:31:9D:70:D6:F1:EA:A5:60:35:E4:83:33:65:71:73:E9:FE:B4"}}},"request":{"raw":"GET /assets/img/yt-logo.svg HTTP/1.1\r\nHost: xrunrelyx-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xrunrelyx-ia.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:05:38 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 10 Jun 2026 11:27:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a294a0d-46d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vp41OnNffF%2BKLOArCxlRhlA2ewVaQ39amz%2FmMXyiG4WVHkvyla%2Fc%2FVdKGSaiWVhbxPYiKpmvvXe9AQQkeJMxxXUmbQSKmz6JpDVwy61M4heY%2FZWL3hLki77UFCF0Acsf4nUE\"}]}\r\ncf-ray: a0d9d1f21f2b8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1133,"size_decoded":1289,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4e0c0d2d22e110c402986b7bdf984049","sha1":"eec12524e6bd14bfde045ba21702eae55540bbb1","sha256":"b23575dea942fec2968ec7a483526046cda22064b11d489a690da9dcea47b3f1","sha512":"d8d8f321a0b64f4be55b8f60ddba121060481dc6ab253f9bfbea5f17c7f56bff2a1ccecf91c62c69595ac8896445167404361140fe989e3ed3839a7200854790","ssdeep":"","tlshash":"48218ef683268a60e90ddbf4d68e346c209637b2bb59c386d3587514f04b4dc9658c4c","first_seen":"2026-02-01T05:35:27.985538Z","last_seen":"2026-06-20T05:04:37.024729Z","times_seen":82,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrunrelyx-ia.com/assets/fonts/RobotoCondensed-Bold.woff2","fqdn":"xrunrelyx-ia.com","domain":"xrunrelyx-ia.com","tld":"com"},"ip":{"addr":"104.21.58.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xrunrelyx-ia.com/","date":"2026-06-18T11:05:39.090Z","timestamp":1781780739090,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrunrelyx-ia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 09:53:42 GMT","end":"Tue, 08 Sep 2026 10:50:00 GMT"},"fingerprint":{"sha1":"B0:A1:82:A9:4A:A4:9B:D9:FD:C0:29:C5:B4:A9:1D:FE:1A:A2:B8:37","sha256":"B7:69:6C:96:77:C1:F5:CD:7C:B6:A0:6E:72:7F:31:9D:70:D6:F1:EA:A5:60:35:E4:83:33:65:71:73:E9:FE:B4"}}},"request":{"raw":"GET /assets/fonts/RobotoCondensed-Bold.woff2 HTTP/1.1\r\nHost: xrunrelyx-ia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xrunrelyx-ia.com/assets/css/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:05:39 GMT\r\ncontent-type: font/woff2\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 10 Jun 2026 11:27:09 GMT\r\npriority: u=3,i=?0\r\netag: \"6a294a0d-1029c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fgy26t4%2BSsGoEInBgLvu94%2BVzg09HNB69nvwR7PGGytOEXqus00%2BnAVJ4APbb5PaVvpf4PnY%2FRv%2F6mRV1ZPtpdKJrclGPq6%2Fm7L6IorQww7Mbr1QtX9yqdB8ZUDm1h4ZAXCS\"}]}\r\ncontent-length: 66204\r\ncf-ray: a0d9d1f35f448be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66204,"size_decoded":66948,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 66204, version 1.0","md5":"eb3479e39688e6b86a926e32fbce8211","sha1":"fb4a169cf706b05db70496d4ee824b824513b5cd","sha256":"9b8b48a4569e96489a13cda60a878f0ef1e10cb987dd02e9845b12641354b988","sha512":"96bf1c97e9d8a8c10614a6295334d16c8f3406fb854fc9d5cff653487287173eb90b42ec958f7e35d6395882747c8ef68ea65cf454b14c291e1faf513847a458","ssdeep":"1536:iB7TVSmu0xY5/75fi+0nNpreJk/BxNYduWfQ8rN0tuIH0:iB3Imsjwp6axNPCQztH0","tlshash":"f35302676433681bf79a7290b981073059335efec2e8d0834458fa7dd25d2e150b2fea","first_seen":"2025-10-01T02:38:25.778132Z","last_seen":"2026-06-20T05:04:37.015232Z","times_seen":151,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"xrunrelyx-ia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}