{"report_id":"0b03370f-67e6-426e-96e5-d65ab752c472","version":6,"status":"done","tags":[],"date":"2026-03-04T13:06:31Z","url":{"schema":"http","addr":"2xornothing.click","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"2xornothing.click/","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"title":"Double or Nothing - Provably Fair Crypto Gambling | 2x Your USDT Instantly","dom":{"size":61715,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (37818)","md5":"08f5f827926af07bb40066fc48775495","sha1":"94bfc2166755321924244b038a74cac24a7236f5","sha256":"93a29c0dc892778dbeac793cc68e581621a5e36889c4877db75ceb462872b329","sha512":"9ce6183cd0e5c54dfacc4de771a68ec0a7d9b166a715a3a7b1b5552bca41c28f5dee301057480c37c1600efb9cd8f8779393d70c2819cca4cc7722cf0121c1be","ssdeep":"1536:UMfqfebx/c64Jysq7vFh4Japmp6oi/gtK9:UAqfeDh4JQm6","tlshash":"1e5319a5b504d92c696b5e60b6f5bf3cd06dd202cf63d828f35c884557c3efd29a2a80","dom_hash":"domhash7f26dff96f7080e74265c9f023fb2cce","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"2xornothing.click","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-08T13:06:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"2xornothing.click","ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-02-26","domain_rank":0,"first_seen":"2026-03-04T13:06:36.110725Z","last_seen":"2026-03-04T13:06:36.110725Z","alert_count":76,"request_count":38,"received_data":6252090,"sent_data":18437,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"explorer-api.walletconnect.com","ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-12-19","domain_rank":466611,"first_seen":"2022-10-10T18:16:28Z","last_seen":"2026-02-26T01:49:24.714164Z","alert_count":0,"request_count":4,"received_data":10366,"sent_data":2583,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"2xornothing.click/_next/static/chunks/606-e54a9e08c17eb176.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"20f0ebf11204092729e992958832bdc4","sha1":"b5b6c7ae6acd4445516122980e9c3b6b9fc88e92","sha256":"0ec600258735a52f774cf42179ebb15db4e5b18c11f408e2faa42794eefc574c","sha512":"b01f9ce0be5ee23acb8aba0c2131c5bde35259fc8c3a3a81bc818282f31fa321eefacc77f6ba24a38371f8d59a403137112afa39ccd7b64a2bcd1aa5ea8f4d3e","ssdeep":"3072:x61QxHz9X8VJOdnr5Sl+Y8AbBN6dq3XJe/D8H4f4SL9cDEx9FDi8Y9aVIRk:18VJOdnNSl+Y8AtNVXi44f4NqrNfVIRk","tlshash":"2d743be5731170b5c7db8196d02f5205f33a6995240d402cb2b9ecfb2a65d88a2fbf39","size":370794,"data":"","first_seen":"2026-03-04T13:06:42.533044Z","last_seen":"2026-03-04T13:10:33.210161Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/_next/static/chunks/main-app-2ce4d651f1e25a09.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"90779dbadf6f843d4bca6afb8f96fdb3","sha1":"df0fc1e104f8783848017788af5f61f57ff375be","sha256":"b093addcddf8b4bb775e3ccccce7aa29737360a6297f6c61b6e7d2017c64627d","sha512":"73ba0bcbd644ef1e11a1f75d41e6058a9cd09b9ca77cba23378f78ffe51f9b74fa912c56038336510419efc55cdda3b7b1f07edbd9f4f4b8f74c17044c649483","ssdeep":"","tlshash":"12f0515a4f0cf41f5c275d31fea36ce2241f4135201b4d607a00efa16c57bacd270419","size":570,"data":"","first_seen":"2026-03-04T13:06:42.536517Z","last_seen":"2026-03-04T13:10:33.219984Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-07-23T11:29:19.555873Z","times_seen":199151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/_next/static/chunks/app/layout-709862f869ee1869.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e7df9de0fff3a684af6acbdd33df075","sha1":"5e7048d9ca48a219c1222c56dcda99f069e3b556","sha256":"ed267267b02a235d8698081afa01dee57ea1b0f91db4d0bf4e1c54818ec1ba6b","sha512":"af87308460daf61423668e1e159bfd3ff6b5f96cebedd05953c314892dae065fb2c27dba580e58215939730948f3696c28eb8e6818de8b428217602e8cb4bc1b","ssdeep":"192:4R7aVvy4/11o/woqg4QWNitEruWpPq9lqzHw0lCo+MKoInjIw2UMCFkHWDX7ir6:Ct4/11oornuD90LAjmUm2DX7i2","tlshash":"a7223a74ba617a790b83046ecd2a0d26d23f1b0d790ec0a6b296dca157d4dc46cf2fd9","size":10001,"data":"","first_seen":"2026-03-04T13:06:42.547042Z","last_seen":"2026-03-04T13:10:33.209211Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/_next/static/chunks/38.17f30a51179ec0f0.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cdec8537eb19010e0d0b42fb5a332d23","sha1":"ad6235e90aedd5f8eec680f60ef74014e75260af","sha256":"284a8a73d377985ef268323099c212c8fc643e95325a12c5e364804c72285239","sha512":"60a64c36bcb572e26e2156413b99b6c9f351b74e2df47eb94e1fe659a4766b93f603305c50110141565adece80a28b95ed65df8d784d7c0b6d081285cb9bdefc","ssdeep":"384:x02+56korFpT3kLIAbjW9MgG9y7K1jZk8AAM:8QHpT0LIA5gI5AAM","tlshash":"5552a505a386de9cf53b45e89b5e502c602e5b94da0f4c78f5bcbc3166004d97b57b8c","size":13445,"data":"","first_seen":"2026-03-04T13:06:42.548693Z","last_seen":"2026-03-04T13:10:33.234731Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/_next/static/chunks/476-e8a171a86883d664.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e139be6647396d7b909dff053eb9d304","sha1":"39f860d584e8afd845a21ba2842db1bef541518f","sha256":"b672865f453e58f4b312f6f8544288abb43c836dc102e4eb684b60b4206b0fe6","sha512":"105a8614573537a726d250badb5cf7ed829fb77535704342052c7186abc1211dcfe417b71792bf4d9ed199f05437c76a93cac74a2dd921af456f00e4b4175c40","ssdeep":"1536:YGxWI68y8ghX0FmF4rXoFIoV1zDH4ArKd303nuzyg/VZWXbrmiNZjclZxmMPKUXh:YV8ECFoVSS3nOv/qbrmiN+xSRa","tlshash":"23f3d8b676d0f8d107a780d5c43b400af3295c3a146f74a0a3e6cce975645dea1b3faa","size":167184,"data":"","first_seen":"2026-03-04T13:06:42.535719Z","last_seen":"2026-03-04T13:10:33.218558Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/_next/static/chunks/9d3ce21c-81794ec107d8981b.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"98a84dacc763628dfba1ffd2f6ca66c7","sha1":"ff5e77d936516d4fd89f94189e3fedcc712876e3","sha256":"c3402bbad7c767288c31974f721da697356b759124fa6b243fc1e48847dc4487","sha512":"bc7998a51c1eb52257385f21766670ded8209a33a1d310aa5e846f9ff1e7bf973f2a82ee8e4634b01dd15d16ce8e7fb4ddbb3ee1a052d82749f96cefe3055bda","ssdeep":"6144:xqm3EaTLCd3aSUzW00212o2VaeBZXRxp4SFxaCyEM2H+CjEy5bZ83gTuH0zZ1:wm8qSUzWZxaCyEM2H+cJbZIgTG0zZ1","tlshash":"2f644b757978a0035d0774aba4bd0846117df8d77808c2f8b90c61abb0f1598b6e7fea","size":333335,"data":"","first_seen":"2026-03-04T13:06:42.552072Z","last_seen":"2026-03-04T13:10:33.222698Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/_next/static/chunks/5ffeb132-1c32ed5e7dcbbcfd.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f8534b73353579ddf5d265c6c6acdce","sha1":"0d93c516a68ac08ae88209587759e06a8f38efd8","sha256":"0a6ee5ec3397e96bd56460d4d467df0d85b4891f5141fa61f46aa26186eebdbf","sha512":"ea6e68c003568cdf4a39e53176d27f22ac2a39e7ff942d856c2a0c4810afb0958c76650b4ac52c8d50b0496ab96cfcb11e446e676e1ec11a9b4c50f4be3613e4","ssdeep":"3072:wGmJ/YcYMg6kemb2eElzX9bz80t6g1yFO+OkUusk+CZzTT0YvGsgVjMcywgM:wGmJ/YcYMg6kemb2NXFO8kbsk+CWYvGR","tlshash":"77f32950b374b062c75925a0142b604be27efe2c688b046cf658ecf67cf8985657bf35","size":169494,"data":"","first_seen":"2026-03-04T13:06:42.551219Z","last_seen":"2026-03-04T13:10:33.226286Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"03cd4f7d933bcf7893720dd7b1cd5a33","sha1":"85df7f930abab8d9939cf60159a3ee784654ed76","sha256":"96cd53f91fcee6b87a373ccad071daa8aef5484620fc5ac9188359e73209fd64","sha512":"39818b49662a0990daa7ee8c0efe34eb44b088999b97e3ade69b4fd6429533d19f0a4b98c5b3ec58bf31864ed870a32b1f70c92cb492f8ead14f36a9a144d441","ssdeep":"","tlshash":"6b21f99fa120db857da79c120223ae16aca9da3144f1e799d33efa291131d7f3259047","size":1268,"data":"","first_seen":"2026-03-04T13:06:42.56347Z","last_seen":"2026-03-04T13:10:33.236815Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/_next/static/chunks/app/page-effa427e8d9ce610.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"624d4423e4349f3794bc16303c1a2dd2","sha1":"fa97ebf137b04abc2bd7daf04447826bdfc2c406","sha256":"f8f88d46853ada8e5db318f4d55ad1e1c2ba6ea36f6fbbe595456659f842a260","sha512":"026d4725e960b1cf5ca67b22ce9666408e9d58cd559b784a5f60d6bc853898cd453b4267da4b2e61d55c9e9fb0062b7d4b04ed915a4a844d919a76d0120bc524","ssdeep":"1536:jUN8L1qZAnIUtgShAcQkfemoIHrBZRo8tD1EvTdLk:jUqL1+35JI9n2dLk","tlshash":"55c3d56ca1056e6cf57b0ae47f9f911ca12e5f88de1b8868b1bcac0207440dc7b5bbd5","size":119904,"data":"","first_seen":"2026-03-04T13:06:42.555598Z","last_seen":"2026-03-04T13:10:33.214884Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/_next/static/chunks/258-2a634a91788a320a.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc72820d7ed7fe5ad4b3437cb77c942f","sha1":"c38520d57c6018142194af3f5a1e8a9c073cc18f","sha256":"a1b06f6ac31a261a06b1aadb08c1194bb874c9801ef4bfe18bfd379a7b14cfbe","sha512":"62483f1103b178e8d4aba876456095e841255c145334e7a83c3486731ac09c121b41854ad6779408961ed24dd703d5e56bc55bd497a04022fee7dbdba7dffc0b","ssdeep":"12288:jTIex62RDl+HRX+xEVSjceGu7fyn6bjdLY7hgijfK:XIex62RUOxYi7VbjdEs","tlshash":"73352ac573a1f066839751a9442f100af33de92d584d442cf394ecea7cb9999a2bbf34","size":1150852,"data":"","first_seen":"2026-03-04T13:06:42.564403Z","last_seen":"2026-03-04T13:10:33.239389Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"217a5ce281315ceb8408086d7c62604a","sha1":"24b2a4fecf0835c6d196ed46d76f39a640bf85c0","sha256":"2c8322c8f0097cef486059fb3e495271e14e7097fbd1c787787cbbe68cca5e1a","sha512":"7c84e4c82cf4c25c49afe9782985f45987578c1eae3ac5b8a7eda55ca26f25aef84157cd2480d324385ae96c6a96c162cdb4591c25194a410b326e9f04f76fa9","ssdeep":"","tlshash":"c211638f9124de44bca79c1202229e1aac69da3285f1eb59d33eba251231d7f3215146","size":952,"data":"","first_seen":"2026-03-04T13:06:42.565688Z","last_seen":"2026-03-04T13:10:33.238132Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6c3a63cf714f6d4cdf22512570e132bc","sha1":"1decd48d2b666b08044f817719021ef9b566c744","sha256":"36feb7381db0a9a87b6e9b362130daa6c92e9ab7d6bb5279da32019b7160e360","sha512":"c991fea73e617670bded9feb467f7b5370252b51869685bb00cf80e3df19fd13c59e6fa90e466960bcba6917a3f09a77ebca9c6e4ad2432580edaa8b0a8bfe07","ssdeep":"","tlshash":"f0019cc9f209ddc5b837981b13258d515cc8ef7c81e1da85a3abcb528133bfe254508b","size":710,"data":"","first_seen":"2026-03-04T13:06:42.566578Z","last_seen":"2026-03-04T13:10:33.240111Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d246ca4b78ad6c986a0be0f7efb24ba0","sha1":"2f4a9b6e2d47618493e32ac26fdb8e7ea89e5fdc","sha256":"fc31b5f6ebc5c2ddbf103702e9fadf61ca69c029931ebfbab7074a2ba8cd2f99","sha512":"dcd1ab21ee6b52a6bb6845f031cbf4fc1cd042a198dea913537499eec2b6ef563d4a0857258139664e270d599dda170c34d6b23098369d1be5ff2342ca146ef3","ssdeep":"96:L0WrlAHuhrMma5uoIZA59PSZC7cg1xqzc/xmWnphiPBA:xyH0a599mXgnqzcpmyZ","tlshash":"06a1fdf96405dd8aedde7c5912feac3750cd85ab46c2debcd2c8de1009874792782e81","size":4945,"data":"","first_seen":"2026-03-04T13:06:42.574569Z","last_seen":"2026-03-04T13:10:33.240907Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ebedd94e0a64462988e521f367279054","sha1":"725fd14f3a5d1f727dbafd4ebd933aef0606d1e3","sha256":"f0dc71197c62afda63635b60a1b11a9c5b89fe75b9b5f1ad2f12d62568ee37a0","sha512":"8e922703dcb7bb3985ef2eb60a901491e247ac4f5102968b9032e28102855b483ea174869e16ebb5e3722911d6fd42be2fc01fbeebbae0d02d51872a1a876a7f","ssdeep":"","tlshash":"98b0127ce011fed154b72072613af0c6325f908d19b4106011137188060821a2b03fc0","size":91,"data":"","first_seen":"2025-08-09T18:50:56.226754Z","last_seen":"2026-07-22T11:24:14.377569Z","times_seen":351,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"30378237d10c5ea86750f4d091f4ee7e","sha1":"dc88cd07e7e272780d7c11aa787b286bef7ed451","sha256":"0eca15739141b62173155a6b30b6fb93780acb41585fb7ccc1279fd977b29823","sha512":"32d555c30d58538f2b82138e63b61b7846f2d1f7f34ef28eccb512fe317e8ed9d253c454b321306f713e8e7e53785b195bbb7427804780154ae44a34d9e4fad3","ssdeep":"","tlshash":"38c0c0d0ec02cc1cc36a0f222c3b0c3921ccc56407054107dcd6ce3809c2b3009b0dca","size":185,"data":"","first_seen":"2025-08-09T18:50:56.227867Z","last_seen":"2026-07-21T21:31:44.652432Z","times_seen":1066,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/_next/static/chunks/38b01836-4c98766e7fce3ab7.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"db40dc0a48f89fdd387aa322cfeb376b","sha1":"04be1b8b06143a356f80ca5550559a6f99274fbc","sha256":"35fb6746bc93a09469f548de0d52d12441e1d3ddfbc49db47c42f2df9e986ad7","sha512":"16e67854e7cd8eef0f3e04b0985854d87adfc0e402d6e62e9757551f3e3c4c606a52ff5ecfeef9a9fad58f85221670b913ba2dce8e09c1e5d4e0cd3fd2a9e7dd","ssdeep":"1536:lWEkVLwewcbUMofbxnigvO05vEQEVWhR66S6DlxULvzx97KCeIVJ55xPPZSftbu4:8VLwXMotx1WoDELvW6HJSt","tlshash":"aef3f7ec3999e651aeb302a700df2803737c261b240d4d60a614fd9da5b845bb17bfde","size":172734,"data":"","first_seen":"2026-03-04T13:06:42.539832Z","last_seen":"2026-03-04T13:10:33.213248Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/_next/static/chunks/webpack-417957d0ae225844.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cecc4a2f35d44db1368168d538b58dd3","sha1":"1645774d01d1240393497bee5b484a52763e2261","sha256":"358df60197d9e3c025ac8146b9b4d66a9e8e66fd41d89608b82721bf9ed4cbc4","sha512":"f9cbbbec74b1580ae64fc44b0a296b26322765d30e56118abd1c40a8b4948e6f066d89fa2c85ba5b9e2d045e2c77d31cce6edf6ab5f7374851ec966cfe70d47e","ssdeep":"","tlshash":"4c81b6ba3665eab51af100c5583fc151fa28313b152be8b0a71bedb96434ed10562ff2","size":4091,"data":"","first_seen":"2026-03-04T13:06:42.558382Z","last_seen":"2026-03-04T13:10:33.207783Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/_next/static/chunks/9841b9e7-a1e9b80a1fc3799a.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"28638c65db22e1220e93174e93490501","sha1":"ed81267469e0d7a64454f5c8864276db4ec1dfdf","sha256":"10db91ea07f36cde40b81195824c727737eabb60c6af5bb575efbb05f2d1c6fe","sha512":"9fe5803c904003acd8f4c3f1e0c67258aa6bbca427a12bc55605457e254992a16e0a5f107eb09791fce05d0724cf886d897533c3c206ee1d4e595b5330f70bec","ssdeep":"3072:mbhXZujaVoPtiGGjIT4cS043D8WxbGpLsev6nseDok1IsJ0U6oXaQMGo:Iu/GjhfCNvmsKok1PjOQQ","tlshash":"1364f984f764b021835966a0052f904fe27ef91d6c4a44bcf658e8f57cbd8c9693af34","size":325452,"data":"","first_seen":"2026-03-04T13:06:42.540721Z","last_seen":"2026-03-04T13:10:33.220747Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/_next/static/chunks/b57beff9-6cc89c5ba2d555e7.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3297d23755db918c1962b2864e93694b","sha1":"5386fff5555f3562cbb764ea455655f3ff7a12b1","sha256":"6c0c95db0149b37a1b65b2f2d4f0fd369589510fd982086517bea92836e1d0d8","sha512":"1bb81dddaff05fabd110bb95dcfc5e31930bf96f805174c0dff3e0bfc6beb6ca4499a9fbd4e4c97aa80ab04fa7bc916ba8fd511d37bca1214ce1561ee7e537eb","ssdeep":"1536:Q0DW++OfXmYHvUmfrFilBAK3p1SK2+Kge0wss/46+QqaBZkW6ReYU86rdeVxoQ1k:oOvm8X6zSK/de0zswVeBeLNPa","tlshash":"78e3fbec3e92f651aeb211a7405f2813b3793a1b280d4560a111fd9eb47405eb1bff9e","size":145776,"data":"","first_seen":"2026-03-04T13:06:42.543823Z","last_seen":"2026-03-04T13:10:33.214089Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/_next/static/chunks/504.e420a53b11cda628.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a530e9b2461bbd229bf6a3d286c340d8","sha1":"b17d2bfaec611640f42e9f4fb5f4e05aab6b807b","sha256":"969f9e4e6842bbd2e64542198541afc216895977827f800a86a4094941ec9318","sha512":"ef0ef2fe350414f1e3f86979b6534e1a8b1ddf706ada4b841dd15e0cd423f21466f00b51d50e25e0d2d2279496d81ac28d9386321c8a597ca99a10be6751c60f","ssdeep":"3072:ZNemkZcOcFI4QezmKYNYswaIFmTXVZJzcjbg4r7sYJOQZT4s:84QeDYNTwhFOXV6sYoQZT4s","tlshash":"fcd34ce473b0f13da353426e853a0495f33d6808a92a846cf3dc96da54d2d95c5fbb38","size":136304,"data":"","first_seen":"2026-03-04T13:06:42.552969Z","last_seen":"2026-03-04T13:10:33.227144Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/_next/static/chunks/719-c619d5b2a7ddc3be.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb15524fd3e76e586cf96f4eecc30668","sha1":"54008c906f495a21e6ac94615b4eed3760a2c173","sha256":"5a083fa694af9ff1ef55826e82887c3f1e032cc70c5e2c7aee76fe144cd2bbb3","sha512":"6f93b22114282d194fad431ad8bdf7221d2f0e904654bd75a46b8f60249e4e06d6d72b6ccbb567e8c2e470ebbc49ea73cb4e05e77a6adc112214c9644d3659e4","ssdeep":"384:TNhCRBI+6RaZ/3IEgxExqpAyGDZvbuej85I0S9gQRuBVadTJSVyH3ifARqvpv9xu:CRBIhReIfxRpAyGJyagQRQyIh16z","tlshash":"d5f20ae43396717557cb014ea42e4101e238499de409403c7b959cfbe4afa86eaf7fb2","size":37466,"data":"","first_seen":"2026-03-04T13:06:42.56004Z","last_seen":"2026-03-04T13:10:33.23037Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"34c66c1c5dc8328037dc7ff1b53a9e5b","sha1":"5f413192124adc95c5aa01b33f5ed5b652b01a70","sha256":"7a8a3058de66d2d392cf7aab4843503a01e8c45abb92af5eea785a0be8ddbbdd","sha512":"5badbfa5926ad5becb2041d7779c351d9ea16e5b71b5420cfd68b81a22b068c933a0d587c78e3d8345390f585518a7ce39d19fc1e3307b9e4e8bf550767eb897","ssdeep":"","tlshash":"be900270e58a0c658432055254252c45439cd45d00885d9016e051cd1061999e545d49","size":55,"data":"","first_seen":"2026-03-04T13:06:42.576811Z","last_seen":"2026-03-04T13:10:33.242857Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"210435e17d4c4b5d5425a8c0270bd6c0","sha1":"2cd6938d655de7c944bda219fd2a962ea5342691","sha256":"e29638df45282c921f72b2ef40c5d9a95de27c5e45d5655e9f3396ab1aaf5c4f","sha512":"c8a4dd581f6f3c1050666a5caa600b9c76a1bcd62fe6a98274fb65e7b4c0339ffd0f5c295189fe395b79d39318f17cabf4f932bc0624555d77c7b55f2ec406de","ssdeep":"","tlshash":"f3519cb6ac1afd458bc95e181d7e7cb060ccc247465af60ff698dc2885d7a384ae0d62","size":3142,"data":"","first_seen":"2026-03-04T13:06:42.577682Z","last_seen":"2026-03-04T13:10:33.243596Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/_next/static/chunks/2-49f72eb05551bf30.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"55551890f6bae7962ff08d157363b96a","sha1":"6af59c3e7e7674c4e638357f16c2e7a6e12ce1b4","sha256":"6bec07bfd81ddc5c10e2dd98c253cf157d7ef1cdccde2d422e665ea67c11247d","sha512":"644e8edd589821bdb81420c84d0e8f5ad923276ec67c511939e6e857bc9082f3016185db1d50cd8be681bd2a754a79d9896363c827a1fa05ad0a0500a38d785c","ssdeep":"192:u0Mx8AiLMSVO7tZE2cW+pbfLkmYO/C0dwMcGWx:CxVQMzOdjKmwMcGWx","tlshash":"dd02b7e571e1f8a2835b1051443b100bf37e1db5641ea098e3a99cebf9b046ce1b3f69","size":8517,"data":"","first_seen":"2026-03-04T13:06:42.537543Z","last_seen":"2026-03-04T13:10:33.219249Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"dacfb4a810abbed008d0a3d74fdc3e9b","sha1":"3996c50fa34bc1d287566b7ad8d76979c980ab7b","sha256":"8ff0c9877b4e3aa0b79af940929496dd071b47df12b0104af8b3b0fb78bdfabc","sha512":"ee29bd34aafba27828ae6fa9aed1be1d6d005244731addd5940fcdb7cea9be12d34fac0c03767cea1da1ad82e525ca61d6640c105bbc798481b5813a78a47719","ssdeep":"","tlshash":"d59004f0d0400cd7443304131cfc7101555cd04c07510d401f51d4475c1115d7705dc5","size":46,"data":"","first_seen":"2025-08-09T18:50:56.231744Z","last_seen":"2026-07-23T06:31:46.807421Z","times_seen":1222,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/_next/static/chunks/9b9f665e-2356af4d45bb719a.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"aca5c26f977a1e1c2f3dc310f81209ee","sha1":"8a8b06f1bd4276578d324058298373665b2af6b9","sha256":"07b92840d5aa131d427a5274ea6599efc16d981d395b9597db3963971688ac45","sha512":"3b9025540ae35a78f4147e3a5c6a5d50cb5e084a5979acabdfc662e51df1128674af7ce90f75137e56f934836f441eddf8b6768d25f1b9a79ee5aa2a976bf477","ssdeep":"3072:p0PgCNTqvMZ5UdfRYVnO4jfHq/yPOiBk6eO0huuDoAgsa:pd/d5j4jfHqwVBk6v0huuDJgsa","tlshash":"0884f9e133617067879a81c748b60683f315749a2407982cbabcacdb7899dd671fef31","size":378305,"data":"","first_seen":"2026-03-04T13:06:42.541588Z","last_seen":"2026-03-04T13:10:33.223453Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/_next/static/chunks/0c89419b-1b0963181b3754b0.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"810c25a7ddd13ef4cfe0e4c6a7a6362b","sha1":"8dbb7e6216f8bc3533df432c95254ac1819bf694","sha256":"2fb3914837d147a4f69972f4dea06a42a400960e75e2f16aa8566dec7c5ee13a","sha512":"f77b0d0d6a11a6c26bb7872599f6d73facfcafb2e6c594ca937d027e3b8b76cf8d883874811f1453d31565580e3e473a2143c3ec644991d9a3e6672f6b12af12","ssdeep":"6144:ZXV2vCR7vpxD/0OwtnRmw+0briJ5gLOl7vFlYGM:F/nT0iJBNy","tlshash":"f4e4d54876c7f566468160f0163b640eb23e6b48d05c9645f368e4e37ef8eda832bb74","size":695060,"data":"","first_seen":"2026-03-04T13:06:42.550362Z","last_seen":"2026-03-04T13:10:33.225603Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"cbf89f93643bde77f1a42b20b7aa4b20","sha1":"0a149ced46b0df0a7106b46d2c013b787e24d389","sha256":"d797c2255ede2cfbcaf8829f073737154e2d44a574e9515dd10a02218835afd8","sha512":"9cb0a7f09706264d23a46d6e04d89824fe6cec6c4f0d7e8a2c72adaca8f587ce8b0e2ec2fc3210e4d7c25627cbcfae4af163fde9f31347492086b36111030177","ssdeep":"","tlshash":"ab9002a931c2e0009a533364505f18cc5074c47024854981845494a15c65024521a85c","size":47,"data":"","first_seen":"2023-04-12T06:31:27Z","last_seen":"2026-07-23T11:30:04.66031Z","times_seen":24702,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"2xornothing.click/_next/static/chunks/606-e54a9e08c17eb176.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2xornothing.click/","date":"2026-03-04T13:06:08.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2xornothing.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:03:16 GMT","end":"Wed, 27 May 2026 18:03:15 GMT"},"fingerprint":{"sha1":"64:4C:0B:C6:07:1D:1E:92:90:77:EF:F8:BF:C8:A4:DA:C0:82:28:2A","sha256":"D6:D2:5D:60:8E:1A:CA:F7:DD:F3:D3:5C:9A:56:F6:36:01:AA:63:BA:28:A8:74:D1:99:C4:D0:25:08:9D:19:BD"}}},"request":{"raw":"GET /_next/static/chunks/606-e54a9e08c17eb176.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk HTTP/1.1\r\nHost: 2xornothing.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2xornothing.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 14242\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"606-e54a9e08c17eb176.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 04 Mar 2026 13:06:08 GMT\r\netag: \"ce32b51299e59e0b5abb3a068b035008\"\r\nlast-modified: Wed, 04 Mar 2026 09:08:45 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/606-e54a9e08c17eb176.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wh2ml-1772629568497-860b536ac351\r\ncontent-length: 121798\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":370794,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"20f0ebf11204092729e992958832bdc4","sha1":"b5b6c7ae6acd4445516122980e9c3b6b9fc88e92","sha256":"0ec600258735a52f774cf42179ebb15db4e5b18c11f408e2faa42794eefc574c","sha512":"b01f9ce0be5ee23acb8aba0c2131c5bde35259fc8c3a3a81bc818282f31fa321eefacc77f6ba24a38371f8d59a403137112afa39ccd7b64a2bcd1aa5ea8f4d3e","ssdeep":"3072:x61QxHz9X8VJOdnr5Sl+Y8AbBN6dq3XJe/D8H4f4SL9cDEx9FDi8Y9aVIRk:18VJOdnNSl+Y8AtNVXi44f4NqrNfVIRk","tlshash":"2d743be5731170b5c7db8196d02f5205f33a6995240d402cb2b9ecfb2a65d88a2fbf39","first_seen":"2026-03-04T13:06:42.533044Z","last_seen":"2026-03-04T13:10:33.210161Z","times_seen":2,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/logo5.png","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2xornothing.click/","date":"2026-03-04T13:06:09.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2xornothing.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:03:16 GMT","end":"Wed, 27 May 2026 18:03:15 GMT"},"fingerprint":{"sha1":"64:4C:0B:C6:07:1D:1E:92:90:77:EF:F8:BF:C8:A4:DA:C0:82:28:2A","sha256":"D6:D2:5D:60:8E:1A:CA:F7:DD:F3:D3:5C:9A:56:F6:36:01:AA:63:BA:28:A8:74:D1:99:C4:D0:25:08:9D:19:BD"}}},"request":{"raw":"GET /logo5.png HTTP/1.1\r\nHost: 2xornothing.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2xornothing.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 57954\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo5.png\"\r\ncontent-type: image/png\r\ndate: Wed, 04 Mar 2026 13:06:09 GMT\r\netag: \"c7d97441d28ce10bc666fad92e7d7378\"\r\nlast-modified: Tue, 03 Mar 2026 21:00:15 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /logo5.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::4gchx-1772629569573-f4b83266a76d\r\ncontent-length: 664938\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":664938,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 843 x 470, 8-bit/color RGBA, non-interlaced","md5":"c7d97441d28ce10bc666fad92e7d7378","sha1":"e7fa48faa137b4416150d17432067403e8659d20","sha256":"665d5b5d0e069895c3224e9af34bb4d98ad91b499b0cff2f499e97c5c9ddb85f","sha512":"d130028d1f1cedd46aca5d32b74886daacb3c7cfcd59c9ff752e3ab80c057c3e9d6457fd77b945866577818102dace7c0d916809e9ef7f36a84daa44f9c5a8c3","ssdeep":"12288:2st/UTqKdiqn8sMhmAc7hB2TJUjHBI9pR07snhQbnt1d4VPvk:Xt/+qKcq4ad3I9p67YQoc","tlshash":"54e42306ea78e4928378480c649371c5623fcd82673d76e3d16377c47b6b2b46f2a752","first_seen":"2026-03-04T13:06:42.534067Z","last_seen":"2026-03-04T13:10:33.216528Z","times_seen":2,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/_next/static/media/f3f7e95f2dbc4fe4-s.p.woff2","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://2xornothing.click/","date":"2026-03-04T13:06:09.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2xornothing.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:03:16 GMT","end":"Wed, 27 May 2026 18:03:15 GMT"},"fingerprint":{"sha1":"64:4C:0B:C6:07:1D:1E:92:90:77:EF:F8:BF:C8:A4:DA:C0:82:28:2A","sha256":"D6:D2:5D:60:8E:1A:CA:F7:DD:F3:D3:5C:9A:56:F6:36:01:AA:63:BA:28:A8:74:D1:99:C4:D0:25:08:9D:19:BD"}}},"request":{"raw":"GET /_next/static/media/f3f7e95f2dbc4fe4-s.p.woff2 HTTP/1.1\r\nHost: 2xornothing.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2xornothing.click/_next/static/css/3d5ca47874e985b1.css?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 28488\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"f3f7e95f2dbc4fe4-s.p.woff2\"\r\ncontent-type: font/woff2\r\ndate: Wed, 04 Mar 2026 13:06:09 GMT\r\netag: \"26b4b6557e9db18aab82adad3e2df080\"\r\nlast-modified: Wed, 04 Mar 2026 05:11:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/f3f7e95f2dbc4fe4-s.p.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5hfsw-1772629569470-8b636606158b\r\ncontent-length: 33672\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33672,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33672, version 1.0","md5":"26b4b6557e9db18aab82adad3e2df080","sha1":"ba2647db89c7bf93c9914758482bbb4eed142699","sha256":"d2909123a6a8ed2f928055f002c32f63ee93496b470c1a344873f955111fca53","sha512":"43fad64ea8d0b21ef5229c289bf123e8371ca5454e9a59ee29371508735da77c839c6b575567f7f839d95232fd6ba745720b22e8460a41d3cc41678954a8f436","ssdeep":"768:gVZAf4ez56vS5WyeWdZrUFG+7eWpi2trpkDajgb:g4wezUaVxr6Gkeki4r8acb","tlshash":"36e2f15e545ceb73db7bbc30cd9843cd675eaa1a3d4900c4e7c1782a1b5443b282fa66","first_seen":"2025-09-14T23:58:13.457529Z","last_seen":"2026-07-23T05:53:15.245891Z","times_seen":998,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/_next/static/chunks/476-e8a171a86883d664.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2xornothing.click/","date":"2026-03-04T13:06:08.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2xornothing.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:03:16 GMT","end":"Wed, 27 May 2026 18:03:15 GMT"},"fingerprint":{"sha1":"64:4C:0B:C6:07:1D:1E:92:90:77:EF:F8:BF:C8:A4:DA:C0:82:28:2A","sha256":"D6:D2:5D:60:8E:1A:CA:F7:DD:F3:D3:5C:9A:56:F6:36:01:AA:63:BA:28:A8:74:D1:99:C4:D0:25:08:9D:19:BD"}}},"request":{"raw":"GET /_next/static/chunks/476-e8a171a86883d664.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk HTTP/1.1\r\nHost: 2xornothing.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2xornothing.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 14252\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"476-e8a171a86883d664.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 04 Mar 2026 13:06:08 GMT\r\netag: \"331c84240f88d53b20011831d1061b52\"\r\nlast-modified: Wed, 04 Mar 2026 09:08:35 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/476-e8a171a86883d664.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hhfn9-1772629568490-afba2d6df63f\r\ncontent-length: 44609\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":167184,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e139be6647396d7b909dff053eb9d304","sha1":"39f860d584e8afd845a21ba2842db1bef541518f","sha256":"b672865f453e58f4b312f6f8544288abb43c836dc102e4eb684b60b4206b0fe6","sha512":"105a8614573537a726d250badb5cf7ed829fb77535704342052c7186abc1211dcfe417b71792bf4d9ed199f05437c76a93cac74a2dd921af456f00e4b4175c40","ssdeep":"1536:YGxWI68y8ghX0FmF4rXoFIoV1zDH4ArKd303nuzyg/VZWXbrmiNZjclZxmMPKUXh:YV8ECFoVSS3nOv/qbrmiN+xSRa","tlshash":"23f3d8b676d0f8d107a780d5c43b400af3295c3a146f74a0a3e6cce975645dea1b3faa","first_seen":"2026-03-04T13:06:42.535719Z","last_seen":"2026-03-04T13:10:33.218558Z","times_seen":2,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/_next/static/chunks/main-app-2ce4d651f1e25a09.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2xornothing.click/","date":"2026-03-04T13:06:08.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2xornothing.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:03:16 GMT","end":"Wed, 27 May 2026 18:03:15 GMT"},"fingerprint":{"sha1":"64:4C:0B:C6:07:1D:1E:92:90:77:EF:F8:BF:C8:A4:DA:C0:82:28:2A","sha256":"D6:D2:5D:60:8E:1A:CA:F7:DD:F3:D3:5C:9A:56:F6:36:01:AA:63:BA:28:A8:74:D1:99:C4:D0:25:08:9D:19:BD"}}},"request":{"raw":"GET /_next/static/chunks/main-app-2ce4d651f1e25a09.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk HTTP/1.1\r\nHost: 2xornothing.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2xornothing.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 57953\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"main-app-2ce4d651f1e25a09.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 04 Mar 2026 13:06:08 GMT\r\netag: \"90779dbadf6f843d4bca6afb8f96fdb3\"\r\nlast-modified: Tue, 03 Mar 2026 21:00:15 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/main-app-2ce4d651f1e25a09.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::tcfhn-1772629568490-668931981919\r\ncontent-length: 570\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":570,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (570), with no line terminators","md5":"90779dbadf6f843d4bca6afb8f96fdb3","sha1":"df0fc1e104f8783848017788af5f61f57ff375be","sha256":"b093addcddf8b4bb775e3ccccce7aa29737360a6297f6c61b6e7d2017c64627d","sha512":"73ba0bcbd644ef1e11a1f75d41e6058a9cd09b9ca77cba23378f78ffe51f9b74fa912c56038336510419efc55cdda3b7b1f07edbd9f4f4b8f74c17044c649483","ssdeep":"","tlshash":"12f0515a4f0cf41f5c275d31fea36ce2241f4135201b4d607a00efa16c57bacd270419","first_seen":"2026-03-04T13:06:42.536517Z","last_seen":"2026-03-04T13:10:33.219984Z","times_seen":2,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/_next/static/chunks/2-49f72eb05551bf30.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2xornothing.click/","date":"2026-03-04T13:06:08.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2xornothing.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:03:16 GMT","end":"Wed, 27 May 2026 18:03:15 GMT"},"fingerprint":{"sha1":"64:4C:0B:C6:07:1D:1E:92:90:77:EF:F8:BF:C8:A4:DA:C0:82:28:2A","sha256":"D6:D2:5D:60:8E:1A:CA:F7:DD:F3:D3:5C:9A:56:F6:36:01:AA:63:BA:28:A8:74:D1:99:C4:D0:25:08:9D:19:BD"}}},"request":{"raw":"GET /_next/static/chunks/2-49f72eb05551bf30.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk HTTP/1.1\r\nHost: 2xornothing.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2xornothing.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 14242\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"2-49f72eb05551bf30.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 04 Mar 2026 13:06:08 GMT\r\netag: \"2c8c71bdc3cc9066f7a0117360108bd3\"\r\nlast-modified: Wed, 04 Mar 2026 09:08:45 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/2-49f72eb05551bf30.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wx7d9-1772629568504-e3cfd4ea7bae\r\ncontent-length: 3508\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8517,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8517), with no line terminators","md5":"55551890f6bae7962ff08d157363b96a","sha1":"6af59c3e7e7674c4e638357f16c2e7a6e12ce1b4","sha256":"6bec07bfd81ddc5c10e2dd98c253cf157d7ef1cdccde2d422e665ea67c11247d","sha512":"644e8edd589821bdb81420c84d0e8f5ad923276ec67c511939e6e857bc9082f3016185db1d50cd8be681bd2a754a79d9896363c827a1fa05ad0a0500a38d785c","ssdeep":"192:u0Mx8AiLMSVO7tZE2cW+pbfLkmYO/C0dwMcGWx:CxVQMzOdjKmwMcGWx","tlshash":"dd02b7e571e1f8a2835b1051443b100bf37e1db5641ea098e3a99cebf9b046ce1b3f69","first_seen":"2026-03-04T13:06:42.537543Z","last_seen":"2026-03-04T13:10:33.219249Z","times_seen":2,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/_next/static/media/f3f7e95f2dbc4fe4-s.p.woff2","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://2xornothing.click/","date":"2026-03-04T13:06:09.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2xornothing.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:03:16 GMT","end":"Wed, 27 May 2026 18:03:15 GMT"},"fingerprint":{"sha1":"64:4C:0B:C6:07:1D:1E:92:90:77:EF:F8:BF:C8:A4:DA:C0:82:28:2A","sha256":"D6:D2:5D:60:8E:1A:CA:F7:DD:F3:D3:5C:9A:56:F6:36:01:AA:63:BA:28:A8:74:D1:99:C4:D0:25:08:9D:19:BD"}}},"request":{"raw":"GET /_next/static/media/f3f7e95f2dbc4fe4-s.p.woff2 HTTP/1.1\r\nHost: 2xornothing.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2xornothing.click/_next/static/css/3d5ca47874e985b1.css?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 28488\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"f3f7e95f2dbc4fe4-s.p.woff2\"\r\ncontent-type: font/woff2\r\ndate: Wed, 04 Mar 2026 13:06:09 GMT\r\netag: \"26b4b6557e9db18aab82adad3e2df080\"\r\nlast-modified: Wed, 04 Mar 2026 05:11:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/f3f7e95f2dbc4fe4-s.p.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::lb6dv-1772629569444-bd83afb7f9b0\r\ncontent-length: 33672\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":33672,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33672, version 1.0","md5":"26b4b6557e9db18aab82adad3e2df080","sha1":"ba2647db89c7bf93c9914758482bbb4eed142699","sha256":"d2909123a6a8ed2f928055f002c32f63ee93496b470c1a344873f955111fca53","sha512":"43fad64ea8d0b21ef5229c289bf123e8371ca5454e9a59ee29371508735da77c839c6b575567f7f839d95232fd6ba745720b22e8460a41d3cc41678954a8f436","ssdeep":"768:gVZAf4ez56vS5WyeWdZrUFG+7eWpi2trpkDajgb:g4wezUaVxr6Gkeki4r8acb","tlshash":"36e2f15e545ceb73db7bbc30cd9843cd675eaa1a3d4900c4e7c1782a1b5443b282fa66","first_seen":"2025-09-14T23:58:13.457529Z","last_seen":"2026-07-23T05:53:15.245891Z","times_seen":998,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/sounds/spin.mp3","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://2xornothing.click/","date":"2026-03-04T13:06:09.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2xornothing.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:03:16 GMT","end":"Wed, 27 May 2026 18:03:15 GMT"},"fingerprint":{"sha1":"64:4C:0B:C6:07:1D:1E:92:90:77:EF:F8:BF:C8:A4:DA:C0:82:28:2A","sha256":"D6:D2:5D:60:8E:1A:CA:F7:DD:F3:D3:5C:9A:56:F6:36:01:AA:63:BA:28:A8:74:D1:99:C4:D0:25:08:9D:19:BD"}}},"request":{"raw":"GET /sounds/spin.mp3 HTTP/1.1\r\nHost: 2xornothing.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://2xornothing.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 246363\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"404\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 04 Mar 2026 13:06:09 GMT\r\netag: \"8fca3131dfab41aa9c3acbacf0530d02\"\r\nlast-modified: Sun, 01 Mar 2026 16:40:06 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /404\r\nx-next-error-status: 404\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vg6sg-1772629569792-fab8c89e661f\r\ncontent-length: 4094\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":16803,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (16803), with no line terminators","md5":"8fca3131dfab41aa9c3acbacf0530d02","sha1":"87d7711695a36bb903212fb8957bec4ad1f4c004","sha256":"9b70219c9950077d4b2fbfbcbd07a3bc9384f497e2694807862111e233aa71a3","sha512":"534e759ea13c81827645adee2cfe021fd4e9d7cff79bdd4d72a20ac5c48eba7aac8e472a5a90d2d1014a4017eb0ae57ef76e524594625eea7bb6978d4e71ce46","ssdeep":"384:xSgV9tkOJxIXPgvt/RXwyHSAHeXsz4haNDZk:xSgVHkOJyXPgXZHSAHe8z4haNDZk","tlshash":"e572c7eb9c04dd45aed62c2802bf7c3184ddc11746e5ee7de39edd0804a29be26d2c42","first_seen":"2026-03-04T13:06:42.538641Z","last_seen":"2026-03-04T13:10:33.215605Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/_next/static/chunks/38b01836-4c98766e7fce3ab7.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2xornothing.click/","date":"2026-03-04T13:06:08.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2xornothing.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:03:16 GMT","end":"Wed, 27 May 2026 18:03:15 GMT"},"fingerprint":{"sha1":"64:4C:0B:C6:07:1D:1E:92:90:77:EF:F8:BF:C8:A4:DA:C0:82:28:2A","sha256":"D6:D2:5D:60:8E:1A:CA:F7:DD:F3:D3:5C:9A:56:F6:36:01:AA:63:BA:28:A8:74:D1:99:C4:D0:25:08:9D:19:BD"}}},"request":{"raw":"GET /_next/static/chunks/38b01836-4c98766e7fce3ab7.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk HTTP/1.1\r\nHost: 2xornothing.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2xornothing.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 14253\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"38b01836-4c98766e7fce3ab7.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 04 Mar 2026 13:06:08 GMT\r\netag: \"a27f86ae9dffe490cece759984f158b1\"\r\nlast-modified: Wed, 04 Mar 2026 09:08:35 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/38b01836-4c98766e7fce3ab7.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::smj79-1772629568489-35e40c094b7e\r\ncontent-length: 55456\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":172734,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"db40dc0a48f89fdd387aa322cfeb376b","sha1":"04be1b8b06143a356f80ca5550559a6f99274fbc","sha256":"35fb6746bc93a09469f548de0d52d12441e1d3ddfbc49db47c42f2df9e986ad7","sha512":"16e67854e7cd8eef0f3e04b0985854d87adfc0e402d6e62e9757551f3e3c4c606a52ff5ecfeef9a9fad58f85221670b913ba2dce8e09c1e5d4e0cd3fd2a9e7dd","ssdeep":"1536:lWEkVLwewcbUMofbxnigvO05vEQEVWhR66S6DlxULvzx97KCeIVJ55xPPZSftbu4:8VLwXMotx1WoDELvW6HJSt","tlshash":"aef3f7ec3999e651aeb302a700df2803737c261b240d4d60a614fd9da5b845bb17bfde","first_seen":"2026-03-04T13:06:42.539832Z","last_seen":"2026-03-04T13:10:33.213248Z","times_seen":2,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/_next/static/chunks/9841b9e7-a1e9b80a1fc3799a.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2xornothing.click/","date":"2026-03-04T13:06:08.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2xornothing.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:03:16 GMT","end":"Wed, 27 May 2026 18:03:15 GMT"},"fingerprint":{"sha1":"64:4C:0B:C6:07:1D:1E:92:90:77:EF:F8:BF:C8:A4:DA:C0:82:28:2A","sha256":"D6:D2:5D:60:8E:1A:CA:F7:DD:F3:D3:5C:9A:56:F6:36:01:AA:63:BA:28:A8:74:D1:99:C4:D0:25:08:9D:19:BD"}}},"request":{"raw":"GET /_next/static/chunks/9841b9e7-a1e9b80a1fc3799a.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk HTTP/1.1\r\nHost: 2xornothing.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2xornothing.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 14252\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"9841b9e7-a1e9b80a1fc3799a.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 04 Mar 2026 13:06:08 GMT\r\netag: \"9e618194edd51c1615094782c75a87a2\"\r\nlast-modified: Wed, 04 Mar 2026 09:08:36 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/9841b9e7-a1e9b80a1fc3799a.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ml4xd-1772629568491-2b599071ca56\r\ncontent-length: 90783\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":325452,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"28638c65db22e1220e93174e93490501","sha1":"ed81267469e0d7a64454f5c8864276db4ec1dfdf","sha256":"10db91ea07f36cde40b81195824c727737eabb60c6af5bb575efbb05f2d1c6fe","sha512":"9fe5803c904003acd8f4c3f1e0c67258aa6bbca427a12bc55605457e254992a16e0a5f107eb09791fce05d0724cf886d897533c3c206ee1d4e595b5330f70bec","ssdeep":"3072:mbhXZujaVoPtiGGjIT4cS043D8WxbGpLsev6nseDok1IsJ0U6oXaQMGo:Iu/GjhfCNvmsKok1PjOQQ","tlshash":"1364f984f764b021835966a0052f904fe27ef91d6c4a44bcf658e8f57cbd8c9693af34","first_seen":"2026-03-04T13:06:42.540721Z","last_seen":"2026-03-04T13:10:33.220747Z","times_seen":2,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/_next/static/chunks/9b9f665e-2356af4d45bb719a.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2xornothing.click/","date":"2026-03-04T13:06:08.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2xornothing.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:03:16 GMT","end":"Wed, 27 May 2026 18:03:15 GMT"},"fingerprint":{"sha1":"64:4C:0B:C6:07:1D:1E:92:90:77:EF:F8:BF:C8:A4:DA:C0:82:28:2A","sha256":"D6:D2:5D:60:8E:1A:CA:F7:DD:F3:D3:5C:9A:56:F6:36:01:AA:63:BA:28:A8:74:D1:99:C4:D0:25:08:9D:19:BD"}}},"request":{"raw":"GET /_next/static/chunks/9b9f665e-2356af4d45bb719a.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk HTTP/1.1\r\nHost: 2xornothing.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2xornothing.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 57953\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"9b9f665e-2356af4d45bb719a.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 04 Mar 2026 13:06:08 GMT\r\netag: \"a2c6c0337eb12e23492cd3df8a164f4f\"\r\nlast-modified: Tue, 03 Mar 2026 21:00:15 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/9b9f665e-2356af4d45bb719a.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::drk5f-1772629568497-aecc4113bf6d\r\ncontent-length: 102259\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":378305,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"aca5c26f977a1e1c2f3dc310f81209ee","sha1":"8a8b06f1bd4276578d324058298373665b2af6b9","sha256":"07b92840d5aa131d427a5274ea6599efc16d981d395b9597db3963971688ac45","sha512":"3b9025540ae35a78f4147e3a5c6a5d50cb5e084a5979acabdfc662e51df1128674af7ce90f75137e56f934836f441eddf8b6768d25f1b9a79ee5aa2a976bf477","ssdeep":"3072:p0PgCNTqvMZ5UdfRYVnO4jfHq/yPOiBk6eO0huuDoAgsa:pd/d5j4jfHqwVBk6v0huuDJgsa","tlshash":"0884f9e133617067879a81c748b60683f315749a2407982cbabcacdb7899dd671fef31","first_seen":"2026-03-04T13:06:42.541588Z","last_seen":"2026-03-04T13:10:33.223453Z","times_seen":2,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/_next/static/media/e4af272ccee01ff0-s.p.woff2?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://2xornothing.click/","date":"2026-03-04T13:06:08.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2xornothing.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:03:16 GMT","end":"Wed, 27 May 2026 18:03:15 GMT"},"fingerprint":{"sha1":"64:4C:0B:C6:07:1D:1E:92:90:77:EF:F8:BF:C8:A4:DA:C0:82:28:2A","sha256":"D6:D2:5D:60:8E:1A:CA:F7:DD:F3:D3:5C:9A:56:F6:36:01:AA:63:BA:28:A8:74:D1:99:C4:D0:25:08:9D:19:BD"}}},"request":{"raw":"GET /_next/static/media/e4af272ccee01ff0-s.p.woff2?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk HTTP/1.1\r\nHost: 2xornothing.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://2xornothing.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 28487\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"e4af272ccee01ff0-s.p.woff2\"\r\ncontent-type: font/woff2\r\ndate: Wed, 04 Mar 2026 13:06:08 GMT\r\netag: \"65850a373e258f1c897a2b3d75eb74de\"\r\nlast-modified: Wed, 04 Mar 2026 05:11:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/e4af272ccee01ff0-s.p.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::d82xk-1772629568486-ae888d326a09\r\ncontent-length: 48432\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":48432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48432, version 1.0","md5":"65850a373e258f1c897a2b3d75eb74de","sha1":"1dc044f4824fd5af6bfed67fee48be70fa069f3f","sha256":"c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4","sha512":"df2683f3dd9724de589451a47bc608c9925d54b874ad97b733dd465ef41f9db75e9e31604762415c2fc1433d050e45fdefc6ecd7ecadf58d1243d9ca5f4bf74b","ssdeep":"768:3IkDHBYoX5Pi4JxTGz9CDR0s1ROSsA8mF77YNt7wFhVq9oN2WfpdqWjBA:tNYoX53xTl/R8W77YNtUFrWoUWvdA","tlshash":"56230251f5f8624a7fc3003fbc317bd862909fe5996ee5d91288f30225611dd29ee017","first_seen":"2025-05-30T12:57:00.85385Z","last_seen":"2026-07-23T11:30:04.507268Z","times_seen":80494,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/_next/static/css/742ef56af28be94b.css?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://2xornothing.click/","date":"2026-03-04T13:06:08.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2xornothing.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:03:16 GMT","end":"Wed, 27 May 2026 18:03:15 GMT"},"fingerprint":{"sha1":"64:4C:0B:C6:07:1D:1E:92:90:77:EF:F8:BF:C8:A4:DA:C0:82:28:2A","sha256":"D6:D2:5D:60:8E:1A:CA:F7:DD:F3:D3:5C:9A:56:F6:36:01:AA:63:BA:28:A8:74:D1:99:C4:D0:25:08:9D:19:BD"}}},"request":{"raw":"GET /_next/static/css/742ef56af28be94b.css?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk HTTP/1.1\r\nHost: 2xornothing.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2xornothing.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 14253\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"742ef56af28be94b.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Wed, 04 Mar 2026 13:06:08 GMT\r\netag: \"9946d4fb093923c7ec6ad2b0fd537eab\"\r\nlast-modified: Wed, 04 Mar 2026 09:08:35 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/css/742ef56af28be94b.css\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8g9jm-1772629568489-8ca7fbb42a54\r\ncontent-length: 22626\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":218013,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"99abaaad4003183a8143c246834831ec","sha1":"4f83a5e58d607a4d83e8bc8df4ad5918d2f0abbd","sha256":"2c314f8139d5da1691db526692b046d1c79e2302e2f235c0121f45dbbd547192","sha512":"2fa3627bde8b98462be00346ba76b0d13eca4177cdd10402d634e9d6d05e1df11a5e640fbb144efae5e00ead11b0d9585a54bf169775e2f45ffcd63006de2f3a","ssdeep":"3072:TAKEbllU4OAvvyT1xc96/UGad/ElCyNq6:hEbllU4OAvvyT1W6/F7CyNq6","tlshash":"fd249df4a4f0a077bc03f2e9d79cf41da91ae1aaac6a435db954910933f37f25856e00","first_seen":"2026-03-04T13:06:42.543013Z","last_seen":"2026-03-04T13:10:33.217435Z","times_seen":2,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/_next/static/chunks/b57beff9-6cc89c5ba2d555e7.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2xornothing.click/","date":"2026-03-04T13:06:08.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2xornothing.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:03:16 GMT","end":"Wed, 27 May 2026 18:03:15 GMT"},"fingerprint":{"sha1":"64:4C:0B:C6:07:1D:1E:92:90:77:EF:F8:BF:C8:A4:DA:C0:82:28:2A","sha256":"D6:D2:5D:60:8E:1A:CA:F7:DD:F3:D3:5C:9A:56:F6:36:01:AA:63:BA:28:A8:74:D1:99:C4:D0:25:08:9D:19:BD"}}},"request":{"raw":"GET /_next/static/chunks/b57beff9-6cc89c5ba2d555e7.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk HTTP/1.1\r\nHost: 2xornothing.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2xornothing.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 14242\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"b57beff9-6cc89c5ba2d555e7.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 04 Mar 2026 13:06:08 GMT\r\netag: \"beee9ee35d8ac6c08fb60c1ada0ec084\"\r\nlast-modified: Wed, 04 Mar 2026 09:08:45 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/b57beff9-6cc89c5ba2d555e7.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::lb6dv-1772629568497-cdb562acd943\r\ncontent-length: 47491\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":145776,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3297d23755db918c1962b2864e93694b","sha1":"5386fff5555f3562cbb764ea455655f3ff7a12b1","sha256":"6c0c95db0149b37a1b65b2f2d4f0fd369589510fd982086517bea92836e1d0d8","sha512":"1bb81dddaff05fabd110bb95dcfc5e31930bf96f805174c0dff3e0bfc6beb6ca4499a9fbd4e4c97aa80ab04fa7bc916ba8fd511d37bca1214ce1561ee7e537eb","ssdeep":"1536:Q0DW++OfXmYHvUmfrFilBAK3p1SK2+Kge0wss/46+QqaBZkW6ReYU86rdeVxoQ1k:oOvm8X6zSK/de0zswVeBeLNPa","tlshash":"78e3fbec3e92f651aeb211a7405f2813b3793a1b280d4560a111fd9eb47405eb1bff9e","first_seen":"2026-03-04T13:06:42.543823Z","last_seen":"2026-03-04T13:10:33.214089Z","times_seen":2,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/_next/image?url=%2Fback.png\u0026w=256\u0026q=75","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://2xornothing.click/","date":"2026-03-04T13:06:09.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2xornothing.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:03:16 GMT","end":"Wed, 27 May 2026 18:03:15 GMT"},"fingerprint":{"sha1":"64:4C:0B:C6:07:1D:1E:92:90:77:EF:F8:BF:C8:A4:DA:C0:82:28:2A","sha256":"D6:D2:5D:60:8E:1A:CA:F7:DD:F3:D3:5C:9A:56:F6:36:01:AA:63:BA:28:A8:74:D1:99:C4:D0:25:08:9D:19:BD"}}},"request":{"raw":"GET /_next/image?url=%2Fback.png\u0026w=256\u0026q=75 HTTP/1.1\r\nHost: 2xornothing.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2xornothing.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 2137937\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: attachment; filename=\"back.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Wed, 04 Mar 2026 13:06:09 GMT\r\nlast-modified: Sat, 07 Feb 2026 19:13:52 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: Accept\r\nx-matched-path: /back.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::z8kjk-1772629569551-810331dd4e16\r\ncontent-length: 28674\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":28674,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4847f56f914a6d3f108d3e8a100c4747","sha1":"0a477a1f5f234f7f4b33128d24bb8a2216b2f763","sha256":"cd8d645d114d786ab8c1920589c05d6cd5a543d04a0fbd1a68b5ad4c7fc42c07","sha512":"ecd0bf9740231e5ef26db0bcc42f2ce1b741966c3cd21d7233ebc32bb36e3014198b2e3bb5196628dd7dfc8d77dacee5a1ad1726a909f4a6ee38b312dc6f2aa7","ssdeep":"384:MGxCR7YjJBkckKWrBqvKRNSuA3ucBttSCwok7dTO1xPYCpcwpI2sA8uhKi6FQjS3:27Yj/kcfWK2NXcHxHkOgUcwpxYSjS3","tlshash":"cad2e1d1fdad0a46c479cd35a8d587d238cf0269a63009995383bdc6af38571bfa7880","first_seen":"2026-03-04T13:06:42.544891Z","last_seen":"2026-03-04T13:10:33.235497Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/3d7eb880-7654-431f-ed84-a25712b45200?projectId=eeef9866bdd8beb92afe277421573fab\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2xornothing.click/","date":"2026-03-04T13:06:09.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/3d7eb880-7654-431f-ed84-a25712b45200?projectId=eeef9866bdd8beb92afe277421573fab\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://2xornothing.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2xornothing.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 13:06:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2176\r\ncf-ray: 9d7118bae90d8a33-ARN\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfepCHWB1qkSi-cNd1o8wsvD9BfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=16+2 c=0+1 v=2025.8.5 l=2176 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2176,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7b91b6e5024dfdf6e8a4d61f0f74dd13","sha1":"1614f764ed7b516c7768fae0966abab152ac7d1b","sha256":"00e34844a07301274fc65fdbb65891aa95436b94c4c860d9edfcb96331c5487f","sha512":"c3948fdb40f0f4154fce632acb88cf9cf57ce39d2858e4934d8820c4d5729da238c569448b5bcb6d1780e37f005cb9f5ed60093005cfa451a92270c4c0034566","ssdeep":"","tlshash":"48413ab2c3378c72ce2cb5e3e9b2d5168b449a5a91859afc22413d33a4b145cc4b89e4","first_seen":"2025-01-28T05:59:32.007883Z","last_seen":"2026-07-23T09:43:56.891551Z","times_seen":3156,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/sounds/click.mp3","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://2xornothing.click/","date":"2026-03-04T13:06:09.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2xornothing.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:03:16 GMT","end":"Wed, 27 May 2026 18:03:15 GMT"},"fingerprint":{"sha1":"64:4C:0B:C6:07:1D:1E:92:90:77:EF:F8:BF:C8:A4:DA:C0:82:28:2A","sha256":"D6:D2:5D:60:8E:1A:CA:F7:DD:F3:D3:5C:9A:56:F6:36:01:AA:63:BA:28:A8:74:D1:99:C4:D0:25:08:9D:19:BD"}}},"request":{"raw":"GET /sounds/click.mp3 HTTP/1.1\r\nHost: 2xornothing.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://2xornothing.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 246363\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"404\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 04 Mar 2026 13:06:09 GMT\r\netag: \"8fca3131dfab41aa9c3acbacf0530d02\"\r\nlast-modified: Sun, 01 Mar 2026 16:40:06 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /404\r\nx-next-error-status: 404\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::tcfhn-1772629569813-09d457becf08\r\ncontent-length: 4094\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16803,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (16803), with no line terminators","md5":"8fca3131dfab41aa9c3acbacf0530d02","sha1":"87d7711695a36bb903212fb8957bec4ad1f4c004","sha256":"9b70219c9950077d4b2fbfbcbd07a3bc9384f497e2694807862111e233aa71a3","sha512":"534e759ea13c81827645adee2cfe021fd4e9d7cff79bdd4d72a20ac5c48eba7aac8e472a5a90d2d1014a4017eb0ae57ef76e524594625eea7bb6978d4e71ce46","ssdeep":"384:xSgV9tkOJxIXPgvt/RXwyHSAHeXsz4haNDZk:xSgVHkOJyXPgXZHSAHe8z4haNDZk","tlshash":"e572c7eb9c04dd45aed62c2802bf7c3184ddc11746e5ee7de39edd0804a29be26d2c42","first_seen":"2026-03-04T13:06:42.538641Z","last_seen":"2026-03-04T13:10:33.215605Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/_next/static/chunks/258-2a634a91788a320a.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2xornothing.click/","date":"2026-03-04T13:06:08.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2xornothing.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:03:16 GMT","end":"Wed, 27 May 2026 18:03:15 GMT"},"fingerprint":{"sha1":"64:4C:0B:C6:07:1D:1E:92:90:77:EF:F8:BF:C8:A4:DA:C0:82:28:2A","sha256":"D6:D2:5D:60:8E:1A:CA:F7:DD:F3:D3:5C:9A:56:F6:36:01:AA:63:BA:28:A8:74:D1:99:C4:D0:25:08:9D:19:BD"}}},"request":{"raw":"GET /_next/static/chunks/258-2a634a91788a320a.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk HTTP/1.1\r\nHost: 2xornothing.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2xornothing.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 14251\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"258-2a634a91788a320a.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 04 Mar 2026 13:06:08 GMT\r\netag: \"eb6ad2ac4dd65dbf9f2edcf6cb0d4ac3\"\r\nlast-modified: Wed, 04 Mar 2026 09:08:37 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/258-2a634a91788a320a.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qhd49-1772629568496-0a34077fbf4d\r\ncontent-length: 347616\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1150852,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"eb806125a352c0e4cfdedebb8b4286a1","sha1":"08cfbc23fd8e74db9cafbe45c75ae0ec0818472b","sha256":"c6b53dae67649445ca6c6020a5a6d1ab578bccf3b4bf8cdd79879c4266b75b04","sha512":"1ec6e01163710b0098e25495730796ae4237100e8f74e974dc2adfa0687c5b41d137efa2b3f26a8244b539ad5920142efea9f7816e193f9c9214046f5f0689dc","ssdeep":"12288:jTIex62RDl+HRX+xEVSjceGu7fyn6bjdLY7hgi7:XIex62RUOxYi7VbjdER","tlshash":"e1253bc57761f026839751a5442f100af33de92d584d442cf3a4ecfab8b9999a2bbf34","first_seen":"2026-03-04T13:06:42.546273Z","last_seen":"2026-03-04T13:10:33.221679Z","times_seen":2,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/_next/static/chunks/app/layout-709862f869ee1869.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2xornothing.click/","date":"2026-03-04T13:06:08.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2xornothing.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:03:16 GMT","end":"Wed, 27 May 2026 18:03:15 GMT"},"fingerprint":{"sha1":"64:4C:0B:C6:07:1D:1E:92:90:77:EF:F8:BF:C8:A4:DA:C0:82:28:2A","sha256":"D6:D2:5D:60:8E:1A:CA:F7:DD:F3:D3:5C:9A:56:F6:36:01:AA:63:BA:28:A8:74:D1:99:C4:D0:25:08:9D:19:BD"}}},"request":{"raw":"GET /_next/static/chunks/app/layout-709862f869ee1869.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk HTTP/1.1\r\nHost: 2xornothing.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2xornothing.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 14251\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"layout-709862f869ee1869.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 04 Mar 2026 13:06:08 GMT\r\netag: \"1111f1f77f836d7d46a9dd9514250bba\"\r\nlast-modified: Wed, 04 Mar 2026 09:08:37 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/app/layout-709862f869ee1869.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5hfsw-1772629568497-640f9da91f82\r\ncontent-length: 4245\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":10001,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10001), with no line terminators","md5":"5e7df9de0fff3a684af6acbdd33df075","sha1":"5e7048d9ca48a219c1222c56dcda99f069e3b556","sha256":"ed267267b02a235d8698081afa01dee57ea1b0f91db4d0bf4e1c54818ec1ba6b","sha512":"af87308460daf61423668e1e159bfd3ff6b5f96cebedd05953c314892dae065fb2c27dba580e58215939730948f3696c28eb8e6818de8b428217602e8cb4bc1b","ssdeep":"192:4R7aVvy4/11o/woqg4QWNitEruWpPq9lqzHw0lCo+MKoInjIw2UMCFkHWDX7ir6:Ct4/11oornuD90LAjmUm2DX7i2","tlshash":"a7223a74ba617a790b83046ecd2a0d26d23f1b0d790ec0a6b296dca157d4dc46cf2fd9","first_seen":"2026-03-04T13:06:42.547042Z","last_seen":"2026-03-04T13:10:33.209211Z","times_seen":2,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getAllListings?projectId=eeef9866bdd8beb92afe277421573fab\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0\u0026recommendedIds=4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2C38f5d18bd8522c244bdd70cb4a68e0e718865155811c043f052fb9f1c51de662%2C8a0ee50d1f22f6651afcae7eb4253e52a3310b90af5daef78a8c4929a9bb99d4","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://2xornothing.click/","date":"2026-03-04T13:06:09.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getAllListings?projectId=eeef9866bdd8beb92afe277421573fab\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0\u0026recommendedIds=4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2C38f5d18bd8522c244bdd70cb4a68e0e718865155811c043f052fb9f1c51de662%2C8a0ee50d1f22f6651afcae7eb4253e52a3310b90af5daef78a8c4929a9bb99d4 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://2xornothing.click/\r\nOrigin: https://2xornothing.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 13:06:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d7118b8cc618a33-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2645,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f842454d9ee29bd08ac7cb1160caeb06","sha1":"e4ef88672c6db32d39a035f06262b856b5c6ad64","sha256":"c5df316ba3147872be2892768f4180c36660305e101673d3077cf9c072b2f85d","sha512":"88d138e487e913dfb86157614ead9d11b173539e308792683af1ea65e4e370390d174e399509033c54e0ff712975968b5b8ef51a456cbe8886fc0ba025270a9e","ssdeep":"","tlshash":"fb51e1b7db804f2e1b1543c9201e3bac951e550fdac09dfaf1808f2d80f9eba2645d66","first_seen":"2026-03-04T13:06:42.547917Z","last_seen":"2026-03-04T13:10:33.227901Z","times_seen":2,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":43,"dns":17,"connect":8,"send":0,"wait":55,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/_next/static/chunks/38.17f30a51179ec0f0.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2xornothing.click/","date":"2026-03-04T13:06:09.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2xornothing.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:03:16 GMT","end":"Wed, 27 May 2026 18:03:15 GMT"},"fingerprint":{"sha1":"64:4C:0B:C6:07:1D:1E:92:90:77:EF:F8:BF:C8:A4:DA:C0:82:28:2A","sha256":"D6:D2:5D:60:8E:1A:CA:F7:DD:F3:D3:5C:9A:56:F6:36:01:AA:63:BA:28:A8:74:D1:99:C4:D0:25:08:9D:19:BD"}}},"request":{"raw":"GET /_next/static/chunks/38.17f30a51179ec0f0.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk HTTP/1.1\r\nHost: 2xornothing.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2xornothing.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 14242\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"38.17f30a51179ec0f0.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 04 Mar 2026 13:06:09 GMT\r\netag: \"61afb032bf196cf2559c50810852ff98\"\r\nlast-modified: Wed, 04 Mar 2026 09:08:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/38.17f30a51179ec0f0.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::x9fw8-1772629569395-e3f8906d4a46\r\ncontent-length: 6217\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":13445,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13445), with no line terminators","md5":"cdec8537eb19010e0d0b42fb5a332d23","sha1":"ad6235e90aedd5f8eec680f60ef74014e75260af","sha256":"284a8a73d377985ef268323099c212c8fc643e95325a12c5e364804c72285239","sha512":"60a64c36bcb572e26e2156413b99b6c9f351b74e2df47eb94e1fe659a4766b93f603305c50110141565adece80a28b95ed65df8d784d7c0b6d081285cb9bdefc","ssdeep":"384:x02+56korFpT3kLIAbjW9MgG9y7K1jZk8AAM:8QHpT0LIA5gI5AAM","tlshash":"5552a505a386de9cf53b45e89b5e502c602e5b94da0f4c78f5bcbc3166004d97b57b8c","first_seen":"2026-03-04T13:06:42.548693Z","last_seen":"2026-03-04T13:10:33.234731Z","times_seen":2,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/_next/image?url=%2Ffront.png\u0026w=256\u0026q=75","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://2xornothing.click/","date":"2026-03-04T13:06:09.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2xornothing.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:03:16 GMT","end":"Wed, 27 May 2026 18:03:15 GMT"},"fingerprint":{"sha1":"64:4C:0B:C6:07:1D:1E:92:90:77:EF:F8:BF:C8:A4:DA:C0:82:28:2A","sha256":"D6:D2:5D:60:8E:1A:CA:F7:DD:F3:D3:5C:9A:56:F6:36:01:AA:63:BA:28:A8:74:D1:99:C4:D0:25:08:9D:19:BD"}}},"request":{"raw":"GET /_next/image?url=%2Ffront.png\u0026w=256\u0026q=75 HTTP/1.1\r\nHost: 2xornothing.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2xornothing.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 2137937\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: attachment; filename=\"front.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Wed, 04 Mar 2026 13:06:09 GMT\r\nlast-modified: Sat, 07 Feb 2026 19:13:51 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: Accept\r\nx-matched-path: /front.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8g9jm-1772629569549-9e692d754318\r\ncontent-length: 28502\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":28502,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"95bf83d0485eee87b7316df18d32c794","sha1":"19634d409924faf4408d3b338bcf16fe6a72554c","sha256":"7291314d6869666e1f1f5b2d9d62830cf93982ef227f3e0c0e5fd6f9f376c09e","sha512":"21417a66af38cdadc596840716359967d42289fece4a4db07f78b5fdfcabfe3ff594419f5b48998428f461f28258a7a8ab816fe5a44464c774833d87f5c683cd","ssdeep":"768:IUQbivWXEvjWaCwhj77eJmpPJO8nX1r0HoUan56fRwFm:IUQbXXErWaVhjv/nX1r0HocSFm","tlshash":"add2e03adca849c08943ddb273f885ffe14ccc659e71822d673c187ab1464e58b3d995","first_seen":"2026-03-04T13:06:42.54957Z","last_seen":"2026-03-04T13:10:33.233142Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/_next/static/chunks/0c89419b-1b0963181b3754b0.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2xornothing.click/","date":"2026-03-04T13:06:08.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2xornothing.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:03:16 GMT","end":"Wed, 27 May 2026 18:03:15 GMT"},"fingerprint":{"sha1":"64:4C:0B:C6:07:1D:1E:92:90:77:EF:F8:BF:C8:A4:DA:C0:82:28:2A","sha256":"D6:D2:5D:60:8E:1A:CA:F7:DD:F3:D3:5C:9A:56:F6:36:01:AA:63:BA:28:A8:74:D1:99:C4:D0:25:08:9D:19:BD"}}},"request":{"raw":"GET /_next/static/chunks/0c89419b-1b0963181b3754b0.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk HTTP/1.1\r\nHost: 2xornothing.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2xornothing.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 57953\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0c89419b-1b0963181b3754b0.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 04 Mar 2026 13:06:08 GMT\r\netag: \"2d06a791ae88dd9f7909de2abe797fb6\"\r\nlast-modified: Tue, 03 Mar 2026 21:00:15 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0c89419b-1b0963181b3754b0.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5n5v4-1772629568490-ce58617fd0b1\r\ncontent-length: 160917\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":695060,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"810c25a7ddd13ef4cfe0e4c6a7a6362b","sha1":"8dbb7e6216f8bc3533df432c95254ac1819bf694","sha256":"2fb3914837d147a4f69972f4dea06a42a400960e75e2f16aa8566dec7c5ee13a","sha512":"f77b0d0d6a11a6c26bb7872599f6d73facfcafb2e6c594ca937d027e3b8b76cf8d883874811f1453d31565580e3e473a2143c3ec644991d9a3e6672f6b12af12","ssdeep":"6144:ZXV2vCR7vpxD/0OwtnRmw+0briJ5gLOl7vFlYGM:F/nT0iJBNy","tlshash":"f4e4d54876c7f566468160f0163b640eb23e6b48d05c9645f368e4e37ef8eda832bb74","first_seen":"2026-03-04T13:06:42.550362Z","last_seen":"2026-03-04T13:10:33.225603Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/_next/static/chunks/5ffeb132-1c32ed5e7dcbbcfd.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2xornothing.click/","date":"2026-03-04T13:06:08.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2xornothing.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:03:16 GMT","end":"Wed, 27 May 2026 18:03:15 GMT"},"fingerprint":{"sha1":"64:4C:0B:C6:07:1D:1E:92:90:77:EF:F8:BF:C8:A4:DA:C0:82:28:2A","sha256":"D6:D2:5D:60:8E:1A:CA:F7:DD:F3:D3:5C:9A:56:F6:36:01:AA:63:BA:28:A8:74:D1:99:C4:D0:25:08:9D:19:BD"}}},"request":{"raw":"GET /_next/static/chunks/5ffeb132-1c32ed5e7dcbbcfd.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk HTTP/1.1\r\nHost: 2xornothing.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2xornothing.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 14251\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"5ffeb132-1c32ed5e7dcbbcfd.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 04 Mar 2026 13:06:08 GMT\r\netag: \"5cdc9a84260a5f6622c8d927e4e6f9d6\"\r\nlast-modified: Wed, 04 Mar 2026 09:08:36 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/5ffeb132-1c32ed5e7dcbbcfd.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::tcfhn-1772629568496-ff3de3e8d3ef\r\ncontent-length: 62304\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":169494,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6f8534b73353579ddf5d265c6c6acdce","sha1":"0d93c516a68ac08ae88209587759e06a8f38efd8","sha256":"0a6ee5ec3397e96bd56460d4d467df0d85b4891f5141fa61f46aa26186eebdbf","sha512":"ea6e68c003568cdf4a39e53176d27f22ac2a39e7ff942d856c2a0c4810afb0958c76650b4ac52c8d50b0496ab96cfcb11e446e676e1ec11a9b4c50f4be3613e4","ssdeep":"3072:wGmJ/YcYMg6kemb2eElzX9bz80t6g1yFO+OkUusk+CZzTT0YvGsgVjMcywgM:wGmJ/YcYMg6kemb2NXFO8kbsk+CWYvGR","tlshash":"77f32950b374b062c75925a0142b604be27efe2c688b046cf658ecf67cf8985657bf35","first_seen":"2026-03-04T13:06:42.551219Z","last_seen":"2026-03-04T13:10:33.226286Z","times_seen":2,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/_next/static/chunks/9d3ce21c-81794ec107d8981b.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2xornothing.click/","date":"2026-03-04T13:06:08.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2xornothing.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:03:16 GMT","end":"Wed, 27 May 2026 18:03:15 GMT"},"fingerprint":{"sha1":"64:4C:0B:C6:07:1D:1E:92:90:77:EF:F8:BF:C8:A4:DA:C0:82:28:2A","sha256":"D6:D2:5D:60:8E:1A:CA:F7:DD:F3:D3:5C:9A:56:F6:36:01:AA:63:BA:28:A8:74:D1:99:C4:D0:25:08:9D:19:BD"}}},"request":{"raw":"GET /_next/static/chunks/9d3ce21c-81794ec107d8981b.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk HTTP/1.1\r\nHost: 2xornothing.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2xornothing.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 14243\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"9d3ce21c-81794ec107d8981b.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 04 Mar 2026 13:06:08 GMT\r\netag: \"65b78b84cd572ba1fd4bde450e9b48e8\"\r\nlast-modified: Wed, 04 Mar 2026 09:08:45 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/9d3ce21c-81794ec107d8981b.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::tqmkh-1772629568497-020549de49a7\r\ncontent-length: 82003\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":333335,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"98a84dacc763628dfba1ffd2f6ca66c7","sha1":"ff5e77d936516d4fd89f94189e3fedcc712876e3","sha256":"c3402bbad7c767288c31974f721da697356b759124fa6b243fc1e48847dc4487","sha512":"bc7998a51c1eb52257385f21766670ded8209a33a1d310aa5e846f9ff1e7bf973f2a82ee8e4634b01dd15d16ce8e7fb4ddbb3ee1a052d82749f96cefe3055bda","ssdeep":"6144:xqm3EaTLCd3aSUzW00212o2VaeBZXRxp4SFxaCyEM2H+CjEy5bZ83gTuH0zZ1:wm8qSUzWZxaCyEM2H+cJbZIgTG0zZ1","tlshash":"2f644b757978a0035d0774aba4bd0846117df8d77808c2f8b90c61abb0f1598b6e7fea","first_seen":"2026-03-04T13:06:42.552072Z","last_seen":"2026-03-04T13:10:33.222698Z","times_seen":2,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/apple-touch-icon.png","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2xornothing.click/","date":"2026-03-04T13:06:08.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2xornothing.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:03:16 GMT","end":"Wed, 27 May 2026 18:03:15 GMT"},"fingerprint":{"sha1":"64:4C:0B:C6:07:1D:1E:92:90:77:EF:F8:BF:C8:A4:DA:C0:82:28:2A","sha256":"D6:D2:5D:60:8E:1A:CA:F7:DD:F3:D3:5C:9A:56:F6:36:01:AA:63:BA:28:A8:74:D1:99:C4:D0:25:08:9D:19:BD"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: 2xornothing.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2xornothing.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 246362\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"404\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 04 Mar 2026 13:06:08 GMT\r\netag: \"8fca3131dfab41aa9c3acbacf0530d02\"\r\nlast-modified: Sun, 01 Mar 2026 16:40:06 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /404\r\nx-next-error-status: 404\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::g9t29-1772629568767-ce9a6bb2e3fd\r\ncontent-length: 4094\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16803,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (16803), with no line terminators","md5":"8fca3131dfab41aa9c3acbacf0530d02","sha1":"87d7711695a36bb903212fb8957bec4ad1f4c004","sha256":"9b70219c9950077d4b2fbfbcbd07a3bc9384f497e2694807862111e233aa71a3","sha512":"534e759ea13c81827645adee2cfe021fd4e9d7cff79bdd4d72a20ac5c48eba7aac8e472a5a90d2d1014a4017eb0ae57ef76e524594625eea7bb6978d4e71ce46","ssdeep":"384:xSgV9tkOJxIXPgvt/RXwyHSAHeXsz4haNDZk:xSgVHkOJyXPgXZHSAHe8z4haNDZk","tlshash":"e572c7eb9c04dd45aed62c2802bf7c3184ddc11746e5ee7de39edd0804a29be26d2c42","first_seen":"2026-03-04T13:06:42.538641Z","last_seen":"2026-03-04T13:10:33.215605Z","times_seen":2,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/_next/static/chunks/504.e420a53b11cda628.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2xornothing.click/","date":"2026-03-04T13:06:09.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2xornothing.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:03:16 GMT","end":"Wed, 27 May 2026 18:03:15 GMT"},"fingerprint":{"sha1":"64:4C:0B:C6:07:1D:1E:92:90:77:EF:F8:BF:C8:A4:DA:C0:82:28:2A","sha256":"D6:D2:5D:60:8E:1A:CA:F7:DD:F3:D3:5C:9A:56:F6:36:01:AA:63:BA:28:A8:74:D1:99:C4:D0:25:08:9D:19:BD"}}},"request":{"raw":"GET /_next/static/chunks/504.e420a53b11cda628.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk HTTP/1.1\r\nHost: 2xornothing.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2xornothing.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 14242\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"504.e420a53b11cda628.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 04 Mar 2026 13:06:09 GMT\r\netag: \"bfd4aa77071c2bfdba7c2d3834a13fe8\"\r\nlast-modified: Wed, 04 Mar 2026 09:08:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/504.e420a53b11cda628.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ppfpw-1772629569102-8e420bfef8b6\r\ncontent-length: 43889\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":136304,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (38864)","md5":"a530e9b2461bbd229bf6a3d286c340d8","sha1":"b17d2bfaec611640f42e9f4fb5f4e05aab6b807b","sha256":"969f9e4e6842bbd2e64542198541afc216895977827f800a86a4094941ec9318","sha512":"ef0ef2fe350414f1e3f86979b6534e1a8b1ddf706ada4b841dd15e0cd423f21466f00b51d50e25e0d2d2279496d81ac28d9386321c8a597ca99a10be6751c60f","ssdeep":"3072:ZNemkZcOcFI4QezmKYNYswaIFmTXVZJzcjbg4r7sYJOQZT4s:84QeDYNTwhFOXV6sYoQZT4s","tlshash":"fcd34ce473b0f13da353426e853a0495f33d6808a92a846cf3dc96da54d2d95c5fbb38","first_seen":"2026-03-04T13:06:42.552969Z","last_seen":"2026-03-04T13:10:33.227144Z","times_seen":2,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/_next/image?url=%2Flogo5.png\u0026w=256\u0026q=75","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://2xornothing.click/","date":"2026-03-04T13:06:09.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2xornothing.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:03:16 GMT","end":"Wed, 27 May 2026 18:03:15 GMT"},"fingerprint":{"sha1":"64:4C:0B:C6:07:1D:1E:92:90:77:EF:F8:BF:C8:A4:DA:C0:82:28:2A","sha256":"D6:D2:5D:60:8E:1A:CA:F7:DD:F3:D3:5C:9A:56:F6:36:01:AA:63:BA:28:A8:74:D1:99:C4:D0:25:08:9D:19:BD"}}},"request":{"raw":"GET /_next/image?url=%2Flogo5.png\u0026w=256\u0026q=75 HTTP/1.1\r\nHost: 2xornothing.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2xornothing.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 2137937\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: attachment; filename=\"logo5.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Wed, 04 Mar 2026 13:06:09 GMT\r\nlast-modified: Sat, 07 Feb 2026 19:13:51 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: Accept\r\nx-matched-path: /logo5.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qhd49-1772629569443-9088d4d389ec\r\ncontent-length: 15928\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":15928,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4567120201367f2e6204766627c3a699","sha1":"1401e9143ff154a2a5e2e42377fed2d10ca4df1c","sha256":"1b255bc3c8621099e51bd8fbc5e7fd555b3266344c9e1e4185a00eca0fb16884","sha512":"fa39b5fe9f28b535146c845274f4e6b275d2c83f5f7e39c14dc922d73999668542c1f98a77af9b0ed6d2eca2df33ddea842c7dc7183dcd309cbc3f69434fb99a","ssdeep":"384:fZusUd3qImLJ2crtm565UB9hfBscuMtfaS4lpMtzavE6zJHj8:fZusU8vJds56e99RtZoczWEU4","tlshash":"b762d09ff064d60da07a05f5598edf86d01af95844c0a92ef7961ececbe85aece29100","first_seen":"2026-03-04T13:06:42.553852Z","last_seen":"2026-03-04T13:10:33.228749Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/3386dde1-8b24-48c8-4b81-16979e342000?projectId=eeef9866bdd8beb92afe277421573fab\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2xornothing.click/","date":"2026-03-04T13:06:09.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/3386dde1-8b24-48c8-4b81-16979e342000?projectId=eeef9866bdd8beb92afe277421573fab\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://2xornothing.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2xornothing.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 13:06:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1688\r\ncf-ray: 9d7118bad8fb8a33-ARN\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfEA-Bw7H9k1gZltgcL-Suew9FfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=690+4 c=0+4 v=2024.10.6 l=1688 f=false\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1688,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2bffc4df749e3b8f1d0890df22f4bc77","sha1":"ec3033a449dcff239808409c5d96d388a661ea37","sha256":"c7cc404018e711a83cdb04a08a5c5a12f54d1612b3d3cef12a0b7721fccd4465","sha512":"0ef53d6b15c58647ec9f81e562dbda560cd9f6287abf9d07b5e791db37b97879aa57c86637f7213ff127d4d10e4b8528ffc5368e085d8179d18524a4d506a649","ssdeep":"","tlshash":"cb311a52b99510c943825527eff4cd41971398270f3c61734161247349694b22df02d4","first_seen":"2025-01-28T05:59:32.01912Z","last_seen":"2026-06-06T21:30:11.571202Z","times_seen":1649,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":437,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/sounds/lose.mp3","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://2xornothing.click/","date":"2026-03-04T13:06:09.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2xornothing.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:03:16 GMT","end":"Wed, 27 May 2026 18:03:15 GMT"},"fingerprint":{"sha1":"64:4C:0B:C6:07:1D:1E:92:90:77:EF:F8:BF:C8:A4:DA:C0:82:28:2A","sha256":"D6:D2:5D:60:8E:1A:CA:F7:DD:F3:D3:5C:9A:56:F6:36:01:AA:63:BA:28:A8:74:D1:99:C4:D0:25:08:9D:19:BD"}}},"request":{"raw":"GET /sounds/lose.mp3 HTTP/1.1\r\nHost: 2xornothing.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://2xornothing.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 246363\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"404\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 04 Mar 2026 13:06:09 GMT\r\netag: \"8fca3131dfab41aa9c3acbacf0530d02\"\r\nlast-modified: Sun, 01 Mar 2026 16:40:06 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /404\r\nx-next-error-status: 404\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::kh4hn-1772629569747-c9c6c4d2b151\r\ncontent-length: 4094\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":16803,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (16803), with no line terminators","md5":"8fca3131dfab41aa9c3acbacf0530d02","sha1":"87d7711695a36bb903212fb8957bec4ad1f4c004","sha256":"9b70219c9950077d4b2fbfbcbd07a3bc9384f497e2694807862111e233aa71a3","sha512":"534e759ea13c81827645adee2cfe021fd4e9d7cff79bdd4d72a20ac5c48eba7aac8e472a5a90d2d1014a4017eb0ae57ef76e524594625eea7bb6978d4e71ce46","ssdeep":"384:xSgV9tkOJxIXPgvt/RXwyHSAHeXsz4haNDZk:xSgVHkOJyXPgXZHSAHe8z4haNDZk","tlshash":"e572c7eb9c04dd45aed62c2802bf7c3184ddc11746e5ee7de39edd0804a29be26d2c42","first_seen":"2026-03-04T13:06:42.538641Z","last_seen":"2026-03-04T13:10:33.215605Z","times_seen":2,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/_next/static/chunks/app/page-effa427e8d9ce610.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2xornothing.click/","date":"2026-03-04T13:06:08.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2xornothing.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:03:16 GMT","end":"Wed, 27 May 2026 18:03:15 GMT"},"fingerprint":{"sha1":"64:4C:0B:C6:07:1D:1E:92:90:77:EF:F8:BF:C8:A4:DA:C0:82:28:2A","sha256":"D6:D2:5D:60:8E:1A:CA:F7:DD:F3:D3:5C:9A:56:F6:36:01:AA:63:BA:28:A8:74:D1:99:C4:D0:25:08:9D:19:BD"}}},"request":{"raw":"GET /_next/static/chunks/app/page-effa427e8d9ce610.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk HTTP/1.1\r\nHost: 2xornothing.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2xornothing.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 14242\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"page-effa427e8d9ce610.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 04 Mar 2026 13:06:08 GMT\r\netag: \"4f8a4f5721a89b23aeabf8b434bbb9dd\"\r\nlast-modified: Wed, 04 Mar 2026 09:08:45 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/app/page-effa427e8d9ce610.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ppfpw-1772629568499-e296e5994e32\r\ncontent-length: 29587\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":119904,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators","md5":"624d4423e4349f3794bc16303c1a2dd2","sha1":"fa97ebf137b04abc2bd7daf04447826bdfc2c406","sha256":"f8f88d46853ada8e5db318f4d55ad1e1c2ba6ea36f6fbbe595456659f842a260","sha512":"026d4725e960b1cf5ca67b22ce9666408e9d58cd559b784a5f60d6bc853898cd453b4267da4b2e61d55c9e9fb0062b7d4b04ed915a4a844d919a76d0120bc524","ssdeep":"1536:jUN8L1qZAnIUtgShAcQkfemoIHrBZRo8tD1EvTdLk:jUqL1+35JI9n2dLk","tlshash":"55c3d56ca1056e6cf57b0ae47f9f911ca12e5f88de1b8868b1bcac0207440dc7b5bbd5","first_seen":"2026-03-04T13:06:42.555598Z","last_seen":"2026-03-04T13:10:33.214884Z","times_seen":2,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/logo5.png","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2xornothing.click/","date":"2026-03-04T13:06:09.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2xornothing.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:03:16 GMT","end":"Wed, 27 May 2026 18:03:15 GMT"},"fingerprint":{"sha1":"64:4C:0B:C6:07:1D:1E:92:90:77:EF:F8:BF:C8:A4:DA:C0:82:28:2A","sha256":"D6:D2:5D:60:8E:1A:CA:F7:DD:F3:D3:5C:9A:56:F6:36:01:AA:63:BA:28:A8:74:D1:99:C4:D0:25:08:9D:19:BD"}}},"request":{"raw":"GET /logo5.png HTTP/1.1\r\nHost: 2xornothing.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2xornothing.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 57954\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo5.png\"\r\ncontent-type: image/png\r\ndate: Wed, 04 Mar 2026 13:06:09 GMT\r\netag: \"c7d97441d28ce10bc666fad92e7d7378\"\r\nlast-modified: Tue, 03 Mar 2026 21:00:15 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /logo5.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::d82xk-1772629569390-dd489f702491\r\ncontent-length: 664938\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":655360,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 843 x 470, 8-bit/color RGBA, non-interlaced","md5":"ceb6c1c000537f588070e2e04967ded8","sha1":"649e043f204269005155aeddb071ca33cc925f2c","sha256":"e716e26c9b35c120403a3b18906f36a5057bfd0f0a17ec47979f1dff301bbfd8","sha512":"b54eb4244a1fd3e22ea6f8115fea4c6c27c46c21e5fc443ffc74a4fd553eae3dcfc005d3df15f38fe03f68ea7959943842a1073f4b4f9d997961986df3b387be","ssdeep":"12288:2st/UTqKdiqn8sMhmAc7hB2TJUjHBI9pR07snhQbnt1d4VPW:Xt/+qKcq4ad3I9p67YQoW","tlshash":"3bd42316da78e8928378580c609371c5623fcd82633d77e3d163b7c46b6b2a47f1a762","first_seen":"2026-03-04T13:06:42.556429Z","last_seen":"2026-03-04T13:06:42.556429Z","times_seen":1,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":16,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-04T13:06:08.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2xornothing.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:03:16 GMT","end":"Wed, 27 May 2026 18:03:15 GMT"},"fingerprint":{"sha1":"64:4C:0B:C6:07:1D:1E:92:90:77:EF:F8:BF:C8:A4:DA:C0:82:28:2A","sha256":"D6:D2:5D:60:8E:1A:CA:F7:DD:F3:D3:5C:9A:56:F6:36:01:AA:63:BA:28:A8:74:D1:99:C4:D0:25:08:9D:19:BD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 2xornothing.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 246620\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 04 Mar 2026 13:06:08 GMT\r\netag: W/\"3b615f404abc13a3e7562396d67241f1\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch\r\nx-matched-path: /\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::kh4hn-1772629568247-f2d392d8eb21\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":18192,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (18192), with no line terminators","md5":"8b4cac75cb368c91655036dc40bda8a6","sha1":"7de9deeec4901470832c433fffa5a0205868f2fd","sha256":"bb34557f714145b191fdbe9c4c354abdf656daaceed2a38db26926833f03d730","sha512":"dc7a5340154cec66940fcb832dc8636d526b09e2cab5b5c54e2018b850657e4e867acc67c7aec2b31331f4d95e4ba3784a98aec44230b0c2d84641192157e203","ssdeep":"384:xSgV9tkOJxALXPgvt/qzzXwyHH9bWHeXsz4haNDZf:xSgVHkOJGXPgu5HHYHe8z4haNDZf","tlshash":"5c82c7ebdc04dd44add76c25027b7c2588ddc11785f5ee6de3aeed1801a2abf2682c42","first_seen":"2026-03-04T13:06:42.557395Z","last_seen":"2026-03-04T13:10:33.224191Z","times_seen":2,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":99,"dns":68,"connect":1,"send":0,"wait":11,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/_next/static/chunks/webpack-417957d0ae225844.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2xornothing.click/","date":"2026-03-04T13:06:08.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2xornothing.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:03:16 GMT","end":"Wed, 27 May 2026 18:03:15 GMT"},"fingerprint":{"sha1":"64:4C:0B:C6:07:1D:1E:92:90:77:EF:F8:BF:C8:A4:DA:C0:82:28:2A","sha256":"D6:D2:5D:60:8E:1A:CA:F7:DD:F3:D3:5C:9A:56:F6:36:01:AA:63:BA:28:A8:74:D1:99:C4:D0:25:08:9D:19:BD"}}},"request":{"raw":"GET /_next/static/chunks/webpack-417957d0ae225844.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk HTTP/1.1\r\nHost: 2xornothing.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2xornothing.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 28444\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"webpack-417957d0ae225844.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 04 Mar 2026 13:06:08 GMT\r\netag: \"51618114c8c47fdb07bb9d80cced2399\"\r\nlast-modified: Wed, 04 Mar 2026 05:12:04 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/webpack-417957d0ae225844.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::lxdpf-1772629568489-b5cdea3fc9c6\r\ncontent-length: 2166\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":4091,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3652)","md5":"cecc4a2f35d44db1368168d538b58dd3","sha1":"1645774d01d1240393497bee5b484a52763e2261","sha256":"358df60197d9e3c025ac8146b9b4d66a9e8e66fd41d89608b82721bf9ed4cbc4","sha512":"f9cbbbec74b1580ae64fc44b0a296b26322765d30e56118abd1c40a8b4948e6f066d89fa2c85ba5b9e2d045e2c77d31cce6edf6ab5f7374851ec966cfe70d47e","ssdeep":"","tlshash":"4c81b6ba3665eab51af100c5583fc151fa28313b152be8b0a71bedb96434ed10562ff2","first_seen":"2026-03-04T13:06:42.558382Z","last_seen":"2026-03-04T13:10:33.207783Z","times_seen":2,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/_next/static/media/f3f7e95f2dbc4fe4-s.p.woff2?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://2xornothing.click/","date":"2026-03-04T13:06:08.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2xornothing.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:03:16 GMT","end":"Wed, 27 May 2026 18:03:15 GMT"},"fingerprint":{"sha1":"64:4C:0B:C6:07:1D:1E:92:90:77:EF:F8:BF:C8:A4:DA:C0:82:28:2A","sha256":"D6:D2:5D:60:8E:1A:CA:F7:DD:F3:D3:5C:9A:56:F6:36:01:AA:63:BA:28:A8:74:D1:99:C4:D0:25:08:9D:19:BD"}}},"request":{"raw":"GET /_next/static/media/f3f7e95f2dbc4fe4-s.p.woff2?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk HTTP/1.1\r\nHost: 2xornothing.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://2xornothing.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 28487\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"f3f7e95f2dbc4fe4-s.p.woff2\"\r\ncontent-type: font/woff2\r\ndate: Wed, 04 Mar 2026 13:06:08 GMT\r\netag: \"26b4b6557e9db18aab82adad3e2df080\"\r\nlast-modified: Wed, 04 Mar 2026 05:11:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/f3f7e95f2dbc4fe4-s.p.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::4hkzq-1772629568487-f3a4ecdbc85e\r\ncontent-length: 33672\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33672,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33672, version 1.0","md5":"26b4b6557e9db18aab82adad3e2df080","sha1":"ba2647db89c7bf93c9914758482bbb4eed142699","sha256":"d2909123a6a8ed2f928055f002c32f63ee93496b470c1a344873f955111fca53","sha512":"43fad64ea8d0b21ef5229c289bf123e8371ca5454e9a59ee29371508735da77c839c6b575567f7f839d95232fd6ba745720b22e8460a41d3cc41678954a8f436","ssdeep":"768:gVZAf4ez56vS5WyeWdZrUFG+7eWpi2trpkDajgb:g4wezUaVxr6Gkeki4r8acb","tlshash":"36e2f15e545ceb73db7bbc30cd9843cd675eaa1a3d4900c4e7c1782a1b5443b282fa66","first_seen":"2025-09-14T23:58:13.457529Z","last_seen":"2026-07-23T05:53:15.245891Z","times_seen":998,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/_next/static/css/3d5ca47874e985b1.css?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://2xornothing.click/","date":"2026-03-04T13:06:08.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2xornothing.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:03:16 GMT","end":"Wed, 27 May 2026 18:03:15 GMT"},"fingerprint":{"sha1":"64:4C:0B:C6:07:1D:1E:92:90:77:EF:F8:BF:C8:A4:DA:C0:82:28:2A","sha256":"D6:D2:5D:60:8E:1A:CA:F7:DD:F3:D3:5C:9A:56:F6:36:01:AA:63:BA:28:A8:74:D1:99:C4:D0:25:08:9D:19:BD"}}},"request":{"raw":"GET /_next/static/css/3d5ca47874e985b1.css?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk HTTP/1.1\r\nHost: 2xornothing.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2xornothing.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 28487\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"3d5ca47874e985b1.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Wed, 04 Mar 2026 13:06:08 GMT\r\netag: \"a660e5fcaef6ff01877e5d95d970a23b\"\r\nlast-modified: Wed, 04 Mar 2026 05:11:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/css/3d5ca47874e985b1.css\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::gxnf9-1772629568487-fe84a3503dbd\r\ncontent-length: 971\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":22146,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (22146), with no line terminators","md5":"76e2d918511ff981870b03f87fb5573a","sha1":"b811c3950b17c8e1da1ceb20185aa44ec82d0c68","sha256":"989309bfcd7f078c661a04c0e09f0af7f412ebc716c1760fcc6f341456e80ab7","sha512":"420b83f08b669aadd26bad588919de8475d161ae7110054c1bf3de6619a0d7866ffff9e95528e42e6af24d3a5da4517ac0c58557b1e4309af49b10b3f1d13a14","ssdeep":"384:mvwo9wjXw+5wBvwsNwnXwkFUG4rY3hwVvwR4iAeAK5U9Z:mvwo9wjXw+5wBvwsNwnXwCxwVvwR4iAh","tlshash":"6ba26b20842f884ed572fc9235c97f13287d142565d44a26ee2d89aaceefc3773a1f58","first_seen":"2026-03-04T13:06:42.559235Z","last_seen":"2026-03-04T13:10:33.212417Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/_next/static/chunks/719-c619d5b2a7ddc3be.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2xornothing.click/","date":"2026-03-04T13:06:08.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2xornothing.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:03:16 GMT","end":"Wed, 27 May 2026 18:03:15 GMT"},"fingerprint":{"sha1":"64:4C:0B:C6:07:1D:1E:92:90:77:EF:F8:BF:C8:A4:DA:C0:82:28:2A","sha256":"D6:D2:5D:60:8E:1A:CA:F7:DD:F3:D3:5C:9A:56:F6:36:01:AA:63:BA:28:A8:74:D1:99:C4:D0:25:08:9D:19:BD"}}},"request":{"raw":"GET /_next/static/chunks/719-c619d5b2a7ddc3be.js?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk HTTP/1.1\r\nHost: 2xornothing.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2xornothing.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 28435\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"719-c619d5b2a7ddc3be.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 04 Mar 2026 13:06:08 GMT\r\netag: \"e23fb69410cb9e12a31b9e24b7224a44\"\r\nlast-modified: Wed, 04 Mar 2026 05:12:12 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/719-c619d5b2a7ddc3be.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::kh4hn-1772629568497-ec6c67e84659\r\ncontent-length: 12889\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37466,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (37466), with no line terminators","md5":"eb15524fd3e76e586cf96f4eecc30668","sha1":"54008c906f495a21e6ac94615b4eed3760a2c173","sha256":"5a083fa694af9ff1ef55826e82887c3f1e032cc70c5e2c7aee76fe144cd2bbb3","sha512":"6f93b22114282d194fad431ad8bdf7221d2f0e904654bd75a46b8f60249e4e06d6d72b6ccbb567e8c2e470ebbc49ea73cb4e05e77a6adc112214c9644d3659e4","ssdeep":"384:TNhCRBI+6RaZ/3IEgxExqpAyGDZvbuej85I0S9gQRuBVadTJSVyH3ifARqvpv9xu:CRBIhReIfxRpAyGJyagQRQyIh16z","tlshash":"d5f20ae43396717557cb014ea42e4101e238499de409403c7b959cfbe4afa86eaf7fb2","first_seen":"2026-03-04T13:06:42.56004Z","last_seen":"2026-03-04T13:10:33.23037Z","times_seen":2,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/_next/static/media/f3f7e95f2dbc4fe4-s.p.woff2","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://2xornothing.click/","date":"2026-03-04T13:06:09.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2xornothing.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:03:16 GMT","end":"Wed, 27 May 2026 18:03:15 GMT"},"fingerprint":{"sha1":"64:4C:0B:C6:07:1D:1E:92:90:77:EF:F8:BF:C8:A4:DA:C0:82:28:2A","sha256":"D6:D2:5D:60:8E:1A:CA:F7:DD:F3:D3:5C:9A:56:F6:36:01:AA:63:BA:28:A8:74:D1:99:C4:D0:25:08:9D:19:BD"}}},"request":{"raw":"GET /_next/static/media/f3f7e95f2dbc4fe4-s.p.woff2 HTTP/1.1\r\nHost: 2xornothing.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2xornothing.click/_next/static/css/3d5ca47874e985b1.css?dpl=dpl_FotSEBBcD4DtF7KFVUjZ3eaZeGbk\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 28488\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"f3f7e95f2dbc4fe4-s.p.woff2\"\r\ncontent-type: font/woff2\r\ndate: Wed, 04 Mar 2026 13:06:09 GMT\r\netag: \"26b4b6557e9db18aab82adad3e2df080\"\r\nlast-modified: Wed, 04 Mar 2026 05:11:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/f3f7e95f2dbc4fe4-s.p.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8g9jm-1772629569470-b031f1aa97d3\r\ncontent-length: 33672\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":33672,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33672, version 1.0","md5":"26b4b6557e9db18aab82adad3e2df080","sha1":"ba2647db89c7bf93c9914758482bbb4eed142699","sha256":"d2909123a6a8ed2f928055f002c32f63ee93496b470c1a344873f955111fca53","sha512":"43fad64ea8d0b21ef5229c289bf123e8371ca5454e9a59ee29371508735da77c839c6b575567f7f839d95232fd6ba745720b22e8460a41d3cc41678954a8f436","ssdeep":"768:gVZAf4ez56vS5WyeWdZrUFG+7eWpi2trpkDajgb:g4wezUaVxr6Gkeki4r8acb","tlshash":"36e2f15e545ceb73db7bbc30cd9843cd675eaa1a3d4900c4e7c1782a1b5443b282fa66","first_seen":"2025-09-14T23:58:13.457529Z","last_seen":"2026-07-23T05:53:15.245891Z","times_seen":998,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/favicon.svg","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2xornothing.click/","date":"2026-03-04T13:06:08.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2xornothing.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:03:16 GMT","end":"Wed, 27 May 2026 18:03:15 GMT"},"fingerprint":{"sha1":"64:4C:0B:C6:07:1D:1E:92:90:77:EF:F8:BF:C8:A4:DA:C0:82:28:2A","sha256":"D6:D2:5D:60:8E:1A:CA:F7:DD:F3:D3:5C:9A:56:F6:36:01:AA:63:BA:28:A8:74:D1:99:C4:D0:25:08:9D:19:BD"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: 2xornothing.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2xornothing.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 246362\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"404\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 04 Mar 2026 13:06:08 GMT\r\netag: \"8fca3131dfab41aa9c3acbacf0530d02\"\r\nlast-modified: Sun, 01 Mar 2026 16:40:06 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /404\r\nx-next-error-status: 404\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::lvrs2-1772629568769-9520de160dd3\r\ncontent-length: 4094\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":16803,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (16803), with no line terminators","md5":"8fca3131dfab41aa9c3acbacf0530d02","sha1":"87d7711695a36bb903212fb8957bec4ad1f4c004","sha256":"9b70219c9950077d4b2fbfbcbd07a3bc9384f497e2694807862111e233aa71a3","sha512":"534e759ea13c81827645adee2cfe021fd4e9d7cff79bdd4d72a20ac5c48eba7aac8e472a5a90d2d1014a4017eb0ae57ef76e524594625eea7bb6978d4e71ce46","ssdeep":"384:xSgV9tkOJxIXPgvt/RXwyHSAHeXsz4haNDZk:xSgVHkOJyXPgXZHSAHe8z4haNDZk","tlshash":"e572c7eb9c04dd45aed62c2802bf7c3184ddc11746e5ee7de39edd0804a29be26d2c42","first_seen":"2026-03-04T13:06:42.538641Z","last_seen":"2026-03-04T13:10:33.215605Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/sounds/win.mp3","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://2xornothing.click/","date":"2026-03-04T13:06:09.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2xornothing.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:03:16 GMT","end":"Wed, 27 May 2026 18:03:15 GMT"},"fingerprint":{"sha1":"64:4C:0B:C6:07:1D:1E:92:90:77:EF:F8:BF:C8:A4:DA:C0:82:28:2A","sha256":"D6:D2:5D:60:8E:1A:CA:F7:DD:F3:D3:5C:9A:56:F6:36:01:AA:63:BA:28:A8:74:D1:99:C4:D0:25:08:9D:19:BD"}}},"request":{"raw":"GET /sounds/win.mp3 HTTP/1.1\r\nHost: 2xornothing.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://2xornothing.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 246362\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"404\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 04 Mar 2026 13:06:09 GMT\r\netag: \"8fca3131dfab41aa9c3acbacf0530d02\"\r\nlast-modified: Sun, 01 Mar 2026 16:40:06 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /404\r\nx-next-error-status: 404\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::72p6w-1772629569115-f337ec959803\r\ncontent-length: 4094\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16803,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (16803), with no line terminators","md5":"8fca3131dfab41aa9c3acbacf0530d02","sha1":"87d7711695a36bb903212fb8957bec4ad1f4c004","sha256":"9b70219c9950077d4b2fbfbcbd07a3bc9384f497e2694807862111e233aa71a3","sha512":"534e759ea13c81827645adee2cfe021fd4e9d7cff79bdd4d72a20ac5c48eba7aac8e472a5a90d2d1014a4017eb0ae57ef76e524594625eea7bb6978d4e71ce46","ssdeep":"384:xSgV9tkOJxIXPgvt/RXwyHSAHeXsz4haNDZk:xSgVHkOJyXPgXZHSAHe8z4haNDZk","tlshash":"e572c7eb9c04dd45aed62c2802bf7c3184ddc11746e5ee7de39edd0804a29be26d2c42","first_seen":"2026-03-04T13:06:42.538641Z","last_seen":"2026-03-04T13:10:33.215605Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/f6ff957e-7e74-4f43-a3ae-a643bf18a200?projectId=eeef9866bdd8beb92afe277421573fab\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2xornothing.click/","date":"2026-03-04T13:06:09.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/f6ff957e-7e74-4f43-a3ae-a643bf18a200?projectId=eeef9866bdd8beb92afe277421573fab\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://2xornothing.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2xornothing.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 13:06:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1522\r\ncf-ray: 9d7118bad9008a33-ARN\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfWO9thvxtxbg41N-thM9s_bmtfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=1006+5 c=0+5 v=2025.5.2 l=1522 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1522,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6290547a33ac9e9a3cdb7bd693dcfd1c","sha1":"356980fdb86b10c322aed1433f60a3a245e1c48f","sha256":"3d61d02171ec648d5303c71c4513b00df31217fda260e3bf346a91c46034fe4a","sha512":"9a8f3ad6e70e620e7df4f040d16918f33d7eee380843d973576e2c72d61bc1e158f9884d5cfd114fd57c686567b9604def778253197f9933c416b60aedfa823a","ssdeep":"","tlshash":"bf31da5c201518d81d96c1069c241600d7766bba973bba6b7132f27ac24e8ad4cd504d","first_seen":"2025-05-26T15:14:19.567265Z","last_seen":"2026-07-10T00:17:59.079863Z","times_seen":353,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":426,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2xornothing.click/spinning3.mp3","fqdn":"2xornothing.click","domain":"2xornothing.click","tld":"click"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://2xornothing.click/","date":"2026-03-04T13:06:09.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2xornothing.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:03:16 GMT","end":"Wed, 27 May 2026 18:03:15 GMT"},"fingerprint":{"sha1":"64:4C:0B:C6:07:1D:1E:92:90:77:EF:F8:BF:C8:A4:DA:C0:82:28:2A","sha256":"D6:D2:5D:60:8E:1A:CA:F7:DD:F3:D3:5C:9A:56:F6:36:01:AA:63:BA:28:A8:74:D1:99:C4:D0:25:08:9D:19:BD"}}},"request":{"raw":"GET /spinning3.mp3 HTTP/1.1\r\nHost: 2xornothing.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://2xornothing.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 14242\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"spinning3.mp3\"\r\ncontent-type: audio/mpeg\r\ndate: Wed, 04 Mar 2026 13:06:09 GMT\r\netag: \"a0f8cadce897ac5b1cb7a57ba0bfa718\"\r\nlast-modified: Wed, 04 Mar 2026 09:08:47 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /spinning3.mp3\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vg6sg-1772629569835-bdf882b11b9e\r\ncontent-length: 53825\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53825,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"a0f8cadce897ac5b1cb7a57ba0bfa718","sha1":"e86036871a387e964e413d79e45dff30ddb52970","sha256":"11cd393cd97abdc1621b20c56640c95e1ac1f8288c23e79dbb270d5c5c0ce68e","sha512":"698c82e3bdb3d5ebd6662d171cebab712b1d461404964c2888cdf390eac0da8723dd53112e66ad3be7a5ef1f48090561a09b3a2475a4c2e552807c661a16766d","ssdeep":"768:OgLW0XgWdhu7wqIT77kQCGaiD6B7j6gLcfOHK9eA9FaRMGyddJSryWlbCbTciucS:OOQWdhuk7h27OI+kXyddXeWYZZBuKHTd","tlshash":"5733f1600758590df27c853172ae4484edb2aed8b26337b649c5770875bb9a13b63c62","first_seen":"2026-03-04T13:06:42.561971Z","last_seen":"2026-03-04T13:10:33.232457Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"2xornothing.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}