{"report_id":"24305f3f-37e6-4d9d-b7a5-6bb7aaa023c6","version":0,"status":"done","tags":[],"date":"2026-06-27T00:29:47Z","url":{"schema":"https","addr":"exagezo.com/","fqdn":"exagezo.com","domain":"exagezo.com","tld":"com"},"ip":{"addr":"104.21.94.139","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"exagezo.com/opt/out","fqdn":"exagezo.com","domain":"exagezo.com","tld":"com"},"title":"exagezo.com/opt/out","dom":{"size":82450,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (63822)","md5":"49e0d1de0adde8841115a4ca9b1a38ea","sha1":"2b24aae7cce3c508d2bfaa2d04e0ade722d1d416","sha256":"ec17b7fbb0dbae579f13e0900c7ad2f870df69342f203db3aa44dc430fb5832d","sha512":"ecb85e947b5ffa6453d7ef9337c88c1c98c5803cc7e1879942662a0e1bf585c3d4bcd15c8e378bcee2a8770a1f6489ecaa5080cf3084030aa8009aabfc963fc8","ssdeep":"768:t29fhOLOxw1gXt3UHWJzvhdPrxmiTTmzzqr2VGAx/m:SYLOxwOJUHWJzvhdPNLTSfAAx/m","tlshash":"15832533461934264533c6c530b95b3be69aae4ff6a30a011eecd7fb1be9ca0751b119","dom_hash":"domhash731d534a6def045296d569590a3d1df4","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"exagezo.com/","fqdn":"exagezo.com","domain":"exagezo.com","tld":"com"},"ip":{"addr":"104.21.94.139","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-01T00:29:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"exagezo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"exagezo.com","ip":{"addr":"104.21.94.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-24","domain_rank":0,"first_seen":"2026-06-27T00:26:54.368326Z","last_seen":"2026-06-27T00:26:54.368327Z","alert_count":8,"request_count":8,"received_data":520203,"sent_data":4226,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-21T22:22:12.048317Z","alert_count":0,"request_count":1,"received_data":3099,"sent_data":502,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"exagezo.com/build/opt_out.js","fqdn":"exagezo.com","domain":"exagezo.com","tld":"com"},"ip":{"addr":"104.21.94.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3db398d82bcf5cfa1835f7f4c5331c3f","sha1":"ba1f8c6aad32dd56e020ec69fadc83eba61c0ae1","sha256":"623388f11311de0fd5347d31bd906b6891e23a49d096202a44ffbe4379b94eee","sha512":"371c42f80dd6e3208ab808a7c54a0d9393600ac489f1be9cd974116f17e078d145c922d1b3ee026e124f0eacc8e3a47fba37efcf293124122486168e849e219a","ssdeep":"6144:Y/pLnhRMn0E58zzw5bZx+a+4+KIc6Ef5P52ceP:qLhRMn0E5uzQbZXINJ5","tlshash":"7584a4ebe67ca736a1e57735958eb38e6a9c7c93c80c817836d3e48f52788d0702d614","size":392785,"data":"","first_seen":"2023-03-07T01:07:27Z","last_seen":"2026-06-29T00:11:31.506182Z","times_seen":485,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a7fcf1e1e31aa3b355c8e3df63f3a8d","sha1":"c3fb079b00a18b21871cdadcb41e8f879073833e","sha256":"929fc47b4816bb86fa63d82aedf5c34c9012a027fbc6a4bd4dc2c4748f2a9359","sha512":"afad337b235f8b7d44e1f547e3fe5649a48bb843e1ad4b92a03ec0288676f016221acc083c18e51bed365182ef6f03e8acaeba9ebfb2c842399392a14d8918bd","ssdeep":"","tlshash":"48d023f518b6883561a8024a7075d3d4257131547711f748c1d8cd3f6e21dd304f1d5c","size":217,"data":"","first_seen":"2026-06-27T00:29:49.117063Z","last_seen":"2026-06-27T00:29:49.117063Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exagezo.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"exagezo.com","domain":"exagezo.com","tld":"com"},"ip":{"addr":"104.21.94.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"26556d45133354eb6b276b1c54ab1836","sha1":"d4791f6fb89493250ce09366fbde5f50e59acb12","sha256":"0aa1d47717d44699fe555c572e20ea21f8ef12f33ffa8b03adc9f7562c50995f","sha512":"ef39a68473dfd8d4e66bf57494daf6a27510e3963024ef6db4edbe73bb7e0c62695d43ca7c7f8ae78615d38cb738dc14b9251636819844c3885ddd2d965fb3c5","ssdeep":"384:OVk5sWWRUEaarZ3i+d2P/jjqgFuUL89AmCaqWlMdbLBWWhKUil3NGdd:OVkdWwqgkDAouNwROd","tlshash":"a992858a39d2702c83395477047777c7b5b7ba7010891c08c210e6e4adb6bacfd6add9","size":19824,"data":"","first_seen":"2026-06-27T00:29:49.111733Z","last_seen":"2026-06-27T00:44:01.31739Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"exagezo.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/25e6c66701a0/main.js?","fqdn":"exagezo.com","domain":"exagezo.com","tld":"com"},"ip":{"addr":"104.21.94.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exagezo.com/opt/out","date":"2026-06-27T00:29:23.219Z","timestamp":1782520163219,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exagezo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 07:20:01 GMT","end":"Tue, 22 Sep 2026 08:18:50 GMT"},"fingerprint":{"sha1":"97:BA:E2:37:DB:7D:52:FA:13:4D:BA:37:12:69:C9:93:00:4C:0F:34","sha256":"46:3F:D9:AC:45:78:51:1E:BF:C3:E9:DB:1C:B2:B9:DF:97:77:75:8B:00:C2:4D:1C:84:51:22:CA:98:B9:97:BA"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/25e6c66701a0/main.js? HTTP/1.1\r\nHost: exagezo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8084f0b31dd715c575708075276296d6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: zstd\r\ndate: Sat, 27 Jun 2026 00:29:23 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a120564c1b365ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19824,"size_decoded":9297,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (19824), with no line terminators","md5":"26556d45133354eb6b276b1c54ab1836","sha1":"d4791f6fb89493250ce09366fbde5f50e59acb12","sha256":"0aa1d47717d44699fe555c572e20ea21f8ef12f33ffa8b03adc9f7562c50995f","sha512":"ef39a68473dfd8d4e66bf57494daf6a27510e3963024ef6db4edbe73bb7e0c62695d43ca7c7f8ae78615d38cb738dc14b9251636819844c3885ddd2d965fb3c5","ssdeep":"384:OVk5sWWRUEaarZ3i+d2P/jjqgFuUL89AmCaqWlMdbLBWWhKUil3NGdd:OVkdWwqgkDAouNwROd","tlshash":"a992858a39d2702c83395477047777c7b5b7ba7010891c08c210e6e4adb6bacfd6add9","first_seen":"2026-06-27T00:29:49.111733Z","last_seen":"2026-06-27T00:44:01.31739Z","times_seen":3,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"exagezo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exagezo.com/build/images/flags.007b2705.png","fqdn":"exagezo.com","domain":"exagezo.com","tld":"com"},"ip":{"addr":"104.21.94.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exagezo.com/opt/out","date":"2026-06-27T00:29:23.223Z","timestamp":1782520163223,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exagezo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 07:20:01 GMT","end":"Tue, 22 Sep 2026 08:18:50 GMT"},"fingerprint":{"sha1":"97:BA:E2:37:DB:7D:52:FA:13:4D:BA:37:12:69:C9:93:00:4C:0F:34","sha256":"46:3F:D9:AC:45:78:51:1E:BF:C3:E9:DB:1C:B2:B9:DF:97:77:75:8B:00:C2:4D:1C:84:51:22:CA:98:B9:97:BA"}}},"request":{"raw":"GET /build/images/flags.007b2705.png HTTP/1.1\r\nHost: exagezo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exagezo.com/build/css/opt_out.css\r\nCookie: PHPSESSID=8084f0b31dd715c575708075276296d6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 00:29:23 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nlast-modified: Wed, 03 Jun 2026 07:12:54 GMT\r\netag: \"114c9-653542805fb9a\"\r\naccept-ranges: bytes\r\nage: 171\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BSTD5rkrzOYaiOgpnkKkME2HkPbeGjgT5qWxliikWE31ePF6fTCIwTwiLAzw8ank8qVpcufa2fyUq7PuW3ffNUYYHojSEh31%2Fgo2h8EtWu6LUqBMwK3fxOd%2FvjowSw%3D%3D\"}]}\r\ncontent-length: 70857\r\ncf-ray: a120564c2b375ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70857,"size_decoded":71559,"mime_type":"image/png","magic":"PNG image data, 5652 x 15, 8-bit/color RGBA, non-interlaced","md5":"416250f60d785a2e02f17e054d2e4e44","sha1":"21572c9751e5a3dc20395befa0fcb349c32c4811","sha256":"0a012cf808a24573168308916092d2d4bd3f2b4af8e16b59167013cc77acee55","sha512":"cf1e7acf47464f00d206e9149475e22b8ea5a31727fa16344cd151384d850b83ece5e9abe4ac62861dba0dc3d3410955611d94665b60e2faa0c3d7a3d7c88404","ssdeep":"1536:cBBfgWxg7McnRdaRx9krb5LhxHG1gmvlpWUZA1eog3e7xr:Lg+3n3ax9kHV3Wgmdg2A1Y3elr","tlshash":"9763019797adf1d82a92274bef801109ae6c2b3d5d7c1da372cf1d532ae12c306c8586","first_seen":"2023-04-05T15:31:12Z","last_seen":"2026-06-29T23:06:11.246434Z","times_seen":24534,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"exagezo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exagezo.com/cdn-cgi/challenge-platform/h/b/jsd/oneshot/25e6c66701a0/0.5979179461600732:1782518421:lE0vEVux5CfzLEaaBhIprL28bpyg88E2oDX_YsGoZ7A/a12056471a945ebd","fqdn":"exagezo.com","domain":"exagezo.com","tld":"com"},"ip":{"addr":"104.21.94.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exagezo.com/opt/out","date":"2026-06-27T00:29:23.300Z","timestamp":1782520163300,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exagezo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 07:20:01 GMT","end":"Tue, 22 Sep 2026 08:18:50 GMT"},"fingerprint":{"sha1":"97:BA:E2:37:DB:7D:52:FA:13:4D:BA:37:12:69:C9:93:00:4C:0F:34","sha256":"46:3F:D9:AC:45:78:51:1E:BF:C3:E9:DB:1C:B2:B9:DF:97:77:75:8B:00:C2:4D:1C:84:51:22:CA:98:B9:97:BA"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/25e6c66701a0/0.5979179461600732:1782518421:lE0vEVux5CfzLEaaBhIprL28bpyg88E2oDX_YsGoZ7A/a12056471a945ebd HTTP/1.1\r\nHost: exagezo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 13242\r\nOrigin: https://exagezo.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exagezo.com/opt/out\r\nCookie: PHPSESSID=8084f0b31dd715c575708075276296d6\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: 1S9uLEec05dwQFZIYgankbePVvsaRWENrpD/Ax54IqyhedMhV7RIHZUmCl6oIs9OQ0T2hzYVt3ybyQKcIM0DM/hIgS2z+XVbxARKzgaO4YmmNALL5hXCC1qYCsWCOdpKrK+D0Pi3viZE+Y3FCqpMnOwGggq8khHLS8JwnCZd5zSXIHewUB8JgF0CdPW+mLaNS61yW7e4vkqWEDGZmMhah65ucBMD/cIqnLClbYjZN8gwSiJYqgiKdL9ywWyZodkjmQDEt2NsJnoCBtBdVGZpvQ==$vazMqYihKfva980lKy6w5g==\r\nset-cookie: cf_clearance=5JjgWQ2uHUFi1ap8B.W3vM55soz6RIYl21Vj.RCbArc-1782520163-1.2.1.1-J35FoLd.kvx2M0KZrT.6B30vELToKgg4QDucrE7PvYAD3m_xJSyqi.BhvVJXKhaTMjS69GLVRz2l718E1s58Ad.z0vnMuR8ranjV3zobj3sUwVo1uXhvhoUTm7jbMpbg19Oh30jy9ZYS6YzA7Kz..jwHT98Oi2DMUBL0U18ToiGwbZdaLcXPBxTsERZUoRyYCcJeIGc8D8fNjSZIwswqA9I0hOuE38D5vvdiVpMIrujbSv5T0pexZehFsZgyWLHkkFdZoN1xeVKohgoXMjqy9dMMKCqgRyf0aOH2ooJbdZm_D6.5wsL.Y2l1gm8iKfDBs7VGCWu2hPFerLRQKGHxVg; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=exagezo.com; Expires=Sun, 27 Jun 2027 00:29:23 GMT\r\ntiming-allow-origin: https://exagezo.com\r\ndate: Sat, 27 Jun 2026 00:29:23 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a120564cab425ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":15069,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-30T03:32:22.804603Z","times_seen":16843948,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"exagezo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exagezo.com/opt/out","fqdn":"exagezo.com","domain":"exagezo.com","tld":"com"},"ip":{"addr":"104.21.94.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-27T00:29:22.416Z","timestamp":1782520162416,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exagezo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 07:20:01 GMT","end":"Tue, 22 Sep 2026 08:18:50 GMT"},"fingerprint":{"sha1":"97:BA:E2:37:DB:7D:52:FA:13:4D:BA:37:12:69:C9:93:00:4C:0F:34","sha256":"46:3F:D9:AC:45:78:51:1E:BF:C3:E9:DB:1C:B2:B9:DF:97:77:75:8B:00:C2:4D:1C:84:51:22:CA:98:B9:97:BA"}}},"request":{"raw":"GET /opt/out HTTP/1.1\r\nHost: exagezo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 00:29:22 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\ncache-control: max-age=0, must-revalidate, private\r\nexpires: Sat, 27 Jun 2026 00:29:22 GMT\r\nset-cookie: PHPSESSID=8084f0b31dd715c575708075276296d6; path=/; httponly\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fl2QCQw%2FPsBa5JUWY292FFIZr2C8qikWRWZO5RMCTAqzsTaEiNkv3EMt8R2WmaNpE80fmoArobCrpRtd1xH2sPLrR6ZXXSbNe%2FiI11oAz78aHzOPQK6fjFoYE4vO1g%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a12056471a945ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":7905,"size_decoded":5599,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (4758)","md5":"1774417708b88497eb02e768fe790bf5","sha1":"ef7711c490d4388a8893c36a6427ddbff330cab7","sha256":"b11e99a9a4d8ea0d7628e120582e1e99352ee5cdbf28d1dd3756504a5428c843","sha512":"2734a25620bf83e4654b93e0a15f9068881b4dadd0288d5f719a80209569a32c93d0473c3b94c166d4b7e4bd4652dd7af1efbf2554f151690e256aa7443f6a89","ssdeep":"192:kohl3654OpFm55/KaL/qrGf+siKjfIBnx/k:Phou2Fmzzqr2+siKEBnx/k","tlshash":"47f13b703ab14d6b444150e6b8e5f6457e88e417ce4fd16872dc83f82fc2ed208af999","first_seen":"2026-06-27T00:29:49.114049Z","last_seen":"2026-06-27T00:29:49.114049Z","times_seen":1,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"exagezo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Source+Sans+Pro","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exagezo.com/opt/out","date":"2026-06-27T00:29:22.970Z","timestamp":1782520162970,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:10 GMT","end":"Mon, 31 Aug 2026 08:38:09 GMT"},"fingerprint":{"sha1":"8A:2F:DC:6F:C0:09:07:D3:E5:9C:B7:EE:C2:C4:63:DC:59:36:B5:1B","sha256":"64:7C:E4:55:AB:5C:58:7E:89:F1:19:3B:95:DB:7B:4B:E6:75:42:2C:0C:51:2E:66:85:F5:BB:51:58:08:39:19"}}},"request":{"raw":"GET /css?family=Source+Sans+Pro HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exagezo.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 27 Jun 2026 00:29:23 GMT\r\ndate: Sat, 27 Jun 2026 00:29:23 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2415,"size_decoded":1300,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"937c0f60d71292a5a8d1cbdbc6c80621","sha1":"3a15491027d6ba63d9720887c07b9677aa405a16","sha256":"109ce15b2cae910659d99ca36afcbdc552669aac69736f67af8d552e0e292117","sha512":"9c7c3bb34a0cc0ed674bc891e4007e5068c50658f104157ef46ba909230b2eb8901d2436240d7785417347ffc021dcf5786b55d3e6253aab323fd28e33a54beb","ssdeep":"","tlshash":"53419ef3401ea84897a31cca23de3e369e4f65106186d17adffd085cec75c2a5264b1d","first_seen":"2025-09-11T21:22:52.791197Z","last_seen":"2026-06-30T02:28:34.618699Z","times_seen":2849,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":2,"connect":32,"send":0,"wait":67,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exagezo.com/build/css/opt_out.css","fqdn":"exagezo.com","domain":"exagezo.com","tld":"com"},"ip":{"addr":"104.21.94.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exagezo.com/opt/out","date":"2026-06-27T00:29:22.974Z","timestamp":1782520162974,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exagezo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 07:20:01 GMT","end":"Tue, 22 Sep 2026 08:18:50 GMT"},"fingerprint":{"sha1":"97:BA:E2:37:DB:7D:52:FA:13:4D:BA:37:12:69:C9:93:00:4C:0F:34","sha256":"46:3F:D9:AC:45:78:51:1E:BF:C3:E9:DB:1C:B2:B9:DF:97:77:75:8B:00:C2:4D:1C:84:51:22:CA:98:B9:97:BA"}}},"request":{"raw":"GET /build/css/opt_out.css HTTP/1.1\r\nHost: exagezo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exagezo.com/opt/out\r\nCookie: PHPSESSID=8084f0b31dd715c575708075276296d6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 00:29:22 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 03 Jun 2026 07:12:54 GMT\r\netag: \"5b38-653542805fb9a-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 171\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1qzD06eOnIvmJfIkYK94MDQY7uyIj8duAFVmfdx04sv9M0Itu6Br6W768A7c8tIFlVOtj0yGwJZk4wP9Wg%2FFaS9c7nXqO3ifYL5DOdQ6Q5REL%2FuyH2YxFO%2FiaOqS9g%3D%3D\"}]}\r\ncontent-length: 3835\r\ncf-ray: a120564a9aec5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23352,"size_decoded":4589,"mime_type":"text/css","magic":"ASCII text, with very long lines (23352), with no line terminators","md5":"661e66c0c3e76d3eb957f5d1dc58df15","sha1":"c74d4d4fe7aa038fc81b658f231432ae9b6bc102","sha256":"72b78573841119b6e3fe3f7ee0845e126fb525a6d7f05c7268306a458a726fdc","sha512":"da60fc894c537a81207b721b9176b05acfa4fbc6ca3c47890421de953bacad62efab86900a8be0f7b2b67fc73fd4ff0c82c3f1d5debbd12d640bd7cbba7dbe07","ssdeep":"192:6wl+Oh/TVc6jU+4v7fix43obCfCfIlS4J+7BW4n:6wlnhK6jU+4vTixaACaglSw+7Q4n","tlshash":"f6a296270ae3242af527d5e251a08eb5373b8c07f4264fba89153e7c93825d519f3fa1","first_seen":"2024-04-18T09:57:30Z","last_seen":"2026-06-29T00:11:31.500556Z","times_seen":340,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"exagezo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exagezo.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"exagezo.com","domain":"exagezo.com","tld":"com"},"ip":{"addr":"104.21.94.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exagezo.com/opt/out","date":"2026-06-27T00:29:23.189Z","timestamp":1782520163189,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exagezo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 07:20:01 GMT","end":"Tue, 22 Sep 2026 08:18:50 GMT"},"fingerprint":{"sha1":"97:BA:E2:37:DB:7D:52:FA:13:4D:BA:37:12:69:C9:93:00:4C:0F:34","sha256":"46:3F:D9:AC:45:78:51:1E:BF:C3:E9:DB:1C:B2:B9:DF:97:77:75:8B:00:C2:4D:1C:84:51:22:CA:98:B9:97:BA"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: exagezo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8084f0b31dd715c575708075276296d6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/25e6c66701a0/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\ndate: Sat, 27 Jun 2026 00:29:23 GMT\r\nserver: cloudflare\r\ncf-ray: a120564bfb245ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-30T03:32:22.804603Z","times_seen":16843948,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"exagezo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exagezo.com/","fqdn":"exagezo.com","domain":"exagezo.com","tld":"com"},"ip":{"addr":"104.21.94.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-27T00:29:22.173Z","timestamp":1782520162173,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exagezo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 07:20:01 GMT","end":"Tue, 22 Sep 2026 08:18:50 GMT"},"fingerprint":{"sha1":"97:BA:E2:37:DB:7D:52:FA:13:4D:BA:37:12:69:C9:93:00:4C:0F:34","sha256":"46:3F:D9:AC:45:78:51:1E:BF:C3:E9:DB:1C:B2:B9:DF:97:77:75:8B:00:C2:4D:1C:84:51:22:CA:98:B9:97:BA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: exagezo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 00:29:22 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\ncache-control: no-cache, private\r\nlocation: http://exagezo.com/opt/out\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hzz9pwVPR37crSiGdyzE6ZefcXQlG9w5QVZWrknYyDKehm%2Bt5ijnq0UPxUWgTgjtuw6hBuXN7jg2G15Xcu3eU%2BdTBkR0hlEJX9Zc5CU%2F3fNto9aQfYMAFvLiYT9d3w%3D%3D\"}]}\r\ncf-ray: a1205645ca6a5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-30T03:32:22.804603Z","times_seen":16843948,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":9,"connect":17,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"exagezo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exagezo.com/build/opt_out.js","fqdn":"exagezo.com","domain":"exagezo.com","tld":"com"},"ip":{"addr":"104.21.94.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exagezo.com/opt/out","date":"2026-06-27T00:29:22.976Z","timestamp":1782520162976,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exagezo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 07:20:01 GMT","end":"Tue, 22 Sep 2026 08:18:50 GMT"},"fingerprint":{"sha1":"97:BA:E2:37:DB:7D:52:FA:13:4D:BA:37:12:69:C9:93:00:4C:0F:34","sha256":"46:3F:D9:AC:45:78:51:1E:BF:C3:E9:DB:1C:B2:B9:DF:97:77:75:8B:00:C2:4D:1C:84:51:22:CA:98:B9:97:BA"}}},"request":{"raw":"GET /build/opt_out.js HTTP/1.1\r\nHost: exagezo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exagezo.com/opt/out\r\nCookie: PHPSESSID=8084f0b31dd715c575708075276296d6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 00:29:22 GMT\r\ncontent-type: text/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 03 Jun 2026 07:12:54 GMT\r\netag: \"5fe51-653542805fb9a-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 171\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JJmnUsuHj3%2BYqfzE7t6g4p779rZuArMSQRgCzriw2bl%2F%2F4HTzSZlmBveK7GqZMERsOsap3BVVOZ39Bd85F4i94Io0ergkgShTSnd6Q6O%2BptfwEfdVkoU2cHmGplsaw%3D%3D\"}]}\r\ncf-ray: a120564a9aed5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":392785,"size_decoded":105693,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (59378)","md5":"3db398d82bcf5cfa1835f7f4c5331c3f","sha1":"ba1f8c6aad32dd56e020ec69fadc83eba61c0ae1","sha256":"623388f11311de0fd5347d31bd906b6891e23a49d096202a44ffbe4379b94eee","sha512":"371c42f80dd6e3208ab808a7c54a0d9393600ac489f1be9cd974116f17e078d145c922d1b3ee026e124f0eacc8e3a47fba37efcf293124122486168e849e219a","ssdeep":"6144:Y/pLnhRMn0E58zzw5bZx+a+4+KIc6Ef5P52ceP:qLhRMn0E5uzQbZXINJ5","tlshash":"7584a4ebe67ca736a1e57735958eb38e6a9c7c93c80c817836d3e48f52788d0702d614","first_seen":"2023-03-07T01:07:27Z","last_seen":"2026-06-29T00:11:31.506182Z","times_seen":485,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"exagezo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}