{"report_id":"57422057-1e79-4149-83d9-0081491cc373","version":6,"status":"done","tags":[],"date":"2026-01-30T12:01:58Z","url":{"schema":"http","addr":"dorianixfloxin.com","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"dorianixfloxin.com/","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"title":"Dorianix Floxin – L’IA qui fait travailler votre argent à votre place","dom":{"size":129426,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (47638)","md5":"655f43410f5b9a708a60da4c9f0c5a3e","sha1":"d6cb676ff86fa6e75e8ac7453409afca2c04b428","sha256":"84143ca6d6436617ad4cd80224d9526e506820675bab1e1a4419ae8d4b681377","sha512":"0c7fe37e7089bedc498474de6e60ccdd09737d1d7c269ecb4d22fea5276410dd34d062c48e8ec3f116a03006a9aa54416d8a83018a4561e104214f0d187cddec","ssdeep":"1536:1HtfItC/5pR4nXBKpSpFl26vX8XeRweRa6sNVNmR5g:riC/HUM68XeRweRA","tlshash":"fcc31f2741a925274437c2d034aa5f3be5a5dd4beaa74a007eec87f62ffac90b41711c","dom_hash":"domhash9fb1e21e519c22b8fc29f7dfe5fd5e90","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"dorianixfloxin.com","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-06T12:01:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"dorianixfloxin.com","ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-24","domain_rank":0,"first_seen":"2026-01-30T11:52:30.904243Z","last_seen":"2026-01-30T11:52:30.904243Z","alert_count":104,"request_count":52,"received_data":1493032,"sent_data":36785,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-01-25T22:30:32.196824Z","alert_count":0,"request_count":4,"received_data":343277,"sent_data":1832,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-01-25T22:46:21.910908Z","alert_count":0,"request_count":1,"received_data":88169,"sent_data":388,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dorianixfloxin.com/","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1745d50bb2c1a88f767c5383d3ce632d","sha1":"85e601a416dc3879d49dcc1cd75b5197b2036b1b","sha256":"4a1a214136f89775aa4e1477c0e0c2ed6a9b2ed7bbc74a682e589d597b1d4a0e","sha512":"bd9be1d87596c2d58afa7feca5e94632d6a9467acffb5aa39610098ca01c048ed158fa1dcb295039a30173c4183fa3b0765bef48acf25e1c7a80f59409f59303","ssdeep":"","tlshash":"35c0920b19921368b5b734684f2bc79c10789063bcc5eb323d0fb7410f924168a2d4c9","size":140,"data":"","first_seen":"2023-05-13T12:36:06Z","last_seen":"2026-01-30T12:02:02.585642Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ff2e1a99ad91e15025320fed1f7de6ee","sha1":"6a70ebacde68e828eaf6613f21b1235f6876a32c","sha256":"5cf3eee6366ebb3a0ac8ca08928733cf607c4ab69dd79d69f0b59f0868395912","sha512":"6fced97ddc6853712597f88bddbfab300e99ef9ccf0fe00c77d4077b7bd6bef7d0459dfda90aad6a6f497bed346d6bd05add62e1e5b3c7c34487e14fdf58f57e","ssdeep":"","tlshash":"3ff0865b07d70318a9e3b12ccf52ca6c1829d163b8d2f93a3d0e65556f9103799ac6f4","size":495,"data":"","first_seen":"2026-01-30T11:52:37.513648Z","last_seen":"2026-01-30T12:02:02.586229Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/systems/js/loader.js","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"82f05a966efe3eb7bdb96cd927379326","sha1":"b798fedf42122ca705ec317b333bef1878390529","sha256":"0a59565c5d4f3234c826ec37adbb1af67f8581998bc4029c738a963e718d9048","sha512":"44232d202d2b14813c63af86721fd80159cff9b09a8a71db585731b8647d49a90e61ffa7b90772340d40b0b521b75b81de9ae181c0d020e5752b262c4b7c0b03","ssdeep":"96:iIaQ1lMQkBCe6poSoVifw9GLqYRCU8bZ3RxYVWLyyy1:IHQkBCRiSoAfw9GLqYRCU8bZ3RxYVWLk","tlshash":"80b153482bb74418944bd06d2bef3b8531384803b90adc8b7bdc828cdf85ad9d5627ed","size":5345,"data":"","first_seen":"2023-08-11T09:03:01Z","last_seen":"2026-06-06T22:38:00.066198Z","times_seen":256,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@24.3.0/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"86755d3b36b6cd308f891c8584e25921","sha1":"50e10095d725198201ea66362be601ed91d3117f","sha256":"4eed6c4eefe28fa534b9fe2426739ead5db031c7b867cdc57c94ceac0d3798d5","sha512":"987bf8f02bd22b90afbb5f34a96bc5cf6dd3ecff339a2467233cb1ba5ec3887793641d4d54f15930ea694edf0085bb3acbfc010ec6ea148aac57efa3596ebf25","ssdeep":"768:Dg03Xlqn/kiI95XpwJxOIxXW6FUjr1de24Xepu:D1iI9BIxXEr1dK","tlshash":"afd2e8aeb3656737a7fd82a260b40543af7f79444604043d78ac8ede1289ed171f9b38","size":30963,"data":"","first_seen":"2025-09-30T06:53:42.34557Z","last_seen":"2026-03-29T04:39:57.606073Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@24.3.0/build/js/utils.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc7a4d7d26af9f55e366bb488650efdc","sha1":"11fabd4978f41305734c50118334f256dac740cd","sha256":"ff99cc589b69c84cd23f1ecb62bf5f11dd17a8cb0685686bf2a5aa24d4047195","sha512":"5136c245407c72cd64031d4bc90f791e5665ebf372be95b82f0968bf577133ceee8ebe2c1001a6a746df5e8b22006f57a83cc5feed7a71b4d51227ee8d8f885a","ssdeep":"3072:9E0309pJjFs3OwPss3MwPwZOV09E2xFM8M0T4O9NBW6c556kmLNTg/QKWVSplUki:9E03wpBFOgxFM8M0T7OUx","tlshash":"8244f0ebd63c9737a1e87b35968eb3cd5a8cbca3c858567826c3b54f52784e0706c205","size":264633,"data":"","first_seen":"2024-12-30T11:50:33.405046Z","last_seen":"2026-05-20T06:29:51.32299Z","times_seen":174,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/js/burger.js","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dbf5222eb7ffbacf46b8c448a3d96e61","sha1":"80805a89b7b379efda8a4ae809617749c19fc198","sha256":"aa0e67e244632cba697818bf2ad2077c851716ccd6e2432e6e4db5c62056c228","sha512":"fa103c22d26451a00b8ba00e5fa063ddc1ca74fa8994925060e95d05e11cc6eaf5a934723645bd162726507bc7b5fb93c4a28a0b8cc64970571d815d539030a7","ssdeep":"","tlshash":"24f0727111283ab8c8ff40c3e2c8afd5792242ceb403529b200c800f2ec0c99bee25f5","size":604,"data":"","first_seen":"2025-10-10T08:38:27.484153Z","last_seen":"2026-01-30T12:02:02.580624Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0a42096225143ca53fe895fa895f63f9","sha1":"b9c6798c895eff8df2977b73d9ac2ce270d0457e","sha256":"61e2eff52f214490e136b79e5752bd60c31785023c3c44ead161c869c97e7401","sha512":"60f316a9f553ecb5f14c4918432c8f8f2b0e88f8b61c5a28db3c7d60df1020c02fea731bff3cc98d56023d0610cadab8c85a5acaca66cd1ab1291a88f41b02be","ssdeep":"","tlshash":"5a8000000c00000c0f03000cc3300c303000003330030c30330f30c00f00030c00c00c","size":26,"data":"","first_seen":"2026-01-30T11:52:37.51457Z","last_seen":"2026-01-30T12:02:02.587195Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4edb114bf41c4373a94dfd29af4df314","sha1":"f37e6e79d0146eb3540577185a97ce92af70b671","sha256":"a83590ce98b53975439c2188dee81a9bcf2aa28f94c2cb96adac0b09b10f40b8","sha512":"cc80767744e5a06709d4da1e93bf242e31d036790716639d493822ddba4c859df4b5fe666e6214c9b919a191498b4edc2f14fa8e8a2dd5e54304a1cc9361f1c8","ssdeep":"","tlshash":"6da0021501512554631720901125c3992679a067ac49923a765e57404740415c528401","size":66,"data":"","first_seen":"2026-01-30T11:52:37.515402Z","last_seen":"2026-01-30T12:02:02.587868Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"074213368ac12eba67a8cf5dc670b47a","sha1":"ba1e986ad6eccad975272d9134bbfe3fcfe4b12f","sha256":"53bf8dafac28b94de938df72826e74124331075361e5feef682af2e77b6f93c4","sha512":"0697d62f2480a65c40c057f930653fff4929fd41d603865b9b45c0e6585ecfd6f3abf2526efc60778fc7c243da823d3c4629184319e06c7cfa6faa63c0e12884","ssdeep":"","tlshash":"30112b0404720034c63394eda7cb1e9d753162ab7489a79e3a8ed30c3fc66d6caf52e6","size":1021,"data":"","first_seen":"2025-09-02T04:43:32.350335Z","last_seen":"2026-03-09T06:21:12.150379Z","times_seen":629,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-06-08T19:42:45.782555Z","times_seen":166597,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/systems/js/form_script.js","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"780517e261ecfd81a69270f3645dff68","sha1":"0f06ad2fb76dac0110435ff852c2af20508176c8","sha256":"92d09cd513b165ed80dba9243fb0808ce2a2c7e8da732dcf3f9c2a3dca160a8a","sha512":"37290165a9c1690e9083fb745ed5d4cc0248a1f5fc07d9199246ab780ab13d086dcec1ea1f94dc9250d6adbf75d898fd029dbb11842575c537f8ef8597ab40c4","ssdeep":"384:SmXUSO8Aa//hSHSk2Rci2OYMJMFCcikiiQ:nAa//ESk2aO50GiQ","tlshash":"7f52760836f350321537607e6bef62057579602b6808d8193e9c87482fcaa9ad7f1fdd","size":14435,"data":"","first_seen":"2025-10-10T08:38:27.39322Z","last_seen":"2026-03-29T04:39:57.598391Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"aef91076f883db5d82859841a71c30d1","sha1":"04cea57f4e97521601e4e011bfe183d0507496d2","sha256":"2a7c96529e64ab018efbe5e2b3a126191816b62767db1bf346e20a2df17697d2","sha512":"d36f4f651b5db41f2041ec8e821c495dae80edaa970298859f52f089b6c21b2fcde6e7e8c9b125cac279bfc44c8b78fb5be2c7f83865fa16147a08948aa65050","ssdeep":"","tlshash":"4021883123361171d2bb606b67cbb3293522a0173501d58c7e0c86884fcad5ef5666d8","size":1381,"data":"","first_seen":"2025-09-02T04:43:32.352172Z","last_seen":"2026-03-09T06:21:12.151256Z","times_seen":633,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dce534615095325cfc3fcffedbd4d3e6","sha1":"9a9e658798fa361869c71629e757c31784a5a64e","sha256":"3dcfb552aba8f12ce7a00400ffd325d150b0d1dd53907d102dfec75ffcfe6076","sha512":"cbe56bb0031bdf2a6431a781637f4db0803be3b6052b43226137e0774f402b6d200801c4511e618bd8adda0b1547e3a2689ca9eb12de4ea7110f69f27b837952","ssdeep":"","tlshash":"97e02b7f51f504b200fb721ad61fa344e221105728d1f8043e1d8da86f28eac65f4fb1","size":308,"data":"","first_seen":"2026-01-22T14:15:01.993839Z","last_seen":"2026-06-06T08:03:21.662738Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0d432c755e39c5207fef9ff7bf60e752","sha1":"8784568a0fbac3967dfd58a831a2078ad5d927f3","sha256":"3c4d28bcecf7cccec2f764d9dac645ec52887efd2042a570f9b51704df700b22","sha512":"0bfda9501742795911ccfca06b5d866374f232dc438b2117cb52be17ec70af08ed00cd22640f53304bec6b939a65c402a2fe94460b090ff78c3ec0f421f00c17","ssdeep":"","tlshash":"e88000a080200be20388002082c202003330800208e0a030300800c00b83a22c00caab","size":27,"data":"","first_seen":"2025-10-16T11:28:18.604184Z","last_seen":"2026-01-30T12:02:02.590697Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"cffc603dd83cb227f7cdd164c9cbc3d8","sha1":"c2c97502b0388ed1ec22599449fa53f78e665562","sha256":"ab3bce103bdf1cd70100e9e36d6f9ee09ac364f934afe353b5f228d571674ff9","sha512":"0cd6047c4b7ae42fe1ddc7176cfd388e4d344c5c5379b5002447c3a64d6c9ef2c15a5e9d9c4360e97a2d570959cf6e57dc7ff5d7288a7314b0d0ec5aa6bb9abc","ssdeep":"","tlshash":"d8600000000300000c00f00c03030f3000030030000000003f00c000000000c000cc00","size":12,"data":"","first_seen":"2026-01-30T11:52:37.528012Z","last_seen":"2026-01-30T12:02:02.591269Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"c92a10324374fac681719d63979d00fe","sha1":"aee655773d856fb038536adcfd6472fc7543463e","sha256":"158a323a7ba44870f23d96f1516dd70aa48e9a72db4ebb026b0a89e212a208ab","sha512":"d27859c90f5748d3ec0ef6d4ef49c1755d6ce1ac8035cd4f7dba41b8dd7d440ad8fca164ccc948b5630ef90346ff9279e35d31887e724ab6e0284300a80eb61f","ssdeep":"","tlshash":"8430000000000000000c0000000000000000000003000000c000003000000000000c00","size":4,"data":"","first_seen":"2024-08-20T00:14:53.541497Z","last_seen":"2026-06-07T08:16:34.757425Z","times_seen":27513,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"dorianixfloxin.com/css/fonts.css","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:36.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /css/fonts.css HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:36 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\nage: 29225\r\ncf-cache-status: HIT\r\netag: W/\"69256205-0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FaQaekdxT1hm7n2Ds0tc6UiY%2FOemg7XrVngdlO0ON0zyVHLJGvTuGQpDNX%2FB7afvwhabdGGVNCGUzR1kTc5Zn01xC9i0aWiBRnHLShFgcJk4bg%3D%3D\"}]}\r\ncf-ray: 9c60d0ccb9818deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/fonts/btc.svg","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:36.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /fonts/btc.svg HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:36 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=120\r\ncf-cache-status: HIT\r\netag: W/\"69256205-567\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7yXh%2F70cutPfng%2FnE8bqWrYYoTODgIy%2F5kJ%2BBt%2BB3lHXE8V4CpmhGNfPwLW0QwcX6O4MGCiLKiHo7WC1%2F4vkuP2PgcBD6ib5q0DoizyMqxZb4g%3D%3D\"}]}\r\ncf-ray: 9c60d0ccb9888deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1383,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"08b899edc5746ab897190fc4caa0a883","sha1":"24da4aad4cd7ed97d096df6c277c6e7e185a2130","sha256":"5a837ec546b5cc6b85ba9666c287c5183c4ad87e22d4670f891bdd60297b0bae","sha512":"892ec9c3514f9cbacedc42f87ef287a468867ce3a6bfc73610aaaea7b6503339055d15cd4dacc8d9d18ba23f883d7f3f41b1229d77981b0b8ead8135caed9d3e","ssdeep":"","tlshash":"3b2120f1b3ecd5c59a8857f0552d78b17d3230f1ad1ad12c86f07fa1325a42e0928cc5","first_seen":"2025-09-02T04:43:32.272741Z","last_seen":"2026-06-08T06:19:49.611701Z","times_seen":1255,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/images/user-3.webp","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:36.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /images/user-3.webp HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4698\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=4,i=?0\r\netag: \"69256205-125a\"\r\naccept-ranges: bytes\r\ncache-control: max-age=120\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M%2BpIea%2FuByn4mdXTd5yjDJWrShwxoB%2FR5WiqRHJFmrO0wyzpbODpbMAfor89QRx7hAaOzBLgQ31t2EMC6EGqlJ%2B3UugEZmvQc83LHnHq1TJmAw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c60d0ccd99a8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4698,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"37f782baa272833a186e89db0e6a8cb6","sha1":"11df9ab035e5cf57d5424edcf3012e40a505b7c6","sha256":"aa1ec252f76f96fd96b2cbbefff750c0e5838096310cae74ebe2edac44b6aa4c","sha512":"10bb562eb4abed5f1d2f3a2e5aa4220a6ef16073bf4e9e4cdd6c86e710aed586714127c7b603cb6f3a8578f936f27b0045090b390fb9718f0ac1cfd3856cf6c1","ssdeep":"96:nQFaJQVmHaGRSDnHO2KqK2DNXT1LgKMSxHh:nuD3LO2Kv2DN5LYSZh","tlshash":"00a18daf78c9f476f8aac13e923bd1e4ec1a491b4b4c6d55ad1436fcc0e244a8485788","first_seen":"2025-09-02T04:43:32.246752Z","last_seen":"2026-03-09T06:21:12.081996Z","times_seen":573,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/css/burger.css","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:36.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /css/burger.css HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:36 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\nage: 35880\r\ncf-cache-status: HIT\r\netag: W/\"69256205-8ba\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FI%2BBAJuH0m3vMY0y2EeSpToqzUOS5VWuESN0P6YPZN%2BeKjY1WMyz1%2Fy1TPv1HSdPQHmhc0KUAi5AyAeIF%2F5FcGbuxDtEVwR5llFOfQ9d43cbww%3D%3D\"}]}\r\ncf-ray: 9c60d0ccb9868deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2234,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"83d92e84858a2876d5e77da4530b4abf","sha1":"d884d7f1d9b74506f3e82ec148ddb0da6470df4f","sha256":"d0381e9b6279d5cb94ed9d73ea9729146ca59841a5a4453537edcbe71ab518b1","sha512":"72d01ffeb477cd713d089a4d53e9f28c6e29e31469adae70e605d4958562011ce6db097e547828cbc8337144fc50f0c55b7c485558e8498fd2fb8d4e1d8d46e7","ssdeep":"","tlshash":"b541fe017f503688a22fd10c9dd8ab69063fd582ef4b0daff147109e67de19501e2ad7","first_seen":"2026-01-30T11:52:37.471826Z","last_seen":"2026-01-30T12:02:02.546136Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/fonts/logo.png","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:36.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /fonts/logo.png HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 3349\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=4,i=?0\r\netag: \"69256205-d15\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 29225\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hiOm9%2B9MowAe7Eir13BC4o2w2DjSZ%2FAUw278vt%2B%2ByoyA49SdW1V7pUN5saZX1vgZJo%2Fv7SVH%2Bw11JaYsYXp65sh9CPFdHVHmtmmWmZsYA9ue6A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c60d0ccb9878deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3349,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"97078d612aabea85062b655c5ca84101","sha1":"cf3c2fe6360d487217af3e67d83726bb8222dc5a","sha256":"5dc36107684412240d30aef4711c0f66925429422ec1c24c7aee6a3e1c9f582d","sha512":"3c9419b3cd673d050ce0e3e477b7e9265dd17849e9cb908cb6ab9d453472cddbb74ec7051499204a9573ffa926ce6743e72616fe2134ec63ca93c3b79861fae0","ssdeep":"","tlshash":"bd615ee60553e0023419fba3139b53d86737e175a8c1f1a8c54e621a5cb615fa853925","first_seen":"2026-01-30T11:52:37.48964Z","last_seen":"2026-01-30T12:02:02.54699Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/fonts/usdt.svg","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:36.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /fonts/usdt.svg HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:36 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=120\r\ncf-cache-status: HIT\r\netag: W/\"69256205-df9\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9%2FuCo9TFNwNTaPgiVEOqMENC3zSivmB0eSrCV%2BNUadn1Yt17%2BH2JcSzKeI7zv%2B1Clpq0XYjbI%2BSfb2bdEr1%2FxgBzPDsa0GoScQMoAPmWYUvADQ%3D%3D\"}]}\r\ncf-ray: 9c60d0ccb9898deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3577,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"908ac595c69379ce8ce688a04dc020b5","sha1":"8fea3ba2ba406c0a875388c4dc75481af957a326","sha256":"b7ef94d66bc1b27c90dd4bb1887dfb58335df07576bee8eeee3c459d53fc543c","sha512":"fd52eb012b199609a0edd27ac2d9f118823d76afd5001b1c8373d6c7f96d20696b349e59409dcfc79a638f09292cd75c14a598369681ef0ac4e962b063c69a1d","ssdeep":"","tlshash":"7971e8e96398b2f4e607abe4ca37a871356758f57f12c48cc2847845e21856d0c9adc7","first_seen":"2025-09-02T04:43:32.333256Z","last_seen":"2026-06-08T06:19:49.627292Z","times_seen":1254,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/fonts/coinbase.svg","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:36.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /fonts/coinbase.svg HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:36 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=120\r\ncf-cache-status: HIT\r\netag: W/\"69256205-3bb\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z%2BTDhY4CrrhPGSHOsgcMx8F4wu2z7VldOpiyzkBPjpNSw4sJ%2B4SSEYPWYkDmPZqZKT2ZYUuGdQL%2FhXVC0KmHgVrYRu483Fz2hWtk0ZMj20bM6g%3D%3D\"}]}\r\ncf-ray: 9c60d0ccd9a08deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":955,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9f07c782d3f01b7b31901fbb318590e2","sha1":"645433f39d4e78328cdc592a9bd28d57d179ba15","sha256":"de81b810f3c1ea03aca8625d43f24d58ae5cab09cf2c086d662bb438bbeffb56","sha512":"d22e07c679c625f3303deca2624a27dce963d4b13fb16de04477a0b07fdf841f0ac4fcab1d21a79fa74d85518d8eb58c8fcd48f2500b6f580faa895c07cebc30","ssdeep":"","tlshash":"f611e13c9128530c500433a85b76216616b666d8878e8b687111bb633cc945f8ef7bdf","first_seen":"2025-09-02T04:43:32.257454Z","last_seen":"2026-06-08T06:19:49.58176Z","times_seen":1249,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@24.3.0/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:37.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/intl-tel-input@24.3.0/build/js/intlTelInput.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 24.3.0\r\nx-jsd-version-type: version\r\netag: W/\"78f3-UOEAldclGYIB6mY2K+YB7ZHTEX8\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 1934514\r\ndate: Fri, 30 Jan 2026 12:01:37 GMT\r\nx-served-by: cache-fra-etou8220039-FRA, cache-hel1410022-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 11729\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30963,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30595)","md5":"86755d3b36b6cd308f891c8584e25921","sha1":"50e10095d725198201ea66362be601ed91d3117f","sha256":"4eed6c4eefe28fa534b9fe2426739ead5db031c7b867cdc57c94ceac0d3798d5","sha512":"987bf8f02bd22b90afbb5f34a96bc5cf6dd3ecff339a2467233cb1ba5ec3887793641d4d54f15930ea694edf0085bb3acbfc010ec6ea148aac57efa3596ebf25","ssdeep":"768:Dg03Xlqn/kiI95XpwJxOIxXW6FUjr1de24Xepu:D1iI9BIxXEr1dK","tlshash":"afd2e8aeb3656737a7fd82a260b40543af7f79444604043d78ac8ede1289ed171f9b38","first_seen":"2025-09-30T06:53:42.34557Z","last_seen":"2026-03-29T04:39:57.606073Z","times_seen":32,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":38,"dns":6,"connect":13,"send":0,"wait":14,"receive":2,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/css/styles.css?otrg","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:36.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /css/styles.css?otrg HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:36 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\nage: 29225\r\ncf-cache-status: HIT\r\netag: W/\"69256205-164c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B7TEyDZem2Z3QDunNB%2Bey0yNcLmkOvs45Rw9Z%2Fo8KAzaOjennkAnGkcc%2BD%2FyxO8V6zSd5iDUPGoqWo5U1P6eEyyPHCbOEaoaF5kkjwzHrcwgaw%3D%3D\"}]}\r\ncf-ray: 9c60d0ccb9848deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5708,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"43c75c4f742f291209c61b351c5c7c77","sha1":"4c6c13ef3fe23c2abcc84dba9be9be4bfbbba4bf","sha256":"62de7b56d870749788df56b2a786b24848f02263886563aad1985b8f9fc51f78","sha512":"5b6277fa6d892e6d3e71d5d1e2970273a960851e936d15744e876db453269b2ec1b102f6acc6d6e9e37e48ee15f63cb01dce769b44e34767adf47b861b84f9c0","ssdeep":"96:YRLKnCZ1C3hdFCymFSeUlEClhebuCnommbCtEUEmaKLSlfNb4FMTiFu+830tP9ad:YRLICaj4ymFSZlreTomQfNb4FMTiFu+q","tlshash":"88c13257e9970852751fc26922eadb4473ad4443c90bee65ffd0100cdfc97a88ab2b9c","first_seen":"2026-01-30T11:52:37.51019Z","last_seen":"2026-01-30T12:02:02.549276Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/images/phones.webp","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:36.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /images/phones.webp HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 573394\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=4,i=?0\r\netag: \"69256205-8bfd2\"\r\naccept-ranges: bytes\r\ncache-control: max-age=120\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hg%2F2nDXpFTjKj%2BtD2V1PdPksNOrapoSAmMHu9psISO5sKvcrvA5DdV%2Fdpqnwf0E7uvHiGCUWQ5lE2sylj%2FSa2oj54b3BgBNd2Tg%2BQOZHyKoYOA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c60d0ccc9968deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":573394,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 896 x 1051, 8-bit/color RGBA, non-interlaced","md5":"69986b3714038a4a73bbd91456749626","sha1":"cd84217047b3d0ea7bcfb6bf455cd8681b29a8ba","sha256":"85a130acadd9c5f0606540bc4a8b9cb1d36e145ae80b4dc214f5c17126798589","sha512":"115e8d0112c6066742a4f844286b06fe607535b88a016a21b96e099abd09bb7891212bb69556bfb5b61bf6c0f87c9daf40c5994d49cec7d87cf93b86931a6c11","ssdeep":"12288:AZdv749fyIm5FrlMqL/rhrlRwEgJIzXH7S2PsGTRT:GvE9fyIm5Frl3LdpyEgJmOYJRT","tlshash":"16c423cda37386090e2dc873499562af6e31a907a9ad4aef752f718cd4173bd8350d83","first_seen":"2026-01-30T11:52:37.505084Z","last_seen":"2026-01-30T12:02:02.549891Z","times_seen":2,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/images/user-6.webp","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:36.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /images/user-6.webp HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5244\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=4,i=?0\r\netag: \"69256205-147c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=120\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Vo%2Ftw3xt%2FsIHu9IkU%2B4lTmi2Dc6G%2FWS4WD22pX75ulk%2BqE8n0%2F8%2B%2F%2F5Q6sJl%2FTZOtF5I%2BriSzS1p3aARWilcLEOZxyjorqyLvgi8YCaDKoURA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c60d0ccd9a78deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5244,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e0d456ca39c3ceb6fef7ba18596ff0a4","sha1":"f7af1c6c1b8a072b157b008934a40eb9cf32bd1e","sha256":"da44b1fe0c069950bfecd801f6de0de6571c34de7d2412405c8436c13259eeae","sha512":"e48f815380255e85a7e03e302ef8d96efde07d8dcae440f3235a8fbbdc441601951f481f573fccf2838158e27ab6468fa13bf5984bbfbca3b87aba7c71d9ae33","ssdeep":"96:pIH4oJRXEbKgAOkB9igtod9ApERdqkC94bpZyV07uqkckCVyK:GzXEbRjkB9igyd6psqkCCNoV076UQK","tlshash":"10b1ad11b5a34f94f8cf0a70883df720bac4808e2b2ee7950e7133a242294233426df9","first_seen":"2025-09-02T04:43:32.329512Z","last_seen":"2026-03-09T06:21:12.086219Z","times_seen":573,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/systems/geo-ip.php","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:37.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /systems/geo-ip.php HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:37 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NMQFuXsFpp%2FvLaPD4%2F0uaPXInQyDWmRxef5u2lYrb%2FjFPZd0HaHrCGSFETc19ON%2FzwveOOmJ9t9WlGfBYJ3xFAzaZakGrKyNhtdjbJQBMyzlkA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c60d0cf8a3b8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"421bbf28954f450d9ae8b185f283d2dd","sha1":"acda245d38738a109964580eab53d3fc1b6052a5","sha256":"26557ce50d730f07686b15c6597f89559624dbbfe75e4a08269acac113f70eca","sha512":"1a535d46efec1f552d2228623fd5300e791a184d8571e5684be4de61244381a18b34c7eaf0a82d6a9365b1686a57b3a90aca35cf6af8abb7ea4d2bc735a4cbdb","ssdeep":"","tlshash":"86600000000c0f30000300c0000c00c0c03c000000c0c0000c0c03300000f000000330","first_seen":"2025-04-15T07:45:26.224732Z","last_seen":"2026-06-08T00:38:38.542846Z","times_seen":411,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@24.3.0/build/img/flags.webp","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:37.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/intl-tel-input@24.3.0/build/img/flags.webp HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/npm/intl-tel-input@24.3.0/build/css/intlTelInput.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 28174\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/webp\r\nx-jsd-version: 24.3.0\r\nx-jsd-version-type: version\r\netag: W/\"6e0e-+c9J+qvl4+pvpQpQCqvUf+8x4WA\"\r\naccept-ranges: bytes\r\nage: 637814\r\ndate: Fri, 30 Jan 2026 12:01:37 GMT\r\nx-served-by: cache-fra-eddf8230060-FRA, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28174,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4099564bc7b03997031ad1348e646601","sha1":"f9cf49faabe5e3ea6fa50a500aabd47fef31e160","sha256":"667642959de122c4b844afcae211c1c54c9166d262fb833beb63abc02ebd0dd4","sha512":"e1633c3f57dc45e189d3d0ac97afe6ff1f44063cdb0948632e9c7fdfcb848f92ef854b22c11a9c58c6f304b0123f34f3b0d132399ec27c95943dc3564fb7640e","ssdeep":"768:Xtn4kqql2jDWRFRS21T2r9lDAkRYKU01RENG:Xtn4kq2wDGFRN16wwYKU01RE8","tlshash":"6ec2e2f1690d6390ad635390c0f66355cdd927393a7f8ca4f96292848234177db3eb64","first_seen":"2024-10-17T04:51:34.39147Z","last_seen":"2026-06-08T11:14:22.945186Z","times_seen":5215,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/images/info.webp","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:36.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /images/info.webp HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 59838\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=4,i=?0\r\netag: \"69256205-e9be\"\r\naccept-ranges: bytes\r\ncache-control: max-age=120\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g4PfmSVDy9Spv4ydpr818P3by5Tv0ZiP4PZDvuSRcuk5%2B%2BRYH4La6plVMFG%2FJRyMOWm60jRAOOSzcChTipzYZN%2FcKlWu8ZEWtuN2B7KRjPUTmw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c60d0ccd99f8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59838,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8955c166ea726f9df674dceb3f9186ad","sha1":"7d642254ba07756830b82c507c49856d91ded48b","sha256":"430789278409c7c3c40c011f36ab5ad7aa9dbb698bf5538b7161b91bee63090b","sha512":"1cc9d6440bcbf856f66eba36f4ba9f2a6a29cf56e340629628061a3cff76ed921adec1fe61e8f513fe4ac37083f4baa450d7e204e939eda5c5fbc27bad0fe015","ssdeep":"1536:I+GXTgppEwC2m78LI1MfqzSS8So+Pd2qoLL0ASZSh1iXmnyqrjR:IhXThtQQuir7dPoLAHZOiXmny8jR","tlshash":"0743023e29de8841c8df2c6d04a8162efa6c9b23668abc7858f6130ed3d5131e7f5d05","first_seen":"2025-09-02T04:43:32.277422Z","last_seen":"2026-06-08T06:19:49.590944Z","times_seen":1162,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/images/user-4.webp","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:36.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /images/user-4.webp HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4458\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=4,i=?0\r\netag: \"69256205-116a\"\r\naccept-ranges: bytes\r\ncache-control: max-age=120\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ibxLPYGMPh5D%2Fw%2F%2BQjAPxliCx1ODfaeoNuGkU%2FwlaQEjQ8ffwbYqNstKdVJ37n4oaafAgkYOHjvJ9gL3Ph%2BWxAb7GnnU6CgiqfjDnHlu%2FoDtJg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c60d0ccd9a58deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4458,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1b6521cc4283ef332bb2691783bb2124","sha1":"f4215511f86aa4e109db5c37661a85944184aef0","sha256":"f78c11fdcaed17dbc72681122cfd87919dc38489442f873c9e425b95036d74ab","sha512":"c6843d77382e21691ed745be283b7a031591921373305e0e20d99492797400e5f4e4a7eb555d3001f4982d538adca2c4b9a6297961a2642a632ce6e89c06f424","ssdeep":"96:KgNOagNgN1ImO7BohzCNmFXJMK+pdOaiSpbXHqOx:GarImO7B7IuKKfXKs","tlshash":"87915cc273c7c0a2b8e98d9853f98679459a7841c2facbae45c2fdba6478974059e804","first_seen":"2025-09-02T04:43:32.330871Z","last_seen":"2026-03-09T06:21:12.120913Z","times_seen":573,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/fonts/glow.svg","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:37.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /fonts/glow.svg HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dorianixfloxin.com/css/tailwind.css\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:37 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=120\r\ncf-cache-status: HIT\r\netag: W/\"69256205-2ba\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fRoYz%2FhpNyv3eOrcedR%2B9LaVh%2B%2FFuJIEH5eKjQf2D4zkcymjPPqLRWCCDs22Q%2BGAWc5aEeY6CpEAPTXinE%2FVrqOz0NW40rfpogJxz2Ky%2BsrHrw%3D%3D\"}]}\r\ncf-ray: 9c60d0ce8a188deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":698,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5a3f3d58c639d254adbe360efe2cd06c","sha1":"ae96f32b7bd60f327cac97014ac200a03983c736","sha256":"9d8a12463844f53b73f589446f70b027d397ec4b22b1c2d505a00c45ac0ce9cd","sha512":"cfac41234168567ddde2a5ffe3fa450eacb9b7c1f57005f79538c91a2b28741069a0657eb080131f120130b4ced175f998a9c32ce6304895faf46e77c6889b7d","ssdeep":"","tlshash":"29014434e35ce02fd654830dca5540c031fdc0d561d6400175d25f6f58e8853aec9364","first_seen":"2025-09-02T04:43:32.326694Z","last_seen":"2026-06-08T06:19:49.595668Z","times_seen":883,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@24.3.0/build/css/intlTelInput.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:37.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/intl-tel-input@24.3.0/build/css/intlTelInput.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 24.3.0\r\nx-jsd-version-type: version\r\netag: W/\"403c-QBsg/WGPIFw7qhwA2rXqpFy0oOU\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 3309806\r\ndate: Fri, 30 Jan 2026 12:01:37 GMT\r\nx-served-by: cache-fra-etou8220165-FRA, cache-hel1410022-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 2666\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16444,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"31cc7c1401a02ca75f8e903777df602a","sha1":"401b20fd618f205c3baa1c00dab5eaa45cb4a0e5","sha256":"04a435c7d3f367d9816544975c24deb53596f62f801d8a1f208d4e55cc7c4277","sha512":"13f510ea338392976fc33b28c2b7392e44ee0640bda2a0f1f7a7148fdbfd4f9aa47bf24b15bdd103f3c0be1cc003dc38adb3041dff2247d4873db62cc2a746d9","ssdeep":"192:WzvSqT2sd5uVsAPRY6e5yE9y3tzEUbyhG/JYyiKdjr+/TEHRik1B3EBu:4v2sdk1RdE9y3C+Rd3+/TyH","tlshash":"f3728c2742b41d3ea75dc1ba38a2c4f5733f588a70aecc96eec8100e5c87791a5ebc40","first_seen":"2024-10-22T10:29:57.919158Z","last_seen":"2026-06-08T17:31:19.076908Z","times_seen":5875,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":59,"dns":3,"connect":26,"send":0,"wait":15,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/images/person-2.webp","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:36.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /images/person-2.webp HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13600\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=4,i=?0\r\netag: \"69256205-3520\"\r\naccept-ranges: bytes\r\ncache-control: max-age=120\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wVLjy65IBwmXoT2dBIyfaqRdSM5U7HqdwCIJRfGD4iMBe3ViMUlrkvd8Vpp7m2xNxLxg2dxsN4ip%2FUhVBnZUuyW3XFBMonWEdPTRJwV0YnYIMA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c60d0ccc9938deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13600,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"415b6246fb998df6031c345891822f61","sha1":"452409ac64d02f17a148cc6c647953558cfe4136","sha256":"0063482c9f40f332598faf6135cc3d5c866dd221ff9c117399dad337aa790169","sha512":"f80753bf9194db8e8318e9e0f49a22fe5b6937d2c10f6f55e758425d6214871fbf8a67fdf8f7165632efd7bad3b8662018becec265cd5a3140b1fe27c2697adb","ssdeep":"384:iYNg7/+jQVlyNjR0tnvF/JDstcx4DmkeF1bsB:iYyKjclyNF09vF/MoEmDc","tlshash":"1d52b0759f9a5bcadd30d634d1733fa8b7d3a438b31496031432256546c15c17ace2ae","first_seen":"2025-10-16T11:28:18.553514Z","last_seen":"2026-01-30T12:02:02.554403Z","times_seen":3,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/fonts/info-arrow.svg","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:36.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /fonts/info-arrow.svg HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:36 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=120\r\ncf-cache-status: HIT\r\netag: W/\"69256205-1e0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n4wm3rrSgGZM6tei80jyrmY5RWmm1cbXaDVgQbmHyUZ3GoMWOxeWnXlxzjM3nnWeYyFoZeUCkgdZsErpDvk8ggUAaetwfe6C9arpj53FXzMB2Q%3D%3D\"}]}\r\ncf-ray: 9c60d0ccd9a48deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":480,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7000561a2a36f6e67dd92e77cbb50d10","sha1":"0059c6b703952d15dc05cad181c1999380a9454a","sha256":"b05aa3927b700369237f9d2ff209fdf0f4867935cbee04cd1bbbba66231cc7e6","sha512":"8c7cedcd717b2ae9b6b59fec21c9aefabb935218e3f158f81b653b5224094bbecac514b5dfe11f4c3763914860064afbf742aca3cf7f1824a358c185ca5f0d0a","ssdeep":"","tlshash":"9ef09ea730841086e00defb4f02c544636c31cc3b488412cdd4c660ab6e47ba2d40e54","first_seen":"2025-09-02T04:43:32.262978Z","last_seen":"2026-06-08T06:19:49.602685Z","times_seen":884,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/fonts/stars.svg","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:36.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /fonts/stars.svg HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:36 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=120\r\ncf-cache-status: HIT\r\netag: W/\"69256205-89b\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MTdQtW6IG4Tg5kTevGpQkgjtw7LaK8DngXunB2%2FpqZIw52JABEzSUEq7QC6SfdpVxJ4qRklM%2FA%2FEd4Lq2bYNjA5%2FBobgm1sdUVSmKTVD7kftlg%3D%3D\"}]}\r\ncf-ray: 9c60d0ccc98f8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2203,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b5f46c787a1e0651d75603195a101a46","sha1":"2e1b5eab0082dd1cde7729696f9aaea6ae00e171","sha256":"adfbc7c2eb5a7bd50ba738a956c98508155e845bee22dbd4ae2b6a28e5f82c52","sha512":"8c928c3cb1ce4c6e4a78af922a97367600a7ff1c6f84fd57c9919f807c06f8fc98be8572822376ca5efa53dec6eae031fe52c12029698321d197bcc838434ccb","ssdeep":"","tlshash":"844104a0731c93f49056f7f4fd29a96635203d7e9b8887f4c2d12a80d4b72a9d58fd88","first_seen":"2025-09-02T04:43:32.301529Z","last_seen":"2026-06-08T06:19:49.634139Z","times_seen":1255,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/systems/js/form_script.js","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:36.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /systems/js/form_script.js HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:36 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Mon, 06 Oct 2025 09:50:02 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=120\r\ncf-cache-status: HIT\r\netag: W/\"68e390ca-3863\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g8xrjo3e7x73WE%2BXinpEQ4fmL7BOOggLTfl636%2B%2Bs0R%2BjnngJz0furYq6XzlBHxyD5Rn7vuFNFLrsXmS3cuQZUAm%2FtNQ3VG565uXQ1xwJgvBGQ%3D%3D\"}]}\r\ncf-ray: 9c60d0cce9b18deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14435,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"780517e261ecfd81a69270f3645dff68","sha1":"0f06ad2fb76dac0110435ff852c2af20508176c8","sha256":"92d09cd513b165ed80dba9243fb0808ce2a2c7e8da732dcf3f9c2a3dca160a8a","sha512":"37290165a9c1690e9083fb745ed5d4cc0248a1f5fc07d9199246ab780ab13d086dcec1ea1f94dc9250d6adbf75d898fd029dbb11842575c537f8ef8597ab40c4","ssdeep":"384:SmXUSO8Aa//hSHSk2Rci2OYMJMFCcikiiQ:nAa//ESk2aO50GiQ","tlshash":"7f52760836f350321537607e6bef62057579602b6808d8193e9c87482fcaa9ad7f1fdd","first_seen":"2025-10-10T08:38:27.39322Z","last_seen":"2026-03-29T04:39:57.598391Z","times_seen":18,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/fonts/binance.svg","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:36.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /fonts/binance.svg HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:36 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=120\r\ncf-cache-status: HIT\r\netag: W/\"69256205-d34\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yRfEZ2QdQvx4SYleGh4TNifU%2FnN46NLu%2FnKeYBS3wKJxQQ2ufzpNRrko1V3jDQ2EJa0dOAbC%2BYiP8rtyZdnMjdyu49oiH2IJwcc23dGtSI7lDA%3D%3D\"}]}\r\ncf-ray: 9c60d0ccb98a8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3380,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"286147a6a8b43aa9f703eb3b278c669b","sha1":"a23688139388df4ef861c249ccfd8bd48aa2eff2","sha256":"1b4f876a5cc0b5da87f17a7ffb330ce2c5002c414036ddff7803da78ec725865","sha512":"1e4b9065bb362a10ad591f82fe88d373c5c82f582cc5ae6c03c87fe1f0cd3f61b71942fffeb119ed7700ee95e7b91845d16ee94443af3dd9960cd1c0c10fae4a","ssdeep":"","tlshash":"a56193a513a9c2e4b4056bfc8f0a68f23fa728f7ad27c51953d12941e8a067c8c75dd3","first_seen":"2025-09-02T04:43:32.294472Z","last_seen":"2026-06-08T06:19:49.60211Z","times_seen":1250,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/images/header-avatar-2.webp","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:36.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /images/header-avatar-2.webp HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2276\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=4,i=?0\r\netag: \"69256205-8e4\"\r\naccept-ranges: bytes\r\ncache-control: max-age=120\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6cEsqLDxn8ZocoERc7o%2B6C0%2ByieinRcghvJU5re3%2FrjHCTG9TXdqsiA0pg%2BzE94K4sCddkAx90cfLPLah%2FckjfZOUvVSF0cS1cpPs4e08Q0LPQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c60d0ccc98d8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2276,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f002c455a1cbb7ebb9f0e367f5a1aeff","sha1":"108acd639aef6dfb2988dbe90017ee4e693846ad","sha256":"3687604fcb1bd6ec80db705d104ab28909dac30e35be40ca3ef55146223af35a","sha512":"7c2b8f1cfc72675366802a003974b8d88fca624431736e4271dedebe9aba73b06cc1652fd6701a4d5fba09f55f6ed56abe021b07b4ce46c6cdb8c0939f0e2e9e","ssdeep":"","tlshash":"e3415cf92594b03bc0f4583a0c7c661a4ffa49e2534e0e360f5d9b6a19212325cd382a","first_seen":"2025-09-02T04:43:32.312857Z","last_seen":"2026-06-08T06:19:49.617342Z","times_seen":813,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/fonts/eth.svg","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:36.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /fonts/eth.svg HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:36 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=120\r\ncf-cache-status: HIT\r\netag: W/\"69256205-480\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e70btUaa0Pt2w36ylHVZ0UmeR6DMki9ANOz8JySJ9PgxCD8RaRi%2BvnxABh6pDtHqlOzbDENoH9rjy8IzYofxd0Qsa6tkD%2FUTLUOYKaKO25hMzQ%3D%3D\"}]}\r\ncf-ray: 9c60d0ccc9958deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1152,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"30dd3d2d238cd83055f0f9855f05c381","sha1":"e90b769cad3df8e832f314f95c1e96deebb5f9c2","sha256":"0e0cdeb30eec14f0abd375dac24b6eae25880840a9ece62b3d7c50fa778fbaa8","sha512":"52caac7d6efdda42b7fe943275b0b37983eee7850123df5092c449c767a1c93319152acdae90c1c33f9efc3e07ee60839dd38da9debc79bd967dd9af7fe13b41","ssdeep":"","tlshash":"4e2100d7520c52c01a401ba43b0ff831a756e4e54f8e4cbad648274bb6c8a9f8eb43c5","first_seen":"2025-09-02T04:43:32.286867Z","last_seen":"2026-06-08T06:19:49.612244Z","times_seen":1193,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/images/user-9.webp","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:36.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /images/user-9.webp HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6022\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=4,i=?0\r\netag: \"69256205-1786\"\r\naccept-ranges: bytes\r\ncache-control: max-age=120\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VUeK%2FoVDpUUQugJG9anLuYUVERZAtjQKwFvxQaLF1e9%2FNR9ieSCIxZqXBnzEXHQz7hZl8fMEw4Z52A68vHFDo579YpZQgdisgYS3swS%2BcbxsSw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c60d0cce9ac8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6022,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4b304bedf039a19df3c86295509dda56","sha1":"5074da65671e25d7e348696aba52f9cfeeee09e1","sha256":"c66ac7538bb1bcebd7f29e5af8f8715d2f8bb8e9064a0881f7b69c9af6d8886f","sha512":"8a863b2faf17d079c6eed6b8a5848aa2b69d42f882c821e4e28a4c2852859bc3f5f06066630a2812554fb2a413972497db008594b058696be60e433377c5972f","ssdeep":"96:c38CNuiWJsLmqZ4F8Yt9Rc5uAgiik2evEhq870wKHuxKcuxE2IP93wLEUlk66RfR:SMi42MvRAmiipCVRwKoS0lALEx3Boyl","tlshash":"cec19d711ff1a028de69ca3544635725fa8481be368737188b3c45dacc34e236ab429a","first_seen":"2025-09-02T04:43:32.288955Z","last_seen":"2026-03-09T06:21:12.103223Z","times_seen":573,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/images/pros-bg.webp","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:37.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /images/pros-bg.webp HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dorianixfloxin.com/css/tailwind.css\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:37 GMT\r\ncontent-type: image/webp\r\ncontent-length: 40462\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=4,i=?0\r\netag: \"69256205-9e0e\"\r\naccept-ranges: bytes\r\ncache-control: max-age=120\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BwH1k3qHWLnNO10CrkCG3HtAezQ7EMgjsBH9ZI8m8EleJ1dBUvs62uSt%2F76Q6lRJW3DTrep5N3S%2FVta2mbZVT3GLm9PPXe1H1QQ%2FkeZAsfsxgA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c60d0ce8a1a8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40462,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a552bc7ad58597757b953a47ef50de2e","sha1":"ae607ba3cd8f2986ec9f2dee80ae90f28cd1eaf9","sha256":"7af56b3431d35b0264020ac4eaa6ff1ca05a72a64647fdea890e9814597da6db","sha512":"b976c4950c93b9743666efe43261649a885163865793314992bd7990b42afdf4c34703bc01cb8abe742559e270b203a06e1b6f1f184bfdfb8e9062c88f3417b9","ssdeep":"768:euKXMkiH1mxkbLyKMVgJWqHgSSUxyt7tdWbbfNFd93raFCoDHXeX1rFYv:euTkImxcPn4Yyt7tdWbbfNFdl63eX1A","tlshash":"a603e1d097b394eead24862349bcfdc2576e36e18b429b8282c7e54a58378df9532130","first_seen":"2025-09-02T04:43:32.343217Z","last_seen":"2026-06-08T06:19:49.596657Z","times_seen":867,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-30T12:01:36.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 12:01:36 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; path=/\n_subid=1sjos4f43porl; expires=Sat, 31-Jan-2026 12:01:36 GMT; Max-Age=86400; path=/; domain=.dorianixfloxin.com\n3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA; expires=Sat, 31-Jan-2026 12:01:36 GMT; Max-Age=86400; path=/; domain=.dorianixfloxin.com\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2wGIkC1EL0Z%2BWxNrkZ8i5F9VwefEWr5OGcubC4PdLou%2FnzfraqomgegZmnso%2FllO1RqrCEQIiz%2BbLsAAGT5OMn9GBj%2BrPrK5mFRCwDPZ0X0%3D\"}]}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c60d0cacf01b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":60165,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (780)","md5":"598b14fa7e600ad6f8a11a7278166845","sha1":"5df5b04b542a78a3be490126da6015bcb8c01fba","sha256":"408cf8a3284a93d104c58f15cd0abd80fa8eefc5152ee76e17232d1804af1e95","sha512":"07b632ac7d1443926332735bbbb716b698fc35cb7d5d17571b74f79ce5927006fb672c18cb7e477d79324c471973fbdf99f3822799892a752c622059a6064d10","ssdeep":"768:X3dsydFRzu3tCLk4/0g3Ev3EWSH4+18g72RGwjR5Wm:X3pfItCLJ0g3Ev3ERH3ygGjR5r","tlshash":"3043652911f105bb11c380a5fb656f2bbe64da43c61bda09b6fc16911fc7c85ce632ac","first_seen":"2026-01-30T12:02:02.559217Z","last_seen":"2026-01-30T12:02:02.559217Z","times_seen":1,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":23,"dns":1,"connect":1,"send":0,"wait":161,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/fonts/header-arrow.svg","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:36.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /fonts/header-arrow.svg HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:36 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=120\r\ncf-cache-status: HIT\r\netag: W/\"69256205-1e2\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HyiXDYsgI5CP7sYHFpt3k94by37poV8jpNJmYFWuZF605knRd%2Fyj8RCqWmMJo9MODM4WpHNNWAgLojCdZel94apOaWs44eqQ5RPEuDw2FKjW9A%3D%3D\"}]}\r\ncf-ray: 9c60d0ccb98b8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":482,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ef279923440321565d5b5eccf70e2a1a","sha1":"7d3ae164864496ff78f2207f0e5d7cf720117a56","sha256":"1a60f0679cb2ef0cd2d3270f16e34c7897e9998a24dbe1b613364bb4ded1ac7d","sha512":"ed1743bc7a967ce62baa78036d72e2ef91a315323307ce7494c1f16bb56ffa1e7dcf94045598344ce763b03c932d79bad05970e9a98a716a49b0cbcb97642bc8","ssdeep":"","tlshash":"c3f0e2f696591548fe8f09a5d9986c4b056a0adccdcc02c6e5506e105efc0c29cbae87","first_seen":"2025-09-02T04:43:32.334597Z","last_seen":"2026-06-08T06:19:49.583866Z","times_seen":1256,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/fonts/payment.svg","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:36.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /fonts/payment.svg HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:36 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=120\r\ncf-cache-status: HIT\r\netag: W/\"69256205-7bc6\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qf4fu6jI7HoZ2zjmAemtjl3dgMW7tRxbJaaqksHtWfbxj3OWQKeK6oPPmPHr%2FAWDMFxihAoRr1stQdsVQxG3THTQlsEBeoHQojNKwwdTnZQ9aQ%3D%3D\"}]}\r\ncf-ray: 9c60d0ccc9908deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31686,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9857cd226493e46d1f9d1da264b98ca7","sha1":"91d7efdfb03bdf612c1279b05b55a6299304bb6f","sha256":"8d4f42fb0c221eea7cc3bb6f8f25434a543644d9f20257c749c617c0ac8fbe1e","sha512":"feb167e1811234de452b58bc81647471bebe7bae1c845c73021e0a7c0cd538a28b55ed29c0b15f790266018680a0b4f8394ea193116656b328e3932a11f8e554","ssdeep":"384:3sn7jCC2N62crb+rBEXGZQNM87Rg/BzZQTraKBzBY0XDiu23dMcgjZZLwiywoqok:cn70MSrBEWlxBVMuKBFdTiu9ccXywak","tlshash":"bbe2c7e963faa2d4d58cebd36f94a1393d1320f75eedcd10c3ad4e68aa4486c4c245d1","first_seen":"2025-09-02T04:43:32.335925Z","last_seen":"2026-06-08T06:19:49.614715Z","times_seen":880,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/images/user-2.webp","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:36.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /images/user-2.webp HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5726\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=4,i=?0\r\netag: \"69256205-165e\"\r\naccept-ranges: bytes\r\ncache-control: max-age=120\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7z0qk9G4sPBxNe0kow%2Bv2ao7tYJ7R9v6Wt3e5tNZFOzi4qwxosm0rMRqnCMs2%2Fp8%2BHeX6zROgB0JebC%2FHsAFsBZAHSt%2B27ieAAs2QXg4VLPaxw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c60d0ccc9988deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5726,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8afeb1474b36837c35ee5b897c93b574","sha1":"277ad7a2e3514b2567995fdea9379f6288e7a130","sha256":"403325dfa9d15f89ce62cb56bc00dfaa873dbbc094c0d31868f48b96a59b60fe","sha512":"c869429f49725a2776c7a273ac65825c535f48ccc0c35ebc2f2b13f4a79771a5bf840c7507aa74c4456e863cfaf64acc14808897450465b115baa2f0b051464e","ssdeep":"96:ulMdWkfnanOYw805my+j3OH09aLedsHlUWwzpqm5MD1PkzKqpCfZ:ulMdx5h83y+j35Ce/zpqWMBPkzKGCfZ","tlshash":"dac18ea1f9d5a432f23bf53288a12eb5cadfc25246a7fd086c91ad7219272c033e5458","first_seen":"2025-09-02T04:43:32.243765Z","last_seen":"2026-03-09T06:21:12.080692Z","times_seen":573,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/images/user-5.webp","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:36.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /images/user-5.webp HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6344\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=4,i=?0\r\netag: \"69256205-18c8\"\r\naccept-ranges: bytes\r\ncache-control: max-age=120\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M0ESxF4yK%2B5Q6TMJ%2F0xen6ZBvKQMu4N31vlpEyUxAP4z0R9nMo7LxkJRje8oae0tO5pVJL8DkhfSm1PsBgG84jgC5h0%2B%2BPtaBTDRtXB6j4%2FSwQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c60d0ccd9a68deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6344,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"507dc1da713876f641615339555f7b66","sha1":"a750929cfb3a9b0ab2c28980b7ad3a1a48be619e","sha256":"f03aefcceafe0b9a3173328bb15113bf1b6cade7bf190056278a3f467856d5d1","sha512":"cf7f4d6c92807226563f3aabfec4c1116aa88e892d21a47de479f5839d18b91417cdc41d4cd7d9493b29073d2bdc75039d0f127ee4dca6d086772a19e113426b","ssdeep":"192:sVaVWed6VK1viXfbi2uuUF4G0ivNdpiLwq:asd6RiEUF4Jorp45","tlshash":"09d1bfa4d10c47b3f604a53e669df66246b6dc0177400a300a2b0a67b3b7527b7fe1c8","first_seen":"2025-09-02T04:43:32.323787Z","last_seen":"2026-03-09T06:21:12.147507Z","times_seen":573,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/images/header-avatar-3.webp","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:36.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /images/header-avatar-3.webp HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2008\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=4,i=?0\r\netag: \"69256205-7d8\"\r\naccept-ranges: bytes\r\ncache-control: max-age=120\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YqYNHf2%2Fg4t%2B1b4PrFfa2e45IdNyBe7G3b18Kh7iy8O8FwDHDKJtm5qqcQ54DBZ%2BynYYvjR8AmV5gZX3KNmuKYd%2B8Kl%2BJDEkEy6aFn0OnoUrjw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c60d0ccc98e8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2008,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"41ee26398cbd792c2d068501c6fd5347","sha1":"87726c430c3e0306bfa296f1c9fbd6a0f10a1669","sha256":"88da44238d5dc9b340a7763dc85f16be6d31ed02e3913631824731f235a353f8","sha512":"7398a65a212717062749ebf7e94f743cbc52a00f9f0767682684ae74ef74185aa08a1ab410a5d0a4a4b433dfddcd59f71623bc28a708b92e6da2110c9d60bdb6","ssdeep":"","tlshash":"40414aeba80e426fcc9b4272727feeb0087f965c73618c098101012eeda3667474528c","first_seen":"2025-09-02T04:43:32.32803Z","last_seen":"2026-06-08T06:19:49.610109Z","times_seen":872,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/images/person-1.webp","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:36.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /images/person-1.webp HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17008\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=4,i=?0\r\netag: \"69256205-4270\"\r\naccept-ranges: bytes\r\ncache-control: max-age=120\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LoU4jUnS4gHkh9ZLm3K6Q%2FfnHDQX1d%2BkEcME7CIYfueTClYc95%2FFfY3wC6tcikPpihDKxBkaRNw6sb4qERNRb08bnRdGMSbYj29Sps6aXdxfiw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c60d0ccc9918deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17008,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8a515771b64bcba2b7fd1b8a7b9075d9","sha1":"8fb0e9da148662d66c19f548ea8f10315858a431","sha256":"e6cbcc56afed5547963d1de3bdbcb959c1d10cee4d02c67ec281b51417291de7","sha512":"1fa0800c2b424ff0d27f5ca4553166c25e59e85a10fda4bf70618c94fd7a854156819e11078d7c10c21e6fbe19f7edcb13cf1ad87ffb9f9c8149060201b07ea5","ssdeep":"384:nYNg76m2bncij6eeZxjFsseFnaQpt38NBo:nYy+m2bV6rZxx7eFxuo","tlshash":"7472c030afc3d22fd275e0312cb6fb809772ef3e631112826d686bd51a41991ae9d11a","first_seen":"2025-10-16T11:28:18.532298Z","last_seen":"2026-01-30T12:02:02.562745Z","times_seen":3,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/images/user-8.webp","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:36.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /images/user-8.webp HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5798\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=4,i=?0\r\netag: \"69256205-16a6\"\r\naccept-ranges: bytes\r\ncache-control: max-age=120\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hrsxraxxepDwELt10I1cokX%2FGFaHu0QGVWFzvvN5zM8yarK3OvzDNtiY%2FfsKSK35SlvwOiY9YX81uvCeIgflgwpNbq3PLZxuQTQN5hnZcn0OcQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c60d0cce9aa8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5798,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2ee770495b413c5926e83c67358c66dd","sha1":"f48986b91a75699f6e3307d39d424fc54c2ffd42","sha256":"a9213d53d2261af8ca283f6aa9a226bba48af80850ae213973337304a5a61171","sha512":"38ae1cecb17ae918791b720ae6d5e0f2e16513c0298bc3a211db332ace13ae85a294e1eefb4df97435bd56fbcdcbbe33f3f8d4bda3b923bd9a6dbc6bff4cbe1e","ssdeep":"96:Trj9Ugl+x7tyV7/DATNYm3UiaB+2P8cjo/AbnqrTOsgGdVPt7B3Qvo7ms:TXuycg7/DCYmEiag2P8cjoIWrvFT7ms","tlshash":"03c18e2c626e7e458f9d23fc3e85bc625c02224b6ec28c491ba4f55f6f8439143f018a","first_seen":"2025-09-02T04:43:32.317254Z","last_seen":"2026-03-09T06:21:12.096913Z","times_seen":573,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/images/header-bg2.webp","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:37.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /images/header-bg2.webp HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dorianixfloxin.com/css/tailwind.css\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:37 GMT\r\ncontent-type: image/webp\r\ncontent-length: 339153\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=4,i=?0\r\netag: \"69256205-52cd1\"\r\naccept-ranges: bytes\r\ncache-control: max-age=120\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JEUm6DX9T%2FVEqDXF8OgBMAm0dx7NpeIi%2BHV1%2BoHXFzJOwzCCQdRJYyW5DQ%2Fmf%2BT4GyqfqQsdiGdViS5FdgqJlmFizd%2F0CNMciBby6JUtn0kFtg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c60d0ce7a158deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":339153,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 2880 x 1260, 8-bit/color RGB, non-interlaced","md5":"a87a758111936d0a8e998dc4ef374c7e","sha1":"f7dcad3c841c495e5967cc33678f1c95bf5eb6d8","sha256":"e1548cb3c78f60faa972de80d26c36883efadcddd741d56effa6e40200160c3c","sha512":"6dbbb13dc3564e0c1ff4de46550fa6ed850d7c63725a1db7524ef83477dff051c15eeaf4cba58fa21e05b90cc6e3a5eab4db560efc1b925e9444af6f3322da9a","ssdeep":"6144:3R2lEwzr8GDCFzMq1cDZgCZPlY48xr51VV3kFn4lZiLmv8L0Jn+DFKcq0jhWGu6j:34TUQq1cDZgCZPlL8X1VtC4lZiLykDFJ","tlshash":"9874125fa9fae9e9dccf51b011705be2a36724b7c2d60cc8a3c4f6d46405dbca9448e8","first_seen":"2026-01-30T11:52:37.476173Z","last_seen":"2026-01-30T12:02:02.56427Z","times_seen":2,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/fonts/like.svg","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:37.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /fonts/like.svg HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dorianixfloxin.com/css/tailwind.css\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:37 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=120\r\ncf-cache-status: HIT\r\netag: W/\"69256205-e1f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sjMpMqkEY0KJGKHULMrZ7LPX9gkDLgTl2ViDZ1iLTqV4sCgx8MeacGQh2R9uXCypxAAMsSlkiEwSwg2ipOYU245B8w24SqjzTNDpfEj6NXG1uw%3D%3D\"}]}\r\ncf-ray: 9c60d0ce8a1b8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3615,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2c10ef99921bedb522858b8452a520f1","sha1":"d8950fd5ebd9fc4c9f7030a8ad535a03ea502ac5","sha256":"8fc5c82557271bff7c7974b940f396c0e1510e56e149061ac98368c95138f2f2","sha512":"7a9f75653a67f9d6d57ba07927fd23c238e20b57cb1aa6856d8edeebe8399b6304ae108c8c30804b59bb911fc123df24257c6148a15b94de03317ce9f156f892","ssdeep":"","tlshash":"1f71d8e583e862f9504ba770c9369fa5736b3cf9374a8e8693c8ad8da81500c584cd47","first_seen":"2025-09-02T04:43:32.282519Z","last_seen":"2026-06-08T06:19:49.58848Z","times_seen":884,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/fonts/quote.svg","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:36.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /fonts/quote.svg HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:36 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=120\r\ncf-cache-status: HIT\r\netag: W/\"69256205-ac8\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bsbhRy3zNOTzJKXqVUQgbEwCUOKAC4g99yfqqI%2Bt6ecTWHcFKC%2BTw6EiKaAHfTMFbqq%2BFz5n1Zye52T0WUh4x3Y7cyBX3lpVCU0vK2Nrx%2FqP8A%3D%3D\"}]}\r\ncf-ray: 9c60d0ccc9928deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2760,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"504ce723c76d111e0be511d24721c2dd","sha1":"a1fe51672c966079ca8ccaa11fbe6de0bafa1644","sha256":"a563b73f0268826906bcde897b0a2f55d0d2fa9cfb394e4c151c138f3865202e","sha512":"87a808d4940b03b8e019e3a28be1bc3d866c01323be476d8e2e1ac2d780404bd66046a62855d03ae2c309387f7c18788a5f1d9b3bae538139b5448df459631a2","ssdeep":"","tlshash":"0b513061b3b971e0f215e3f667e27925b95b26622f87c2e4c0d72dd4d87480c5e808c6","first_seen":"2025-09-02T04:43:32.254441Z","last_seen":"2026-06-08T06:19:49.634711Z","times_seen":1191,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/fonts/pros-1.svg","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:36.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /fonts/pros-1.svg HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:36 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=120\r\ncf-cache-status: HIT\r\netag: W/\"69256205-1510\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gzSgZi%2FOxa5jo1TKn5yIR7GyIpTHwYhdS23akmhlOAhO89hhULDrr64MaP4BQS2ya0mZF6QwQZxh6UUlwG4qcl%2B6L5DxEYGyUBzuHOqJ3ddSIg%3D%3D\"}]}\r\ncf-ray: 9c60d0ccd99b8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5392,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e3e03487987db909519573a44bc1c14f","sha1":"e9fe3cb017ee1eeb06730a1b5481c587763e3135","sha256":"7380cdf722492fa999e321b25877905d77eb7781b3729966d36a4a580b40d924","sha512":"052f13a31dd25a9a6e0c561e9dcb24128fe21cc351a1626943534885190a0869790d1038e29b49041649c72cfdade38ed8e1c0043527ae6d56c26dd2d2d32947","ssdeep":"96:oKyaCV0Ct7eFu8TuPK/MeDurIIzfZUijQuGCZ/gNCjAJNk+n3W4ctX7BTDx:oK00dE8OK/4VXGC9yJG+O7BTDx","tlshash":"25b173c8237541a4f949b6fe071bbc542e4649e8e7118c5dcbd46e0be1420ae2d7aecb","first_seen":"2025-09-02T04:43:32.303241Z","last_seen":"2026-06-08T06:19:49.61343Z","times_seen":815,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/css/pages.css","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:36.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /css/pages.css HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:36 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\nage: 29225\r\ncf-cache-status: HIT\r\netag: W/\"69256205-1960\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6pkZCjEw4Ltln6XX9j9UfdkTwDjgA8rJvsLBCtzW%2FgBfaoUcgS%2BNgiMRPtKEo0FOnibBI9lMXC8ijmkfi0URgBVtr2dslBiwQPAzysj2Vt9IgQ%3D%3D\"}]}\r\ncf-ray: 9c60d0ccb9858deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6496,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"fa515e467f65277b6ce2bebe41fd681c","sha1":"89c72c6d81300531a59350ea89f694ce6236ad0c","sha256":"765eeca97da183ea41fef91b84d4fbdbdb83d6af2331c82def6fe7109f4fe4d0","sha512":"f90e51d9d4ad9499a2ae017171f4676e6d8ab33e9ac5f0346e4b40390b5dc2e4a01840f72eee7cd01795cca90d336d2854c9b836bd8ea1a9393ea3549d2ab7a4","ssdeep":"96:byCddmTEMGpH9T4xXsBOoqzUnRBbw+os9+uMJMzMJxsT/rlT4xkT4sl3Vo/0rLah:FeiHHBRBfteMwxMxlFz+J4lPZ9DIx","tlshash":"11d1369253b56148742a98a9abe33f68626c8043d14ecdfcbfd6349cefc81d14961f8c","first_seen":"2026-01-30T11:52:37.503377Z","last_seen":"2026-01-30T12:02:02.568089Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/fonts/bittrex.svg","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:36.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /fonts/bittrex.svg HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:36 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=120\r\ncf-cache-status: HIT\r\netag: W/\"69256205-328\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c3EWE3O6BwM0CKU77vxAmkTa17Wj9y4GzkoBeV9AhorW3o7VVpAtVsrhEC9Bca4JhP%2B4sg7r83wHT2xDAv6baFTSH4gI5pk2aXxSOEj5pB3mYw%3D%3D\"}]}\r\ncf-ray: 9c60d0ccd9a38deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":808,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"df280930bc74ed9797630ef8fc49d3ae","sha1":"90880c4fea185cf1c65916a7f2c946e030170499","sha256":"bd78df4c565f16b918144f647ff9bb0dd258d448fc1c27079e93a0a7a073c994","sha512":"9b85a6a0ed231f251557790380bb6b203ce6b66e55a7bcca005404183c9a9882fb38637ee2b48c8742af5c9875f0f195beffe909ae992476e26f8058171569b9","ssdeep":"","tlshash":"4601f1f4f62c924d0e08534d2b7835395194b3d8c3c64b5d3940633b6c8d4271eb32e8","first_seen":"2025-09-02T04:43:32.308504Z","last_seen":"2026-06-08T06:19:49.582279Z","times_seen":1249,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/images/user-7.webp","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:36.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /images/user-7.webp HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5552\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=4,i=?0\r\netag: \"69256205-15b0\"\r\naccept-ranges: bytes\r\ncache-control: max-age=120\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Srcrh4zIRf%2F9TWVC3ZeLx7PMFgl0bBJIqbSQiNgsEIgOkOcOpPMp5rCmk8N%2Folc7LyjVHgaBGho7HFt2cm5lUNhTj9llGEiGfIAks9xXUkpOiA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c60d0ccd9a88deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5552,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"27470bec9f071ad8fbfff2b5cb912ea4","sha1":"1a52e1c82ac31158da0d0d641e2169a8ceb1b7ce","sha256":"7e1f70cc3d6d6e8b533fe17264755bb6a15b520870812a802ac8f54f1fa0e357","sha512":"4bcacd7eafe5962dfc3d70266a978409b63f4ab08781bbfa25ceec2f7fdd60f331500f04f99cc51b2fca6ee3132a903d7bc61d3518101e3bb11d370a841c88ed","ssdeep":"96:iQb/w/YtmuTEwoLPRpH4r8TLL2jNyzgT0WclbVYg2QphfgTrTs3nyCspeUs5Yd86:NESTEhzRpH4YbSNXT+VYgdurTaVsxUYR","tlshash":"3fb19eaf9f5b2a6fe2c2e73b155c356a121f534de218897d16a0a262472c3887e27084","first_seen":"2025-09-02T04:43:32.325136Z","last_seen":"2026-03-09T06:21:12.126626Z","times_seen":573,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/images/header-avatar-1.webp","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:36.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /images/header-avatar-1.webp HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2216\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=4,i=?0\r\netag: \"69256205-8a8\"\r\naccept-ranges: bytes\r\ncache-control: max-age=120\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=itAtZkMoOFjGO30hUF%2FOJXlakMzd9W%2FjcyVMryCN7OkUUgf1jmgvem%2FKvKO3jWG7z8YatcX8ybis9M5y9uxP1yHbqudw%2FE5krSet%2BqPs8v9xcQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c60d0ccc98c8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2216,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d90034b2d291e94da6d0c65eb0f9f1a1","sha1":"fb72b31d8799e2e1c9cec12adb3c3e6a17422ef4","sha256":"f24ce3fbcc2eb49afb20cbfd787afd1dd2638481df578f3c2d18a72c73a3238a","sha512":"463b8cb134c6f7edcc23335a444e59f279fd31a61376d8f8677143807c76eca430bd2922da414b348784a1196b87171973d2043a68292c29c135bea5f25b205e","ssdeep":"","tlshash":"5f4129cac327d11ac0ab4e35440d0dc1928c8549ea96076caf4bf92b58ca65d3be23d5","first_seen":"2025-09-02T04:43:32.319544Z","last_seen":"2026-06-08T06:19:49.590032Z","times_seen":813,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/fonts/polonex.svg","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:36.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /fonts/polonex.svg HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:36 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=120\r\ncf-cache-status: HIT\r\netag: W/\"69256205-3fd\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hXPf0DlzxhvebGQWvec2vfFBROcF2cvJ4fDugtirw6EiUuW5aZhz%2FIE%2FSkwliyjmRoDxreIRUf4GbRZoYMDPdW6tSLmap9ELyRjaMJsQU9xRSg%3D%3D\"}]}\r\ncf-ray: 9c60d0ccd9a28deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1021,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0a93f41c5d779ef0d290e4c54e2438c4","sha1":"e56f962012e24d19748c1d4f34789fab11deb64e","sha256":"c9bb6c3d073015bd7e82cb3c8e1b1e9a3fa9e15d3ade934e21068ecd59424f61","sha512":"ecc25a27648b40e5fb0370597111f401bfec58bb6b74145251062ab6ed8a6a5c9d6e15a5e3fa23687429262adaa83007366839604b4c43b8922dc7c84fa61e6f","ssdeep":"","tlshash":"ed11cefc6728920d4e0897943b6aa866107273d89189c747b5c565af6a8d06f0cba1d4","first_seen":"2025-09-02T04:43:32.322472Z","last_seen":"2026-06-08T06:19:49.594235Z","times_seen":1249,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/images/header-bg-mobile2.webp","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:37.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /images/header-bg-mobile2.webp HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dorianixfloxin.com/css/tailwind.css\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:37 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25708\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=4,i=?0\r\netag: \"69256205-646c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=120\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AIuGrQOIZWaUwTX2eSm2DiRmqTMLaZ83OmjdnH7zgzKKjVoOxLQLqkCyY8jWXCg%2BMq7yzWFQ4iEE0bc%2FU2LSYBATOqwpf4TyKyrp8RSbK6k5dQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c60d0ce8a168deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25708,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d8179eca6cacb540539cd9b74f711fdd","sha1":"5cba7acc82732a756054aa3529eac3cb85a3557a","sha256":"6efc83b8bf5e579eec51195c4eba7f58df2487f8d195f07d59b0741bd6ecce39","sha512":"ece42e75e994510373393c040d56edd7f44b5c3612c1b5552e3ca7111abc0312096792b5e8defafcbece652da2f21a3f8ec439db2426e31ab20ce06dd24487ab","ssdeep":"384:p2ESfIf9teHWKyJsBp1p4RrCGUWRsLGNr+pQNCc4b+cMVOARGCU2VW7Cr8xYySTz:0ESATO1SaWR/NBaiuwVW+VQUDr4Y","tlshash":"c1b2e183f37074daa07597f892717d2a79a8039013b98b9c3687391fe53a510779d2d8","first_seen":"2025-09-02T04:43:32.280027Z","last_seen":"2026-06-08T06:19:49.617923Z","times_seen":862,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@24.3.0/build/js/utils.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:37.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/intl-tel-input@24.3.0/build/js/utils.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://dorianixfloxin.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 62485\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 24.3.0\r\nx-jsd-version-type: version\r\netag: W/\"409b9-Efq9SXj0EwVzTFARgzTyVtrHQM0\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 619237\r\ndate: Fri, 30 Jan 2026 12:01:37 GMT\r\nx-served-by: cache-fra-eddf8230169-FRA, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":264633,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1903)","md5":"fc7a4d7d26af9f55e366bb488650efdc","sha1":"11fabd4978f41305734c50118334f256dac740cd","sha256":"ff99cc589b69c84cd23f1ecb62bf5f11dd17a8cb0685686bf2a5aa24d4047195","sha512":"5136c245407c72cd64031d4bc90f791e5665ebf372be95b82f0968bf577133ceee8ebe2c1001a6a746df5e8b22006f57a83cc5feed7a71b4d51227ee8d8f885a","ssdeep":"3072:9E0309pJjFs3OwPss3MwPwZOV09E2xFM8M0T4O9NBW6c556kmLNTg/QKWVSplUki:9E03wpBFOgxFM8M0T7OUx","tlshash":"8244f0ebd63c9737a1e87b35968eb3cd5a8cbca3c858567826c3b54f52784e0706c205","first_seen":"2024-12-30T11:50:33.405046Z","last_seen":"2026-05-20T06:29:51.32299Z","times_seen":174,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/systems/js/loader.js","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:37.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /systems/js/loader.js HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:37 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Wed, 19 Mar 2025 14:40:49 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=120\r\ncf-cache-status: HIT\r\netag: W/\"67dad771-14e1\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gml7B7r55yQF4LU9OieIG%2FjGRUiW%2Fm3KzZ2oVlaRsRhOePeR8YKO4wolaI8LJeHnpr2Qj%2FHkoRG53fvEnk76h1TeUHMS%2FPx5mnKU9NhipgoYjw%3D%3D\"}]}\r\ncf-ray: 9c60d0ceca1f8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5345,"size_decoded":0,"mime_type":"application/javascript","magic":"C++ source, Unicode text, UTF-8 text","md5":"82f05a966efe3eb7bdb96cd927379326","sha1":"b798fedf42122ca705ec317b333bef1878390529","sha256":"0a59565c5d4f3234c826ec37adbb1af67f8581998bc4029c738a963e718d9048","sha512":"44232d202d2b14813c63af86721fd80159cff9b09a8a71db585731b8647d49a90e61ffa7b90772340d40b0b521b75b81de9ae181c0d020e5752b262c4b7c0b03","ssdeep":"96:iIaQ1lMQkBCe6poSoVifw9GLqYRCU8bZ3RxYVWLyyy1:IHQkBCRiSoAfw9GLqYRCU8bZ3RxYVWLk","tlshash":"80b153482bb74418944bd06d2bef3b8531384803b90adc8b7bdc828cdf85ad9d5627ed","first_seen":"2023-08-11T09:03:01Z","last_seen":"2026-06-06T22:38:00.066198Z","times_seen":256,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/fonts/pros-2.svg","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:36.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /fonts/pros-2.svg HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:36 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=120\r\ncf-cache-status: HIT\r\netag: W/\"69256205-1c0a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lL4G4iBRCBkpG7H4MubvQXa6OUOJW7UV7BZsQrUHAnijQiVbOHViHXmOVWcBLaCy3dKiZtPjS4A1tBugD1%2Bd0dv4oh6HB6%2BU41egr5ZnAXaI9g%3D%3D\"}]}\r\ncf-ray: 9c60d0ccd99c8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5ccb30901fe366e2c16716a76b7d5f45","sha1":"c843a8c141f8b541601ae8a50fc3cfa336d4844c","sha256":"a08ef793cf722e6ad68e787ef6d77a1a7479b4a90ea93c9e9ce04095069fca89","sha512":"ec261437779ed5fe498752027945ad78b84044e60404fc713e0afbe960e80ef184445a8f920853838d13a12e01519c23fb08244c4169df62dcc9bd7d7c59a5b9","ssdeep":"96:VKHrnlEeDv1dv40YDVpMdbZYdBMc5jsRSq8J+org8R0RCeALrS/rw9HO:VKHpnv6DT5XCEdprgPRCqU4","tlshash":"08e185c4372ac3b4f409dafd4219b4757e527dcb761380d8c3ba1d4ab88a42d6da98d3","first_seen":"2025-09-02T04:43:32.249675Z","last_seen":"2026-06-08T06:19:49.61548Z","times_seen":815,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/fonts/comment.svg","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:37.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /fonts/comment.svg HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dorianixfloxin.com/css/tailwind.css\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:37 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=120\r\ncf-cache-status: HIT\r\netag: W/\"69256205-93c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W1523R%2Fc3YX1MZz8BRsWO6rO6qoroVXAVT%2FCvxnr5KhnnPz%2FipNlz8IplJKyi0GGvDYZNUFJOhI23VoySzcaY0XxLnlrp7U3JSwxLpnDegNHVw%3D%3D\"}]}\r\ncf-ray: 9c60d0ce8a1d8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2364,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"03dafba01023fde082ffa08cec31dfd6","sha1":"bd202e2efecf4fcccbdea6ed2beb3c1d246a8e98","sha256":"0d1664b6b5351ca740502fc40a1fac93071f77f3dc3e3ba1acc32c696757fbad","sha512":"6da0a2071f09b1dd1462f9737d29271b241ea9dc471c072a2de131a1be356110286b1a72c3e4649f560003783538463a08c16c8b19164d74cf34f0e1b25dc302","ssdeep":"","tlshash":"1941eef0e25c90e95405bb78ce7b17e173733dad2ad0c2849370f9266a949fa9c5c983","first_seen":"2025-09-02T04:43:32.337995Z","last_seen":"2026-06-08T06:19:49.582809Z","times_seen":1249,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/images/favicon.png","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:37.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /images/favicon.png HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 1722\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=6,i=?0\r\netag: \"69256205-6ba\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 29225\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0K9EfsBQS0m7%2Bkw0jV3KtHJxYcPcWTB3LoqvoOkrN8qeof0Umxa5174HdToxgO91EtuTQxvnCKe8fGuq2F4XvpwDvuJYgdixNijppVhxDQznKg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c60d0cf4a348deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1722,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"fd4371ccb5607f02b73121820d728d49","sha1":"93fa16ab3f7ffd15ff086424f054741a5845955f","sha256":"220f84d067a85e0b46493ae6bcd4cda33fdc9d0a0c562e7a8a479f24a490f485","sha512":"9a53e30e268ec44a99311d923491afda13a4c145b14ee1448138650ed821995056570213b6f27040ea8314cd74d1b471f0c23a7c9782b9bc30eed1d0994088b6","ssdeep":"","tlshash":"b231187341d1f820ebe8a74ce557c389eee886cc0e0c6cad0030833e89816a52cee271","first_seen":"2026-01-30T11:52:37.478454Z","last_seen":"2026-01-30T12:02:02.577911Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:36.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.7.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-155ed\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 30 Jan 2026 12:01:36 GMT\r\nage: 5007688\r\nx-served-by: cache-lga21978-LGA, cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 27, 365542\r\nx-timer: S1769774497.855856,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30336\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87533,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-06-08T19:42:45.782555Z","times_seen":166597,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":51,"dns":0,"connect":26,"send":0,"wait":27,"receive":18,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/fonts/ltc.svg","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:36.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /fonts/ltc.svg HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:36 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=120\r\ncf-cache-status: HIT\r\netag: W/\"69256205-408\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kb2TWX4ZRaSTx5NUM08JLafS4ixd25LxqklU9gZrWT8w7oi3uYZ8gPBg5a6ykIbentrJ7mvjnRWBheaMZf0oAPVElghUDcxyxQ38u8zZ47voZA%3D%3D\"}]}\r\ncf-ray: 9c60d0ccc9978deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1032,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c4a6bbd896e770e829a30e835714ac49","sha1":"7a9fe65f4227ee71070e76c345eef4e1f77850d6","sha256":"32d3294815fc7a945762273c76564c434e395d8ebe6eab2e9edc8e3cb74076b6","sha512":"cd82a14c15b0307501bc59e5b0bf4dcf3edb39a0bcc51b42d5f439ad23847da574e357b1e4edccda6d2f17e57332709d1b1f5fbbf43019614f4ca1ec494360cb","ssdeep":"","tlshash":"8911ced0b7a977f56484c338826c3071647b3cee1a215d784ee43841752140ecc52eac","first_seen":"2025-09-02T04:43:32.275483Z","last_seen":"2026-06-08T06:19:49.612844Z","times_seen":1253,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/fonts/pros-3.svg","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:36.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /fonts/pros-3.svg HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:36 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=120\r\ncf-cache-status: HIT\r\netag: W/\"69256205-6d7\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HLhOOxphsnXLg9mLH5ZLPAW5si5TYgK6mJLhGij2kWUTP6KHHNdf%2FPKNr8ssRpYhR%2BhUiVVbp%2FSVLJ7VTvBWOy0mc%2FAja%2BiHL3ROnw3hmnCvkA%3D%3D\"}]}\r\ncf-ray: 9c60d0ccd99d8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1751,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"77cc23f4dfef3fb494da063dbffc4fb0","sha1":"5497f0fa1d50011c7d90ab2f3c9107fdb6617906","sha256":"6c79187930a4abc56242352b5d4d5a5e68e7a6837c129e4021ade79165774cef","sha512":"9998ae9c90a9a7a002c388e1bf176ee2730c6806e545707820f118ae4808994ae1552977dacefedf49e6e425b31819097e0be659b99e73a6bddcbf80594cfdfe","ssdeep":"","tlshash":"9c3123dc2178c39cb40679680786b8b13c5b99cd95a74845d3b3be12e88845d5e748eb","first_seen":"2025-09-02T04:43:32.34178Z","last_seen":"2026-06-08T06:19:49.635311Z","times_seen":815,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/fonts/kraken.svg","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:36.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /fonts/kraken.svg HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:36 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=120\r\ncf-cache-status: HIT\r\netag: W/\"69256205-ad8\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CbmdmQX8QjYvGzJaINy8d%2BXXhFQow2wyRZQKFh%2FVkihiASoBlfnMC2XYJdXZ5XKAYS6wx61AALl91XwoNB39kaG3Z6YHuJRCE4pqImoo%2BmVuOg%3D%3D\"}]}\r\ncf-ray: 9c60d0ccd9a18deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2776,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a88d6175c0fdfc14d4998e0aa9ac7959","sha1":"3886985b7a635d4cf8ae3d50db49d63c42dbebd6","sha256":"533b51e295c2ec894de75538b9f6f7ad23b0fb18cb5d55de02ad6eec6618af9b","sha512":"02caefead63c07312097e588f26540e3ae602769a930c25b5c21e59b93d6c788cc13db0d473382f4cf84d4716fccea69e3243ce74946524b0e2b6284ce3d4ef8","ssdeep":"","tlshash":"e25183a8d37ab218f004b7f88b07a8b481826fb42705ca5daffa0c1bd99500e1c75dc7","first_seen":"2025-09-02T04:43:32.260297Z","last_seen":"2026-06-08T06:19:49.621863Z","times_seen":1249,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/js/burger.js","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:36.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /js/burger.js HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:36 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=120\r\ncf-cache-status: HIT\r\netag: W/\"69256205-25c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1egPPP75zg7bo1Xjxa%2F4ElUlhRD0%2Bfdt98JbqqtQ3X%2BnSUxFJgie0uAo9s0pWjzv9tPGUanSPiARD3w%2B8g7XkPAJAHl49DUP2RZ0gf2kQLPzsA%3D%3D\"}]}\r\ncf-ray: 9c60d0cce9ae8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":604,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"dbf5222eb7ffbacf46b8c448a3d96e61","sha1":"80805a89b7b379efda8a4ae809617749c19fc198","sha256":"aa0e67e244632cba697818bf2ad2077c851716ccd6e2432e6e4db5c62056c228","sha512":"fa103c22d26451a00b8ba00e5fa063ddc1ca74fa8994925060e95d05e11cc6eaf5a934723645bd162726507bc7b5fb93c4a28a0b8cc64970571d815d539030a7","ssdeep":"","tlshash":"24f0727111283ab8c8ff40c3e2c8afd5792242ceb403529b200c800f2ec0c99bee25f5","first_seen":"2025-10-10T08:38:27.484153Z","last_seen":"2026-01-30T12:02:02.580624Z","times_seen":4,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/css/tailwind.css","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:36.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /css/tailwind.css HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:36 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\nage: 29225\r\ncf-cache-status: HIT\r\netag: W/\"69256205-e264\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2NE%2BCSP07RsCNpXAeCYemiWUJlR6S1OMcrGAdKGHMMl2RRM2V3HBR5a3GTXIj4%2FdX789MwC05UdtRFxy7ptFZsLgcDreePBbEjRJZUPetae6AA%3D%3D\"}]}\r\ncf-ray: 9c60d0ccb9838deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57956,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (351)","md5":"eab9c4eaf3ad1e08712e4826183b8a78","sha1":"3bc47890e3c5f8d73314f2513869b247cd13c028","sha256":"6f9f5160ea63a9ae879da829d27d1892a32bfb7676fd107cc8f6d362144bbb60","sha512":"68934c40e272e9113dd13b2e58f9a7bd32bc84c5e3053f3f04616991a20d69671924e75dc3cfef20e2c3e0a19e2dd5e93eafc9a1d6c770a8c41edc1224da9230","ssdeep":"384:PKi1j9z0/vXPPekSVI9sAmJ+F7waYNYxpWraeWyO:PKi1WHPmkaAmnWyO","tlshash":"5c43761a97e1d6683c7ad1b09109a4c8762e2195ddadcfaef9f02110cf84be81da7d18","first_seen":"2026-01-30T11:52:37.507008Z","last_seen":"2026-01-30T12:02:02.582916Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/images/user-1.webp","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:36.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /images/user-1.webp HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4738\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=4,i=?0\r\netag: \"69256205-1282\"\r\naccept-ranges: bytes\r\ncache-control: max-age=120\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ShsmxzR8UypcgQFtzvyCnuV5zkjwVPrDbNOwzNtgvDYpeo0FpXoTdB4Gp6fkzhTnH3jGYas7YIkP7BvMVI0a%2BtK6bJ9SXy1mX9s6ErnZR5fh3g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c60d0ccc9998deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4738,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"48927f92646cf9a8686dda3205481e23","sha1":"82690896bea6554784e2c5b96b2d9e786d9e026e","sha256":"ab6494a89374282c3ccf71f698a449fb3ee1417c78731a67cbb281851d229dde","sha512":"fa59164b9d52cd5e2e20be35bbc8277f3e13eb69aaca62a74a3234f231df1906814b49fe952ca8fdceed4ac3aff0f8e41cb4a80d78ff61913ba234db5f3e26d7","ssdeep":"96:TR50CIHUayLuMBFdknzua1x0dpKOS5/V/rqKf6cUsc/NcVW6Ai+IQyb:zVIH7gFGZz4pw/V/V5Uso1di+c","tlshash":"caa18e2b9ec08a57f46f21af9e4a5b398248cc4011547ec18c755ff9e6713cc9718e27","first_seen":"2025-09-02T04:43:32.296543Z","last_seen":"2026-03-09T06:21:12.14663Z","times_seen":573,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dorianixfloxin.com/images/bottom.webp","fqdn":"dorianixfloxin.com","domain":"dorianixfloxin.com","tld":"com"},"ip":{"addr":"104.21.7.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dorianixfloxin.com/","date":"2026-01-30T12:01:36.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorianixfloxin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 15:35:11 GMT","end":"Wed, 22 Apr 2026 16:33:44 GMT"},"fingerprint":{"sha1":"01:6E:E3:4B:D0:3B:F0:7E:F9:4C:43:60:48:E7:A7:29:D2:50:2B:2D","sha256":"3F:B2:31:6C:8A:6D:F2:DE:4E:B9:62:24:61:6D:95:4E:2B:3A:9E:01:88:FE:37:1C:EC:8A:C4:3B:3E:F9:D0:43"}}},"request":{"raw":"GET /images/bottom.webp HTTP/1.1\r\nHost: dorianixfloxin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cf61m49mdkuu8k8li3it6bqrgq; _subid=1sjos4f43porl; 3944a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjYzNjE0XCI6MTc2OTc3NDQ5Nn0sXCJjYW1wYWlnbnNcIjp7XCIxNTg5MlwiOjE3Njk3NzQ0OTZ9LFwidGltZVwiOjE3Njk3NzQ0OTZ9In0.T7CqcNqw5I_vFvi2TbKDlRveyPIsYnI_v67DWlixjEA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 12:01:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 99546\r\nlast-modified: Tue, 25 Nov 2025 08:00:05 GMT\r\npriority: u=4,i=?0\r\netag: \"69256205-184da\"\r\naccept-ranges: bytes\r\ncache-control: max-age=120\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aAEbM0U16RWJ%2F%2FYycO%2Fs69aR4HyrNoHwsUV%2BY8uiqM20ATlEFLqPE4eet9ksASxfFefCAwm%2BrlbnZaAiaK4W3348zTdhpDJXiYw8A6lp8Xbl6A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c60d0cce9ad8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99546,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"88108cbe23f34dcfcfdb96c13db08e7a","sha1":"39ef779c20c4e99005f542b1fbcd8356569d6628","sha256":"b825967004d9a1b6348da8813f70cebf175be9a8126d7284c3cfd74f8425e5ea","sha512":"88ceb6f3fc031353ad035bf79c82c3b1d1d4aec31508b3a90917c1ff25740e3bbf5d917a2bf5db3de0ea85cbccaa637a6ab4f208171819a2447d3f9c5346d48a","ssdeep":"3072:lYuuo5b/UsbYrEKwSoY31imbmwEmlfn9qKNiXnkW:lvuo5b/lbuEKwCFimbZb9SnkW","tlshash":"1aa3121976f65a96e8541f88edc2a77932b50fe7207370da3028ff36086863d21678dc","first_seen":"2025-09-02T04:43:32.314304Z","last_seen":"2026-06-08T06:19:49.616187Z","times_seen":795,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"dorianixfloxin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}
