{"report_id":"5914f2bc-b318-4984-93c2-18c8a08d59aa","version":6,"status":"done","tags":[],"date":"2026-02-13T18:24:05Z","url":{"schema":"https","addr":"1x-crm.cfd/","fqdn":"1x-crm.cfd","domain":"1x-crm.cfd","tld":"cfd"},"ip":{"addr":"104.21.76.162","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"1x-crm.cfd/","fqdn":"1x-crm.cfd","domain":"1x-crm.cfd","tld":"cfd"},"title":"DIZ.CRM","dom":{"size":395736,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10851)","md5":"6d2488c5bdcc371aa3af681000b853e1","sha1":"aae8de1edc9d900e71768457b3bd2006150999c3","sha256":"46b7b28044d8ead56b92af50c993fee52e4903e5f6e81d4df7f83a286ce25739","sha512":"c92b6936a40359357059a45e339e665cad9c8f4eff6b90b422bfb130a84b48ad2abacba7f2461ca77b47d4678aded32564ba0188e48f9072c9c4b50109ecd1c4","ssdeep":"3072:BhQGvL1OiqseY5DH8wWtOYehwIgRcvkvVz9fqOG2cy4kH:BhpWfh","tlshash":"d884e66812f208b70053d0b6efe61e1b3eb0d517da5fca1876ac0ad42fc7d51ca97668","dom_hash":"domhash672768a3fb9da933d4551b0c80f70e7a","first_seen":"2026-02-13T13:21:34.314465Z","last_seen":"2026-02-13T18:24:07.593673Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"1x-crm.cfd/","fqdn":"1x-crm.cfd","domain":"1x-crm.cfd","tld":"cfd"},"ip":{"addr":"104.21.76.162","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-20T18:24:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"1x-crm.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-02-08T22:32:21.331091Z","alert_count":0,"request_count":3,"received_data":159921,"sent_data":1306,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"1x-crm.cfd","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-19","domain_rank":0,"first_seen":"2026-02-13T13:21:30.762366Z","last_seen":"2026-02-13T13:21:30.762366Z","alert_count":14,"request_count":14,"received_data":890090,"sent_data":5845,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-02-09T04:02:06.96467Z","alert_count":0,"request_count":2,"received_data":815945,"sent_data":812,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/dayjs@1.11.10/locale/ru.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a57eb8a65cc5b3e314cc324f7cfc3c0f","sha1":"2e1481aa639c0f22b0551a8d1aa84390c4a27d8e","sha256":"2d6dad12972c5dc1005b3e0a5f1aff45f8d740a22422074b750a0463e40cc26a","sha512":"314e29f77948361d12bf175ff2f0888fee4a938f21d920f091c1a86199d05539cccd3d0a67f358130267b763bc054ad1fda98b2248faa34aa7e3afcda0622a74","ssdeep":"","tlshash":"2c5130ac5d22688b8300d1e2c91d7e0ad877947e3d1bd021a2b1bd9ef8b043cc57e729","size":2577,"data":"","first_seen":"2026-02-13T13:21:34.378119Z","last_seen":"2026-02-13T18:24:07.596736Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1x-crm.cfd/js/moduleLoader.js","fqdn":"1x-crm.cfd","domain":"1x-crm.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"884c4a72584e96ff9297515bf61fbfd8","sha1":"d7fd55d8d2e474395d8d20e96f13c5e3ea626ab1","sha256":"db1f857432f4f970fec01d4bd047a2302d113f6f1f18a6a5a3425fad0819b396","sha512":"4baa0947f62c742ed50fa69230a3c3e2e4a63ec5bf7bf62bd0679f2b3a337e45cc3294a5a78937e5eccfa8c5e0d1cb6335d073c3466e792c6679bddbf7405a5b","ssdeep":"192:2/VB6OqOEsl/FtVgTsEqwmY7Kuy3w5Fbusm0cWfx2+6mYiIa58r13NxoeQrmzxIP:e76VoKdnNuSdNjKdXohmzK/WPM","tlshash":"6982415209ba64774536b227ff067005fed029fb22565264759c1bee2fb0050c3eaeee","size":18938,"data":"","first_seen":"2026-02-13T13:21:34.370852Z","last_seen":"2026-02-13T18:24:07.598832Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1x-crm.cfd/config/modules.js","fqdn":"1x-crm.cfd","domain":"1x-crm.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d58911fa9db5e5f7338c6bfffc7643d3","sha1":"33d4cc5ffa19f3660331cee3c040b0f6527131e7","sha256":"6962eac4155b61d7c9d10bd23f72381e210af8ca6b05ba7ba52e718a84a7fe6f","sha512":"a09e357a5240bd2d815976b4ea7ed847d58595abad0c9af75dcb61dee239f2b984eefeee77d5d66f8a77a693d48c68fdfc2f26272f4cec4712bbfa8a902916d5","ssdeep":"192:aOq5sWfQNAQSyJoBI+F74eiVS7uHRbgln711n21IagacwvrV/3aazxgQrV8U:aOqiWfKlPhS74NRbgt71gOfwN39VgQv","tlshash":"cd42c05a49ad217b1536b23af6355b02fcb5427732821136f0bc15aa2ff109482deff9","size":12041,"data":"","first_seen":"2026-02-13T13:21:34.367336Z","last_seen":"2026-02-13T18:24:07.603591Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1x-crm.cfd/modules/roles.js","fqdn":"1x-crm.cfd","domain":"1x-crm.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"57aca58a8f4c1e1e5b76a47c9f92287a","sha1":"c91658518fde9b0f562514d5e8f288301c2f9107","sha256":"a966a1443c6b904ba4416feffce85e6c2b4f7b1e9119f2ed8ddc38bdbb85fe50","sha512":"2bebd3be33b5e49ff768c33022028c952e97b8fd8ade51e46f314a54cedd606ceaab5e5ef80d4465aba19f7b0a52db0443741b9a721926b81cbb280ad232ba38","ssdeep":"384:hSXBTg5F9FsuMhn/rOvYysRlXWv7ZhXPznNmQHEpIteFzecyhoA/N80hH0/L+EIp:8jOvNudsWSd9H","tlshash":"3133725659ed14760033f226ae351a06f875403fba8a822cbdfc1e972ff2864c957f64","size":53393,"data":"","first_seen":"2026-02-13T13:21:34.378897Z","last_seen":"2026-02-13T18:24:07.604165Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1x-crm.cfd/","fqdn":"1x-crm.cfd","domain":"1x-crm.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e979317eee3e06d210f85da05469f9bd","sha1":"a4526c7674f12d72ce544fecfbaa4ffd2b641914","sha256":"6b3b6bbaf1125344da6898ba817005cc07cb9b34a1d731420897cf06802f1b67","sha512":"a7d7aa55c2d9c6fc651cf085a6ddf405ddec319f1cc93605003089bb465d5c5f3fda5c5614e6dbd3b607a2482b38ad7ebcfca9f731a8aa98c892a3f836061ff0","ssdeep":"384:GLCluRG3Z2F1vj1O086lVdm59bhmEFQk5jZw0JO0UlZBVbiBULRrDuOmZOqHtReS:GLCluRGJ2F1vj1O086lVdG9bhmEFQMjP","tlshash":"0ba22311e07e0876a0db908bdd27682eb354835b9266a450fecf86ccfb5fd364b591c4","size":21930,"data":"","first_seen":"2026-02-13T13:21:34.398279Z","last_seen":"2026-02-13T18:24:07.608477Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1x-crm.cfd/modules/analytics.js","fqdn":"1x-crm.cfd","domain":"1x-crm.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e32be76db174267c44a464a2d40b13d","sha1":"d4328e3cf6858978b4962d1a7f935669ccadaa6f","sha256":"3c65b2c75c41f5389c72d4c4fd9fd66e4adee33992a51a667d9a3fbe10132e5d","sha512":"68085065ea009739eb11ded465cf14a89b1f8b238f29fc6a6d2c069c59b8d5ceb8d9c9e0f607a7f4a9c70ed5a72c9630c5cdc22a0eb7c1fd8a3419937bc6e5c5","ssdeep":"1536:QuNDFXpCAx+V0sSGeAuIIXvaCObjl7Vfn3XC3VAWFN/97xi:QuJFXwAxi0sSGeAuJXvaCObp70FN/97Q","tlshash":"ac63a51891d221374633d399cf928709ffb00027a65782a83aee63962fb6d54c65fddc","size":69177,"data":"","first_seen":"2026-02-13T13:21:34.32392Z","last_seen":"2026-02-13T18:24:07.600166Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/dayjs@1.11.10/dayjs.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dfc8c2bd8d2e9c055a8b7824de28f611","sha1":"6a294d6386aaac24758b0912930d657938b4db5f","sha256":"9cfdb93f38afcf2d076abecd66d32bfd3383cdf1967654ebc26a26605daf4173","sha512":"1703566b1c9fcb65e51083684a7661d494394d146d1a8c340fa5dc9805a6602460bea3944e7cc2c4f73db85df9bb9644a62ae4d6e8653d5035f6d7e586f9d6d6","ssdeep":"192:+8Rzla0PpOLwnycDNUt8HdydUdeQ5b2s2zppUadNH:+8Rzla8ALwnywNUt8HOUdeGb2jpp9PH","tlshash":"91e11d8ab1c7f6090393e578442f4006f12e599a385f99adf53ac9c3bc7484ac13bbb4","size":7160,"data":"","first_seen":"2023-10-29T10:49:45Z","last_seen":"2026-08-12T05:37:13.815662Z","times_seen":4420,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1x-crm.cfd/modules/gallery.js","fqdn":"1x-crm.cfd","domain":"1x-crm.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"890d9cc3ce852b55858506c8b223949f","sha1":"31f3213e26ecad65d75f4ff080862326ebc75306","sha256":"251b97fc166008893538818b0668f791c61234390def60ec92a076ba77f54ad4","sha512":"a3e9afa33d7402a22ed071613e4d8283b16fd0e715a89ad075f2ae966fedd9ebacb6e685600fd5523a65ee327f7d0833adc904b8b45cd9ab7bf8d6399ff47956","ssdeep":"768:ND0zSfvZOSxAwfza/IH0P9CzaSeZb3OkMYvzJwySI+xmMtrMc:R00VCZb3OqlKxBtrMc","tlshash":"5153d57492e164764133e33adf711619fea9412b860a82587fec87972ff2c00c697de9","size":63708,"data":"","first_seen":"2026-02-13T13:21:34.340999Z","last_seen":"2026-02-13T18:24:07.600683Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1x-crm.cfd/modules/team.js","fqdn":"1x-crm.cfd","domain":"1x-crm.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6eac1d2f3d59e144eef978986d29d17","sha1":"1b9080ed7e4389f900da7c29b1bf82384194d14d","sha256":"405521f0c816f2b24d831570f18dbd7814212f4eacea11033e0cedad1a52d4fd","sha512":"09d19fe22dd6e9f618ca4cfeae885386e9599cc476bbd3966cb2e4c7684a1f11ff7c74cdfa0c0ef67eab1f0a11e419fa5d263633c7f9adc19dad2e90c7f30f6e","ssdeep":"768:obPKPO+X4Debedv664cF8iHJnMK8f8CmvtwGY:obPKP9X6ebew64cFRHJhs0twGY","tlshash":"3e63a69451d118568133e276cf521e06fea9813b9647ab197abc1bcb3fb3c20c927d78","size":73354,"data":"","first_seen":"2026-02-13T13:21:34.371971Z","last_seen":"2026-02-13T18:24:07.605204Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1x-crm.cfd/js/countries.js","fqdn":"1x-crm.cfd","domain":"1x-crm.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf67a29fd08451f34aeb595afd4b4e72","sha1":"3f954f3379995c92cf7b6412978277ef6e8774c4","sha256":"0275f7500f6aeb9c0fb1dc89809b8d3ff4c1c959d8b43e81d1bf76bc6047fb45","sha512":"cceec5c5a61d75645d6402bdd7d73ed68d8512b5413e83f02cc6ead337238f2744e6b55599720f00746403e6a14311aa6d701c4ef7af98204de73eda1b1ed058","ssdeep":"96:r6fx+d/cUxx2S4WmGuAuF/fLPuCBovjL8vi+nSbTxxTs0gkTnK:rR5p4mgyz6","tlshash":"d8f1b3c1a9b280ed40b2627c377a774bdccc639b1590283f3ebe4b945f238159164a7e","size":7943,"data":"","first_seen":"2026-02-13T13:21:34.368569Z","last_seen":"2026-02-13T18:24:07.601968Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1x-crm.cfd/js/permissions-init.js","fqdn":"1x-crm.cfd","domain":"1x-crm.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"144de734791950710a091d3d173c7b05","sha1":"5b501deeeecb34fc0497dd4b70c9817b3fc9a37b","sha256":"15c0c4bd92ab54cdbcacb50b0332a8f412a35f5b9c57ae713acacc9b343b6c31","sha512":"906ed0881c397c818f3696df9c1bb7d4d0c45dcf56e44813d154a0c8a1de612c783057d9c6951caf5af1bd3ab1266500e88dd7a36f2d5c69d9d7c46d76aa85b7","ssdeep":"192:+A3UjVxSP3Yy/ySg+YO4YyjXZxVMV9ChIGVVLV9JnryG3:+A3yVLhyG3","tlshash":"f912129d186a30335632b33bcb521905fc79027732551676b4bd1a693fb41a182afff8","size":9100,"data":"","first_seen":"2026-02-13T13:21:34.382557Z","last_seen":"2026-02-13T18:24:07.599559Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/vue@3.4.21/dist/vue.global.prod.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"28c423f3950584b70329a2106bf58d83","sha1":"8d6838770d44ef7b7e5855a822454b57fabfb113","sha256":"4de526b204ad0e22508db847f6cf93ba812f34b1a69a2949a01111fdebab1178","sha512":"848fcdc1233c89e76915fc4a21c665565d4edd8e5310f97ea847ab4d33e89589d55b78d08acc45c21fe59e657a16f1914b74fe7c8f06a8c401a085b84f46535c","ssdeep":"3072:a9aKKzxZ1mCcbb4MrlSz7SoudYE4WKm0Mv7FVvh8:aY/xZ1mCcbbnrlSCoJRC7J8","tlshash":"97e318a53641b02223e959e250bb0015b33918293c0d94ecb57ceddb2d3695a61fffbe","size":147810,"data":"","first_seen":"2026-02-13T13:21:34.377252Z","last_seen":"2026-07-18T05:38:28.757813Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1x-crm.cfd/js/api.js","fqdn":"1x-crm.cfd","domain":"1x-crm.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"818a9b8bb849b35ec4692f2636fd97dd","sha1":"2ffb9a29480d1e44eef6d83dbf377d4ce5f39ebe","sha256":"e532cd3dd0c0c7abc7d230aa527666bba69c104c4d7d9d985910b436e5088299","sha512":"4353e610b7080125a90c1c58119cee8c337a558795c8e03205456c3abdb632417aa44c43b17625606506e67b6f4d92604ea3515cc1aa612032d5a08941459f93","ssdeep":"192:b84iRVCQPKSPzJLJAum15L/NtJCWz6CC090b91ZeKJh9V1tLJh9T1JxJJnNGYxY/:tiHCGKYzJLJAunWBObtn8YxwQ0Fd","tlshash":"255263ca6aa724024472f379efd74219f736f027310645a67e8c87a82f3590295b1fec","size":13976,"data":"","first_seen":"2026-02-13T13:21:34.365762Z","last_seen":"2026-02-13T18:24:07.603017Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-08-12T07:00:52.636229Z","times_seen":48872,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1x-crm.cfd/","fqdn":"1x-crm.cfd","domain":"1x-crm.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"befb5799ec3718f427493f4defeb845d","sha1":"0d819f5e98c62221e5f2b87c1221b7ba07f9b0b3","sha256":"bf65278722d44bb744090e65a9948c4fddb270395c7b539beca3d4481352b470","sha512":"3c567f87227c147d0fb89593ea348a933fe1bd1f3b43727fc0bddb3b1903d53e7fa35cea68714151881a72c3a494883a2e092da519167420ca64d4e2c1d2421d","ssdeep":"1536:RuOrO3F3WEllwwEJxBt9J9Rcvk5dWFn+C2BO9R:EgRcvkvVo","tlshash":"2473605906ff14264413702adf9b29063c75447f3a5aea283e6c1bd96fc1134c6bafb4","size":79352,"data":"","first_seen":"2026-02-13T13:21:34.383871Z","last_seen":"2026-02-13T18:24:07.609462Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1x-crm.cfd/modules/creatives.js","fqdn":"1x-crm.cfd","domain":"1x-crm.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf77dddd0eca4d69bfc1350b323f1841","sha1":"83579f4437856f138bb0911b4d1a56e3d024c99d","sha256":"4a8f0707f648bc5d28bccf18f39971860b4141a15f47cae6aeea9f3a1073762e","sha512":"f64d7526469dc51d32b085a6fcca49c7fafeb20901bba4586258077b5cbd225a1d1c40f929d2fac954872df7423baa6243fdcd798f19783a6cd7c8ca011e19d3","ssdeep":"384:Ctg/hx8xWPKuRK/J+JK1BnKLADAIXMOPQfA0jPf+OTslLO/ZNsQRFfwKHLTKH7/M:TK76IX6fT2OCOhNseCOM9GIx7azxWERh","tlshash":"2973f7a426d0553a40f38272ef540f56ffa48257e547c169beac928b6fb3c00cb67da4","size":74827,"data":"","first_seen":"2026-02-13T13:21:34.363098Z","last_seen":"2026-02-13T18:24:07.607421Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1x-crm.cfd/modules/tasks.js?v=2.1","fqdn":"1x-crm.cfd","domain":"1x-crm.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"16c180cf459257e900a2a13f8700810a","sha1":"38a48137075decef4600cae58a844487ad0eff89","sha256":"164c3170342347e24db105e1583c356a38df9f31176beda2eaf93f71e712d23d","sha512":"74348afc8bd305ef044a9def1df85923f44ae2134a1f464797c725802857b6abecf0b6a755a41b55c4a789e423e21379a6dbe7c8573d7ed58b08dae0dd0f97a8","ssdeep":"3072:uIwiWDwdQxTdIqIx4MKJ8GjVUxR4rs+oF4BTTssEH9BLOOifseYaDH89J4k6gF0J:hQxTdIDBCcSEdZk","tlshash":"1564ea5406f318764113b0368fdb15033d74d42ba95fda58ba5c4bd96fc2a20caeabf8","size":334162,"data":"","first_seen":"2026-02-13T13:21:34.385294Z","last_seen":"2026-02-13T18:24:07.606816Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/dayjs@1.11.10/dayjs.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1x-crm.cfd/","date":"2026-02-13T18:23:43.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/dayjs@1.11.10/dayjs.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1x-crm.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 1.11.10\r\nx-jsd-version-type: version\r\netag: W/\"1bf8-ailNY4aqrCR1iwkSkw1leTi0218\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 2443534\r\ndate: Fri, 13 Feb 2026 18:23:44 GMT\r\nx-served-by: cache-fra-etou8220088-FRA, cache-hel1410022-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 3138\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7160,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7160), with no line terminators","md5":"dfc8c2bd8d2e9c055a8b7824de28f611","sha1":"6a294d6386aaac24758b0912930d657938b4db5f","sha256":"9cfdb93f38afcf2d076abecd66d32bfd3383cdf1967654ebc26a26605daf4173","sha512":"1703566b1c9fcb65e51083684a7661d494394d146d1a8c340fa5dc9805a6602460bea3944e7cc2c4f73db85df9bb9644a62ae4d6e8653d5035f6d7e586f9d6d6","ssdeep":"192:+8Rzla0PpOLwnycDNUt8HdydUdeQ5b2s2zppUadNH:+8Rzla8ALwnywNUt8HOUdeGb2jpp9PH","tlshash":"91e11d8ab1c7f6090393e578442f4006f12e599a385f99adf53ac9c3bc7484ac13bbb4","first_seen":"2023-10-29T10:49:45Z","last_seen":"2026-08-12T05:37:13.815662Z","times_seen":4420,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":65,"dns":1,"connect":29,"send":0,"wait":29,"receive":1,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/dayjs@1.11.10/locale/ru.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1x-crm.cfd/","date":"2026-02-13T18:23:43.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/dayjs@1.11.10/locale/ru.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1x-crm.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 1.11.10\r\nx-jsd-version-type: version\r\netag: W/\"a11-LhSBqmOcDyKwVRqNGqhDkMSifY4\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 30972\r\ndate: Fri, 13 Feb 2026 18:23:44 GMT\r\nx-served-by: cache-fra-eddf8230163-FRA, cache-hel1410022-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 1285\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2577,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1841)","md5":"a57eb8a65cc5b3e314cc324f7cfc3c0f","sha1":"2e1481aa639c0f22b0551a8d1aa84390c4a27d8e","sha256":"2d6dad12972c5dc1005b3e0a5f1aff45f8d740a22422074b750a0463e40cc26a","sha512":"314e29f77948361d12bf175ff2f0888fee4a938f21d920f091c1a86199d05539cccd3d0a67f358130267b763bc054ad1fda98b2248faa34aa7e3afcda0622a74","ssdeep":"","tlshash":"2c5130ac5d22688b8300d1e2c91d7e0ad877947e3d1bd021a2b1bd9ef8b043cc57e729","first_seen":"2026-02-13T13:21:34.378119Z","last_seen":"2026-02-13T18:24:07.596736Z","times_seen":2,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":51,"dns":1,"connect":28,"send":0,"wait":30,"receive":1,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1x-crm.cfd/js/moduleLoader.js","fqdn":"1x-crm.cfd","domain":"1x-crm.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1x-crm.cfd/","date":"2026-02-13T18:23:43.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1x-crm.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 18:46:56 GMT","end":"Sun, 19 Apr 2026 19:45:19 GMT"},"fingerprint":{"sha1":"1E:B4:12:94:85:B9:15:DB:43:5D:56:4F:02:D9:B6:1C:C8:AA:C4:E8","sha256":"4E:C3:8A:94:E9:E4:07:06:D8:2F:7F:42:BB:6F:72:C1:F7:C1:72:F0:4B:20:55:A4:FE:38:C2:2E:DF:48:11:DE"}}},"request":{"raw":"GET /js/moduleLoader.js HTTP/1.1\r\nHost: 1x-crm.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1x-crm.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 18:23:44 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 23 Dec 2025 01:51:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hphZ4RkGFVWsHdAgwvObu8Pxhpd5sV3mWHyvw9WJ9rxS8vx1t8rqYoTjfR9KDl9ogwF2oTC8lSm%2FSxmw68XLBEw9hgMtLlj3\"}]}\r\netag: W/\"6949f5b0-4ac0\"\r\ncontent-encoding: br\r\ncf-ray: 9cd65bcbbb1482d0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19136,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"884c4a72584e96ff9297515bf61fbfd8","sha1":"d7fd55d8d2e474395d8d20e96f13c5e3ea626ab1","sha256":"db1f857432f4f970fec01d4bd047a2302d113f6f1f18a6a5a3425fad0819b396","sha512":"4baa0947f62c742ed50fa69230a3c3e2e4a63ec5bf7bf62bd0679f2b3a337e45cc3294a5a78937e5eccfa8c5e0d1cb6335d073c3466e792c6679bddbf7405a5b","ssdeep":"192:2/VB6OqOEsl/FtVgTsEqwmY7Kuy3w5Fbusm0cWfx2+6mYiIa58r13NxoeQrmzxIP:e76VoKdnNuSdNjKdXohmzK/WPM","tlshash":"6982415209ba64774536b227ff067005fed029fb22565264759c1bee2fb0050c3eaeee","first_seen":"2026-02-13T13:21:34.370852Z","last_seen":"2026-02-13T18:24:07.598832Z","times_seen":2,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"1x-crm.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1x-crm.cfd/js/permissions-init.js","fqdn":"1x-crm.cfd","domain":"1x-crm.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1x-crm.cfd/","date":"2026-02-13T18:23:43.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1x-crm.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 18:46:56 GMT","end":"Sun, 19 Apr 2026 19:45:19 GMT"},"fingerprint":{"sha1":"1E:B4:12:94:85:B9:15:DB:43:5D:56:4F:02:D9:B6:1C:C8:AA:C4:E8","sha256":"4E:C3:8A:94:E9:E4:07:06:D8:2F:7F:42:BB:6F:72:C1:F7:C1:72:F0:4B:20:55:A4:FE:38:C2:2E:DF:48:11:DE"}}},"request":{"raw":"GET /js/permissions-init.js HTTP/1.1\r\nHost: 1x-crm.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1x-crm.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 18:23:44 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Dec 2025 14:19:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j6%2BXMRHfPD7oUOH62io1nOYymkz1AeTHpUKQLpVnfxyMaeelSaz2Jw2pWphjO%2BI0pSRRuIHsFc0%2F%2BNTh8HvwVClRdJ%2B3MlPJ\"}]}\r\netag: W/\"694bf665-238c\"\r\ncontent-encoding: br\r\ncf-ray: 9cd65bcbbb1782d0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9100,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"144de734791950710a091d3d173c7b05","sha1":"5b501deeeecb34fc0497dd4b70c9817b3fc9a37b","sha256":"15c0c4bd92ab54cdbcacb50b0332a8f412a35f5b9c57ae713acacc9b343b6c31","sha512":"906ed0881c397c818f3696df9c1bb7d4d0c45dcf56e44813d154a0c8a1de612c783057d9c6951caf5af1bd3ab1266500e88dd7a36f2d5c69d9d7c46d76aa85b7","ssdeep":"192:+A3UjVxSP3Yy/ySg+YO4YyjXZxVMV9ChIGVVLV9JnryG3:+A3yVLhyG3","tlshash":"f912129d186a30335632b33bcb521905fc79027732551676b4bd1a693fb41a182afff8","first_seen":"2026-02-13T13:21:34.382557Z","last_seen":"2026-02-13T18:24:07.599559Z","times_seen":2,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"1x-crm.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1x-crm.cfd/modules/analytics.js","fqdn":"1x-crm.cfd","domain":"1x-crm.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1x-crm.cfd/","date":"2026-02-13T18:23:45.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1x-crm.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 18:46:56 GMT","end":"Sun, 19 Apr 2026 19:45:19 GMT"},"fingerprint":{"sha1":"1E:B4:12:94:85:B9:15:DB:43:5D:56:4F:02:D9:B6:1C:C8:AA:C4:E8","sha256":"4E:C3:8A:94:E9:E4:07:06:D8:2F:7F:42:BB:6F:72:C1:F7:C1:72:F0:4B:20:55:A4:FE:38:C2:2E:DF:48:11:DE"}}},"request":{"raw":"GET /modules/analytics.js HTTP/1.1\r\nHost: 1x-crm.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1x-crm.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 18:23:45 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Dec 2025 02:36:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vf%2FdOs5ziOB5vt%2BUmiq7VKYOgBxgnhsl1%2FG5OlsNRtIh%2FDbyPIy4m5MlJwRq6erLijo9%2FCXviqDtQ7L%2FqeoV6D7493jgAQYT\"}]}\r\netag: W/\"69533ab9-10e9c\"\r\ncontent-encoding: br\r\ncf-ray: 9cd65bd65bcb82d0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69276,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"0e32be76db174267c44a464a2d40b13d","sha1":"d4328e3cf6858978b4962d1a7f935669ccadaa6f","sha256":"3c65b2c75c41f5389c72d4c4fd9fd66e4adee33992a51a667d9a3fbe10132e5d","sha512":"68085065ea009739eb11ded465cf14a89b1f8b238f29fc6a6d2c069c59b8d5ceb8d9c9e0f607a7f4a9c70ed5a72c9630c5cdc22a0eb7c1fd8a3419937bc6e5c5","ssdeep":"1536:QuNDFXpCAx+V0sSGeAuIIXvaCObjl7Vfn3XC3VAWFN/97xi:QuJFXwAxi0sSGeAuJXvaCObp70FN/97Q","tlshash":"ac63a51891d221374633d399cf928709ffb00027a65782a83aee63962fb6d54c65fddc","first_seen":"2026-02-13T13:21:34.32392Z","last_seen":"2026-02-13T18:24:07.600166Z","times_seen":2,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":98,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"1x-crm.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1x-crm.cfd/modules/gallery.js","fqdn":"1x-crm.cfd","domain":"1x-crm.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1x-crm.cfd/","date":"2026-02-13T18:23:46.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1x-crm.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 18:46:56 GMT","end":"Sun, 19 Apr 2026 19:45:19 GMT"},"fingerprint":{"sha1":"1E:B4:12:94:85:B9:15:DB:43:5D:56:4F:02:D9:B6:1C:C8:AA:C4:E8","sha256":"4E:C3:8A:94:E9:E4:07:06:D8:2F:7F:42:BB:6F:72:C1:F7:C1:72:F0:4B:20:55:A4:FE:38:C2:2E:DF:48:11:DE"}}},"request":{"raw":"GET /modules/gallery.js HTTP/1.1\r\nHost: 1x-crm.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1x-crm.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 18:23:46 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 31 Dec 2025 12:59:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IifjhszHoJwx58pgNkEKxkUwg0ZDPY4qAZZHoB%2FQMFlOQZv8WaHVRqbgNv56o1EVOkeDWNhN0aUJ9nraeRUklGAW5SYlyJQ%2F\"}]}\r\netag: W/\"69551e14-f970\"\r\ncontent-encoding: br\r\ncf-ray: 9cd65bd8eded82d0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63856,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"890d9cc3ce852b55858506c8b223949f","sha1":"31f3213e26ecad65d75f4ff080862326ebc75306","sha256":"251b97fc166008893538818b0668f791c61234390def60ec92a076ba77f54ad4","sha512":"a3e9afa33d7402a22ed071613e4d8283b16fd0e715a89ad075f2ae966fedd9ebacb6e685600fd5523a65ee327f7d0833adc904b8b45cd9ab7bf8d6399ff47956","ssdeep":"768:ND0zSfvZOSxAwfza/IH0P9CzaSeZb3OkMYvzJwySI+xmMtrMc:R00VCZb3OqlKxBtrMc","tlshash":"5153d57492e164764133e33adf711619fea9412b860a82587fec87972ff2c00c697de9","first_seen":"2026-02-13T13:21:34.340999Z","last_seen":"2026-02-13T18:24:07.600683Z","times_seen":2,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"1x-crm.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/vue@3.4.21/dist/vue.global.prod.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1x-crm.cfd/","date":"2026-02-13T18:23:43.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/vue@3.4.21/dist/vue.global.prod.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1x-crm.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 3.4.21\r\nx-jsd-version-type: version\r\netag: W/\"24162-jWg4dw1E73t+WFWoIkVLV/q/sRM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 1235072\r\ndate: Fri, 13 Feb 2026 18:23:44 GMT\r\nx-served-by: cache-fra-eddf8230070-FRA, cache-hel1410022-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 55181\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":147810,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (35237)","md5":"28c423f3950584b70329a2106bf58d83","sha1":"8d6838770d44ef7b7e5855a822454b57fabfb113","sha256":"4de526b204ad0e22508db847f6cf93ba812f34b1a69a2949a01111fdebab1178","sha512":"848fcdc1233c89e76915fc4a21c665565d4edd8e5310f97ea847ab4d33e89589d55b78d08acc45c21fe59e657a16f1914b74fe7c8f06a8c401a085b84f46535c","ssdeep":"3072:a9aKKzxZ1mCcbb4MrlSz7SoudYE4WKm0Mv7FVvh8:aY/xZ1mCcbbnrlSCoJRC7J8","tlshash":"97e318a53641b02223e959e250bb0015b33918293c0d94ecb57ceddb2d3695a61fffbe","first_seen":"2026-02-13T13:21:34.377252Z","last_seen":"2026-07-18T05:38:28.757813Z","times_seen":3,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":73,"dns":1,"connect":28,"send":0,"wait":29,"receive":32,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1x-crm.cfd/js/countries.js","fqdn":"1x-crm.cfd","domain":"1x-crm.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1x-crm.cfd/","date":"2026-02-13T18:23:43.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1x-crm.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 18:46:56 GMT","end":"Sun, 19 Apr 2026 19:45:19 GMT"},"fingerprint":{"sha1":"1E:B4:12:94:85:B9:15:DB:43:5D:56:4F:02:D9:B6:1C:C8:AA:C4:E8","sha256":"4E:C3:8A:94:E9:E4:07:06:D8:2F:7F:42:BB:6F:72:C1:F7:C1:72:F0:4B:20:55:A4:FE:38:C2:2E:DF:48:11:DE"}}},"request":{"raw":"GET /js/countries.js HTTP/1.1\r\nHost: 1x-crm.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1x-crm.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 18:23:44 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 23 Dec 2025 01:51:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kocGZMfsqbjb532PNixLRmYqRtg2gHZLl5OnfzQrjUSp5JXd81IOgfdJ653kkGg%2Bt4SpvC1yYJjuAFD2EX8BglUPBgZvGskJ\"}]}\r\netag: W/\"6949f5b0-1f07\"\r\ncontent-encoding: br\r\ncf-ray: 9cd65bcbbb1582d0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7943,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"cf67a29fd08451f34aeb595afd4b4e72","sha1":"3f954f3379995c92cf7b6412978277ef6e8774c4","sha256":"0275f7500f6aeb9c0fb1dc89809b8d3ff4c1c959d8b43e81d1bf76bc6047fb45","sha512":"cceec5c5a61d75645d6402bdd7d73ed68d8512b5413e83f02cc6ead337238f2744e6b55599720f00746403e6a14311aa6d701c4ef7af98204de73eda1b1ed058","ssdeep":"96:r6fx+d/cUxx2S4WmGuAuF/fLPuCBovjL8vi+nSbTxxTs0gkTnK:rR5p4mgyz6","tlshash":"d8f1b3c1a9b280ed40b2627c377a774bdccc639b1590283f3ebe4b945f238159164a7e","first_seen":"2026-02-13T13:21:34.368569Z","last_seen":"2026-02-13T18:24:07.601968Z","times_seen":2,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"1x-crm.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1x-crm.cfd/config.json","fqdn":"1x-crm.cfd","domain":"1x-crm.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1x-crm.cfd/","date":"2026-02-13T18:23:44.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1x-crm.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 18:46:56 GMT","end":"Sun, 19 Apr 2026 19:45:19 GMT"},"fingerprint":{"sha1":"1E:B4:12:94:85:B9:15:DB:43:5D:56:4F:02:D9:B6:1C:C8:AA:C4:E8","sha256":"4E:C3:8A:94:E9:E4:07:06:D8:2F:7F:42:BB:6F:72:C1:F7:C1:72:F0:4B:20:55:A4:FE:38:C2:2E:DF:48:11:DE"}}},"request":{"raw":"GET /config.json HTTP/1.1\r\nHost: 1x-crm.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1x-crm.cfd/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 18:23:44 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 05 Jan 2026 19:39:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SW41PnuMmHI7q8ZRw308iBNX%2B5Ii2sSevpdEL9v96uG3bw%2BC8lQGb47iOhT0fVMp1R1FGvAeD7%2FMXk5EdbOJMZLekHTVFnrq\"}]}\r\netag: W/\"695c137b-532\"\r\ncontent-encoding: br\r\ncf-ray: 9cd65bd00ee782d0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1330,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7dbc671cecf35a4a62874a3d4f132309","sha1":"18bc6319573f6abfc6f3a98e8003f9ecae0cb88c","sha256":"198bbbf74a5a616277a0c7a2f91a279cea0e76e3817b377f7fcf46dc23b25015","sha512":"34f872481efc9ab8a7ec5b8ae644cc83e2ff834a3243059672b9e04a8b92393d3f9b230ebc111ea7401cc957669d444cef7c2167c4700eb9dc63ea16bf873bc2","ssdeep":"","tlshash":"3621e918d4785df315c966f988bd6542a660406b2d917d3c370c909c4f2d59f12f9be8","first_seen":"2026-02-13T13:21:34.360161Z","last_seen":"2026-02-13T18:24:07.602482Z","times_seen":2,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"1x-crm.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1x-crm.cfd/js/api.js","fqdn":"1x-crm.cfd","domain":"1x-crm.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1x-crm.cfd/","date":"2026-02-13T18:23:43.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1x-crm.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 18:46:56 GMT","end":"Sun, 19 Apr 2026 19:45:19 GMT"},"fingerprint":{"sha1":"1E:B4:12:94:85:B9:15:DB:43:5D:56:4F:02:D9:B6:1C:C8:AA:C4:E8","sha256":"4E:C3:8A:94:E9:E4:07:06:D8:2F:7F:42:BB:6F:72:C1:F7:C1:72:F0:4B:20:55:A4:FE:38:C2:2E:DF:48:11:DE"}}},"request":{"raw":"GET /js/api.js HTTP/1.1\r\nHost: 1x-crm.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1x-crm.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 18:23:44 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Dec 2025 12:03:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2iqORMaAbVNNrjXoG0bQ8abI537eWiKY2aii%2FCJHeJEtcXBRJE%2FKrTbY%2B5FldKzLqH2mEfdfZLglEmNwX241q2D%2F1z3bCpuY\"}]}\r\netag: W/\"694bd69f-3698\"\r\ncontent-encoding: br\r\ncf-ray: 9cd65bcbab0582d0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13976,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"818a9b8bb849b35ec4692f2636fd97dd","sha1":"2ffb9a29480d1e44eef6d83dbf377d4ce5f39ebe","sha256":"e532cd3dd0c0c7abc7d230aa527666bba69c104c4d7d9d985910b436e5088299","sha512":"4353e610b7080125a90c1c58119cee8c337a558795c8e03205456c3abdb632417aa44c43b17625606506e67b6f4d92604ea3515cc1aa612032d5a08941459f93","ssdeep":"192:b84iRVCQPKSPzJLJAum15L/NtJCWz6CC090b91ZeKJh9V1tLJh9T1JxJJnNGYxY/:tiHCGKYzJLJAunWBObtn8YxwQ0Fd","tlshash":"255263ca6aa724024472f379efd74219f736f027310645a67e8c87a82f3590295b1fec","first_seen":"2026-02-13T13:21:34.365762Z","last_seen":"2026-02-13T18:24:07.603017Z","times_seen":2,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"1x-crm.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1x-crm.cfd/config/modules.js","fqdn":"1x-crm.cfd","domain":"1x-crm.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1x-crm.cfd/","date":"2026-02-13T18:23:43.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1x-crm.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 18:46:56 GMT","end":"Sun, 19 Apr 2026 19:45:19 GMT"},"fingerprint":{"sha1":"1E:B4:12:94:85:B9:15:DB:43:5D:56:4F:02:D9:B6:1C:C8:AA:C4:E8","sha256":"4E:C3:8A:94:E9:E4:07:06:D8:2F:7F:42:BB:6F:72:C1:F7:C1:72:F0:4B:20:55:A4:FE:38:C2:2E:DF:48:11:DE"}}},"request":{"raw":"GET /config/modules.js HTTP/1.1\r\nHost: 1x-crm.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1x-crm.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 18:23:44 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Dec 2025 22:18:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DNWYpIcK0fB6NhRoyx3C3E5zaw3bjxvM4PJW04dVKGdQLbmoJwRrgvXnfA%2BZ1NF7L82t1N4V8XcD%2BtMjfkUqk9o54%2FMXxtTj\"}]}\r\netag: W/\"69544fc0-2fe7\"\r\ncontent-encoding: br\r\ncf-ray: 9cd65bcbbb0e82d0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12263,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"d58911fa9db5e5f7338c6bfffc7643d3","sha1":"33d4cc5ffa19f3660331cee3c040b0f6527131e7","sha256":"6962eac4155b61d7c9d10bd23f72381e210af8ca6b05ba7ba52e718a84a7fe6f","sha512":"a09e357a5240bd2d815976b4ea7ed847d58595abad0c9af75dcb61dee239f2b984eefeee77d5d66f8a77a693d48c68fdfc2f26272f4cec4712bbfa8a902916d5","ssdeep":"192:aOq5sWfQNAQSyJoBI+F74eiVS7uHRbgln711n21IagacwvrV/3aazxgQrV8U:aOqiWfKlPhS74NRbgt71gOfwN39VgQv","tlshash":"cd42c05a49ad217b1536b23af6355b02fcb5427732821136f0bc15aa2ff109482deff9","first_seen":"2026-02-13T13:21:34.367336Z","last_seen":"2026-02-13T18:24:07.603591Z","times_seen":2,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"1x-crm.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1x-crm.cfd/modules/roles.js","fqdn":"1x-crm.cfd","domain":"1x-crm.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1x-crm.cfd/","date":"2026-02-13T18:23:43.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1x-crm.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 18:46:56 GMT","end":"Sun, 19 Apr 2026 19:45:19 GMT"},"fingerprint":{"sha1":"1E:B4:12:94:85:B9:15:DB:43:5D:56:4F:02:D9:B6:1C:C8:AA:C4:E8","sha256":"4E:C3:8A:94:E9:E4:07:06:D8:2F:7F:42:BB:6F:72:C1:F7:C1:72:F0:4B:20:55:A4:FE:38:C2:2E:DF:48:11:DE"}}},"request":{"raw":"GET /modules/roles.js HTTP/1.1\r\nHost: 1x-crm.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1x-crm.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 18:23:44 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Dec 2025 22:22:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0vw7O6jRVfofW06lZmA8BpRzEJDeXexfpZozjImO2rIYBdi6QCBpaWUdSW48P7XJbo0HU40VGIRi3VQbw57Wv3M5VaJrf8MO\"}]}\r\netag: W/\"69545097-d11c\"\r\ncontent-encoding: br\r\ncf-ray: 9cd65bcbbb1682d0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53532,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"57aca58a8f4c1e1e5b76a47c9f92287a","sha1":"c91658518fde9b0f562514d5e8f288301c2f9107","sha256":"a966a1443c6b904ba4416feffce85e6c2b4f7b1e9119f2ed8ddc38bdbb85fe50","sha512":"2bebd3be33b5e49ff768c33022028c952e97b8fd8ade51e46f314a54cedd606ceaab5e5ef80d4465aba19f7b0a52db0443741b9a721926b81cbb280ad232ba38","ssdeep":"384:hSXBTg5F9FsuMhn/rOvYysRlXWv7ZhXPznNmQHEpIteFzecyhoA/N80hH0/L+EIp:8jOvNudsWSd9H","tlshash":"3133725659ed14760033f226ae351a06f875403fba8a822cbdfc1e972ff2864c957f64","first_seen":"2026-02-13T13:21:34.378897Z","last_seen":"2026-02-13T18:24:07.604165Z","times_seen":2,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"1x-crm.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1x-crm.cfd/favicon.ico","fqdn":"1x-crm.cfd","domain":"1x-crm.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1x-crm.cfd/","date":"2026-02-13T18:23:44.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1x-crm.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 18:46:56 GMT","end":"Sun, 19 Apr 2026 19:45:19 GMT"},"fingerprint":{"sha1":"1E:B4:12:94:85:B9:15:DB:43:5D:56:4F:02:D9:B6:1C:C8:AA:C4:E8","sha256":"4E:C3:8A:94:E9:E4:07:06:D8:2F:7F:42:BB:6F:72:C1:F7:C1:72:F0:4B:20:55:A4:FE:38:C2:2E:DF:48:11:DE"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 1x-crm.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1x-crm.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Fri, 13 Feb 2026 18:23:44 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v%2BlwH4KEVh6nD%2F%2Fkj%2BFl3irR3gu0G18eYfKTebLB9Quuw%2BJG4zu8BWcQGsI21SAKbkHFvE%2B%2BxB%2F4UWyocagFkT38aVSx19Wt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9cd65bd0cf7782d0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"37d5c3a24983196361e6ce9b1a499464","sha1":"2dd5878df894f3c648e42408879e9a61c112d1b3","sha256":"766c1d6bcb81d3e983fb7adbc19c616d7fc01dafb7893738edc242e2adc59c07","sha512":"cc140d1f61a01ba5f282d682dfeb19229426c7164b147a3031d3b5544c2d7213ce19b075a81d5e00750bdac7b1d9232b8b971e026d838ccae9466523338b09a9","ssdeep":"","tlshash":"eac08c6e2513bd4cc663217432c36490c08b93a7a4ea42228440805331cb2aa8ac7396","first_seen":"2023-11-07T17:46:00Z","last_seen":"2026-08-12T07:39:02.635305Z","times_seen":30223,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"1x-crm.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1x-crm.cfd/modules/team.js","fqdn":"1x-crm.cfd","domain":"1x-crm.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1x-crm.cfd/","date":"2026-02-13T18:23:44.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1x-crm.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 18:46:56 GMT","end":"Sun, 19 Apr 2026 19:45:19 GMT"},"fingerprint":{"sha1":"1E:B4:12:94:85:B9:15:DB:43:5D:56:4F:02:D9:B6:1C:C8:AA:C4:E8","sha256":"4E:C3:8A:94:E9:E4:07:06:D8:2F:7F:42:BB:6F:72:C1:F7:C1:72:F0:4B:20:55:A4:FE:38:C2:2E:DF:48:11:DE"}}},"request":{"raw":"GET /modules/team.js HTTP/1.1\r\nHost: 1x-crm.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1x-crm.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 18:23:44 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Dec 2025 15:44:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WfZRZjmEMcDpUw1vUQjJCv1pQhFqguFJuR2yUYYAK1Sd7eM2l%2FQ7M49TedMNjKQNB2%2FYxuk9d%2FT5Iw79fSK02eBh2JMxIUCr\"}]}\r\netag: W/\"6953f34b-11ede\"\r\ncontent-encoding: br\r\ncf-ray: 9cd65bd0ef8682d0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73438,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"a6eac1d2f3d59e144eef978986d29d17","sha1":"1b9080ed7e4389f900da7c29b1bf82384194d14d","sha256":"405521f0c816f2b24d831570f18dbd7814212f4eacea11033e0cedad1a52d4fd","sha512":"09d19fe22dd6e9f618ca4cfeae885386e9599cc476bbd3966cb2e4c7684a1f11ff7c74cdfa0c0ef67eab1f0a11e419fa5d263633c7f9adc19dad2e90c7f30f6e","ssdeep":"768:obPKPO+X4Debedv664cF8iHJnMK8f8CmvtwGY:obPKP9X6ebew64cFRHJhs0twGY","tlshash":"3e63a69451d118568133e276cf521e06fea9813b9647ab197abc1bcb3fb3c20c927d78","first_seen":"2026-02-13T13:21:34.371971Z","last_seen":"2026-02-13T18:24:07.605204Z","times_seen":2,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":110,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"1x-crm.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1x-crm.cfd/","fqdn":"1x-crm.cfd","domain":"1x-crm.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-13T18:23:43.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1x-crm.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 18:46:56 GMT","end":"Sun, 19 Apr 2026 19:45:19 GMT"},"fingerprint":{"sha1":"1E:B4:12:94:85:B9:15:DB:43:5D:56:4F:02:D9:B6:1C:C8:AA:C4:E8","sha256":"4E:C3:8A:94:E9:E4:07:06:D8:2F:7F:42:BB:6F:72:C1:F7:C1:72:F0:4B:20:55:A4:FE:38:C2:2E:DF:48:11:DE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 1x-crm.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 18:23:43 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Wed, 14 Jan 2026 21:35:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JN3wNYNo847RK1pcxplORp773BblL8yaOFee4sTA4Z73FxI%2B6OB9ysNFEq4h4SZl5el4p%2Bn6EMtsD98Z6%2BqjjrUvvkTkCVvkAko%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9cd65bc9be38c124-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}],"data":{"size":147955,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (623), with CRLF line terminators","md5":"9bbf3c20ba432fedefe36c9d7954394c","sha1":"364e7156bc9a76c54681c6e64908eb9d808da2fa","sha256":"eb8746aca6b938256b03176ae9740e1d80031ab0ded2ca09de72bf963e36c4f3","sha512":"c123a9aad59c16c115716051812c55b423d949ef7d08f0d75ec4aab3fe4be924fcbc889e0a27b7c32bfeee9323322c3cad0b94ff9f392d161476dc3588704ce8","ssdeep":"1536:UKyM7aKQi205p4as64Lkxk3bHqaIRjlK95ahB29cJyqZ:VpKe4VghjlK9wWk","tlshash":"d4e3946811e504674073e276df611e1afda5423ba64782197aec17db2ff3c10ca63eb8","first_seen":"2026-02-13T13:21:34.364135Z","last_seen":"2026-02-13T18:24:07.605753Z","times_seen":2,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":102,"dns":69,"connect":8,"send":0,"wait":121,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"1x-crm.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1x-crm.cfd/","date":"2026-02-13T18:23:44.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:26:32 GMT","end":"Tue, 21 Apr 2026 09:26:27 GMT"},"fingerprint":{"sha1":"90:9B:CE:CB:FE:F2:C6:A9:53:13:5D:52:B6:07:F4:B4:84:28:97:60","sha256":"61:49:94:E8:FB:D1:24:14:DF:C9:92:BE:60:84:A8:D8:37:E3:89:DC:42:7B:0A:64:D3:F2:32:FD:D0:93:4C:4B"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1x-crm.cfd/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 18:23:44 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::gv5lr-1767495562922-401ec0c56245\r\nlast-modified: Sun, 04 Jan 2026 02:59:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 3511460\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9tj5luLFqxy5ZcUeIhUcPVnIWw4mFC50Dpl19ILvqIXTlMgPTv0uePz5RXt5mnVTMUttEv6%2BowCz4v%2FaQ69A5J%2FfUVQ0e20%2BFyPAweABPwmvMg%3D%3D\"}]}\r\ncf-ray: 9cd65bcc2dccaa04-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-08-12T07:00:52.636229Z","times_seen":48872,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1x-crm.cfd/modules/tasks.js?v=2.1","fqdn":"1x-crm.cfd","domain":"1x-crm.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1x-crm.cfd/","date":"2026-02-13T18:23:45.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1x-crm.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 18:46:56 GMT","end":"Sun, 19 Apr 2026 19:45:19 GMT"},"fingerprint":{"sha1":"1E:B4:12:94:85:B9:15:DB:43:5D:56:4F:02:D9:B6:1C:C8:AA:C4:E8","sha256":"4E:C3:8A:94:E9:E4:07:06:D8:2F:7F:42:BB:6F:72:C1:F7:C1:72:F0:4B:20:55:A4:FE:38:C2:2E:DF:48:11:DE"}}},"request":{"raw":"GET /modules/tasks.js?v=2.1 HTTP/1.1\r\nHost: 1x-crm.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1x-crm.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 18:23:45 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 12 Jan 2026 14:24:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AkNfgCa9fNCK1FcPEn1KaQfzr47aHiclRYuLCYGWqEiULDjgZuVbtjZTb0W4iQveAYcgPRupk9Yp0tMJipGTtYgBlj%2Fr9X6v\"}]}\r\netag: W/\"6965040b-5199f\"\r\ncontent-encoding: br\r\ncf-ray: 9cd65bd399a882d0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":334239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"16c180cf459257e900a2a13f8700810a","sha1":"38a48137075decef4600cae58a844487ad0eff89","sha256":"164c3170342347e24db105e1583c356a38df9f31176beda2eaf93f71e712d23d","sha512":"74348afc8bd305ef044a9def1df85923f44ae2134a1f464797c725802857b6abecf0b6a755a41b55c4a789e423e21379a6dbe7c8573d7ed58b08dae0dd0f97a8","ssdeep":"3072:uIwiWDwdQxTdIqIx4MKJ8GjVUxR4rs+oF4BTTssEH9BLOOifseYaDH89J4k6gF0J:hQxTdIDBCcSEdZk","tlshash":"1564ea5406f318764113b0368fdb15033d74d42ba95fda58ba5c4bd96fc2a20caeabf8","first_seen":"2026-02-13T13:21:34.385294Z","last_seen":"2026-02-13T18:24:07.606816Z","times_seen":2,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":92,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"1x-crm.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1x-crm.cfd/modules/creatives.js","fqdn":"1x-crm.cfd","domain":"1x-crm.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1x-crm.cfd/","date":"2026-02-13T18:23:46.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1x-crm.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 18:46:56 GMT","end":"Sun, 19 Apr 2026 19:45:19 GMT"},"fingerprint":{"sha1":"1E:B4:12:94:85:B9:15:DB:43:5D:56:4F:02:D9:B6:1C:C8:AA:C4:E8","sha256":"4E:C3:8A:94:E9:E4:07:06:D8:2F:7F:42:BB:6F:72:C1:F7:C1:72:F0:4B:20:55:A4:FE:38:C2:2E:DF:48:11:DE"}}},"request":{"raw":"GET /modules/creatives.js HTTP/1.1\r\nHost: 1x-crm.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1x-crm.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 18:23:46 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 12 Jan 2026 14:24:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AOa5%2FsCsk5dsS795nOfyxCW4gGq4x3yu6kFIyb%2BoMRAaff9ma515UUxzhY%2FWSE8RuGNhMhUcaf8gU%2BI5yXvw2RZMaH16XYhl\"}]}\r\netag: W/\"69650432-12479\"\r\ncontent-encoding: br\r\ncf-ray: 9cd65bdb7fdd82d0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74873,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (591), with CRLF line terminators","md5":"cf77dddd0eca4d69bfc1350b323f1841","sha1":"83579f4437856f138bb0911b4d1a56e3d024c99d","sha256":"4a8f0707f648bc5d28bccf18f39971860b4141a15f47cae6aeea9f3a1073762e","sha512":"f64d7526469dc51d32b085a6fcca49c7fafeb20901bba4586258077b5cbd225a1d1c40f929d2fac954872df7423baa6243fdcd798f19783a6cd7c8ca011e19d3","ssdeep":"384:Ctg/hx8xWPKuRK/J+JK1BnKLADAIXMOPQfA0jPf+OTslLO/ZNsQRFfwKHLTKH7/M:TK76IX6fT2OCOhNseCOM9GIx7azxWERh","tlshash":"2973f7a426d0553a40f38272ef540f56ffa48257e547c169beac928b6fb3c00cb67da4","first_seen":"2026-02-13T13:21:34.363098Z","last_seen":"2026-02-13T18:24:07.607421Z","times_seen":2,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"1x-crm.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1x-crm.cfd/","date":"2026-02-13T18:23:43.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:26:32 GMT","end":"Tue, 21 Apr 2026 09:26:27 GMT"},"fingerprint":{"sha1":"90:9B:CE:CB:FE:F2:C6:A9:53:13:5D:52:B6:07:F4:B4:84:28:97:60","sha256":"61:49:94:E8:FB:D1:24:14:DF:C9:92:BE:60:84:A8:D8:37:E3:89:DC:42:7B:0A:64:D3:F2:32:FD:D0:93:4C:4B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1x-crm.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 13 Feb 2026 18:23:43 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::bf7vl-1771006626555-8455d783c4c4\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 397\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lbCmI%2F15VInIbeQnADLvN80PapHTgDazJCjt24zUleF9YZlsV%2BphXgH12FyxDfos8%2F1mvZ2P7tKUxY5zuoMAQG1OCMgnEOxwVqxfH5QSPhHLUw%3D%3D\"}]}\r\ncf-ray: 9cd65bcbfd4daa04-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T07:40:40.2056Z","times_seen":17851556,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":36,"dns":10,"connect":9,"send":0,"wait":16,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}