{"report_id":"354b3f96-7931-47c5-a590-b4897260d962","version":6,"status":"done","tags":[],"date":"2026-01-24T13:53:32Z","url":{"schema":"https","addr":"mdxmemdex.xyz","fqdn":"mdxmemdex.xyz","domain":"mdxmemdex.xyz","tld":"xyz"},"ip":{"addr":"104.21.20.240","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"mdxmemdex.xyz/","fqdn":"mdxmemdex.xyz","domain":"mdxmemdex.xyz","tld":"xyz"},"title":"Google","dom":{"size":4260,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"53149254d6fd4a503edb8447db96e83b","sha1":"4fc0bb3fc7f1d021afb04d3c811a3e1348b02422","sha256":"5fb3378cb5d44423eb70347bf3609423839e0c33b9ba1ec911ba42dfd84f1d6e","sha512":"c9766a565cec4afe9b1173cf4bbf402c4f35e69a8fda082f3beea8876816877fa3fa54547803302218be0ec5a6ed52f6ab905dab3f3620ccf014df795430af92","ssdeep":"96:nVxhdNAPyRJC4qqBTcL34QDVf1oA7XbyvToM9qRPcj:V7nAEJCfqmjlfV35RPcj","tlshash":"d891a51aa2f7113ad457502d1beb610036a7e013e60eca287a9d03449fd8b9cb8b77cc","dom_hash":"domhash904f8f2269001cda573c81b479bbe17f","first_seen":"2026-01-24T13:39:09.136763Z","last_seen":"2026-01-28T06:33:07.07034Z","times_seen":6,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"mdxmemdex.xyz","fqdn":"mdxmemdex.xyz","domain":"mdxmemdex.xyz","tld":"xyz"},"ip":{"addr":"104.21.20.240","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-28T13:53:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"mdxmemdex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"mdxmemdex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"mdxmemdex.xyz","ip":{"addr":"172.67.194.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-22","domain_rank":0,"first_seen":"2026-01-24T13:39:05.4591Z","last_seen":"2026-01-24T13:39:05.4591Z","alert_count":24,"request_count":12,"received_data":12592,"sent_data":5825,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-18T22:14:28.232245Z","alert_count":0,"request_count":1,"received_data":33050,"sent_data":551,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mdxmemdex.xyz/","fqdn":"mdxmemdex.xyz","domain":"mdxmemdex.xyz","tld":"xyz"},"ip":{"addr":"172.67.194.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3a6afc101c6a18c0959583797787ade8","sha1":"d719cc68f4d85cd9a2535ea9bdbfea6a257041e1","sha256":"47fdc568b5ed040c10e4ea1f983ecac12ee56e00f6fbe2002df8cb8f9aac653f","sha512":"c4ee9923aeb6327153043107f5884da560e8a37e7311703bdb557106a63ef4c1c8a2417188f3b94b4b46d2a4fda8d9dc849cba73ad4262f626b2c71caef4d5c2","ssdeep":"","tlshash":"4b41671db0bb1235c597205e077f501432b7b1537a1aa908b51d03117feaf2d7179bc5","size":1989,"data":"","first_seen":"2026-01-24T13:39:09.143667Z","last_seen":"2026-01-28T06:33:07.075746Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mdxmemdex.xyz/api/status","fqdn":"mdxmemdex.xyz","domain":"mdxmemdex.xyz","tld":"xyz"},"ip":{"addr":"172.67.194.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mdxmemdex.xyz/","date":"2026-01-24T13:53:03.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdxmemdex.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 22:42:59 GMT","end":"Tue, 14 Apr 2026 23:40:17 GMT"},"fingerprint":{"sha1":"71:87:AF:4E:B3:73:DB:8E:40:6E:74:75:1D:B5:50:3C:17:CC:C6:D6","sha256":"75:79:4B:60:C5:7A:39:59:8D:52:5B:32:F0:C3:9F:BE:D2:D6:DA:4B:78:06:40:5B:7E:B7:8B:96:5D:A0:CD:8E"}}},"request":{"raw":"POST /api/status HTTP/1.1\r\nHost: mdxmemdex.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mdxmemdex.xyz/\r\nContent-Type: application/json\r\nContent-Length: 38\r\nOrigin: https://mdxmemdex.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":38,"data":"{\"id\":\"user_3718\",\"page\":\"index.html\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:53:04 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bi4XAIWozjwiNrMRciUn2YgRuN8QAlqfWDRFQNw4Hb0wjtFtHUOpsNfvjNaSMZ%2BP9qM31whV44CWrpRWwld7WvcsQnS8N0Zl8IMx\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"26-62ZXDL81NMGxFP6b26t4lWFeyGc\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3003cfb8ac0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":38,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"86c1071138a962e4f271ea9bbe425d68","sha1":"eb66570cbf3534c1b114fe9bdbab7895615ec867","sha256":"35e54d72f6771bb5add6e5817f9c08b2b0606632dbefe986f618f78fa3e5f8bd","sha512":"cfc7fe1493ca7d7e290cd18714c0c05b40434e8102f311477f61f56e28102a7affa3cdd407c9ce87453cc6ab9c47f6314cc702063ed367a14f888bfdae221789","ssdeep":"","tlshash":"c4800410f540143c11400147d1f40753434d1443f71c041d50005f0157d50145450055","first_seen":"2026-01-24T13:39:09.138499Z","last_seen":"2026-01-28T06:33:07.073035Z","times_seen":6,"resource_available":false,"data":null}},"time_used":488,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":488,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"mdxmemdex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"mdxmemdex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/googlesans/v58/4UaGrENHsxJlGDuGo1OIlL3Kwp5eKQtGBlc.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mdxmemdex.xyz/","date":"2026-01-24T13:53:03.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:29 GMT","end":"Mon, 23 Mar 2026 19:52:28 GMT"},"fingerprint":{"sha1":"D2:3B:6C:71:A7:BD:CB:B5:56:D1:90:EE:91:17:19:0F:24:02:E5:93","sha256":"DE:C3:87:EA:0D:EF:DF:B6:5C:9C:CE:F8:48:EB:2C:CE:06:FC:22:FD:3A:57:71:FF:23:81:1F:16:8F:67:66:B6"}}},"request":{"raw":"GET /s/googlesans/v58/4UaGrENHsxJlGDuGo1OIlL3Kwp5eKQtGBlc.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mdxmemdex.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdxmemdex.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: font/woff2\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32228\r\ndate: Sat, 24 Jan 2026 13:53:04 GMT\r\nexpires: Sun, 24 Jan 2027 13:53:04 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 23 May 2023 16:37:22 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32228,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32228, version 1.0","md5":"ca967e189f7f109f2115907b6c3c5577","sha1":"1b0d814054421e2fefb2bc1e2f865e45168ceeea","sha256":"02adb6e83c0cdb70f02b074fc0bd52a5736690432e793460439cb9174bbf3208","sha512":"affc7153080699026fbfdd0314a9bd54e77e96663ca88f66249d7421a5aebf173a8ecbc150804fccdbedc2c88991860cc82d282e14195fd064d197e560df24cd","ssdeep":"768:4GNoliy3syGqsn6RZcYLMaRHqdjpeVvVRnIxkAw:aQqZL3ImVIxkAw","tlshash":"71e2e186f9724000d9d2fcbd29b22755ef9868e801e174fcecbc9511833572d36796a5","first_seen":"2026-01-24T13:39:09.141868Z","last_seen":"2026-01-28T06:33:07.074936Z","times_seen":6,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":132,"dns":1,"connect":27,"send":0,"wait":51,"receive":42,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdxmemdex.xyz/api/status","fqdn":"mdxmemdex.xyz","domain":"mdxmemdex.xyz","tld":"xyz"},"ip":{"addr":"172.67.194.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mdxmemdex.xyz/","date":"2026-01-24T13:53:05.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdxmemdex.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 22:42:59 GMT","end":"Tue, 14 Apr 2026 23:40:17 GMT"},"fingerprint":{"sha1":"71:87:AF:4E:B3:73:DB:8E:40:6E:74:75:1D:B5:50:3C:17:CC:C6:D6","sha256":"75:79:4B:60:C5:7A:39:59:8D:52:5B:32:F0:C3:9F:BE:D2:D6:DA:4B:78:06:40:5B:7E:B7:8B:96:5D:A0:CD:8E"}}},"request":{"raw":"POST /api/status HTTP/1.1\r\nHost: mdxmemdex.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mdxmemdex.xyz/\r\nContent-Type: application/json\r\nContent-Length: 38\r\nOrigin: https://mdxmemdex.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":38,"data":"{\"id\":\"user_3718\",\"page\":\"index.html\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:53:06 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OX8Oid6I0vqjnJAJUvZPxhYWOHRpnUa7st4nRuhMgOn8Y3CcCTe2u4BoGeBm2wjlRfsyf90QY4yiJfIu0Uuc8Uyn4oFKfY%2Bp%2FaAv\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"26-62ZXDL81NMGxFP6b26t4lWFeyGc\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3003dc28e80b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":38,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"86c1071138a962e4f271ea9bbe425d68","sha1":"eb66570cbf3534c1b114fe9bdbab7895615ec867","sha256":"35e54d72f6771bb5add6e5817f9c08b2b0606632dbefe986f618f78fa3e5f8bd","sha512":"cfc7fe1493ca7d7e290cd18714c0c05b40434e8102f311477f61f56e28102a7affa3cdd407c9ce87453cc6ab9c47f6314cc702063ed367a14f888bfdae221789","ssdeep":"","tlshash":"c4800410f540143c11400147d1f40753434d1443f71c041d50005f0157d50145450055","first_seen":"2026-01-24T13:39:09.138499Z","last_seen":"2026-01-28T06:33:07.073035Z","times_seen":6,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":389,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"mdxmemdex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"mdxmemdex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mdxmemdex.xyz/api/status","fqdn":"mdxmemdex.xyz","domain":"mdxmemdex.xyz","tld":"xyz"},"ip":{"addr":"172.67.194.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mdxmemdex.xyz/","date":"2026-01-24T13:53:09.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdxmemdex.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 22:42:59 GMT","end":"Tue, 14 Apr 2026 23:40:17 GMT"},"fingerprint":{"sha1":"71:87:AF:4E:B3:73:DB:8E:40:6E:74:75:1D:B5:50:3C:17:CC:C6:D6","sha256":"75:79:4B:60:C5:7A:39:59:8D:52:5B:32:F0:C3:9F:BE:D2:D6:DA:4B:78:06:40:5B:7E:B7:8B:96:5D:A0:CD:8E"}}},"request":{"raw":"POST /api/status HTTP/1.1\r\nHost: mdxmemdex.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mdxmemdex.xyz/\r\nContent-Type: application/json\r\nContent-Length: 38\r\nOrigin: https://mdxmemdex.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":38,"data":"{\"id\":\"user_3718\",\"page\":\"index.html\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:53:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lZGREu6L3i5ihsy%2B%2BXja9OXEdonFg4NdJdSZEjfRlptjwvjYyqS6JksxccOFueUbdQxV1Efqp8qCDYjijzWP1AgNT3aNyWhOYMOK\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"26-62ZXDL81NMGxFP6b26t4lWFeyGc\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3003f529360b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":38,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"86c1071138a962e4f271ea9bbe425d68","sha1":"eb66570cbf3534c1b114fe9bdbab7895615ec867","sha256":"35e54d72f6771bb5add6e5817f9c08b2b0606632dbefe986f618f78fa3e5f8bd","sha512":"cfc7fe1493ca7d7e290cd18714c0c05b40434e8102f311477f61f56e28102a7affa3cdd407c9ce87453cc6ab9c47f6314cc702063ed367a14f888bfdae221789","ssdeep":"","tlshash":"c4800410f540143c11400147d1f40753434d1443f71c041d50005f0157d50145450055","first_seen":"2026-01-24T13:39:09.138499Z","last_seen":"2026-01-28T06:33:07.073035Z","times_seen":6,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":134,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"mdxmemdex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"mdxmemdex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mdxmemdex.xyz/api/status","fqdn":"mdxmemdex.xyz","domain":"mdxmemdex.xyz","tld":"xyz"},"ip":{"addr":"172.67.194.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mdxmemdex.xyz/","date":"2026-01-24T13:53:15.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdxmemdex.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 22:42:59 GMT","end":"Tue, 14 Apr 2026 23:40:17 GMT"},"fingerprint":{"sha1":"71:87:AF:4E:B3:73:DB:8E:40:6E:74:75:1D:B5:50:3C:17:CC:C6:D6","sha256":"75:79:4B:60:C5:7A:39:59:8D:52:5B:32:F0:C3:9F:BE:D2:D6:DA:4B:78:06:40:5B:7E:B7:8B:96:5D:A0:CD:8E"}}},"request":{"raw":"POST /api/status HTTP/1.1\r\nHost: mdxmemdex.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mdxmemdex.xyz/\r\nContent-Type: application/json\r\nContent-Length: 38\r\nOrigin: https://mdxmemdex.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":38,"data":"{\"id\":\"user_3718\",\"page\":\"index.html\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:53:16 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZXg3xo2aDAxg0dRH4iCQumwOQPfsgR2TtyKwSy70kqe0sDsLEDpO%2FCQvbYfnBd8x5cHxNk2Z7zDtP%2BHH7N9NSzp6EoFPMvNdKE20\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"26-62ZXDL81NMGxFP6b26t4lWFeyGc\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c30041aa9c80b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":38,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"86c1071138a962e4f271ea9bbe425d68","sha1":"eb66570cbf3534c1b114fe9bdbab7895615ec867","sha256":"35e54d72f6771bb5add6e5817f9c08b2b0606632dbefe986f618f78fa3e5f8bd","sha512":"cfc7fe1493ca7d7e290cd18714c0c05b40434e8102f311477f61f56e28102a7affa3cdd407c9ce87453cc6ab9c47f6314cc702063ed367a14f888bfdae221789","ssdeep":"","tlshash":"c4800410f540143c11400147d1f40753434d1443f71c041d50005f0157d50145450055","first_seen":"2026-01-24T13:39:09.138499Z","last_seen":"2026-01-28T06:33:07.073035Z","times_seen":6,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"mdxmemdex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"mdxmemdex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mdxmemdex.xyz/api/status","fqdn":"mdxmemdex.xyz","domain":"mdxmemdex.xyz","tld":"xyz"},"ip":{"addr":"172.67.194.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mdxmemdex.xyz/","date":"2026-01-24T13:53:17.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdxmemdex.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 22:42:59 GMT","end":"Tue, 14 Apr 2026 23:40:17 GMT"},"fingerprint":{"sha1":"71:87:AF:4E:B3:73:DB:8E:40:6E:74:75:1D:B5:50:3C:17:CC:C6:D6","sha256":"75:79:4B:60:C5:7A:39:59:8D:52:5B:32:F0:C3:9F:BE:D2:D6:DA:4B:78:06:40:5B:7E:B7:8B:96:5D:A0:CD:8E"}}},"request":{"raw":"POST /api/status HTTP/1.1\r\nHost: mdxmemdex.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mdxmemdex.xyz/\r\nContent-Type: application/json\r\nContent-Length: 38\r\nOrigin: https://mdxmemdex.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":38,"data":"{\"id\":\"user_3718\",\"page\":\"index.html\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:53:18 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9StjAmQ5EWIpK1nVgofU3IEVtsjEsSz02cGFN03qJWZbEZ7nOd9y0LsPWiCg3Ing8a0ifyaHlyNx7qZ9yDqiNX%2FMHW8d6Zz414Sk\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"26-62ZXDL81NMGxFP6b26t4lWFeyGc\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3004272a180b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":38,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"86c1071138a962e4f271ea9bbe425d68","sha1":"eb66570cbf3534c1b114fe9bdbab7895615ec867","sha256":"35e54d72f6771bb5add6e5817f9c08b2b0606632dbefe986f618f78fa3e5f8bd","sha512":"cfc7fe1493ca7d7e290cd18714c0c05b40434e8102f311477f61f56e28102a7affa3cdd407c9ce87453cc6ab9c47f6314cc702063ed367a14f888bfdae221789","ssdeep":"","tlshash":"c4800410f540143c11400147d1f40753434d1443f71c041d50005f0157d50145450055","first_seen":"2026-01-24T13:39:09.138499Z","last_seen":"2026-01-28T06:33:07.073035Z","times_seen":6,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"mdxmemdex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"mdxmemdex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mdxmemdex.xyz/api/status","fqdn":"mdxmemdex.xyz","domain":"mdxmemdex.xyz","tld":"xyz"},"ip":{"addr":"172.67.194.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mdxmemdex.xyz/","date":"2026-01-24T13:53:19.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdxmemdex.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 22:42:59 GMT","end":"Tue, 14 Apr 2026 23:40:17 GMT"},"fingerprint":{"sha1":"71:87:AF:4E:B3:73:DB:8E:40:6E:74:75:1D:B5:50:3C:17:CC:C6:D6","sha256":"75:79:4B:60:C5:7A:39:59:8D:52:5B:32:F0:C3:9F:BE:D2:D6:DA:4B:78:06:40:5B:7E:B7:8B:96:5D:A0:CD:8E"}}},"request":{"raw":"POST /api/status HTTP/1.1\r\nHost: mdxmemdex.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mdxmemdex.xyz/\r\nContent-Type: application/json\r\nContent-Length: 38\r\nOrigin: https://mdxmemdex.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":38,"data":"{\"id\":\"user_3718\",\"page\":\"index.html\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:53:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VBCgOb8bzpVvD24LKlSLDb%2BvlDF613CiQlAnNBCX8MvYawXNy1HsP5jl157ZdQ%2BhQUxZRRqV4jZ69opW%2Bx%2BNN9ijzg%2B7V9974zby\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"26-62ZXDL81NMGxFP6b26t4lWFeyGc\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c300433aa870b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"86c1071138a962e4f271ea9bbe425d68","sha1":"eb66570cbf3534c1b114fe9bdbab7895615ec867","sha256":"35e54d72f6771bb5add6e5817f9c08b2b0606632dbefe986f618f78fa3e5f8bd","sha512":"cfc7fe1493ca7d7e290cd18714c0c05b40434e8102f311477f61f56e28102a7affa3cdd407c9ce87453cc6ab9c47f6314cc702063ed367a14f888bfdae221789","ssdeep":"","tlshash":"c4800410f540143c11400147d1f40753434d1443f71c041d50005f0157d50145450055","first_seen":"2026-01-24T13:39:09.138499Z","last_seen":"2026-01-28T06:33:07.073035Z","times_seen":6,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":135,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"mdxmemdex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"mdxmemdex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mdxmemdex.xyz/api/status","fqdn":"mdxmemdex.xyz","domain":"mdxmemdex.xyz","tld":"xyz"},"ip":{"addr":"172.67.194.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mdxmemdex.xyz/","date":"2026-01-24T13:53:21.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdxmemdex.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 22:42:59 GMT","end":"Tue, 14 Apr 2026 23:40:17 GMT"},"fingerprint":{"sha1":"71:87:AF:4E:B3:73:DB:8E:40:6E:74:75:1D:B5:50:3C:17:CC:C6:D6","sha256":"75:79:4B:60:C5:7A:39:59:8D:52:5B:32:F0:C3:9F:BE:D2:D6:DA:4B:78:06:40:5B:7E:B7:8B:96:5D:A0:CD:8E"}}},"request":{"raw":"POST /api/status HTTP/1.1\r\nHost: mdxmemdex.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mdxmemdex.xyz/\r\nContent-Type: application/json\r\nContent-Length: 38\r\nOrigin: https://mdxmemdex.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":38,"data":"{\"id\":\"user_3718\",\"page\":\"index.html\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hHheJWKHUfpzrjLjitMmoA5vIi0vwopA42NeBuWp0YMf7CDnAPDhKx0OlDKvu%2BrZRT0q5WuOv2HJHWUh9TZjVKmCpr7w73tSAmLF\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"26-62ZXDL81NMGxFP6b26t4lWFeyGc\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3004402aed0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":38,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"86c1071138a962e4f271ea9bbe425d68","sha1":"eb66570cbf3534c1b114fe9bdbab7895615ec867","sha256":"35e54d72f6771bb5add6e5817f9c08b2b0606632dbefe986f618f78fa3e5f8bd","sha512":"cfc7fe1493ca7d7e290cd18714c0c05b40434e8102f311477f61f56e28102a7affa3cdd407c9ce87453cc6ab9c47f6314cc702063ed367a14f888bfdae221789","ssdeep":"","tlshash":"c4800410f540143c11400147d1f40753434d1443f71c041d50005f0157d50145450055","first_seen":"2026-01-24T13:39:09.138499Z","last_seen":"2026-01-28T06:33:07.073035Z","times_seen":6,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":135,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"mdxmemdex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"mdxmemdex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mdxmemdex.xyz/","fqdn":"mdxmemdex.xyz","domain":"mdxmemdex.xyz","tld":"xyz"},"ip":{"addr":"172.67.194.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-24T13:53:03.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdxmemdex.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 22:42:59 GMT","end":"Tue, 14 Apr 2026 23:40:17 GMT"},"fingerprint":{"sha1":"71:87:AF:4E:B3:73:DB:8E:40:6E:74:75:1D:B5:50:3C:17:CC:C6:D6","sha256":"75:79:4B:60:C5:7A:39:59:8D:52:5B:32:F0:C3:9F:BE:D2:D6:DA:4B:78:06:40:5B:7E:B7:8B:96:5D:A0:CD:8E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mdxmemdex.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:03 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 13 Jan 2026 04:52:42 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aADVnd%2Fauen%2F19zfW0zjVXkVZqXdLXTGJxuZicy90XXI%2F75i23FObTxN9e6PB4CR%2F%2FAiYJF4dmZvurTenCB5o4AADEbspPkUx10Ks9U%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c3003cc3d16120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4408,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"f098c74c2fb2ba5f3da71b75ae863afb","sha1":"183c4b302fd651fa70fbebba5ce351d03f385bb1","sha256":"c959a21fab6805f67da483396e638180a4b4f58add1a69f207ba2223fc59eba4","sha512":"5e3b50028b5b0d7e6cfd708280a934574c61d408222f7da2212e60cf81e5495b7c6a9aa568bbc49942551800d93a6b011e2f19b791c9a4ffbff735f4da1bd215","ssdeep":"96:cPDq/14qqBTcL8odMV20wHFkxzvk0MzFUEF:cPe/1fquoN20UUEF","tlshash":"7291d819a146112ac477536c1fa7a154ffe7a063a70b42287aed13066ff4948b9b3fcc","first_seen":"2026-01-24T13:39:09.140873Z","last_seen":"2026-01-28T06:33:07.071916Z","times_seen":6,"resource_available":false,"data":null}},"time_used":506,"timings":{"blocked":53,"dns":35,"connect":1,"send":0,"wait":394,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"mdxmemdex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"mdxmemdex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mdxmemdex.xyz/favicon.ico","fqdn":"mdxmemdex.xyz","domain":"mdxmemdex.xyz","tld":"xyz"},"ip":{"addr":"172.67.194.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mdxmemdex.xyz/","date":"2026-01-24T13:53:04.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdxmemdex.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 22:42:59 GMT","end":"Tue, 14 Apr 2026 23:40:17 GMT"},"fingerprint":{"sha1":"71:87:AF:4E:B3:73:DB:8E:40:6E:74:75:1D:B5:50:3C:17:CC:C6:D6","sha256":"75:79:4B:60:C5:7A:39:59:8D:52:5B:32:F0:C3:9F:BE:D2:D6:DA:4B:78:06:40:5B:7E:B7:8B:96:5D:A0:CD:8E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: mdxmemdex.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdxmemdex.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:53:04 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\nx-powered-by: Express\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=if2%2FGQeoXTLoXKBe0asOellquczLSD0gzkdriSqfLL6ojduvzZ%2F9ipbJNzOXucZqIqKOuz%2FvblaRJv5nyzpn7XYik3dk0G8undGu\"}]}\r\ncf-ray: 9c3003d1e8b20b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":150,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"84241342d84ac29592a5d9516f8edf7f","sha1":"03c53980e18e17625f439c20e7d438f066202428","sha256":"6e21162bc64073fe9e3d3d6375ca24d04fed1912a5b7716aac0cb0f2d16fae7c","sha512":"7509483335c7a30365f7f403098491ac0b44fffcc68a5cdacb86ec191f02dbda5b16a20a09e924b6a29ac938578d43bacb9a50115db5c5668ea27fe1811bd530","ssdeep":"","tlshash":"34c08c9e140012010b2087042ac1326464973b992de685006a87e027ece8a1ad987288","first_seen":"2023-04-05T13:59:49Z","last_seen":"2026-08-14T04:12:47.571572Z","times_seen":8923,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":396,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"mdxmemdex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"mdxmemdex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mdxmemdex.xyz/api/status","fqdn":"mdxmemdex.xyz","domain":"mdxmemdex.xyz","tld":"xyz"},"ip":{"addr":"172.67.194.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mdxmemdex.xyz/","date":"2026-01-24T13:53:07.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdxmemdex.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 22:42:59 GMT","end":"Tue, 14 Apr 2026 23:40:17 GMT"},"fingerprint":{"sha1":"71:87:AF:4E:B3:73:DB:8E:40:6E:74:75:1D:B5:50:3C:17:CC:C6:D6","sha256":"75:79:4B:60:C5:7A:39:59:8D:52:5B:32:F0:C3:9F:BE:D2:D6:DA:4B:78:06:40:5B:7E:B7:8B:96:5D:A0:CD:8E"}}},"request":{"raw":"POST /api/status HTTP/1.1\r\nHost: mdxmemdex.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mdxmemdex.xyz/\r\nContent-Type: application/json\r\nContent-Length: 38\r\nOrigin: https://mdxmemdex.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":38,"data":"{\"id\":\"user_3718\",\"page\":\"index.html\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:53:08 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ySBatQzrOHGVbKXdedRPP0QMLlZON22kei2NSf%2FbDANE9MWgX8iVibCRlKia47emjFtF97IlcugrguM%2BK5ADvhqHIjzpkdrpfIyk\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"26-62ZXDL81NMGxFP6b26t4lWFeyGc\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3003e8a9110b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"86c1071138a962e4f271ea9bbe425d68","sha1":"eb66570cbf3534c1b114fe9bdbab7895615ec867","sha256":"35e54d72f6771bb5add6e5817f9c08b2b0606632dbefe986f618f78fa3e5f8bd","sha512":"cfc7fe1493ca7d7e290cd18714c0c05b40434e8102f311477f61f56e28102a7affa3cdd407c9ce87453cc6ab9c47f6314cc702063ed367a14f888bfdae221789","ssdeep":"","tlshash":"c4800410f540143c11400147d1f40753434d1443f71c041d50005f0157d50145450055","first_seen":"2026-01-24T13:39:09.138499Z","last_seen":"2026-01-28T06:33:07.073035Z","times_seen":6,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"mdxmemdex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"mdxmemdex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mdxmemdex.xyz/api/status","fqdn":"mdxmemdex.xyz","domain":"mdxmemdex.xyz","tld":"xyz"},"ip":{"addr":"172.67.194.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mdxmemdex.xyz/","date":"2026-01-24T13:53:11.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdxmemdex.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 22:42:59 GMT","end":"Tue, 14 Apr 2026 23:40:17 GMT"},"fingerprint":{"sha1":"71:87:AF:4E:B3:73:DB:8E:40:6E:74:75:1D:B5:50:3C:17:CC:C6:D6","sha256":"75:79:4B:60:C5:7A:39:59:8D:52:5B:32:F0:C3:9F:BE:D2:D6:DA:4B:78:06:40:5B:7E:B7:8B:96:5D:A0:CD:8E"}}},"request":{"raw":"POST /api/status HTTP/1.1\r\nHost: mdxmemdex.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mdxmemdex.xyz/\r\nContent-Type: application/json\r\nContent-Length: 38\r\nOrigin: https://mdxmemdex.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":38,"data":"{\"id\":\"user_3718\",\"page\":\"index.html\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:53:12 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YB86Z%2BSrZ5ten82mN0X5yceuMsvpr8Jox8%2FKRv8k1TqcyxbCgWHM%2FL8regUd17V7Nn4vIcatMo8k90EN%2F4nyFj4Pn2F4qbUTW9RE\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"26-62ZXDL81NMGxFP6b26t4lWFeyGc\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c300401a95a0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":38,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"86c1071138a962e4f271ea9bbe425d68","sha1":"eb66570cbf3534c1b114fe9bdbab7895615ec867","sha256":"35e54d72f6771bb5add6e5817f9c08b2b0606632dbefe986f618f78fa3e5f8bd","sha512":"cfc7fe1493ca7d7e290cd18714c0c05b40434e8102f311477f61f56e28102a7affa3cdd407c9ce87453cc6ab9c47f6314cc702063ed367a14f888bfdae221789","ssdeep":"","tlshash":"c4800410f540143c11400147d1f40753434d1443f71c041d50005f0157d50145450055","first_seen":"2026-01-24T13:39:09.138499Z","last_seen":"2026-01-28T06:33:07.073035Z","times_seen":6,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"mdxmemdex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"mdxmemdex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mdxmemdex.xyz/api/status","fqdn":"mdxmemdex.xyz","domain":"mdxmemdex.xyz","tld":"xyz"},"ip":{"addr":"172.67.194.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mdxmemdex.xyz/","date":"2026-01-24T13:53:13.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdxmemdex.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 22:42:59 GMT","end":"Tue, 14 Apr 2026 23:40:17 GMT"},"fingerprint":{"sha1":"71:87:AF:4E:B3:73:DB:8E:40:6E:74:75:1D:B5:50:3C:17:CC:C6:D6","sha256":"75:79:4B:60:C5:7A:39:59:8D:52:5B:32:F0:C3:9F:BE:D2:D6:DA:4B:78:06:40:5B:7E:B7:8B:96:5D:A0:CD:8E"}}},"request":{"raw":"POST /api/status HTTP/1.1\r\nHost: mdxmemdex.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mdxmemdex.xyz/\r\nContent-Type: application/json\r\nContent-Length: 38\r\nOrigin: https://mdxmemdex.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":38,"data":"{\"id\":\"user_3718\",\"page\":\"index.html\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:53:14 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5vf%2F3zGcU%2BfxcV7gDQOn2StrB6MQjyBpGv11ieWB5%2FF%2F5EYjFHCRZG%2FI5php0sQE0C7qXoLLtFzu0QgJFyaOdA1uP9Q9tA2c36wQ\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"26-62ZXDL81NMGxFP6b26t4lWFeyGc\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c30040e29910b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":38,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"86c1071138a962e4f271ea9bbe425d68","sha1":"eb66570cbf3534c1b114fe9bdbab7895615ec867","sha256":"35e54d72f6771bb5add6e5817f9c08b2b0606632dbefe986f618f78fa3e5f8bd","sha512":"cfc7fe1493ca7d7e290cd18714c0c05b40434e8102f311477f61f56e28102a7affa3cdd407c9ce87453cc6ab9c47f6314cc702063ed367a14f888bfdae221789","ssdeep":"","tlshash":"c4800410f540143c11400147d1f40753434d1443f71c041d50005f0157d50145450055","first_seen":"2026-01-24T13:39:09.138499Z","last_seen":"2026-01-28T06:33:07.073035Z","times_seen":6,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"mdxmemdex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"mdxmemdex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}