{"report_id":"20d7b12b-a5a4-482f-8a31-174071e8143d","version":6,"status":"done","tags":[],"date":"2026-02-27T07:14:58Z","url":{"schema":"http","addr":"xeraxium.icu","fqdn":"xeraxium.icu","domain":"xeraxium.icu","tld":"icu"},"ip":{"addr":"172.67.188.64","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"xeraxium.live/form/subscribe.php","fqdn":"xeraxium.live","domain":"xeraxium.live","tld":"live"},"title":"xeraxium.live/form/subscribe.php","dom":{"size":124,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"2aa4b41ac61853fc9396b181cd104998","sha1":"7298a08a19a7adfeb27c73f3f1b590045578ff8e","sha256":"eb5b8b1e56316bc9be2664e154ca5aad0223703319191dd9eaffaca516528542","sha512":"c4ec0f433391492bc45e9fd33f67b7fcfd368a31d889257d6bf506a9107df2e3b713adc1375e0384e735a7ad23f0896951c6b8670031d54f5fbbda3366a1b3b4","ssdeep":"","tlshash":"94b092bb6509191bf6247ac6ed822218a9845008e02b4c25b78115a8c1d525d849aa95","dom_hash":"domhashc1fec9cafeadbac0b33c1409ff211c3f","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"xeraxium.icu","fqdn":"xeraxium.icu","domain":"xeraxium.icu","tld":"icu"},"ip":{"addr":"172.67.188.64","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-03T07:14:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":4}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-27T07:14:36Z","timestamp":1772176476,"ip_dst":{"addr":"104.21.48.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":36496,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2026-02-27T07:14:36.940170+0000\",\"flow_id\":1405885676793683,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.50\",\"src_port\":36496,\"dest_ip\":\"104.21.48.228\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"xeraxium.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":914,\"bytes_toclient\":3501,\"start\":\"2026-02-27T07:14:36.929619+0000\"}}"}],"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"xeraxium.live","ip":{"addr":"104.21.79.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-27T06:51:50.804138Z","last_seen":"2026-02-27T06:51:50.804138Z","alert_count":104,"request_count":26,"received_data":2604957,"sent_data":11767,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"xeraxium.icu","ip":{"addr":"104.21.48.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-14","domain_rank":0,"first_seen":"2026-02-27T06:51:50.802563Z","last_seen":"2026-02-27T06:51:50.802563Z","alert_count":0,"request_count":1,"received_data":819,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"xeraxium.live/assets/js/charts.js?ver=210","fqdn":"xeraxium.live","domain":"xeraxium.live","tld":"live"},"ip":{"addr":"104.21.79.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7681ce6d2ac5f66c334f23d4d3931722","sha1":"27961232a61d99f260b8f6201c164a9bf02b3702","sha256":"30e3d76a13a6338d5420768e0fa931f0e3dd19f00ed8de7e6dd7ebeda53c1412","sha512":"ec6cd0654339aafc736ef87f49c019ad7804d3a43c3f544404fc8cd4af9a3101b77b184435bd6e68f80e6266b683c8db87e25ffaa46c615965839455583db306","ssdeep":"192:kQSFZQmeFZQmrn6Ialv/TM+gMCmyAMMF/R:kQWQNQq6Ia9MmXF/R","tlshash":"96721d1af45295279473732d97ab4a30d7727a5381058b2abd3c8b301fbd817e2b1f86","size":15983,"data":"","first_seen":"2025-04-15T04:16:14.427303Z","last_seen":"2026-03-18T11:44:32.254395Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xeraxium.live/assets/js/jquery.bundle.js?ver=210","fqdn":"xeraxium.live","domain":"xeraxium.live","tld":"live"},"ip":{"addr":"104.21.79.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"60878bf585af8430504954d790863847","sha1":"caff62f0d11db88be7b220f70825e68dc82b93ca","sha256":"ced2479d3f9e700cdbc5ab4f9fe359794ed41293f7d7267ce01ea78386afd280","sha512":"9f374014b1c1af564efdba95fcf7922872c90e45089b311a1367ff23e0ff5a5772562edcaa06ab3d0bcefddd8a36f86984dcca1a0164a39a1df329b94ceb3c7c","ssdeep":"24576:BbcDjWoul7LNnkf+57t+u1OR8MJ+EWctk:+DjWoutLHx1OR8MJ+EWctk","tlshash":"f035f84473c0786903976ab9662fa1caf17b08e9344a440af165fcd479b8a1af1f7f34","size":1144905,"data":"","first_seen":"2026-02-13T07:39:00.155413Z","last_seen":"2026-03-18T11:44:32.339151Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xeraxium.live/","fqdn":"xeraxium.live","domain":"xeraxium.live","tld":"live"},"ip":{"addr":"104.21.79.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-04-27T08:56:52.16974Z","times_seen":214116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xeraxium.live/assets/js/scripts.js?ver=210","fqdn":"xeraxium.live","domain":"xeraxium.live","tld":"live"},"ip":{"addr":"104.21.79.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"845cf2cfae56840db3b504f55e99c5f9","sha1":"4033f674402654e613fba0b61ebb22f68e45ff61","sha256":"57b9c76683044f0cbbe69bee18ef66d1c82b6da03d283d013e54bf13e4d77c12","sha512":"21fc66a6bc8b4b3ab657cbb8b87dc50163be0af9155d1d1da1fcc9d1b1ce978150cfbf4c62e1121a0c1e2e44e9bda8f6bd88d1062bb0f6f5f23fee775912aec5","ssdeep":"384:BARApaLpX6wFzUrmjbHKhDJqKi2sZAcA/XTvBSOymJ3SWKNBJfVu/zxHvWvYuvjX:BAR8+6d+bqDQtIxnFfHVzan4Bg","tlshash":"b8037349f030246a84ff332d4eff4406eeae5127894686217dfc41d88ff191a96b5ead","size":40303,"data":"","first_seen":"2025-10-02T03:51:37.640063Z","last_seen":"2026-03-18T11:44:32.325891Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xeraxium.live/assets/js/charts.js?ver=210","fqdn":"xeraxium.live","domain":"xeraxium.live","tld":"live"},"ip":{"addr":"104.21.79.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7681ce6d2ac5f66c334f23d4d3931722","sha1":"27961232a61d99f260b8f6201c164a9bf02b3702","sha256":"30e3d76a13a6338d5420768e0fa931f0e3dd19f00ed8de7e6dd7ebeda53c1412","sha512":"ec6cd0654339aafc736ef87f49c019ad7804d3a43c3f544404fc8cd4af9a3101b77b184435bd6e68f80e6266b683c8db87e25ffaa46c615965839455583db306","ssdeep":"192:kQSFZQmeFZQmrn6Ialv/TM+gMCmyAMMF/R:kQWQNQq6Ia9MmXF/R","tlshash":"96721d1af45295279473732d97ab4a30d7727a5381058b2abd3c8b301fbd817e2b1f86","size":15983,"data":"","first_seen":"2025-04-15T04:16:14.427303Z","last_seen":"2026-03-18T11:44:32.254395Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xeraxium.live/","fqdn":"xeraxium.live","domain":"xeraxium.live","tld":"live"},"ip":{"addr":"104.21.79.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1ac06320c7554cf710659c03f2dbc86a","sha1":"a710080f24e5f153ffba48e247a1a8ee4065f6c4","sha256":"044cf252452f4885b0f219a80bd477d8171e3fdc2bbcaf6fdb4dcbc3555219b8","sha512":"9a9679d320410bd73029865f8c7e336eabd77ea03cb4218f789dbb3586312dc5880389479d773c7601aeb217d67976b461d5e919612c528086c3a7d788aa56b3","ssdeep":"","tlshash":"bbe0abbd3c394041479a40b481aae2283e0630704040c813849ac838a8b0bca7e419d4","size":418,"data":"","first_seen":"2026-02-17T15:04:30.146309Z","last_seen":"2026-02-27T07:15:01.138308Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.socket.io/4.3.2/socket.io.min.js","fqdn":"cdn.socket.io","domain":"socket.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"5cbe62664e9305f8871de91a6d8d9a08","sha1":"2afe29828d4ecd270162fd7d636e5e7d3ae4d64e","sha256":"22cef11b55876f2098ae12b812b21918d64394dd8d776c33071254a81f4d49be","sha512":"37925b64c113925fb449987997c380d95c527c5d76d28c1f432cb9e220174c920abaa027dc0f53acdcf5ca9079e68f1a494e4cc5aa1d120bfbe30194be05329d","ssdeep":"384:UZSQ3CJM9pXFnVtnQbd/3M1ShjwnkiwIph5RZLG5AebfkzMPvYdZ19TTmHyBKiim:E3CJM9NBKokBSXLGGYYh9fxhC4f","tlshash":"2c03c688f291b06087e37165447f110ba23a642964cac1ccf639d9f29eb8ecd7167f79","size":40868,"data":"","first_seen":"2023-06-13T16:03:33Z","last_seen":"2026-04-21T00:55:27.064249Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xeraxium.live/","fqdn":"xeraxium.live","domain":"xeraxium.live","tld":"live"},"ip":{"addr":"104.21.79.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7185f6c18eb679dcc998d6ef9650ba11","sha1":"eb237ff25f114f6d4f3a73448b267213abb655b6","sha256":"7890f86a9c97303f3a3d38c686f3fcf94bf8619699c6368ea137f579fe570fe4","sha512":"035eb715c2b36cef6b4ef3cc65170fdc8a903f8ce63b673be5298d0c08a98859e96ab847a0e27b825f706c19f847938af956c599b20adc2b141c8d5c68b96f05","ssdeep":"","tlshash":"2de0552998e706384cf63a441039da3930f878a0aaa2d016525cc82cc929fc54c10aec","size":424,"data":"","first_seen":"2026-02-13T07:39:00.156283Z","last_seen":"2026-03-18T11:44:32.337671Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xeraxium.live/","fqdn":"xeraxium.live","domain":"xeraxium.live","tld":"live"},"ip":{"addr":"104.21.79.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-04-27T09:08:25.078572Z","times_seen":629463,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4d5607cdbc76688d37ad6311610a058","sha1":"534adf5ac8c28e88b13d1549add0d84a57a52c61","sha256":"7c209ce50b76600257f47c0a47333504478e9c89793713cc7d113bbb688c3eda","sha512":"3ee08aedbe06d4a8181f362bcf9694d164f36309b70f048d42079989f139915e340515f56a6f84e3bb24d4e027cceee7c2c32a710f58ddbaaa5a5a662ccd3300","ssdeep":"384:wBWbE0rIcvqSI/aQ/UpIxN5BWbEgl/ET/xzy2A3wBV+:wAxka0/scT/xzy2A3wBV+","tlshash":"f682b6cc7691b16543ab61b4843f620ff1376929740d8821b965eae13c78d8ed037fb8","size":18052,"data":"","first_seen":"2026-01-16T11:03:53.240781Z","last_seen":"2026-04-19T18:18:50.439045Z","times_seen":4264,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"xeraxium.live/images/gfx/gfx-z-h.png","fqdn":"xeraxium.live","domain":"xeraxium.live","tld":"live"},"ip":{"addr":"104.21.79.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xeraxium.live/","date":"2026-02-27T07:14:37.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeraxium.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 23:03:07 GMT","end":"Sat, 16 May 2026 00:03:05 GMT"},"fingerprint":{"sha1":"E0:F7:79:29:95:55:F8:96:1E:98:A3:04:89:AC:2F:27:79:83:08:A3","sha256":"84:6A:92:08:69:C5:96:6E:64:7A:FA:F0:87:99:5C:D5:55:9C:B5:7C:C0:C4:A9:61:D7:71:A1:C2:33:62:1B:42"}}},"request":{"raw":"GET /images/gfx/gfx-z-h.png HTTP/1.1\r\nHost: xeraxium.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xeraxium.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 07:14:37 GMT\r\ncontent-length: 206462\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"b424d17d8ed061a9dcf580af7e6051c7\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LtkiX1Ke25r1lXVKASkaYkCUXopTcVZpcEBAfPmAoaxmF4OsvhEqkC%2FOz4cXKEBsXSFfSC6Nalo0Ra5c90JyKNLPZ8Nvuq2MM%2B2Ydeo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d45e2e79e0bc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":206462,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 810 x 600, 8-bit/color RGBA, non-interlaced","md5":"dff0fe9057eee1e9695b11c45d0852f2","sha1":"cc4c4c89844da7933d2972733d8abd7aa43d929c","sha256":"fa4343c3fa93624345100967d7aa685fef16799d2a7cc2936a71e8b74757c9fc","sha512":"2db0c2d8b56e762f9d4ec53c0ca9fe07c2fb95982d82c814ecd29b345ea295a6e3452114d856f0081ea2896e757dcf1356135c73e0d349cab721b299dc734816","ssdeep":"6144:EYu2NA0RG03y20UPoxqsQn+XKG2iy04LDQjxMpciOa:Ye18Sy9s+XjRaUCmS","tlshash":"d81422ce249acf0da805508655fa43ec564398ef6d9fe7f4cc8c929247e0826618f5f7","first_seen":"2024-08-20T04:39:04.92499Z","last_seen":"2026-03-18T11:44:32.307446Z","times_seen":10,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xeraxium.live/images/partners/e-xs-alt.png","fqdn":"xeraxium.live","domain":"xeraxium.live","tld":"live"},"ip":{"addr":"104.21.79.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xeraxium.live/","date":"2026-02-27T07:14:37.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeraxium.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 23:03:07 GMT","end":"Sat, 16 May 2026 00:03:05 GMT"},"fingerprint":{"sha1":"E0:F7:79:29:95:55:F8:96:1E:98:A3:04:89:AC:2F:27:79:83:08:A3","sha256":"84:6A:92:08:69:C5:96:6E:64:7A:FA:F0:87:99:5C:D5:55:9C:B5:7C:C0:C4:A9:61:D7:71:A1:C2:33:62:1B:42"}}},"request":{"raw":"GET /images/partners/e-xs-alt.png HTTP/1.1\r\nHost: xeraxium.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xeraxium.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 07:14:37 GMT\r\ncontent-length: 3227\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"234dc33f29c1991d3d19043311ad4aef\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KqZ3DRKof5%2Bof4pIS6SlwNQI5MsdtBFFLXOrsdUA8GREOaBBKry4zuveCqrNzsE2lrfBVnC2982HgLTvEsL7bSm3K%2B36C1dv62bJZ%2F8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d45e2e7ae19c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3227,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 118 x 60, 8-bit/color RGBA, non-interlaced","md5":"20ecdb124531b51adef947a579d11c03","sha1":"7d24d818d7806d1106c6c2e1b118a9fe984aa6c5","sha256":"3caf4bfd1b2c34012382b842971a1f23cea11db7d96a0e290dcd8f9e3777bf51","sha512":"6fe5df3b1bef47aa8943119a430e5d1c454d7eb44a2b4142725bd6a66feec6e6a5b9c1998e5ebcfc04f4b121b0dae4ac8801f03243e9ee14ac1566b6014af8fb","ssdeep":"","tlshash":"f6615d8cb4653c922144f9e13be4a187d9388dd48c7b7473f98f903921441615fb92cb","first_seen":"2025-10-02T03:51:37.651777Z","last_seen":"2026-03-18T11:44:32.311099Z","times_seen":10,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xeraxium.live/","fqdn":"xeraxium.live","domain":"xeraxium.live","tld":"live"},"ip":{"addr":"104.21.79.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-27T07:14:37.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeraxium.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 23:03:07 GMT","end":"Sat, 16 May 2026 00:03:05 GMT"},"fingerprint":{"sha1":"E0:F7:79:29:95:55:F8:96:1E:98:A3:04:89:AC:2F:27:79:83:08:A3","sha256":"84:6A:92:08:69:C5:96:6E:64:7A:FA:F0:87:99:5C:D5:55:9C:B5:7C:C0:C4:A9:61:D7:71:A1:C2:33:62:1B:42"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xeraxium.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Feb 2026 07:14:37 GMT\r\ncontent-type: text/html\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N6nUUv9oyz%2BzNNef%2BRyJuf4VlD8Hg6UrNn3X8y%2FubGx3R1YTBI3tIVdxN%2BfZROFWq%2FnIDb5MITSI82r74zDZ9dxq9InDH8Tov3y3t6Q%3D\"}]}\r\netag: W/\"c7f36c454db1990f3a4a4fa4f83d689a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d45e2e6ca890883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":46772,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (493), with CRLF line terminators","md5":"3c03b1f2cbd9a100f55c077a25ec9f35","sha1":"304efde3afae7da8d990d7e61f9c11dc0732e1dc","sha256":"0b050268ccb09e9d60c82025a0769f0e683f3e2939bc2435d13a2dc1e5e28bf5","sha512":"0529551df393299d37f7248a3f3240bda31dc0ca508a063089d92a6906228e69e2bc85886490e82658803bdf6c8ba47634a833764310e2278f68e49351994460","ssdeep":"384:iwu6MLPNs9gWX4LEBA5WvgHL10ndboi9N/oQpGF/CKGIYY5F4dCQG+g7dfXNVnYR:iwR1IXR4ZAQ+qhLw+Mn5hPNxYpQ4gC","tlshash":"a123da3564c5213611b381e25a748faafea0a287c65b9259b1fd9feb1ff3c44dc530a0","first_seen":"2026-02-17T15:04:30.124587Z","last_seen":"2026-02-27T07:15:01.104735Z","times_seen":4,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":88,"dns":69,"connect":1,"send":0,"wait":32,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xeraxium.live/arbitrum.png","fqdn":"xeraxium.live","domain":"xeraxium.live","tld":"live"},"ip":{"addr":"104.21.79.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xeraxium.live/","date":"2026-02-27T07:14:37.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeraxium.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 23:03:07 GMT","end":"Sat, 16 May 2026 00:03:05 GMT"},"fingerprint":{"sha1":"E0:F7:79:29:95:55:F8:96:1E:98:A3:04:89:AC:2F:27:79:83:08:A3","sha256":"84:6A:92:08:69:C5:96:6E:64:7A:FA:F0:87:99:5C:D5:55:9C:B5:7C:C0:C4:A9:61:D7:71:A1:C2:33:62:1B:42"}}},"request":{"raw":"GET /arbitrum.png HTTP/1.1\r\nHost: xeraxium.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xeraxium.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 07:14:37 GMT\r\ncontent-length: 3635\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"4d58cfa66f5f6d5284ebce3bf467a87a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aCbGbolaj5R9LiQZwBBP6UkjKKYE5Mu5xBArCuFNcWkehoQe7Q01Z22wt3gfBCFneotAhYTECXY5Rb2Z7Y9sUde9YY%2FDRsyv6r5Zfy8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d45e2e7ae13c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3635,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"c3cce4e6a9300fb0c011dfb414f62556","sha1":"83a0614be6be2504bc346d13c5e0eeb5a4def389","sha256":"cdbd042edfff6073685de8578b489a0a4e226f786247fce04ae8ac277ecf7ad7","sha512":"802e0b8330ffb5cad07d924a24eb9afe376e79221626f0d8aa1ee87abdc65fea5a36af2fa2b9d06c0ab4874786a9f21b4e277e1c57aef4fb652aa6c9004dcb57","ssdeep":"","tlshash":"27717d59dbe21b38621270b34ed8385897ff53a2fa37828158de956b242e3c74932846","first_seen":"2023-05-17T12:15:22Z","last_seen":"2026-04-27T08:33:05.878882Z","times_seen":91,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xeraxium.live/assets/images/shape-a2.png","fqdn":"xeraxium.live","domain":"xeraxium.live","tld":"live"},"ip":{"addr":"104.21.79.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xeraxium.live/","date":"2026-02-27T07:14:37.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeraxium.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 23:03:07 GMT","end":"Sat, 16 May 2026 00:03:05 GMT"},"fingerprint":{"sha1":"E0:F7:79:29:95:55:F8:96:1E:98:A3:04:89:AC:2F:27:79:83:08:A3","sha256":"84:6A:92:08:69:C5:96:6E:64:7A:FA:F0:87:99:5C:D5:55:9C:B5:7C:C0:C4:A9:61:D7:71:A1:C2:33:62:1B:42"}}},"request":{"raw":"GET /assets/images/shape-a2.png HTTP/1.1\r\nHost: xeraxium.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xeraxium.live/assets/css/style-lobelia.css?ver=210\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 07:14:37 GMT\r\ncontent-length: 22224\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"d55521497a9e51f72fc3dcda5b21dcb9\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y%2BV0kdT7E7SyGgQzAkzFtwzHmzvXMyM5Uc7T5Sp5KAjD6QU66ZQRne%2FA%2BbHB3MmlNI%2B%2FnalDdgU6Mhfs7vDa8%2Bh1q7mVjbiid7816GU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d45e2e90e5ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22224,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 960, 8-bit gray+alpha, non-interlaced","md5":"550c08aa933fe5523085b0abd7ba7285","sha1":"aa955626ca1583394bb4f53fd29014f003b9b2c3","sha256":"7448fc0f72aaaa36d3f7218e44c8f9e845333956ecc51651c2a63e6c50ef97eb","sha512":"7fecbce5a98222980a1446a69dab15c202d7c48a84551c0c3584013c094f3c35aeeeaa1ad956db885199318b57444b2f9b2c52ec3379809138722a2edecf4061","ssdeep":"384:a0WkuZEAXVf0zmJTZlxchkJl/dqQ/6hC33JTZD9EbLolGPNEUw0MJ5pUwqt:aKuZEItBJlwQ733tPGFI0MJbUPt","tlshash":"aba2c0b59eb181444908110a526439f2bfceb30593e6a00a23a3f9cdf7d37ad45c56ea","first_seen":"2024-12-22T23:17:14.971134Z","last_seen":"2026-03-18T11:44:32.321916Z","times_seen":12,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xeraxium.live/assets/css/vendor.bundle.css?ver=210","fqdn":"xeraxium.live","domain":"xeraxium.live","tld":"live"},"ip":{"addr":"104.21.79.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xeraxium.live/","date":"2026-02-27T07:14:37.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeraxium.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 23:03:07 GMT","end":"Sat, 16 May 2026 00:03:05 GMT"},"fingerprint":{"sha1":"E0:F7:79:29:95:55:F8:96:1E:98:A3:04:89:AC:2F:27:79:83:08:A3","sha256":"84:6A:92:08:69:C5:96:6E:64:7A:FA:F0:87:99:5C:D5:55:9C:B5:7C:C0:C4:A9:61:D7:71:A1:C2:33:62:1B:42"}}},"request":{"raw":"GET /assets/css/vendor.bundle.css?ver=210 HTTP/1.1\r\nHost: xeraxium.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xeraxium.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 07:14:37 GMT\r\netag: W/\"ab6a97772c23a8b0603d3b09133a4900\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1WTgs2sGMCFKucwNv%2BEedzkw0z8kbspXj3mMmeqtvlj3UgnodCtUvRnKm0uNZZP06lXODscb5bh27P%2F%2Bm%2FpvfN0rBPGPijoVFHKB1Vk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d45e2e79e04c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":403889,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2079), with CRLF, LF line terminators","md5":"063c813051e77dcf406ecff447657ee0","sha1":"9de91546aa565acba6f8d30d6f00839e0f0f9132","sha256":"ce50a26e347624108db3ff463281e0f76fb449fe11b65e7e51a4712cbc6c6575","sha512":"8cbc38df147af659a2c7ae37ba53ff54e2faa79297baee3a5a1715ba61de63683a5f3362572e3acee4083b2de3dc4d928392a269b97eb7c4c2c5b751b9705d34","ssdeep":"3072:OBfoCObCm1YMWID//4yevYUpZmIlBr5ibC9i4pcp2t7:OBKCm1YMWI0yeAUoCg4pcp2t7","tlshash":"da841eebf58921585672e2886187fbf8ab387248d6014c79e1433a5cd3c8bd965d3ecc","first_seen":"2026-02-13T07:39:00.138445Z","last_seen":"2026-02-27T07:15:01.111109Z","times_seen":6,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xeraxium.live/logo.png","fqdn":"xeraxium.live","domain":"xeraxium.live","tld":"live"},"ip":{"addr":"104.21.79.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xeraxium.live/","date":"2026-02-27T07:14:37.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeraxium.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 23:03:07 GMT","end":"Sat, 16 May 2026 00:03:05 GMT"},"fingerprint":{"sha1":"E0:F7:79:29:95:55:F8:96:1E:98:A3:04:89:AC:2F:27:79:83:08:A3","sha256":"84:6A:92:08:69:C5:96:6E:64:7A:FA:F0:87:99:5C:D5:55:9C:B5:7C:C0:C4:A9:61:D7:71:A1:C2:33:62:1B:42"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: xeraxium.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xeraxium.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 07:14:37 GMT\r\ncontent-length: 25901\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"66ea97660d09b8589d7f94980658de76\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B%2BNt2PDUC9bvEc1gbSIOb%2FP5pwRl8HEF%2FzHTd3PKCu7TEN9HYxyGSu%2BDTsvqjd9XlYPXnPRIlSGipAhCutln1X4nF5cKhSneCkMEbDk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d45e2e79e07c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25901,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 200, 8-bit/color RGBA, non-interlaced","md5":"761e5acfcc9ae1e46e65f19b77c7d4bc","sha1":"807894e4729f9e759d23af7b33c78ce9f0da34ee","sha256":"58dc3549bd84445808532ab119e197fcf08214a8fed22a3b8f01f8d0cd742b49","sha512":"f37a641dd0f010faa08600e16cc051f50319924069b1c23fe4c37c49be121eef2bc31388a130592ec349b161e170d234c373731f9a7763618b488719e643ed5c","ssdeep":"384:rIvZNCTmk97zAGceXFvxjRbkxgIpKO2IY+vBCq7DTvXtlBsnmM4hx+3q0ud:U7CaA7/ZFhRbktKO20keplem1+60ud","tlshash":"2ac2f15e0441fd20effe326d71a6e7bbe1162157cc8212565833a0732f94c1aadd8b07","first_seen":"2026-02-13T07:39:00.129613Z","last_seen":"2026-03-18T11:44:32.321072Z","times_seen":8,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xeraxium.live/op.png","fqdn":"xeraxium.live","domain":"xeraxium.live","tld":"live"},"ip":{"addr":"104.21.79.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xeraxium.live/","date":"2026-02-27T07:14:37.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeraxium.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 23:03:07 GMT","end":"Sat, 16 May 2026 00:03:05 GMT"},"fingerprint":{"sha1":"E0:F7:79:29:95:55:F8:96:1E:98:A3:04:89:AC:2F:27:79:83:08:A3","sha256":"84:6A:92:08:69:C5:96:6E:64:7A:FA:F0:87:99:5C:D5:55:9C:B5:7C:C0:C4:A9:61:D7:71:A1:C2:33:62:1B:42"}}},"request":{"raw":"GET /op.png HTTP/1.1\r\nHost: xeraxium.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xeraxium.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 07:14:37 GMT\r\ncontent-length: 3175\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"ccdc07535c3ac4b1e6c3d5b692bc693d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AotpJ1Etn%2Bis8iwUknjfYJjb98nyM16TC%2FunEz6y3tTOM%2FbcGv7XaXcSRTH%2Bcg5O5mnWjXYt1B67pEVoQUfVFxfH7Bv7YEJ%2FLaNc6D4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d45e2e7ae0fc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3175,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"e299cd3d98ccfb3ac56eb2f717224347","sha1":"2e8c6392a3a9eabed7f694d90bde74bfdbe44c9f","sha256":"7326e5281bbc30eb77082b44dfe4728d82731540a3dc584d81e3b1d6b1b74239","sha512":"0d2ad73e5ec2a82876baf084b3d747b75ee64572f351cad05c72a4ed7a531037c82541d0bc499bd4ecbfee86d702adb7ac33c3a035ce1873928d6e4814757a4c","ssdeep":"","tlshash":"9f618dc803e4460cc12e41d434b0db3cfd7f488f17a10cdae7484c7829ab6e64c649e0","first_seen":"2023-06-06T18:28:25Z","last_seen":"2026-04-16T15:51:15.698341Z","times_seen":46,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xeraxium.live/images/partners/c-xs-alt.png","fqdn":"xeraxium.live","domain":"xeraxium.live","tld":"live"},"ip":{"addr":"104.21.79.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xeraxium.live/","date":"2026-02-27T07:14:37.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeraxium.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 23:03:07 GMT","end":"Sat, 16 May 2026 00:03:05 GMT"},"fingerprint":{"sha1":"E0:F7:79:29:95:55:F8:96:1E:98:A3:04:89:AC:2F:27:79:83:08:A3","sha256":"84:6A:92:08:69:C5:96:6E:64:7A:FA:F0:87:99:5C:D5:55:9C:B5:7C:C0:C4:A9:61:D7:71:A1:C2:33:62:1B:42"}}},"request":{"raw":"GET /images/partners/c-xs-alt.png HTTP/1.1\r\nHost: xeraxium.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xeraxium.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 07:14:37 GMT\r\ncontent-length: 3837\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"4dffe6ec40cb289757fdc3b545207b0c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5lQsxR5Yy7jpl0k%2BkWsKasOPhxxoNgNXHE7ZX%2Fl%2BB6WEdASuiAI%2FQCOtTqQZOs9aIZEgK%2Fy40zeXhFy1K9FAwHiegTOyhQGnfTH0pzQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d45e2e7ae17c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3837,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 123 x 60, 8-bit/color RGBA, non-interlaced","md5":"c906005060ea8fcadb9c1a2eba7ab5f3","sha1":"ef1b29f809cbd32544e7a58e5544ccae083715c5","sha256":"504e1ed03e5ca89809467ad3de96bf9c75387090019dfe09743c2328f1be48d3","sha512":"2bfb11667faecaf3232789e4e442d40328b6476e83579dc5da37aeac7c61cf822bfdef7168144b97c6b7257891575b3f6499355461dc105fd30ee3b6a7420b08","ssdeep":"","tlshash":"2f816e07fddc7951518dd0670cfaf54999524ac10988b7b13902436ea5f027c3e3eaeb","first_seen":"2023-09-24T21:26:00Z","last_seen":"2026-03-18T11:44:32.302233Z","times_seen":15,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xeraxium.live/assets/images/mask-f.svg","fqdn":"xeraxium.live","domain":"xeraxium.live","tld":"live"},"ip":{"addr":"104.21.79.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xeraxium.live/","date":"2026-02-27T07:14:37.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeraxium.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 23:03:07 GMT","end":"Sat, 16 May 2026 00:03:05 GMT"},"fingerprint":{"sha1":"E0:F7:79:29:95:55:F8:96:1E:98:A3:04:89:AC:2F:27:79:83:08:A3","sha256":"84:6A:92:08:69:C5:96:6E:64:7A:FA:F0:87:99:5C:D5:55:9C:B5:7C:C0:C4:A9:61:D7:71:A1:C2:33:62:1B:42"}}},"request":{"raw":"GET /assets/images/mask-f.svg HTTP/1.1\r\nHost: xeraxium.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xeraxium.live/assets/css/style-lobelia.css?ver=210\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 07:14:37 GMT\r\netag: W/\"8e8cba86a57632a072292f8321366273\"\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0szhlIyju2caMOvcp6q01mkQAeChDO04dj9F3cmqxuxBXPBt3d%2FXsKZLfZx5lgBjphe59ePuhYxcO0tlLbA4nAjH8qQvlE6%2BuI%2Ffh4M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d45e2e8fe5ac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":287,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6abeb931d945b0d542a46b1060af93ae","sha1":"01faf6673eec26a0bb5a035e8c66a918355e3506","sha256":"bd1804721d9a3f304f53b7319ef4e01846ba65b35a4c27494b5eecf07ea2e8d0","sha512":"2619d4e5f58dc2ed8e81973fe3eb0697dd12f9e009c3c2ad70a7d4a8f88d1cb6b68f1978e1ce61d01ef49a7f6e612aae1f50258a735230a454dc9ebc27b3677a","ssdeep":"","tlshash":"e5d02b19d290fe3ca85553600834aab6172e849620a9f37dc8f50335b0315e5bd32851","first_seen":"2024-12-22T23:17:14.980239Z","last_seen":"2026-03-18T11:44:32.259404Z","times_seen":11,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xeraxium.live/images/partners/b-xs-alt.png","fqdn":"xeraxium.live","domain":"xeraxium.live","tld":"live"},"ip":{"addr":"104.21.79.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xeraxium.live/","date":"2026-02-27T07:14:37.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeraxium.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 23:03:07 GMT","end":"Sat, 16 May 2026 00:03:05 GMT"},"fingerprint":{"sha1":"E0:F7:79:29:95:55:F8:96:1E:98:A3:04:89:AC:2F:27:79:83:08:A3","sha256":"84:6A:92:08:69:C5:96:6E:64:7A:FA:F0:87:99:5C:D5:55:9C:B5:7C:C0:C4:A9:61:D7:71:A1:C2:33:62:1B:42"}}},"request":{"raw":"GET /images/partners/b-xs-alt.png HTTP/1.1\r\nHost: xeraxium.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xeraxium.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 07:14:37 GMT\r\ncontent-length: 3594\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"bb7a575e0e95f3b646a73e99b3638c20\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cIm5AAyhX97aPG1aeyZ4wTh1vNvNxk6j2q6lBW7EQSWHw1Q3rTPI3K2Zvt2oyGyXNeA21i4P3Ogw3M5I3NSm7A4X8rDM%2Bp19Y07yMeY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d45e2e7ae15c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3594,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 127 x 60, 8-bit/color RGBA, non-interlaced","md5":"4af72feede1c43bf3fc9467d3972b3aa","sha1":"a06ec694bece28c53d589eea5cfb6e062c0691f1","sha256":"d9f388c4ebf3f71f2b409b2bfc59a1eb8bd9699a1ad9ab1342443a59d4969e87","sha512":"c1ba5c2e643823544c5abc37b15cdaa2d4db7468e3364c9772891d7b457c51cf308beae11ad97bd5c7df3d7124ca608b64925f924c923cad5c575d4dcc7d7015","ssdeep":"","tlshash":"5c715c0675571cc145029ce61af3ea2689f346a27d10b5a919cbf72e78580f7c83067e","first_seen":"2025-10-02T03:51:37.623387Z","last_seen":"2026-03-18T11:44:32.309303Z","times_seen":10,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xeraxium.live/assets/js/charts.js?ver=210","fqdn":"xeraxium.live","domain":"xeraxium.live","tld":"live"},"ip":{"addr":"104.21.79.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xeraxium.live/","date":"2026-02-27T07:14:37.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeraxium.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 23:03:07 GMT","end":"Sat, 16 May 2026 00:03:05 GMT"},"fingerprint":{"sha1":"E0:F7:79:29:95:55:F8:96:1E:98:A3:04:89:AC:2F:27:79:83:08:A3","sha256":"84:6A:92:08:69:C5:96:6E:64:7A:FA:F0:87:99:5C:D5:55:9C:B5:7C:C0:C4:A9:61:D7:71:A1:C2:33:62:1B:42"}}},"request":{"raw":"GET /assets/js/charts.js?ver=210 HTTP/1.1\r\nHost: xeraxium.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xeraxium.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 07:14:37 GMT\r\netag: W/\"88d092420167b737f68f128eff0817bd\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AY8xDJND3jPBNOkGnXZHvwM9CWJY2PR%2BMCh8OoEIXAnb2gReps%2BArB2A3GvrVOJ1KQSE7fkYXDa1m0jiPnhAH60tksrOQZEfM6YLbFU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d45e2e7ae1cc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15983,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"7681ce6d2ac5f66c334f23d4d3931722","sha1":"27961232a61d99f260b8f6201c164a9bf02b3702","sha256":"30e3d76a13a6338d5420768e0fa931f0e3dd19f00ed8de7e6dd7ebeda53c1412","sha512":"ec6cd0654339aafc736ef87f49c019ad7804d3a43c3f544404fc8cd4af9a3101b77b184435bd6e68f80e6266b683c8db87e25ffaa46c615965839455583db306","ssdeep":"192:kQSFZQmeFZQmrn6Ialv/TM+gMCmyAMMF/R:kQWQNQq6Ia9MmXF/R","tlshash":"96721d1af45295279473732d97ab4a30d7727a5381058b2abd3c8b301fbd817e2b1f86","first_seen":"2025-04-15T04:16:14.427303Z","last_seen":"2026-03-18T11:44:32.254395Z","times_seen":12,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xeraxium.live/polygon.png","fqdn":"xeraxium.live","domain":"xeraxium.live","tld":"live"},"ip":{"addr":"104.21.79.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xeraxium.live/","date":"2026-02-27T07:14:37.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeraxium.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 23:03:07 GMT","end":"Sat, 16 May 2026 00:03:05 GMT"},"fingerprint":{"sha1":"E0:F7:79:29:95:55:F8:96:1E:98:A3:04:89:AC:2F:27:79:83:08:A3","sha256":"84:6A:92:08:69:C5:96:6E:64:7A:FA:F0:87:99:5C:D5:55:9C:B5:7C:C0:C4:A9:61:D7:71:A1:C2:33:62:1B:42"}}},"request":{"raw":"GET /polygon.png HTTP/1.1\r\nHost: xeraxium.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xeraxium.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 07:14:37 GMT\r\ncontent-length: 2668\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"7c2aa5d5fad02a3310ef50951d9abe48\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FCG5or5V2GjamHVzU1wL%2FuQdbxhgzavWBcPUpBnIjkQIiUe1Cx0dn9t7%2BgODcLdm8DmrP07dLbsjsqQALQ2CD1eL5GDPd01uMXX8JFU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d45e2e7ae10c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2668,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"e52d4c5303ae23b87eafcba68fec13f0","sha1":"d62532d0d8b480481e825e43dad042bba1b34905","sha256":"6b6a7ed2702dc19ede76fa573dcadbf7cd0680eeb320a1650b2ee0061135ba93","sha512":"65516050a3940a5b072c2e6f86f939624b879f12661eb7174ef25c6e86051067faeae334b5be14e9e3b4e21d00a7e43c3ba0e4a73edc16480bff8deea1314993","ssdeep":"","tlshash":"98515bf9f4cba96be90d13446362186c2d32a4f616ca9d2a138564bb73d9e1f013c826","first_seen":"2023-05-06T05:54:57Z","last_seen":"2026-04-27T08:33:05.550342Z","times_seen":12186,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xeraxium.live/assets/css/theme.css?ver=210","fqdn":"xeraxium.live","domain":"xeraxium.live","tld":"live"},"ip":{"addr":"104.21.79.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xeraxium.live/","date":"2026-02-27T07:14:37.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeraxium.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 23:03:07 GMT","end":"Sat, 16 May 2026 00:03:05 GMT"},"fingerprint":{"sha1":"E0:F7:79:29:95:55:F8:96:1E:98:A3:04:89:AC:2F:27:79:83:08:A3","sha256":"84:6A:92:08:69:C5:96:6E:64:7A:FA:F0:87:99:5C:D5:55:9C:B5:7C:C0:C4:A9:61:D7:71:A1:C2:33:62:1B:42"}}},"request":{"raw":"GET /assets/css/theme.css?ver=210 HTTP/1.1\r\nHost: xeraxium.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xeraxium.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 07:14:37 GMT\r\netag: W/\"f81b8672ba9f2e1b71f818477e9ca238\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FhyFo%2BTHHmL%2Fi87XgeDrYNRTwfCVoNpwrKaGPwyjZMukE3O9n0uXR8PWOE1YLRsurMN%2F%2FPy8INOTLJg1lE02tees99Y6XtpHpOXQ%2Bks%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d45e2e79e06c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF, LF line terminators","md5":"c85febe7846b96b265f6fbb43c8e2197","sha1":"e0e81cfa601849f53dcfe60a6aec471c556972c5","sha256":"875bd2a4d6b9921c875846f7deffb08ca970f6ed5e5106025e07913ffdaa6f2c","sha512":"520168b732cf6ad6cd924bc414dec591b369c9a25b633f43a3e81792987fc79eef52140c336d56665e83b139d15a7b3ce7daa8e2dd44240400e84330792487a7","ssdeep":"","tlshash":"08c02bb0537af1302a7154886120b91578209f0d2348edf077108e6803758e72704f64","first_seen":"2025-10-02T03:51:37.619434Z","last_seen":"2026-03-18T11:44:32.2558Z","times_seen":9,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xeraxium.live/favicon.ico","fqdn":"xeraxium.live","domain":"xeraxium.live","tld":"live"},"ip":{"addr":"104.21.79.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xeraxium.live/form/subscribe.php","date":"2026-02-27T07:14:40.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeraxium.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 23:03:07 GMT","end":"Sat, 16 May 2026 00:03:05 GMT"},"fingerprint":{"sha1":"E0:F7:79:29:95:55:F8:96:1E:98:A3:04:89:AC:2F:27:79:83:08:A3","sha256":"84:6A:92:08:69:C5:96:6E:64:7A:FA:F0:87:99:5C:D5:55:9C:B5:7C:C0:C4:A9:61:D7:71:A1:C2:33:62:1B:42"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: xeraxium.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xeraxium.live/form/subscribe.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 07:14:40 GMT\r\netag: W/\"62f875e238c9eedaa46225ce82ecfe41\"\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RtPjKzw3B9H7ZdV%2Fw5NCHrRz5p23EmuxIxtrvnbb8478MvQntuplZzC0g2O7pIms%2Bb58uNYQWpawDDI9y2zaI6Se8XUC52FcJbcilzA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d45e2fa0929c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":976,"size_decoded":0,"mime_type":"image/x-icon","magic":"RIFF (little-endian) data, Web/P image","md5":"d01a4e2b904725f731b4eeb7254f6c7d","sha1":"078be1860ad7c3b0c6f9eb05518b11a213eb7220","sha256":"ba96e2ac2eae11db059c23be4713bed7987e84f1238ebbbea429e117a6b634fe","sha512":"77ae538b46f40a49e6886f58f0826f8d2fc2a080be6315d56366f39452e02920cda0170938c1bef494cf03d785706adca2e5eef83484ccea7658ccfb603457b5","ssdeep":"","tlshash":"e411cc7db7069395f50377eb1d302405cd0563b0b50fe85dcac4f5591f622b65f52644","first_seen":"2026-02-27T06:51:55.926842Z","last_seen":"2026-02-27T07:15:01.121341Z","times_seen":3,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xeraxium.live/images/gfx/gfx-z-g.png","fqdn":"xeraxium.live","domain":"xeraxium.live","tld":"live"},"ip":{"addr":"104.21.79.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xeraxium.live/","date":"2026-02-27T07:14:37.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeraxium.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 23:03:07 GMT","end":"Sat, 16 May 2026 00:03:05 GMT"},"fingerprint":{"sha1":"E0:F7:79:29:95:55:F8:96:1E:98:A3:04:89:AC:2F:27:79:83:08:A3","sha256":"84:6A:92:08:69:C5:96:6E:64:7A:FA:F0:87:99:5C:D5:55:9C:B5:7C:C0:C4:A9:61:D7:71:A1:C2:33:62:1B:42"}}},"request":{"raw":"GET /images/gfx/gfx-z-g.png HTTP/1.1\r\nHost: xeraxium.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xeraxium.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 07:14:37 GMT\r\ncontent-length: 101495\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"d83ad5f7d45eedbabb92afbc091ea6b1\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BHDn8Jev20Ou8xMcs9EgVfGvJoS%2BwI9d0kSuw2bgE5c%2FgilfPnrLJ2iHm1i2vfGB7Afrw2uM3oyl1VQSAucxzGO2SVARNeRlAvtcLFA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d45e2e79e0ac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101495,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 667 x 644, 8-bit/color RGBA, non-interlaced","md5":"93c38ec6842f94802d1c1a7dcef209c8","sha1":"e0bcc307eb4315891d1e86b424e7715d515b29d0","sha256":"76de340070ff209f1c7df71e9497009acbc2ddb18c8be82d6efc00293f1f9ea0","sha512":"5cc5ca77728be278b962a4094b6fcfc7b6625faa14c4bd40304ac55d9b29235a4e5c8bda7b6ab4cfe9c179667b13bb414ae79b67d77eaaea74164e3faaa8e451","ssdeep":"1536:vh/QjX1+c+kLhQb90tWQefhXc2Yeys9JSIRTDQfiKN0A7uO32/Xh5DytBmp+TV:GR3PCheWQefhfjyA44z//+q0TV","tlshash":"7ea3121524b2a41283592934086831693a349fbddff93337495d8dcff6b9bb5330a827","first_seen":"2026-02-13T07:39:00.151016Z","last_seen":"2026-03-18T11:44:32.31438Z","times_seen":8,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xeraxium.icu/","fqdn":"xeraxium.icu","domain":"xeraxium.icu","tld":"icu"},"ip":{"addr":"104.21.48.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-27T07:14:36.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeraxium.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 23:05:56 GMT","end":"Sat, 16 May 2026 00:05:20 GMT"},"fingerprint":{"sha1":"0B:D6:5E:66:07:D5:76:7C:09:1B:97:AB:CA:98:2F:C0:CB:84:38:7C","sha256":"48:84:57:BF:F8:96:4B:FD:E8:24:0D:00:CD:95:70:AC:FE:0C:98:12:06:66:31:C3:1F:01:4A:8E:BD:84:A5:CA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xeraxium.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Feb 2026 07:14:36 GMT\r\ncontent-type: text/html\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=knJ82ULS3Oma5vU3ytE7UvsQV4YF3kNTyAu110AFsx8x4CNRaP2pyfkDHR8PncFSZVraJ1DYbQLHJPBbWwl6aPGNh33UQWQo4f7vqw%3D%3D\"}]}\r\netag: W/\"461fc7e62b6d28cf96fcaaadc0e33cfd\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d45e2e4fb1f0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":210,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8e6216cfecb46d3ad7b6ccbb1d1e65e8","sha1":"decd761a3f1be00ce0dcb5315b588fe984087493","sha256":"bcfd7132fd258ce7af59d6e7a81303b78f829aec99b05c923e1afbf53df34ad5","sha512":"9b0d70dd0802040dd817093514c719cedc286493aeda9aafe32e41baa73459947e65d900f5aa9a7d5dae01f5319d650ba346c1990b23e6fcbe851bc2bbdfd9b7","ssdeep":"","tlshash":"8dd012bb15c42c0a45b0677858c9f2a5a483295569892620f590b1972ff6715cac3692","first_seen":"2026-02-27T06:51:55.911008Z","last_seen":"2026-02-27T07:15:01.1242Z","times_seen":3,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":39,"dns":18,"connect":1,"send":0,"wait":32,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xeraxium.live/assets/css/style-lobelia.css?ver=210","fqdn":"xeraxium.live","domain":"xeraxium.live","tld":"live"},"ip":{"addr":"104.21.79.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xeraxium.live/","date":"2026-02-27T07:14:37.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeraxium.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 23:03:07 GMT","end":"Sat, 16 May 2026 00:03:05 GMT"},"fingerprint":{"sha1":"E0:F7:79:29:95:55:F8:96:1E:98:A3:04:89:AC:2F:27:79:83:08:A3","sha256":"84:6A:92:08:69:C5:96:6E:64:7A:FA:F0:87:99:5C:D5:55:9C:B5:7C:C0:C4:A9:61:D7:71:A1:C2:33:62:1B:42"}}},"request":{"raw":"GET /assets/css/style-lobelia.css?ver=210 HTTP/1.1\r\nHost: xeraxium.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xeraxium.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 07:14:37 GMT\r\netag: W/\"d04886b93dff9feb8483c47b0795d269\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aUmLytwmKYXcSnH4uO9zX0GdOEe2tp1BlcuUwYCIDMc3ITnMSb5%2F14uYHuMp5f5nSoToLygV5hylQHt%2FoUiDbJNko%2FroEw5YECclTUc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d45e2e79e05c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":308314,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (427), with CRLF, LF line terminators","md5":"4833132252d855023f0808870ab960a6","sha1":"8206a7dfcc8754cc801cf27432ab309b6ac481f3","sha256":"9c2004867d8f304e3d16aca3bedc72a0b2fb3aa5a4de163c8809b9bfe552f505","sha512":"9541e131ed8d6a417565b2f85369d29c0676da09b3e63b37bf60cf319a2cbae975afff4b0cbbdc712bcdc5a06a347a6b59b41a48e3a850910330df256ab55f84","ssdeep":"3072:iBXB0BPBXJAOsLQiyBDTRl03FNe95pjiLwOIc:iBXB0BPB6aX030hiLwW","tlshash":"0964c8d3b702114c7127e2e6bae3dbe493395243f20a19bce5d53459c24c8e8367bd9a","first_seen":"2026-02-13T07:39:00.13928Z","last_seen":"2026-02-27T07:15:01.125945Z","times_seen":6,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xeraxium.live/bnb.png","fqdn":"xeraxium.live","domain":"xeraxium.live","tld":"live"},"ip":{"addr":"104.21.79.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xeraxium.live/","date":"2026-02-27T07:14:37.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeraxium.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 23:03:07 GMT","end":"Sat, 16 May 2026 00:03:05 GMT"},"fingerprint":{"sha1":"E0:F7:79:29:95:55:F8:96:1E:98:A3:04:89:AC:2F:27:79:83:08:A3","sha256":"84:6A:92:08:69:C5:96:6E:64:7A:FA:F0:87:99:5C:D5:55:9C:B5:7C:C0:C4:A9:61:D7:71:A1:C2:33:62:1B:42"}}},"request":{"raw":"GET /bnb.png HTTP/1.1\r\nHost: xeraxium.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xeraxium.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 07:14:37 GMT\r\ncontent-length: 1387\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"5bc9640eaec58f52bc846433a04dcde4\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VEickd2iRiSCvoAML439J4ylDEwBVD4HBXbIDr8EJd24OaMgdzGFPU9HpXtNhU9%2BY%2BaN6G6DRB4NAiEpSyXqWDDj357tBCAhJAlLv04%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d45e2e79e0dc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1387,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"aef8727bea8367cd9fd252c025b45887","sha1":"c2ab9d909455bff35181dfd92bcc7baba930867f","sha256":"ce5a07d36768bcb5524044a9e92a606ae6effe1cb0913dfa418703461db62fe3","sha512":"5f97e368e23aa5e501e57917aea9426704ac3c4068b34d803f44944663bab45131170fec2872fb868a5faceb6856ce4d9f8870053aba7e8d08455989a731984d","ssdeep":"","tlshash":"5321085f5b644577dda94dbede05a54b29e30d208d978bc2c404ec1534598a643608ad","first_seen":"2023-05-06T05:54:57Z","last_seen":"2026-04-27T08:33:05.786514Z","times_seen":14278,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xeraxium.live/images/partners/d-xs-alt.png","fqdn":"xeraxium.live","domain":"xeraxium.live","tld":"live"},"ip":{"addr":"104.21.79.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xeraxium.live/","date":"2026-02-27T07:14:37.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeraxium.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 23:03:07 GMT","end":"Sat, 16 May 2026 00:03:05 GMT"},"fingerprint":{"sha1":"E0:F7:79:29:95:55:F8:96:1E:98:A3:04:89:AC:2F:27:79:83:08:A3","sha256":"84:6A:92:08:69:C5:96:6E:64:7A:FA:F0:87:99:5C:D5:55:9C:B5:7C:C0:C4:A9:61:D7:71:A1:C2:33:62:1B:42"}}},"request":{"raw":"GET /images/partners/d-xs-alt.png HTTP/1.1\r\nHost: xeraxium.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xeraxium.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 07:14:37 GMT\r\ncontent-length: 3779\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"098606aabd9e41c64627cd2a1d3d1665\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QqRZN2CAK4ZxcKpEr0cWaPDkuoYrtUcGGf0zob9xsUt6GNVy3xtAAkKUa1GSCkzV%2FDZVcb1uIs2jNxNV5jSLtQ9GrmiAYMWV05n0Hgo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d45e2e7ae18c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3779,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 116 x 60, 8-bit/color RGBA, non-interlaced","md5":"e0c052ebb9de60721a32d9bef8890025","sha1":"2725c2b40849d17e9c820b7b53f23ff5cdb00111","sha256":"9cae2684a7e82d3acb7efcf7f67a77fab7364aeb862e7ea8b566fdefa717ab13","sha512":"fd3ec08ddd1c5ff39597be12c83f53a823e9a0f0e93944d3acbf908992b421c21ee274990819f8cd231c5af7f22d98702d98211fdea199b5461a0c31d52dc43e","ssdeep":"","tlshash":"ba714c4dfa604cc15289e48400f78543a93b0ce09b94f53ebde6a972ad7a5238a98297","first_seen":"2023-09-24T21:26:00Z","last_seen":"2026-03-18T11:44:32.310193Z","times_seen":15,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xeraxium.live/assets/js/scripts.js?ver=210","fqdn":"xeraxium.live","domain":"xeraxium.live","tld":"live"},"ip":{"addr":"104.21.79.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xeraxium.live/","date":"2026-02-27T07:14:37.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeraxium.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 23:03:07 GMT","end":"Sat, 16 May 2026 00:03:05 GMT"},"fingerprint":{"sha1":"E0:F7:79:29:95:55:F8:96:1E:98:A3:04:89:AC:2F:27:79:83:08:A3","sha256":"84:6A:92:08:69:C5:96:6E:64:7A:FA:F0:87:99:5C:D5:55:9C:B5:7C:C0:C4:A9:61:D7:71:A1:C2:33:62:1B:42"}}},"request":{"raw":"GET /assets/js/scripts.js?ver=210 HTTP/1.1\r\nHost: xeraxium.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xeraxium.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 07:14:37 GMT\r\netag: W/\"f92fd948e1753098530593f78c19368c\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q%2F1zwtchNUkmNtvFIZFrV7h1i2QTOcaP%2F0t%2FYgUt%2FIUQFPsM4mCWqiI0vtyq6T5hntmHtH0kYCW8Uqno71peP6LVt35SVLh4D%2FdQiV8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d45e2e7ae1bc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40303,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (610), with CRLF line terminators","md5":"845cf2cfae56840db3b504f55e99c5f9","sha1":"4033f674402654e613fba0b61ebb22f68e45ff61","sha256":"57b9c76683044f0cbbe69bee18ef66d1c82b6da03d283d013e54bf13e4d77c12","sha512":"21fc66a6bc8b4b3ab657cbb8b87dc50163be0af9155d1d1da1fcc9d1b1ce978150cfbf4c62e1121a0c1e2e44e9bda8f6bd88d1062bb0f6f5f23fee775912aec5","ssdeep":"384:BARApaLpX6wFzUrmjbHKhDJqKi2sZAcA/XTvBSOymJ3SWKNBJfVu/zxHvWvYuvjX:BAR8+6d+bqDQtIxnFfHVzan4Bg","tlshash":"b8037349f030246a84ff332d4eff4406eeae5127894686217dfc41d88ff191a96b5ead","first_seen":"2025-10-02T03:51:37.640063Z","last_seen":"2026-03-18T11:44:32.325891Z","times_seen":9,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xeraxium.live/images/header/gfx-i.png","fqdn":"xeraxium.live","domain":"xeraxium.live","tld":"live"},"ip":{"addr":"104.21.79.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xeraxium.live/","date":"2026-02-27T07:14:37.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeraxium.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 23:03:07 GMT","end":"Sat, 16 May 2026 00:03:05 GMT"},"fingerprint":{"sha1":"E0:F7:79:29:95:55:F8:96:1E:98:A3:04:89:AC:2F:27:79:83:08:A3","sha256":"84:6A:92:08:69:C5:96:6E:64:7A:FA:F0:87:99:5C:D5:55:9C:B5:7C:C0:C4:A9:61:D7:71:A1:C2:33:62:1B:42"}}},"request":{"raw":"GET /images/header/gfx-i.png HTTP/1.1\r\nHost: xeraxium.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xeraxium.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 07:14:37 GMT\r\ncontent-length: 235508\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"6721c77774b054d102c34692f85c0a2a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dinN6elinQjQ5yiuvlSYJva6HVYcW1JVRzMgTS0M2IdZVPAIJGUz1czwG6qzwIuNuvsmtd7XzxCvHZAr%2B3MiMu59qRDK%2BHNeAPWn580%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d45e2e79e08c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":235508,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 945 x 721, 8-bit/color RGBA, non-interlaced","md5":"a577aaaddca8d5101afbf286ab558a70","sha1":"7ce540787095e0b6c745a3acd512c9a94af1b331","sha256":"973bc2611ba636938f982462cbedd0b9d4bca378a3782c88e5ef30e7128fadee","sha512":"0376c5ededc8f1373406577068f58e3b09b78d9f6ab5677e22f5b12f653122f304e1e33247c66d227116734cdd60a59b61a434f17fb7adbd7032bace690968c7","ssdeep":"6144:bZ4/KGpqWp1P7tKtLM9450G7vNwpqEDZRlkqF:bQKG0Wp1P7tKtLM9adKpqEDZROi","tlshash":"fb3423d138ade10842266f15ad9dcd3d126332e236207a56bd3b80e1346717b77ba2f7","first_seen":"2026-02-13T07:39:00.134548Z","last_seen":"2026-03-18T11:44:32.275767Z","times_seen":8,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xeraxium.live/images/partners/a-xs-alt.png","fqdn":"xeraxium.live","domain":"xeraxium.live","tld":"live"},"ip":{"addr":"104.21.79.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xeraxium.live/","date":"2026-02-27T07:14:37.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeraxium.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 23:03:07 GMT","end":"Sat, 16 May 2026 00:03:05 GMT"},"fingerprint":{"sha1":"E0:F7:79:29:95:55:F8:96:1E:98:A3:04:89:AC:2F:27:79:83:08:A3","sha256":"84:6A:92:08:69:C5:96:6E:64:7A:FA:F0:87:99:5C:D5:55:9C:B5:7C:C0:C4:A9:61:D7:71:A1:C2:33:62:1B:42"}}},"request":{"raw":"GET /images/partners/a-xs-alt.png HTTP/1.1\r\nHost: xeraxium.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xeraxium.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 07:14:37 GMT\r\ncontent-length: 3531\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"3e77197d5d2a9aca240647bca50ef6ec\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3HyqLh0wTjqqYlPwzm4ZyxVdNepC52yWYjbj0cq8%2B6NK1o8xTbD5H8aQS8Ca0E5Q%2BOh7Z7pBV9pBa8ulZfOKgaF5bjKvWbBOdXgR8%2B0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d45e2e7ae14c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3531,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 117 x 60, 8-bit/color RGBA, non-interlaced","md5":"5de13c86a71739c72e2ea667616e4282","sha1":"c3914277f53eba8dac19e0df7f393cb0c3838435","sha256":"4fcf103d66af8ff69e7192a5b5ca2c4b1982f4d633f7ffd8771caae2fa06e7ee","sha512":"7b1dbe5572ffc75221d425975818293e6816c279ccd34a58938a6984894d1b2d4b4fc2cfa062e6c63de135851befebea2055d7aef2ac006eb670d999c1b294f8","ssdeep":"","tlshash":"62716dc8e8684e24d34cdb4174ff42c25cd61b014f91bc6c79ced4b1aa252b41c386cb","first_seen":"2023-09-24T21:26:00Z","last_seen":"2026-03-18T11:44:32.308394Z","times_seen":15,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xeraxium.live/assets/js/jquery.bundle.js?ver=210","fqdn":"xeraxium.live","domain":"xeraxium.live","tld":"live"},"ip":{"addr":"104.21.79.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xeraxium.live/","date":"2026-02-27T07:14:37.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeraxium.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 23:03:07 GMT","end":"Sat, 16 May 2026 00:03:05 GMT"},"fingerprint":{"sha1":"E0:F7:79:29:95:55:F8:96:1E:98:A3:04:89:AC:2F:27:79:83:08:A3","sha256":"84:6A:92:08:69:C5:96:6E:64:7A:FA:F0:87:99:5C:D5:55:9C:B5:7C:C0:C4:A9:61:D7:71:A1:C2:33:62:1B:42"}}},"request":{"raw":"GET /assets/js/jquery.bundle.js?ver=210 HTTP/1.1\r\nHost: xeraxium.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xeraxium.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 07:14:37 GMT\r\netag: W/\"62e182d1ac781d7d6b8ff2c832a23c1a\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OJPRLwRSgYKX7rr72ea6I8gKuZ1T%2FM87hfqpcdlBaf79iv52XDLxuV%2Faa9zFCFD39H0ix8tRCmB647TcbadixbjI9UFf8Brwrw9yFi8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d45e2e7ae1ac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1144905,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65514), with CRLF line terminators","md5":"c30cc7f13d3cf3dbcfc82f4742761593","sha1":"c63743d996caefecaaf7b0d35cc0616dd82a2b1c","sha256":"601e4e17f727ca17ceac6a14640222717c3ee3b3f217c49f9ed97cff75c9bccb","sha512":"3cbf417547a82ad5b1f09687e77bd73c0347b930c7ee874a7bec53749039914001532753397adea9163f359a042c8c9bb37806392f8f8b61973378d2b1481471","ssdeep":"12288:2AtNbYZDtlkJoul7LNY07PVQCkf+NjvIdU7qSJ+pgdB/ORXRbCFH69wKJw:BbcDjWoul7LNnkf+57t+u1OR8MJw","tlshash":"9925e74473c0746903976ab9a62fb1caf17b08fa3446440af165fcd479b8a1af5e3b34","first_seen":"2026-02-13T07:39:00.131611Z","last_seen":"2026-03-18T11:44:32.325113Z","times_seen":8,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xeraxium.live/form/subscribe.php","fqdn":"xeraxium.live","domain":"xeraxium.live","tld":"live"},"ip":{"addr":"104.21.79.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-27T07:14:40.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeraxium.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 23:03:07 GMT","end":"Sat, 16 May 2026 00:03:05 GMT"},"fingerprint":{"sha1":"E0:F7:79:29:95:55:F8:96:1E:98:A3:04:89:AC:2F:27:79:83:08:A3","sha256":"84:6A:92:08:69:C5:96:6E:64:7A:FA:F0:87:99:5C:D5:55:9C:B5:7C:C0:C4:A9:61:D7:71:A1:C2:33:62:1B:42"}}},"request":{"raw":"POST /form/subscribe.php HTTP/1.1\r\nHost: xeraxium.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 34\r\nOrigin: https://xeraxium.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xeraxium.live/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":34,"data":"contact-email=\u0026form-anti-honeypot="}},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Fri, 27 Feb 2026 07:14:40 GMT\r\ncontent-length: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OpB8ilQfi7fWms9HF6iP1YG42CK3pjvTz2IBbEdKK4Ees2kRl3PYUmfiW3azHG2mzcTek5CubZN9pO22BI3CUT1%2BzSNWwXONSa1fiVU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\ncf-ray: 9d45e2f9c91ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T09:08:24.162324Z","times_seen":14271838,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xeraxium.live/eth.png","fqdn":"xeraxium.live","domain":"xeraxium.live","tld":"live"},"ip":{"addr":"104.21.79.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xeraxium.live/","date":"2026-02-27T07:14:37.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeraxium.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 23:03:07 GMT","end":"Sat, 16 May 2026 00:03:05 GMT"},"fingerprint":{"sha1":"E0:F7:79:29:95:55:F8:96:1E:98:A3:04:89:AC:2F:27:79:83:08:A3","sha256":"84:6A:92:08:69:C5:96:6E:64:7A:FA:F0:87:99:5C:D5:55:9C:B5:7C:C0:C4:A9:61:D7:71:A1:C2:33:62:1B:42"}}},"request":{"raw":"GET /eth.png HTTP/1.1\r\nHost: xeraxium.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xeraxium.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 07:14:37 GMT\r\ncontent-length: 2780\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"40a8d2777686068afa48bcf844906ff3\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gOh8Ttk69jApCegLVq6e5TL8kEqgw3UQGDuMOIjaV%2FEY9bMtgNU8vdAGmIruC%2B9JdzFoaHJlTE40188IvW8Z8bfXgD5OFxCsLSvC1tc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d45e2e79e0ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2780,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"856bfdb63dc0d6fad6b92fc6a29719e1","sha1":"2fed2e3409ce1bbbfb37f6da4abeecc30cefc021","sha256":"eebe29898b8b7de5c9e47daab474152be8095e3ab42d768b84b085c5a12b95c6","sha512":"a61c0a108d63c89ae62a2b03108480b5c08bda0e80049089a2a84cd7973bd9e94dcd2902e166b92e1d7ad5b7356357c9b181cb1b6051dd25913e82d2420154f0","ssdeep":"","tlshash":"51518cc7a707f33a9c866161bed44509f244d80a8160b31c0f33a7572c8a83ea4f324f","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-04-27T08:33:05.601607Z","times_seen":21054,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xeraxium.live/avax.png","fqdn":"xeraxium.live","domain":"xeraxium.live","tld":"live"},"ip":{"addr":"104.21.79.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xeraxium.live/","date":"2026-02-27T07:14:37.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeraxium.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 23:03:07 GMT","end":"Sat, 16 May 2026 00:03:05 GMT"},"fingerprint":{"sha1":"E0:F7:79:29:95:55:F8:96:1E:98:A3:04:89:AC:2F:27:79:83:08:A3","sha256":"84:6A:92:08:69:C5:96:6E:64:7A:FA:F0:87:99:5C:D5:55:9C:B5:7C:C0:C4:A9:61:D7:71:A1:C2:33:62:1B:42"}}},"request":{"raw":"GET /avax.png HTTP/1.1\r\nHost: xeraxium.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xeraxium.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 07:14:37 GMT\r\ncontent-length: 3759\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"30de61dbf5659c5e3d841e3cc11e8de6\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D%2BLPoWid%2B8F8J%2BeTHeWttX2PhxNStGr%2BmivywJuPWn2sIQtREbFOGu84AEryeON4kV%2FyfyHa5r97NmEEUXAmYRrS8SdKBYni7vJRL6I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d45e2e7ae11c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3759,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"8634cee42b68c501da8d76beee00bf86","sha1":"346a50344174ec7c53cdd48080a55f7cd3a7c164","sha256":"890b9f9ed3f5ab8390b86f93b5b8ba0c2d5d50a5dc21668734b3537bc3a65f53","sha512":"405e62a3f1c24476041f90ddb5e50801693578a1b3e108919edcde05bb429bad77fc60b0096adbaa9a2704835ebd7dc165720ad0a14ada9498b3234d361ef259","ssdeep":"","tlshash":"fa715be58e8349f8b5ce461d652892f55cc24943d9f987101ee467921800a82f0a90e2","first_seen":"2024-01-31T18:12:49Z","last_seen":"2026-04-27T08:33:06.128259Z","times_seen":1675,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"xeraxium.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}