{"report_id":"2c8a1fac-25ba-4b3b-bb9b-dfceb738e115","version":6,"status":"done","tags":[],"date":"2026-02-14T02:58:00Z","url":{"schema":"https","addr":"getxeno.org/","fqdn":"getxeno.org","domain":"getxeno.org","tld":"org"},"ip":{"addr":"104.21.59.212","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"getxeno.org/","fqdn":"getxeno.org","domain":"getxeno.org","tld":"org"},"title":"Xeno Executor - Free Keyless Roblox Script Executor for PC | Download","dom":{"size":21950,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (457)","md5":"e05c08e72f90b777e1d6af57e7f80ba3","sha1":"6f6dab7873ebfa6b32dd949b00f669caff239950","sha256":"ba6b0264de4af91959cee28265dc93f6b2ef99cde133f55f0c800db7210e6409","sha512":"45a69f4079ec40f33ca87348b730e338078dc564788b1cb3090f4452f3fc8778869f8286f5531ef0ffe94bcf815b9041a5ca17cd12509d92eec655ccdbabdbec","ssdeep":"384:hRU3c/kwGnP6/gII5OBkUpCVXB6bBRppN4QSxXZLq7:5/gII5OKxQJzZSFhq7","tlshash":"30a2642aeaf0a233019314c29a6963976f57c517a74b9101f1fd129c2fc6d8ece276cd","dom_hash":"domhash00ac1f7d16548698f76aa1d6db7437ec","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"getxeno.org/","fqdn":"getxeno.org","domain":"getxeno.org","tld":"org"},"ip":{"addr":"104.21.59.212","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T02:58:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"getxeno.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"getxeno.org","ip":{"addr":"172.67.184.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-07","domain_rank":0,"first_seen":"2026-02-13T01:33:24.869647Z","last_seen":"2026-02-13T01:33:24.869647Z","alert_count":5,"request_count":5,"received_data":38432,"sent_data":2164,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"getxeno.org/script.js","fqdn":"getxeno.org","domain":"getxeno.org","tld":"org"},"ip":{"addr":"172.67.184.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"804c5ae5fc07b9d37be8a166b1b4aea6","sha1":"940444b9fa3d13f74965bf6f6fbe09d55b887417","sha256":"1eae7068e73af08afaa699b292186dc71e9927008a9b4bdb9879e7786ba598c7","sha512":"d0bfd583911f2516307bf738005269bd89b5c9443f35a26193110822da36bf10c46e94f0f4712cd6d9c8af4ee6c201cb366ad7c5f2e5c17a808ca6303685f6b0","ssdeep":"","tlshash":"a521bb1eb9b03435407b72aad2cf97c57414008b9406cd563dfcca482fc0db55ab2eea","size":1271,"data":"","first_seen":"2026-02-13T01:33:30.431459Z","last_seen":"2026-02-14T02:58:01.091835Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"getxeno.org/style.css","fqdn":"getxeno.org","domain":"getxeno.org","tld":"org"},"ip":{"addr":"172.67.184.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://getxeno.org/","date":"2026-02-14T02:57:38.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxeno.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 11:49:41 GMT","end":"Fri, 08 May 2026 12:45:58 GMT"},"fingerprint":{"sha1":"86:15:FB:55:13:65:55:4D:A8:1D:26:9D:FA:D7:2B:C7:0C:BE:51:E6","sha256":"98:7F:12:D0:11:72:C1:DD:4B:44:21:82:0C:01:0E:A8:34:35:C0:4D:92:3C:1F:66:A6:FF:B8:08:73:9C:61:36"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: getxeno.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getxeno.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:57:39 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F8Bm0SHZKHZbu52%2BFAcT6QjnYQvmw0gPYcLhlXgPxe4JU8sawF8CLFVosS3Ac44TbfpXHvasrw25SE1sFshmQCmd471FDFfIQJ6H\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Sat, 07 Feb 2026 03:59:24 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd94c9a381535a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10159,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"335c505032fdd8cbb5205d767253ea8c","sha1":"e8ffbab93e573ec20a089369dea4dd49a09e241b","sha256":"61757309d22fe4c7d8bd355c51d0cca720b8847857457ddf32c3ede7f2b4e9cd","sha512":"239e0b905f099318379d555cc791c5eedc72ff8c8998ef0420b6c0ee5e6801729e8ca251597445b97f349d27590fa33e97bbf14f8eb244d919e4cc12bf36cbda","ssdeep":"192:7Y5xy01zP+i7h0BnPEKcCCJu0jv7dsmHZjqLjxtQ4L6XRayvmFn3PDn:7ayZPxD2qms3ovsDn","tlshash":"d92261a527709628792fa56572e6db98736ce446c80fcd7d6be5101caccc3f814a2f4c","first_seen":"2026-02-13T01:33:30.427477Z","last_seen":"2026-02-14T02:58:01.089217Z","times_seen":2,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"getxeno.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getxeno.org/favicon.svg","fqdn":"getxeno.org","domain":"getxeno.org","tld":"org"},"ip":{"addr":"172.67.184.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getxeno.org/","date":"2026-02-14T02:57:38.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxeno.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 11:49:41 GMT","end":"Fri, 08 May 2026 12:45:58 GMT"},"fingerprint":{"sha1":"86:15:FB:55:13:65:55:4D:A8:1D:26:9D:FA:D7:2B:C7:0C:BE:51:E6","sha256":"98:7F:12:D0:11:72:C1:DD:4B:44:21:82:0C:01:0E:A8:34:35:C0:4D:92:3C:1F:66:A6:FF:B8:08:73:9C:61:36"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: getxeno.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getxeno.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:57:39 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i025yr21oY0c8PPAwSpccHnmd6fMJXU60Rqc86%2BnYDobdGbLgtNnx1dwBBsTyFvDwkIjn7xs6y8ACj4Lpx9WjCJ0TNn2oLy3ZSJI\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 07 Feb 2026 03:57:48 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd94c9a381635a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":962,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3e677c2313bf3c6c859c1cde3e8f4799","sha1":"1ae2fba5c9d76a296e4caf99fffd561ed48c8f4c","sha256":"d27d51744e396832e9d882a673152cc05c9e1ee8b52a1b1869c987758bfe4188","sha512":"73ee5bf1c40126aa9ed4c7faca53c5c4087538c72cf0fe4e3b2417e490461a8affc113faa4ca5c67786d757a1eecae0c601a293752abdc12832b03fec11d86e3","ssdeep":"","tlshash":"28117aa6c2e8983ee519d118fb9070302b3c09e34749d220703e4f781b185cbac6faf8","first_seen":"2026-02-13T01:33:30.429269Z","last_seen":"2026-02-14T02:58:01.090377Z","times_seen":2,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"getxeno.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getxeno.org/script.js","fqdn":"getxeno.org","domain":"getxeno.org","tld":"org"},"ip":{"addr":"172.67.184.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://getxeno.org/","date":"2026-02-14T02:57:38.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxeno.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 11:49:41 GMT","end":"Fri, 08 May 2026 12:45:58 GMT"},"fingerprint":{"sha1":"86:15:FB:55:13:65:55:4D:A8:1D:26:9D:FA:D7:2B:C7:0C:BE:51:E6","sha256":"98:7F:12:D0:11:72:C1:DD:4B:44:21:82:0C:01:0E:A8:34:35:C0:4D:92:3C:1F:66:A6:FF:B8:08:73:9C:61:36"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: getxeno.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getxeno.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:57:38 GMT\r\ncontent-type: text/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lltQJuZUuvMqSmmGOMCKWtEbsNp0D2e5BR4sJEQzlTFumUd5VFI3mPLkOsda6tfmSoKwjEGVHu0vy8JybX9WAWI%2Bz0jEnMOH9mPH\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Sat, 07 Feb 2026 03:59:28 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd94c9a381735a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1271,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"804c5ae5fc07b9d37be8a166b1b4aea6","sha1":"940444b9fa3d13f74965bf6f6fbe09d55b887417","sha256":"1eae7068e73af08afaa699b292186dc71e9927008a9b4bdb9879e7786ba598c7","sha512":"d0bfd583911f2516307bf738005269bd89b5c9443f35a26193110822da36bf10c46e94f0f4712cd6d9c8af4ee6c201cb366ad7c5f2e5c17a808ca6303685f6b0","ssdeep":"","tlshash":"a521bb1eb9b03435407b72aad2cf97c57414008b9406cd563dfcca482fc0db55ab2eea","first_seen":"2026-02-13T01:33:30.431459Z","last_seen":"2026-02-14T02:58:01.091835Z","times_seen":2,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"getxeno.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getxeno.org/favicon.svg","fqdn":"getxeno.org","domain":"getxeno.org","tld":"org"},"ip":{"addr":"172.67.184.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getxeno.org/","date":"2026-02-14T02:57:39.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxeno.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 11:49:41 GMT","end":"Fri, 08 May 2026 12:45:58 GMT"},"fingerprint":{"sha1":"86:15:FB:55:13:65:55:4D:A8:1D:26:9D:FA:D7:2B:C7:0C:BE:51:E6","sha256":"98:7F:12:D0:11:72:C1:DD:4B:44:21:82:0C:01:0E:A8:34:35:C0:4D:92:3C:1F:66:A6:FF:B8:08:73:9C:61:36"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: getxeno.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getxeno.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:57:39 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EVmrGi4m1kU0SU3FezvNj%2B%2FMN6wSeUBLY2IV6r28cSYf%2FhIP9k7irBKuxjnR%2Fn3pfuAUjAnGaaGVG4cLu%2F0qsGE1gT1vsfex%2B6v6\"}]}\r\npriority: u=6,i=?0\r\nlast-modified: Sat, 07 Feb 2026 03:57:48 GMT\r\ncontent-encoding: br\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd94c9b983635a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":962,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3e677c2313bf3c6c859c1cde3e8f4799","sha1":"1ae2fba5c9d76a296e4caf99fffd561ed48c8f4c","sha256":"d27d51744e396832e9d882a673152cc05c9e1ee8b52a1b1869c987758bfe4188","sha512":"73ee5bf1c40126aa9ed4c7faca53c5c4087538c72cf0fe4e3b2417e490461a8affc113faa4ca5c67786d757a1eecae0c601a293752abdc12832b03fec11d86e3","ssdeep":"","tlshash":"28117aa6c2e8983ee519d118fb9070302b3c09e34749d220703e4f781b185cbac6faf8","first_seen":"2026-02-13T01:33:30.429269Z","last_seen":"2026-02-14T02:58:01.090377Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"getxeno.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getxeno.org/","fqdn":"getxeno.org","domain":"getxeno.org","tld":"org"},"ip":{"addr":"172.67.184.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T02:57:38.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxeno.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 11:49:41 GMT","end":"Fri, 08 May 2026 12:45:58 GMT"},"fingerprint":{"sha1":"86:15:FB:55:13:65:55:4D:A8:1D:26:9D:FA:D7:2B:C7:0C:BE:51:E6","sha256":"98:7F:12:D0:11:72:C1:DD:4B:44:21:82:0C:01:0E:A8:34:35:C0:4D:92:3C:1F:66:A6:FF:B8:08:73:9C:61:36"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: getxeno.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 02:57:38 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 07 Feb 2026 17:31:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sux80mQnpDoDu1j1wTMiw86toAry64IxolQQSDMmy1jEkVo8fudUIJSN9VyA%2BWj%2FlO5si4KhmhLyeTy8D4XJIl%2Bjn7VIXDm786qs\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cd94c987eb6723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22032,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (457)","md5":"275286410b3eaa44237978410859734c","sha1":"febbf45a3420e4e77564a6eeaf8177d81b2d9c62","sha256":"df7cb3e6c73c8c137fd674bbe97ae119e002b666fef72e9b0be84eb539b01ead","sha512":"a78b3881c7137077ad443e9895180f10044a66d10954f1d3c3c372984b92c05ace44e15978667de017ec6fb84baa8259d1bdfde9634216b7c46abe834b570a5e","ssdeep":"384:PRU3c/kwGnP6/gII5OLsUpCVXB6bBRpAM41faXZOqP:3/gII5OQxQJRsf+oqP","tlshash":"75a2762aeaf06233019354c29a6963976f57c517e74b9500f1fd129c2fc6d8e8e272ce","first_seen":"2026-02-13T01:33:30.426158Z","last_seen":"2026-02-14T02:58:01.093015Z","times_seen":2,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":44,"dns":26,"connect":1,"send":0,"wait":109,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"getxeno.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}
