{"report_id":"5f5f02d6-ea36-42b3-a3db-a73695ea0322","version":0,"status":"done","tags":["malicious","clickfix"],"date":"2026-06-27T22:50:47Z","url":{"schema":"http","addr":"oreodex.com/","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"oreodex.com/","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"title":"Buy \u0026 Sell Bitcoin, Ethereum | Cryptocurrency Exchange | OREODEX","dom":{"size":121126,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (413)","md5":"3abc2b49e6459de2635637db2c271acf","sha1":"76c11b84762b4c19db1d164b9fe6ad795b3b5709","sha256":"ea381018230bcf89f32b4e73da971532a4177cc0eee8355478bed785c7254656","sha512":"472c463ce4b826f6111e5623cf662595058fc4513e74132e246c870cd673ec63cd39ecaaae0df9a8551fa1cdb0eed7c844964bda7660b01d5690fd6c4b5498e9","ssdeep":"1536:RvQIIv375Xg9cEN3L1/Qhy7hIpHN89wEeYfi/L4Hp:lcXEpMlHabMY","tlshash":"9cc3d72561f2113e102351da9beb671e2ab0e103e50ad8587fed07b44fc6c99e8737ac","dom_hash":"domhash2d1ca8959114a2f6c68321ab6202ddaa","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"oreodex.com/","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-01T22:50:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null},{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-21T22:19:08.810882Z","alert_count":0,"request_count":4,"received_data":102596,"sent_data":2200,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-21T22:22:12.048317Z","alert_count":0,"request_count":2,"received_data":43434,"sent_data":1063,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-06-21T22:41:40.060069Z","alert_count":0,"request_count":1,"received_data":347591,"sent_data":547,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.1.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-06-21T23:50:19.101112Z","alert_count":0,"request_count":1,"received_data":88175,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"oreodex.com","ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-22","domain_rank":0,"first_seen":"2026-06-27T22:50:49.00408Z","last_seen":"2026-06-27T22:50:49.00408Z","alert_count":81,"request_count":40,"received_data":1191911,"sent_data":22452,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Chart.js","description":"Chart.js is an open-source JavaScript library that allows you to draw different types of charts by using the HTML5 canvas element.","website":"https://www.chartjs.org","common_platform_enumeration":"","icon":"Chart.js.svg","categories":["JavaScript graphics"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"api.binance.com","ip":{"addr":"3.164.231.206","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-04-01","domain_rank":543119,"first_seen":"2017-12-19T18:31:49Z","last_seen":"2026-06-25T18:19:32.088991Z","alert_count":0,"request_count":9,"received_data":40696,"sent_data":4443,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-06-21T22:46:13.623663Z","alert_count":0,"request_count":3,"received_data":383871,"sent_data":1454,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.1.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-07-24T07:53:21.019312Z","times_seen":181650,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8828cabf4a75161aaba4f6007c6cee75","sha1":"692b76a0668a0152ed498715e31c36466f8e8ff7","sha256":"b13bc7fb31b5ce47158f5d2580dc576d47d54af73277d157e52f3f981a9211c3","sha512":"004f922ffe57f315845cb153dc949118ed0ec72b8043c4b247d05333b4627d167ab409b9c535f3f2cd94c0395a706d9536e731711ac8c8d6d1cf59d9aa6c7e4e","ssdeep":"","tlshash":"e441583e38b71122803330fb86cf95a43729326b24449a1dfd4cc3555fa18b48db6bac","size":2206,"data":"","first_seen":"2026-06-08T12:34:17.241324Z","last_seen":"2026-07-22T23:22:13.639837Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b29a160a755c7931ea4b3082c2fa0d88","sha1":"198beab044e48f074c64918af056abc3eb8edede","sha256":"e6822b83b4eb33928241d02ac32f29b52aa77f63c4af7836fc98655fd29003ef","sha512":"ecf98469a81d0f7dd155f3780c70b8858610bcc0c1f626064d7178ae60c177a9e25be6f5be7bc198a7be029ff469379eb0fcd29ef3f2f073ddb242273421303c","ssdeep":"","tlshash":"3e11dc1e12fb013141e3f07a079fa2013063449b5d0cce143f9cc7464f5966845f2bea","size":1067,"data":"","first_seen":"2026-06-08T12:34:17.246842Z","last_seen":"2026-07-22T23:22:13.64178Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a77633a48b025a8887a5537523969bb9","sha1":"350303ea45aa74805fedf19e1d32e9b96c6f4f44","sha256":"3e54866fbc0cac066965fc8044d71b97717ee43d3726208669bec7b6fb57e9bf","sha512":"bae1bf8ff99d596eab4e19537a5b743846669713e713f9a2f3fe525e0882770ceea8173ba398b143f8e2499cdffa202f102b111f62bd5ea1405e503ddf0d3789","ssdeep":"192:aJpp4VUNdqYfDGQGY0ImI7EKzVixmyaoi2wmLje2sRV:YpWUNcY7XmI3zJ2wv2q","tlshash":"4802332fe67726328573a5a96bdb565c332a00c3b089c9157f7ecb051fc282499f13e9","size":8360,"data":"","first_seen":"2026-06-08T12:34:17.248068Z","last_seen":"2026-07-22T23:22:13.643403Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"73393dd372fc260162ab53d8d1728426","sha1":"cb3746ff8a600d0be752c61faa35b354698b5b67","sha256":"c70be89e7d5431a55b8054233e62ec3aa28eea39788223bf7d5d0554abd657c0","sha512":"25a04240d5cb33be7c70aa389a11887be3347a50ac57ce35be6deb1d821fef2fccaadb51a458aa52e31144b1be57a5d10cab36a40953d5a10e68821296d3f59c","ssdeep":"","tlshash":"8af0927f79a314300bab356e578b92a5649a300b28c485f57e7c43100f61e2543237a8","size":631,"data":"","first_seen":"2026-06-08T12:34:17.249266Z","last_seen":"2026-07-22T23:22:13.645067Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b64942884499bfc58f5e5948c0f71718","sha1":"c4d27aa60f2d4b3eb2f777d1cb616856e0570b0a","sha256":"1cacb590c0ee8816d3ee6b191a4d21b6195616506b89732b69189bf1229ed76e","sha512":"c553b9f41674d949fea8cc05e3db2adf359309cf282a6ce9802a7ba3eb37df042ac79466937ee91767c1435169a1bf921eb2cfafbe82a5edf2c75ae4414dc2d3","ssdeep":"","tlshash":"dff02626a4b26570436372fb2bc34242c15710277480c3f97d2c8a051f808219372abd","size":567,"data":"","first_seen":"2026-06-08T12:34:17.250584Z","last_seen":"2026-07-22T23:22:13.646813Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3752b23d5c8b862cb3993d939bbbe684","sha1":"06b1c62f6d62d4d4e67347a78e26aa392254279c","sha256":"b80413722f0518a38bc6a91e5aa8cc029523ac2ce44b9a6c1ed9f33e425d1196","sha512":"3a88beb2dc5260505f32aae929b7215305b91195b7032e04f815575b0b4ad15fdf525c51ca41b782ad4ce5ccdf273cd9ec9c50ee9641ee493c8a668056a4a8c8","ssdeep":"","tlshash":"e161df4245771134c803702e4b8f621e922a20477e139f883f4c92e41fca57ac6f56fd","size":3371,"data":"","first_seen":"2026-06-08T12:34:17.251574Z","last_seen":"2026-07-22T23:22:13.648554Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a19cd802513fc53c976faf0aebaa5ab9","sha1":"23a72a76e008697bc1ceec6e6fc2e47996a91a9f","sha256":"57a9d66a8daa8f799547e8dbf722a7842286b35cbad3c40f18562b3052d4b2c3","sha512":"e59f20180094a9295a3136f0dd13136c281f7baa06d2db68ab301668a458dccc853364626b9fd98189dce8a30d1a029e24aaae5ba6549737b9700adc7faf3554","ssdeep":"","tlshash":"49d02b8b370f4c31449ba6872f7f7305f803213b99a16421195d2204cf61e17a304cd0","size":289,"data":"","first_seen":"2026-06-08T12:34:17.252626Z","last_seen":"2026-07-22T23:22:13.650231Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c685a9c0423120bfdda77cb78a05c54f","sha1":"089c64cafb1e6c2809eda20a73a243242fd78054","sha256":"1975bb5dcc87d08249df3ecd00d30bc619959bbf2e9ae06386f14ec65b51c8c7","sha512":"417e44d3f57d9004c087011deccdba8c76b8eb13177b02d315493d4345330deca6f820a1b245911abe54e667dda64d26f8b3a15de8802b5283e622521fb9e2b9","ssdeep":"","tlshash":"fc01491b185364be12ea607ee73b6a0a22152a876551c4537d9c80282fd08246fadbdd","size":708,"data":"","first_seen":"2026-06-08T12:34:17.254166Z","last_seen":"2026-07-22T23:22:13.651002Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7dd2481042d1fd8b3a54310f157ac2e7","sha1":"000117c44eb4c87dd47e3f7543851163b67a9354","sha256":"dc083cbd391ee88b7246a41c36aea4a452d63a17766097cb056e3eafbd444c71","sha512":"47bd50b7c261be390fe7bfbaf8623da24beb891ae52c83f09abbacf9301e03e3d27d34e7aba1e1ca56a47b94f177dafbf1ad5c4e6d1f99f32ae8723428088e82","ssdeep":"96:2VypRgaBWauSg5zmX/aL2b3q4DJgiJWushevenLpiJWusheveA:2InkzmXA2xY9kve4Y9kveA","tlshash":"1ec1535cc5ba1d29506770eb1f9f570ae0a1a1073a86ede97e0c43005faa07cc4f379a","size":6151,"data":"","first_seen":"2026-06-08T12:34:17.255301Z","last_seen":"2026-07-22T23:22:13.651709Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"abe718ce60f193398b6026fdb5d08204","sha1":"cc710cb8edde9a3ebd66abb5dce1924b659ae6ef","sha256":"76a86bb0ed9eafa49b29c030e352ba203943e06c818175e3159b8538f34bc09e","sha512":"f6ef90a937e30759cf76348d227c82031663c50518a3a2608358f22e31ca03fbb2d93ff21e7a67cb24319b7185beeed79f1dd6a57580c3406c11104a562d4859","ssdeep":"","tlshash":"0d51bd5a71b6313a407771ab57cf438a3634208b7c05dd6a3f5c8b480fc58695ab2fae","size":2869,"data":"","first_seen":"2026-06-08T12:34:17.257124Z","last_seen":"2026-07-22T23:22:13.653255Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/chart.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6452e2b454b091f857a45cce7624eae","sha1":"cb555814104cfb8bf88e4d1b21033b495c3c5a77","sha256":"48444a82d4edcb5bec0f1965faacdde18d9c17db3063d042abada2f705c9f54a","sha512":"5a85622a1283e2a2365abb9266abfdfa4bcce167c585431008b3784250d3b79694e7a7cb432da0628c5622a9449d7a89cbff80739abf864d6859faa730387030","ssdeep":"6144:Iy2IGjjkD/6w7tKuhSGmexa2FiKqU/1eFRQ1T9mkb0h3N+2HJ8l/mXI:v+kD/6w74uhSGmexa2FiBeeFRQ1T9mCH","tlshash":"3d14f5d53342b12282e256d2583a050ae33666483547899cf6bc5ddf3c6a98b71fff38","size":208522,"data":"","first_seen":"2025-10-13T17:57:35.280368Z","last_seen":"2026-07-23T13:47:17.879052Z","times_seen":5412,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6cf353c3b8738cded0ecaf2100e7da1e","sha1":"9fbbee8565587f0a3a897a84045d7a216efa3a64","sha256":"985f1224c0eeec99d367a9db35e58e44b21e7eb9ce45831b15b4c108e41fd97f","sha512":"b9d13adaf4af1e21d923ac1ab3e69f8bdd755c9b984c4018c660470c7b7dd079f100c72f7b8215f64cdbe632990cc416e88542b4f170194610b5e685b4678da5","ssdeep":"1536:iKJqLfGmNQ2X8NFb4uvEOUjF3j7MtOBlxvHlik3+AkNk7yGCdmFiBnyOlV/TDQr/:nJebsNy1ikuGeBnR/TDQ9chHdN+ui","tlshash":"dbe3e789a221b67646e3169b93e4c211b3b50544b80ac4e470fd4c9f597ec9c13feefa","size":154597,"data":"","first_seen":"2025-06-28T19:00:56.686116Z","last_seen":"2026-07-24T08:01:54.703599Z","times_seen":25971,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/assets/js/main.js","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"996321d271369c93e3c429c15d147ce9","sha1":"816adfaef188c77d9965baf1030c1ff3b58bc90a","sha256":"f5287ff46040863d8cc9131e48625fb4d05ac3ddd7b2adb5ba830dead4a41138","sha512":"53944d2406eb1d15248c81ff0d374371264e9d82c89a50a3d013d3e7b764c3da3e418f4e72ee5263eb27e3fefb2e4eb9d4b7981686003dddb0234fa6aa0e033a","ssdeep":"192:GVH2ZcNxO8zKAXEWOho7Y/YJYScEElXRe0wlWORz8:GPKlo7s8RElXRnwlWsw","tlshash":"cb4251a4b220199a813b337aaabb5645f7381017d342d74cbd6c1cd21ff248599d3e6f","size":12495,"data":"","first_seen":"2026-05-14T12:20:58.121638Z","last_seen":"2026-07-22T23:22:13.638276Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/assets/js/support.js","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dcc4540db3d270929ed26d735ac2d9bc","sha1":"0112d5f316018c5c70e870c28e616717c325030d","sha256":"aef0d2fb9fe9ed00cadd3c0cc58cb708b715ec51d8b5613235b189cf8aa91e27","sha512":"496e32067b68bf02564ac1b9467c5373953b497f2dfba724ae0e5e7ddb0a04b809a372e880e77cbcb19a075e4dd93b28c886d59c93dbc8bd1bf92e2ef1f69028","ssdeep":"384:wcYNf0rSnrfFM6eRN9zieM6ex2MziiLM6MFMMMUM6MuMkMyM1M6OyKLWM6wME88M:WNf0rSnrfFM6eRN9WeM6ex2MWiLM6MFK","tlshash":"b4820b9e6472352988bbb76fbe47210fff220067104092157dbc4a541f79a94e2f6fac","size":18710,"data":"","first_seen":"2026-05-14T12:20:58.131587Z","last_seen":"2026-07-22T23:22:13.608638Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"oreodex.com/assets/img/logo.svg","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.846Z","timestamp":1782600623846,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreodex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 11:31:20 GMT","end":"Thu, 20 Aug 2026 11:31:19 GMT"},"fingerprint":{"sha1":"23:96:9B:B6:EE:BF:E9:EF:70:B8:C4:29:96:18:65:69:78:D6:29:7C","sha256":"32:B7:F4:BD:F2:7C:2A:E4:9C:76:77:32:F6:51:FF:10:1F:CB:E7:45:B5:FE:46:B4:84:EE:BD:7C:90:31:67:BB"}}},"request":{"raw":"GET /assets/img/logo.svg HTTP/1.1\r\nHost: oreodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oreodex.com/\r\nCookie: JSESSIONID=55E37ACE68F454593DEC60C78E6F1146; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Fri, 29 May 2026 20:25:04 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=6,i=?0\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VC%2FxjMTb16Tkm1fivCmafvz7rmlTr1cEwDe1j55NBwk9JL2idG3YvxucgrGUcprsJI3jHtZ%2B0qb7foelVcp%2FoY%2BMe0d6pLgnx%2FwrxHQDW4Tut7ePq1popWy4rk4cWg%3D%3D\"}]}\r\ncf-ray: a12802ab082eb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2227,"size_decoded":1927,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"e82b9de2643dde872f671f7b2e349ec7","sha1":"fcddc76304c89a9a97160d1e34cfdbda7839bace","sha256":"cdafc53b2e1293468db1560bbbe01fd0355aa6f5b38b364756093cfd1392d8a3","sha512":"c098c42fa63c509e8cee1314c44f00ad646e9c01f942317ed6686e7264172c32f396461d541240bd7eede6a17fd176243ee0c907868d0b1b51f8b0241d642335","ssdeep":"","tlshash":"7b4188aeb2b011f8b55d43d189e28c7b263d1bab3b41c0948f786ea4c93147d4068ec7","first_seen":"2026-05-15T00:49:48.41097Z","last_seen":"2026-07-22T23:22:13.583119Z","times_seen":6,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=SOLUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.164.231.206","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.855Z","timestamp":1782600623855,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=SOLUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://oreodex.com/\r\nOrigin: https://oreodex.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1238\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: f24b2b30-80ff-4647-9678-1c0a3407f266\r\nx-mbx-used-weight: 6\r\nx-mbx-used-weight-1m: 6\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 410991d185a8360cd416b5fbcf493074.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: 9QUzEHnQbhTHsGOZx-zk0VFT_knZ1s79ClLZMSatD2TMXpjaCy8Z_w==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4041,"size_decoded":2160,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"966c14f37d10421b89a78e5400948941","sha1":"4fa01b2a09114fcec6d26ac3663442f7ff54655c","sha256":"8c77beda4567dc340577319b44d6f7c2c157252a02ee86ba5f5d5409d6c1e51a","sha512":"b98a3819f84befeff218f5cb3f49a238554c02dd94d835a037360511e3a3857532897069cba09bad59f987dd9a0a8886aa1e611677939f976602d34ee4f38e54","ssdeep":"","tlshash":"3581e4111bd04ab4fbb598052796b916bd7b705abfcb0dcc85e13a3748e12b3560c725","first_seen":"2026-06-27T22:50:53.29573Z","last_seen":"2026-06-27T22:50:53.29573Z","times_seen":1,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:22.973Z","timestamp":1782600622973,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/swiper@11/swiper-bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oreodex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 44022\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 11.2.10\r\nx-jsd-version-type: version\r\netag: W/\"25be5-n7vuhWVYfwo6iXqEBF16IW76OmQ\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\nage: 11331\r\nx-served-by: cache-fra-eddf8230082-FRA, cache-bma-essb1270030-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":154597,"size_decoded":44781,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65281)","md5":"6cf353c3b8738cded0ecaf2100e7da1e","sha1":"9fbbee8565587f0a3a897a84045d7a216efa3a64","sha256":"985f1224c0eeec99d367a9db35e58e44b21e7eb9ce45831b15b4c108e41fd97f","sha512":"b9d13adaf4af1e21d923ac1ab3e69f8bdd755c9b984c4018c660470c7b7dd079f100c72f7b8215f64cdbe632990cc416e88542b4f170194610b5e685b4678da5","ssdeep":"1536:iKJqLfGmNQ2X8NFb4uvEOUjF3j7MtOBlxvHlik3+AkNk7yGCdmFiBnyOlV/TDQr/:nJebsNy1ikuGeBnR/TDQ9chHdN+ui","tlshash":"dbe3e789a221b67646e3169b93e4c211b3b50544b80ac4e470fd4c9f597ec9c13feefa","first_seen":"2025-06-28T19:00:56.686116Z","last_seen":"2026-07-24T08:01:54.703599Z","times_seen":25971,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":10,"send":0,"wait":10,"receive":4,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/assets/landings/1/css/home.css","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:22.980Z","timestamp":1782600622980,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreodex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 11:31:20 GMT","end":"Thu, 20 Aug 2026 11:31:19 GMT"},"fingerprint":{"sha1":"23:96:9B:B6:EE:BF:E9:EF:70:B8:C4:29:96:18:65:69:78:D6:29:7C","sha256":"32:B7:F4:BD:F2:7C:2A:E4:9C:76:77:32:F6:51:FF:10:1F:CB:E7:45:B5:FE:46:B4:84:EE:BD:7C:90:31:67:BB"}}},"request":{"raw":"GET /assets/landings/1/css/home.css HTTP/1.1\r\nHost: oreodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oreodex.com/\r\nCookie: JSESSIONID=55E37ACE68F454593DEC60C78E6F1146\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Fri, 29 May 2026 20:25:04 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/css;charset=UTF-8\r\npriority: u=2,i=?0\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xz7%2BkvieyQoOpdxQmmg2l6bVhclgZn0jDq8RycfbqmotVGmH%2FseR5asSQEcYxu%2FFqVNRZ3w3FRWuc8PcUpm%2BWDabpTvJ4sXXV%2FTbNJDKh2%2BlDx%2FOVvwpkGuqGD3Gkw%3D%3D\"}]}\r\ncf-ray: a12802a5afacb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33892,"size_decoded":8046,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"cbef696a1341209dba30c71ed8017941","sha1":"3625ffd4ad2e71c32c8e423c1d0e29cd49431ece","sha256":"58563b37280b6cff8f0ca9e1a9ba5d7f4124faeef164f912a038babff3b7d912","sha512":"27df24f4b9bee38320a4186bdec639f68474231e081865882b90a3a95cf05d6ae9850016f1f90dcb2c89c648aae3c55bac60fc8a8b950d77c392dc55c7cd09f2","ssdeep":"768:cDmBE7R+6PUJOK6d2iwT9chtxueeL+LCDcqD:cDmm7QBJF6d2iwTatxueG+LCDcqD","tlshash":"d1e2629573a12918752bd69879d3db4e736cb003810eca3cbbed206c6f881dd5572f8a","first_seen":"2026-05-26T21:59:31.201028Z","last_seen":"2026-07-22T23:22:13.618273Z","times_seen":7,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/assets/js/support.js","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:22.985Z","timestamp":1782600622985,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreodex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 11:31:20 GMT","end":"Thu, 20 Aug 2026 11:31:19 GMT"},"fingerprint":{"sha1":"23:96:9B:B6:EE:BF:E9:EF:70:B8:C4:29:96:18:65:69:78:D6:29:7C","sha256":"32:B7:F4:BD:F2:7C:2A:E4:9C:76:77:32:F6:51:FF:10:1F:CB:E7:45:B5:FE:46:B4:84:EE:BD:7C:90:31:67:BB"}}},"request":{"raw":"GET /assets/js/support.js HTTP/1.1\r\nHost: oreodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oreodex.com/\r\nCookie: JSESSIONID=55E37ACE68F454593DEC60C78E6F1146\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Fri, 29 May 2026 20:25:04 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/javascript;charset=UTF-8\r\npriority: u=3,i=?0\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GR0XYcVGZyEB40o3zFUFpZdK3rlH%2BXEDY03RUvObMSLHk7pinkboY8%2Fx7WNz0a1zJaw0kLzp%2FuZqcWe2%2BArt9Rv3rUoBS9ym2RK%2BE03LhCk6beeMkCpMSvZ46jyxDQ%3D%3D\"}]}\r\ncf-ray: a12802a5afb0b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18710,"size_decoded":5454,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (430), with CRLF line terminators","md5":"dcc4540db3d270929ed26d735ac2d9bc","sha1":"0112d5f316018c5c70e870c28e616717c325030d","sha256":"aef0d2fb9fe9ed00cadd3c0cc58cb708b715ec51d8b5613235b189cf8aa91e27","sha512":"496e32067b68bf02564ac1b9467c5373953b497f2dfba724ae0e5e7ddb0a04b809a372e880e77cbcb19a075e4dd93b28c886d59c93dbc8bd1bf92e2ef1f69028","ssdeep":"384:wcYNf0rSnrfFM6eRN9zieM6ex2MziiLM6MFMMMUM6MuMkMyM1M6OyKLWM6wME88M:WNf0rSnrfFM6eRN9WeM6ex2MWiLM6MFK","tlshash":"b4820b9e6472352988bbb76fbe47210fff220067104092157dbc4a541f79a94e2f6fac","first_seen":"2026-05-14T12:20:58.131587Z","last_seen":"2026-07-22T23:22:13.608638Z","times_seen":12,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/assets/landings/1/img/mobile/back-left-bottom.png","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.036Z","timestamp":1782600623036,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreodex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 11:31:20 GMT","end":"Thu, 20 Aug 2026 11:31:19 GMT"},"fingerprint":{"sha1":"23:96:9B:B6:EE:BF:E9:EF:70:B8:C4:29:96:18:65:69:78:D6:29:7C","sha256":"32:B7:F4:BD:F2:7C:2A:E4:9C:76:77:32:F6:51:FF:10:1F:CB:E7:45:B5:FE:46:B4:84:EE:BD:7C:90:31:67:BB"}}},"request":{"raw":"GET /assets/landings/1/img/mobile/back-left-bottom.png HTTP/1.1\r\nHost: oreodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oreodex.com/\r\nCookie: JSESSIONID=55E37ACE68F454593DEC60C78E6F1146\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Fri, 29 May 2026 20:25:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=5,i\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L0jdlDgUsfV3z97pGjvNMbEp9AdrYYxinn6IhxvGjjKFWl0E3saO4wE0VJYle%2FShh5OuOnbYSkF7G5nIaDLXrZ2rhCtwlyUiG%2ByVs%2F2TXmULDN8SR59MNotJoT2UkQ%3D%3D\"}]}\r\ncontent-length: 18461\r\ncf-ray: a12802a5ffc9b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18461,"size_decoded":19302,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 334 x 527, 8-bit colormap, non-interlaced","md5":"1cf4017026e8f6850f28763b7a912849","sha1":"d382fa900a9bdf26409a80f0ffa9a037f4512815","sha256":"07ea256383438b09363b5a6b23641e5cf7809bceb1ff503fbc3913956e09fa35","sha512":"12e2d9a4051c3c2b906db1f07ee8eeda9af1ab2053d2074ac291077d920ffd35d443e6e15f0a389eb43cf87af39b6710777131ff629b69156b48077e7febc349","ssdeep":"384:vs1ZPM4CdEvX+NfUJwZgwpTzjHucrVRh+1De6D9UVvA:vsLPMFNfUigwpffBRhISayVI","tlshash":"0682df75c47a2f70ff8ea6ab3252af7c53b7ab4180c6367483d198504cdb58899f8488","first_seen":"2025-09-11T10:34:35.995018Z","last_seen":"2026-07-22T23:22:13.620065Z","times_seen":19,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/assets/landings/1/img/mobile/coin-2.png","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.040Z","timestamp":1782600623040,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreodex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 11:31:20 GMT","end":"Thu, 20 Aug 2026 11:31:19 GMT"},"fingerprint":{"sha1":"23:96:9B:B6:EE:BF:E9:EF:70:B8:C4:29:96:18:65:69:78:D6:29:7C","sha256":"32:B7:F4:BD:F2:7C:2A:E4:9C:76:77:32:F6:51:FF:10:1F:CB:E7:45:B5:FE:46:B4:84:EE:BD:7C:90:31:67:BB"}}},"request":{"raw":"GET /assets/landings/1/img/mobile/coin-2.png HTTP/1.1\r\nHost: oreodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oreodex.com/\r\nCookie: JSESSIONID=55E37ACE68F454593DEC60C78E6F1146\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Fri, 29 May 2026 20:25:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=5,i\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NBpHSddOsPiWpvWCinP4q00tlkCJhCuyhVAVF8qw72oMQC41YWxR3qVdqIO0HbILqq6DiNmS4%2F6KyQZTQizz4CWwG8Aegy136PAbZyXnC6YuDgTTJLULH%2FjLPtbGeA%3D%3D\"}]}\r\ncontent-length: 16578\r\ncf-ray: a12802a60fcdb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16578,"size_decoded":17417,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 351 x 345, 8-bit colormap, non-interlaced","md5":"fe5942e372c5bfd030f10cb41d95e9ec","sha1":"340527ecd48d16c854548a123bb0f2e404617332","sha256":"d1db6626a6253ec8fd8fb8a12dca5cbe39b01899846378e3c8f9e473c649d1d5","sha512":"b750fbe1e6c2246eb782a38a1d15918a7ad01da6a89c7d3ff0800958d786afc838c1c6e717bf1cdfc397b22f5f6e63bfcf950f7ad4005b09f1a6cf09d613ba72","ssdeep":"384:vmoB2PCk1ez3R9C/ML3aSlshRvzAuDwiXiav9wWGQJjNPBiWB5:u+l9TR9ZL3n8LAOiav93Rf","tlshash":"4272d0c14532fba1f3477430d03a275a44f29b6c1a9c949b1fdf0cad1ce51a282dcaa2","first_seen":"2025-09-11T10:34:35.897988Z","last_seen":"2026-07-22T23:22:13.628411Z","times_seen":19,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/assets/img/logo.svg","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.845Z","timestamp":1782600623845,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreodex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 11:31:20 GMT","end":"Thu, 20 Aug 2026 11:31:19 GMT"},"fingerprint":{"sha1":"23:96:9B:B6:EE:BF:E9:EF:70:B8:C4:29:96:18:65:69:78:D6:29:7C","sha256":"32:B7:F4:BD:F2:7C:2A:E4:9C:76:77:32:F6:51:FF:10:1F:CB:E7:45:B5:FE:46:B4:84:EE:BD:7C:90:31:67:BB"}}},"request":{"raw":"GET /assets/img/logo.svg HTTP/1.1\r\nHost: oreodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oreodex.com/\r\nCookie: JSESSIONID=55E37ACE68F454593DEC60C78E6F1146; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Fri, 29 May 2026 20:25:04 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=6,i=?0\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=enrovWwPUCCmFJeXjUQVel7tvgtEd31j9%2FNiIEvSE%2Fl5iFBP8NwrHRdNl%2F5uvarEWzFYrxPXTqYGmtweV0FuNSmKAbKcK8npokSzAV%2F%2FZlrR8%2BdXlPVwpuPar5HVJw%3D%3D\"}]}\r\ncf-ray: a12802ab082db51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2227,"size_decoded":1929,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"e82b9de2643dde872f671f7b2e349ec7","sha1":"fcddc76304c89a9a97160d1e34cfdbda7839bace","sha256":"cdafc53b2e1293468db1560bbbe01fd0355aa6f5b38b364756093cfd1392d8a3","sha512":"c098c42fa63c509e8cee1314c44f00ad646e9c01f942317ed6686e7264172c32f396461d541240bd7eede6a17fd176243ee0c907868d0b1b51f8b0241d642335","ssdeep":"","tlshash":"7b4188aeb2b011f8b55d43d189e28c7b263d1bab3b41c0948f786ea4c93147d4068ec7","first_seen":"2026-05-15T00:49:48.41097Z","last_seen":"2026-07-22T23:22:13.583119Z","times_seen":6,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/assets/img/coins/SOL.png","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.024Z","timestamp":1782600623024,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreodex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 11:31:20 GMT","end":"Thu, 20 Aug 2026 11:31:19 GMT"},"fingerprint":{"sha1":"23:96:9B:B6:EE:BF:E9:EF:70:B8:C4:29:96:18:65:69:78:D6:29:7C","sha256":"32:B7:F4:BD:F2:7C:2A:E4:9C:76:77:32:F6:51:FF:10:1F:CB:E7:45:B5:FE:46:B4:84:EE:BD:7C:90:31:67:BB"}}},"request":{"raw":"GET /assets/img/coins/SOL.png HTTP/1.1\r\nHost: oreodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oreodex.com/\r\nCookie: JSESSIONID=55E37ACE68F454593DEC60C78E6F1146\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Fri, 29 May 2026 20:25:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=5,i\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bvcnQdgUegkOCX1nsXXHUdh98583e8SDYA2qnTykRqFXqmaUs7ZZ42YJ5hJluEJyEH2bw7zzqfFAiI02kKlxVIao5IH%2FGxERR%2Fl0oAjlmpcLgpuRcXgkINvUhtO%2BeQ%3D%3D\"}]}\r\ncontent-length: 404\r\ncf-ray: a12802a5efbdb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":404,"size_decoded":1243,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"5e22a9302a4383454bfe530f0ddffb53","sha1":"be5b706cd340c21bd9be3a3ce56647ec384d6624","sha256":"b4f74a2541dbe53158395e8b054ec169ffe18124b55a0b5e027ebd9c22b5ba11","sha512":"0d94a417d4f0c678faea64e59463ab5c6cd582168ae7e744d44c1d6878deffec49dec89d5b5ca176bb15767eae10cdf9aa1691d4b033367becb08caf8ec56889","ssdeep":"","tlshash":"c9e0f1f27d245ca97f5642050fe80ff2d03c66f515119c861db2ca2d554105545d5453","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-07-23T14:11:53.081896Z","times_seen":1014,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/assets/img/coins/XRP.png","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.025Z","timestamp":1782600623025,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreodex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 11:31:20 GMT","end":"Thu, 20 Aug 2026 11:31:19 GMT"},"fingerprint":{"sha1":"23:96:9B:B6:EE:BF:E9:EF:70:B8:C4:29:96:18:65:69:78:D6:29:7C","sha256":"32:B7:F4:BD:F2:7C:2A:E4:9C:76:77:32:F6:51:FF:10:1F:CB:E7:45:B5:FE:46:B4:84:EE:BD:7C:90:31:67:BB"}}},"request":{"raw":"GET /assets/img/coins/XRP.png HTTP/1.1\r\nHost: oreodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oreodex.com/\r\nCookie: JSESSIONID=55E37ACE68F454593DEC60C78E6F1146\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Fri, 29 May 2026 20:25:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=5,i\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Be9S22rLLC%2BDFNwp8NfsChdw%2FthEqU0r%2FGM7qfDsTVqIl%2B7Dd5M4zHqBL7vinFA93EnuIT5zauVku82T%2BrLwFnw7TwScSqk%2FYNFbjkQaD7oLjVtlwMZGFqAibn5vZg%3D%3D\"}]}\r\ncontent-length: 953\r\ncf-ray: a12802a5efbeb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":953,"size_decoded":1798,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"92f9d15be55070c0f267e7b9609211da","sha1":"d25e8395244487e169b16cb9508e434ea1ea61dd","sha256":"0e7d0965ce52308846834de79ad8305ea31542444a1ba54888843fc0214418f4","sha512":"d39d1087b689cf8f8d543a282dfc802e0e996ddbdb0553b7376958b0be63dd8f6230451cc3cd3df7d63748ab2165e8e82433c35d4131a7a2c137445ecfeee95b","ssdeep":"","tlshash":"e91188a14b659e01632bcd7fcb2a0142b20b22efb465d716a88f533d0795d871059f85","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-07-23T22:16:33.487257Z","times_seen":1585,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/assets/landings/1/img/mobile/coin-1.png","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.039Z","timestamp":1782600623039,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreodex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 11:31:20 GMT","end":"Thu, 20 Aug 2026 11:31:19 GMT"},"fingerprint":{"sha1":"23:96:9B:B6:EE:BF:E9:EF:70:B8:C4:29:96:18:65:69:78:D6:29:7C","sha256":"32:B7:F4:BD:F2:7C:2A:E4:9C:76:77:32:F6:51:FF:10:1F:CB:E7:45:B5:FE:46:B4:84:EE:BD:7C:90:31:67:BB"}}},"request":{"raw":"GET /assets/landings/1/img/mobile/coin-1.png HTTP/1.1\r\nHost: oreodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oreodex.com/\r\nCookie: JSESSIONID=55E37ACE68F454593DEC60C78E6F1146\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Fri, 29 May 2026 20:25:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=5,i\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p979Jf2awJC4TemnbKkfU7qCz6pP6mqCKrzza%2FTisjKv%2ByPTvo6yNNRSXb12sYkirmr7HEi2uEECFMEumOyCW098kU93C53ghpfl5V%2F%2Fsio%2BHQ54JBNyHu696K7gWA%3D%3D\"}]}\r\ncontent-length: 16411\r\ncf-ray: a12802a5ffccb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16411,"size_decoded":17256,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 344 x 341, 8-bit colormap, non-interlaced","md5":"465dc8f86f6f94b241c5e87c0ce00e93","sha1":"901561279ab95a5abb3fa29ca1abb6691b54c758","sha256":"0208f178dce0328c11135084c2270fd50837eaeab5e82042b872e4c48a6c2376","sha512":"95d2e97695f30b238c65dc493e33a5798c7595d1ded3451ef73733decd8f7044eb757f2b712f1618ec031c449382cdefd84fc29530c4c5a37a14ddf73d548533","ssdeep":"384:qH20BtsUdeJFCzpHFCyUsHWkq78J2T6Xd6ceYRK5IPPLzn2mlCnh1qzWmz2:qW0ECdFFUS0gJ2K0d240TD2","tlshash":"4272e095c0309b13aca7a9b7981b642990218cfbfc0b15b08cc9fd09eab455880cfbf1","first_seen":"2025-09-11T10:34:36.082612Z","last_seen":"2026-07-22T23:22:13.60697Z","times_seen":19,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/assets/landings/1/img/1.png","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.030Z","timestamp":1782600623030,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreodex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 11:31:20 GMT","end":"Thu, 20 Aug 2026 11:31:19 GMT"},"fingerprint":{"sha1":"23:96:9B:B6:EE:BF:E9:EF:70:B8:C4:29:96:18:65:69:78:D6:29:7C","sha256":"32:B7:F4:BD:F2:7C:2A:E4:9C:76:77:32:F6:51:FF:10:1F:CB:E7:45:B5:FE:46:B4:84:EE:BD:7C:90:31:67:BB"}}},"request":{"raw":"GET /assets/landings/1/img/1.png HTTP/1.1\r\nHost: oreodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oreodex.com/\r\nCookie: JSESSIONID=55E37ACE68F454593DEC60C78E6F1146\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Fri, 29 May 2026 20:25:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=5,i\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AEKYzdKvUBYEG%2F8qBGtdeK%2B%2Bf%2Bclc8f7ssiErYFbmSJ7AsxuL4WLV0gMiyK9rb8anu8Bse29v2lXgKu4qrvL3epZXPwuDReec7HRYrWQsPFCPO13FtI5hGLnnV4gKw%3D%3D\"}]}\r\ncontent-length: 9432\r\ncf-ray: a12802a5ffc3b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9432,"size_decoded":10274,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 240 x 240, 8-bit colormap, non-interlaced","md5":"26e893bea486c7004bd0f5fe8e686e7c","sha1":"2391bb982e24f25d1ad407310ca354644e89eccc","sha256":"2502394a127a43e00e02bdda94815b96f86602d58bb49742312e15c8044c101c","sha512":"b453f31428cf59dbbcb39dd8b06360bbf3271e2f5da0b99d29856f1db50152eb85c8acafd1f2ec580ebbc84ab151a4bbf6dab2e5b43fd4cf16ae1c0c26c1740a","ssdeep":"192:Y8IGEl1K/xUITd16kuQh8mqtBXjx15k8F1cqG6o2PF/2d+d11ZfxklDbckwwzk+:Y8IJK/xzTr69QiV/lvDF2fjyF/xX0D5L","tlshash":"57129e04bd91626948cc2a238b4f3079e18f5eb8ae1ad9704d1bfe06d1bddc66426a71","first_seen":"2026-05-14T12:20:58.148721Z","last_seen":"2026-07-22T23:22:13.603006Z","times_seen":18,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/assets/landings/1/img/5.png","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.034Z","timestamp":1782600623034,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreodex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 11:31:20 GMT","end":"Thu, 20 Aug 2026 11:31:19 GMT"},"fingerprint":{"sha1":"23:96:9B:B6:EE:BF:E9:EF:70:B8:C4:29:96:18:65:69:78:D6:29:7C","sha256":"32:B7:F4:BD:F2:7C:2A:E4:9C:76:77:32:F6:51:FF:10:1F:CB:E7:45:B5:FE:46:B4:84:EE:BD:7C:90:31:67:BB"}}},"request":{"raw":"GET /assets/landings/1/img/5.png HTTP/1.1\r\nHost: oreodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oreodex.com/\r\nCookie: JSESSIONID=55E37ACE68F454593DEC60C78E6F1146\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Fri, 29 May 2026 20:25:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=5,i\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YWe%2FqqdaNEU7XWN6wVom22h89rTFY0LBYrOJ1oCZ1oS2gKorXUqcgXg4urk5dnGg%2Fr8uVpD%2FriV0ZF85i6gnPmAP7QHzbmFauwoU63zRQ9WTyZ9VYc1%2Ffnb4cAd6lw%3D%3D\"}]}\r\ncontent-length: 60974\r\ncf-ray: a12802a5ffc7b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60974,"size_decoded":61817,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced","md5":"6eb3229b54bbfa89dda85ae3ddd7dd64","sha1":"f9ef4edfcbea7f1e050e46dcd46525f7e3ba2de3","sha256":"0d8fe0ea94622db0ef23740e8c4514f4ecb6ea9a9ec6751bd3c34d2b4f459ab8","sha512":"35bd27bf602d8dc1e8e54c50ab692daf383375d3df88a54ea4f2783d75f0cd0e8249d300e600e36532aa554fc363e3d04613c48825dc741dfb0feae398f61953","ssdeep":"1536:M4usKm1K36AQs21f43cOrFvDGYBGA/ePiWFIAvw:Mxu4if43cOJD7GA/+FTw","tlshash":"0253025daec01e3bbb319a0b8cc94661074a7cb21be8737f448f592d5c76be51912f28","first_seen":"2026-05-14T12:20:58.133903Z","last_seen":"2026-07-22T23:22:13.61496Z","times_seen":18,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/assets/img/coins/DOGE.png","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.026Z","timestamp":1782600623026,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreodex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 11:31:20 GMT","end":"Thu, 20 Aug 2026 11:31:19 GMT"},"fingerprint":{"sha1":"23:96:9B:B6:EE:BF:E9:EF:70:B8:C4:29:96:18:65:69:78:D6:29:7C","sha256":"32:B7:F4:BD:F2:7C:2A:E4:9C:76:77:32:F6:51:FF:10:1F:CB:E7:45:B5:FE:46:B4:84:EE:BD:7C:90:31:67:BB"}}},"request":{"raw":"GET /assets/img/coins/DOGE.png HTTP/1.1\r\nHost: oreodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oreodex.com/\r\nCookie: JSESSIONID=55E37ACE68F454593DEC60C78E6F1146\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Fri, 29 May 2026 20:25:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=5,i\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sEAIAIAZKbmrWfvARrLLA%2FCNEQlLEUH9A%2BBQvNN0Qx0rAfUWRfD7YYp2bv2eevqX%2Fh6upHi0Heziw93LbDtmJhpm1inKbB4p1PldqKICB2r%2BC9V%2FT5aVzqM%2BlJiHwA%3D%3D\"}]}\r\ncontent-length: 2808\r\ncf-ray: a12802a5efc0b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2808,"size_decoded":3654,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"d55dd75446d505958e5210985b246bed","sha1":"df83b77aa8f8647f67f478e02c23f864a592f6d6","sha256":"8abf24f47bc3b4def59a6e6441a9f2dbb8d20c953c2c5373f219ab614a8f208d","sha512":"b65c5b9eca2ac0bef1dfdf742eb6ce365c3368650b37cd847ce12b955e683d3843cdeab9ec25beed31976e9b3ab571e59d4c66431e44345e7c57347a72bb758f","ssdeep":"","tlshash":"a6515c150736fcaac55846a3889f0970c8ee362be160571a7664cc17ff949494a17743","first_seen":"2023-05-07T19:16:41Z","last_seen":"2026-07-23T22:16:33.46776Z","times_seen":974,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.493Z","timestamp":1782600623493,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://oreodex.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 21 Jun 2026 10:12:13 GMT\r\nexpires: Mon, 21 Jun 2027 10:12:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 563890\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":24836,"size_decoded":25649,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-07-24T07:52:26.852317Z","times_seen":35438,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/assets/img/coins/TON.png","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.028Z","timestamp":1782600623028,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreodex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 11:31:20 GMT","end":"Thu, 20 Aug 2026 11:31:19 GMT"},"fingerprint":{"sha1":"23:96:9B:B6:EE:BF:E9:EF:70:B8:C4:29:96:18:65:69:78:D6:29:7C","sha256":"32:B7:F4:BD:F2:7C:2A:E4:9C:76:77:32:F6:51:FF:10:1F:CB:E7:45:B5:FE:46:B4:84:EE:BD:7C:90:31:67:BB"}}},"request":{"raw":"GET /assets/img/coins/TON.png HTTP/1.1\r\nHost: oreodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oreodex.com/\r\nCookie: JSESSIONID=55E37ACE68F454593DEC60C78E6F1146\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Fri, 29 May 2026 20:25:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=5,i\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FifS5Pao1kU0kaDNWaq2WHuQudRsnZaUng40uzWUIy860MUP9nplNfMiMbmUknkowDladXOgc%2FqspIZ5lKi4tlPGTFwE%2FvEhPXWh6FIl8DK2dKYpj2wlHm426jcqRA%3D%3D\"}]}\r\ncontent-length: 24181\r\ncf-ray: a12802a5efc1b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24181,"size_decoded":25020,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"1e864e18e2e3a14b3407889b0e7fb1d4","sha1":"6498cdc01f17a9c51007bedb1eed9e28ef98bd90","sha256":"d8ffe78edcfb9ad030ef0f932ea5a25c89acab7c11d6cf03b32cd4913de14053","sha512":"5b0555db16debaafbad44fb6e10cd8f3ee414c8bd272ba47734fcdb44b32a5828cc0776c43dfea0c40c81d9718ebbee8d9f3fbfca17f08a5e45e193cb9497f31","ssdeep":"384:WU5AJju7MoJSV2L783TGNX2H3PLIE0eq8x343eNZCPkArJTMUno/JBWRCrasz5Px:/AA7MoUV2P83TGNGH3PLIE0t8+ONYP4F","tlshash":"40b2e128d57e8291b694f1b827cb5c8f0f738cd23c711e50ee550ea0a7922651cefa0e","first_seen":"2024-12-04T15:05:15.931067Z","last_seen":"2026-07-22T23:22:13.625615Z","times_seen":477,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:100,300,400,500,700,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:22.966Z","timestamp":1782600622966,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:10 GMT","end":"Mon, 31 Aug 2026 08:38:09 GMT"},"fingerprint":{"sha1":"8A:2F:DC:6F:C0:09:07:D3:E5:9C:B7:EE:C2:C4:63:DC:59:36:B5:1B","sha256":"64:7C:E4:55:AB:5C:58:7E:89:F1:19:3B:95:DB:7B:4B:E6:75:42:2C:0C:51:2E:66:85:F5:BB:51:58:08:39:19"}}},"request":{"raw":"GET /css?family=Roboto:100,300,400,500,700,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oreodex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 27 Jun 2026 22:50:23 GMT\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33510,"size_decoded":2611,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"a763918f3b1cf01f5127eaaaa4e5ed36","sha1":"e5932e684c5249dece73f827719829b05315deda","sha256":"316e33bfe6ab63fbb1920bfcf23774c4a779aa22c0707c7831064f9a1bb87c43","sha512":"adeeb53b0a7524e78f035b88e7993fee8484360c90ce3e6d3d69536ebf2aea3dc5d1cd45a94f0dbf8ce9ed4989351a1258ae07663871bd407bd3baa6b33d7f0e","ssdeep":"768:DDZDCDHDHDY4DRLDuDWDyDS99YURRuWDyjooYhREHPM5svvYaR7AIWP2ZZYQRVK7:Xxyllff","tlshash":"04e210a1041744009b838ce223cebf35fe1f52117142d0b5abfd9b6baddbca6526936d","first_seen":"2026-02-19T23:46:21.252973Z","last_seen":"2026-07-24T03:27:04.768992Z","times_seen":2573,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":2,"connect":37,"send":0,"wait":79,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/chart.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:22.994Z","timestamp":1782600622994,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/chart.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oreodex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 4.5.1\r\nx-jsd-version-type: version\r\netag: W/\"32e8a-y1VYFBBM+4v4jk0bIQM7SVw8Wnc\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\nage: 7320\r\nx-served-by: cache-fra-etou8220052-FRA, cache-bma-essb1270035-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 71722\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":208522,"size_decoded":72498,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (56990)","md5":"e6452e2b454b091f857a45cce7624eae","sha1":"cb555814104cfb8bf88e4d1b21033b495c3c5a77","sha256":"48444a82d4edcb5bec0f1965faacdde18d9c17db3063d042abada2f705c9f54a","sha512":"5a85622a1283e2a2365abb9266abfdfa4bcce167c585431008b3784250d3b79694e7a7cb432da0628c5622a9449d7a89cbff80739abf864d6859faa730387030","ssdeep":"6144:Iy2IGjjkD/6w7tKuhSGmexa2FiKqU/1eFRQ1T9mkb0h3N+2HJ8l/mXI:v+kD/6w74uhSGmexa2FiBeeFRQ1T9mCH","tlshash":"3d14f5d53342b12282e256d2583a050ae33666483547899cf6bc5ddf3c6a98b71fff38","first_seen":"2025-10-13T17:57:35.280368Z","last_seen":"2026-07-23T13:47:17.879052Z","times_seen":5412,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":11,"send":0,"wait":11,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/assets/img/arrow-down.svg","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.014Z","timestamp":1782600623014,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreodex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 11:31:20 GMT","end":"Thu, 20 Aug 2026 11:31:19 GMT"},"fingerprint":{"sha1":"23:96:9B:B6:EE:BF:E9:EF:70:B8:C4:29:96:18:65:69:78:D6:29:7C","sha256":"32:B7:F4:BD:F2:7C:2A:E4:9C:76:77:32:F6:51:FF:10:1F:CB:E7:45:B5:FE:46:B4:84:EE:BD:7C:90:31:67:BB"}}},"request":{"raw":"GET /assets/img/arrow-down.svg HTTP/1.1\r\nHost: oreodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oreodex.com/\r\nCookie: JSESSIONID=55E37ACE68F454593DEC60C78E6F1146\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Fri, 29 May 2026 20:25:04 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=5,i\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tXymw1SdBzILO12I95YrYifZi2dJ9hRvuUxEmz0qnld%2B3GaXmqq8oLqF8m%2BgnyQP5j1wF9vZuJozJEaVBT0i1sLs58UXWjrj7FfXJ1Jo2laVS66CYq50cwz7pNT0IQ%3D%3D\"}]}\r\ncf-ray: a12802a5dfb5b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":243,"size_decoded":1012,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"cf91c91645dea1b57d4ff104bbf2ac48","sha1":"a6c2adfc50d8a6bfe09d6ba7371fb132e0d83de6","sha256":"17270a07140ad1e345e0c848098deb3c9a0895d58704debb82d7391a834161c4","sha512":"b058dabaa7ddf338b9b27b1e33b617cfff63a7864a95e8d8075aa064f04bde63a48ce928c239e0f6862788d38e089fd333e4b062c816850d1d761795de4b7b16","ssdeep":"","tlshash":"05d0a7e841d88d2ce7264650ea783664b03e20739fcd4148ea52753f951aacd6c339e8","first_seen":"2026-05-14T12:20:58.13022Z","last_seen":"2026-07-22T23:22:13.623425Z","times_seen":15,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/MaterialDesign-Webfont/7.4.47/css/materialdesignicons.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:22.969Z","timestamp":1782600622969,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/MaterialDesign-Webfont/7.4.47/css/materialdesignicons.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oreodex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 22:50:22 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\nlast-modified: Wed, 27 Dec 2023 01:03:32 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\ncf-cache-status: HIT\r\nage: 583\r\nexpires: Thu, 17 Jun 2027 22:50:22 GMT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7HvpQiXXNDZWyDwopA3sbCbA99Uwy5JEBYRuOnOVjvx2Hc653aWRLvIP6tgdTKZc9PxDs5TTvPc6WE5ngWRuux97KMWhCfjasZkmsI9kfZyhEccWz3TxRYQ0YmZUU3f6JBOq46Z9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a12802a5adea56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":346626,"size_decoded":43361,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2c83c4bce691e18f82409f87b2bf84e4","sha1":"3958d951f073022975e50de0c711a17bfa1b703f","sha256":"03fe3caba05e65b14e4035139eee89b12be87cd0bcf342ac3886770eec3a9962","sha512":"fe4eb9f06e94b02bdb906441def3d7a6c3c781679db89c225863c2192d78210c37c69afadc010c740f273181b68266245e2b50c434e7ea288aff67c3e13f3ba8","ssdeep":"3072:LRA3YkpX8O2wOBZuRVOh01y7xBqlaOznO3oDmCleSI5B1H3n/ZdhI97:LRAI64wN89BqZnODweSgH3n/hIB","tlshash":"b5742de5d04d24e3f733c85fd740b798458bf2b2d6690e05f68b660d09cba221687f6a","first_seen":"2023-12-27T17:19:29Z","last_seen":"2026-07-24T03:27:27.339493Z","times_seen":6163,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":13,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/assets/img/chat.svg","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.012Z","timestamp":1782600623012,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreodex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 11:31:20 GMT","end":"Thu, 20 Aug 2026 11:31:19 GMT"},"fingerprint":{"sha1":"23:96:9B:B6:EE:BF:E9:EF:70:B8:C4:29:96:18:65:69:78:D6:29:7C","sha256":"32:B7:F4:BD:F2:7C:2A:E4:9C:76:77:32:F6:51:FF:10:1F:CB:E7:45:B5:FE:46:B4:84:EE:BD:7C:90:31:67:BB"}}},"request":{"raw":"GET /assets/img/chat.svg HTTP/1.1\r\nHost: oreodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oreodex.com/\r\nCookie: JSESSIONID=55E37ACE68F454593DEC60C78E6F1146\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Fri, 29 May 2026 20:25:04 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=5,i\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nsZ39YBpjDBK1%2BtGFJK%2FNL0CECQX7aSbd5fV26UlaLkn6K2FiDUeEFw%2FbH6XAjLglwBe9O5TsW9HJHxVBcf3l2vYcVj2hkTeleyQNuhYRTKqUblxwm8YeyFbpt8R1A%3D%3D\"}]}\r\ncf-ray: a12802a5dfb4b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1836,"size_decoded":1759,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"b4255705cd455b620e93dc2262a4bfcc","sha1":"6b1a814a8a9d1ce7be885d3c47e8d91468a9cae2","sha256":"6e50a5880736a003a7c517874527fb1370fc51870ac8e06ff5d61d63adc92f93","sha512":"d0f0b8ea71fa52fa57ea16f35589bb9ece1bed7ce62f46712b9225c1bbe380ff04d25c3383329c9c6ab3f91739fd70dc3b6c69b8d8eab062094ca8c306eb19fa","ssdeep":"","tlshash":"ab3102f9f7edb5d4f9188790539a56b07b5b21fa7623c50807921ea0f24262e04a988d","first_seen":"2025-06-23T06:39:13.036817Z","last_seen":"2026-07-22T23:22:13.619206Z","times_seen":79,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.495Z","timestamp":1782600623495,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://oreodex.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 21 Jun 2026 10:12:13 GMT\r\nexpires: Mon, 21 Jun 2027 10:12:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 563890\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":24836,"size_decoded":25649,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-07-24T07:52:26.852317Z","times_seen":35438,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.164.231.206","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.532Z","timestamp":1782600623532,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://oreodex.com/\r\nOrigin: https://oreodex.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 77\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\naccept-ranges: bytes\r\nserver: nginx\r\nlast-modified: Thu, 30 Jan 2025 14:16:23 GMT\r\netag: \"679b89b7-4d\"\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 410991d185a8360cd416b5fbcf493074.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: SAvX1mgh0c0KA_8NTcMkSqHiYwWhx2VyujdfOezcvW2hlo9r181y1g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":77,"size_decoded":959,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"136f5552348d90a36b6c9a49046926c1","sha1":"b992325f95e0076c147ebf6593433f938b244f4e","sha256":"a60bafa499acbab1b73b92511707557400155adf5fd6a186cd56a2b822935ba7","sha512":"b790d85cf0597615435cf72e9384f8e640642a1cc3cc3564010a006eedbf5bcb956120cb81ebef9254d4675e785091a07d2cd79c66381fdc39b80ee5f4e48b8e","ssdeep":"","tlshash":"baa001f9a5a62009e92076c01cd532941c8983a030d24a102ac13969b55562ada06299","first_seen":"2023-12-04T13:46:15Z","last_seen":"2026-07-22T23:22:13.613464Z","times_seen":518,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":2,"connect":8,"send":0,"wait":256,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/assets/landings/1/img/3.png","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.032Z","timestamp":1782600623032,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreodex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 11:31:20 GMT","end":"Thu, 20 Aug 2026 11:31:19 GMT"},"fingerprint":{"sha1":"23:96:9B:B6:EE:BF:E9:EF:70:B8:C4:29:96:18:65:69:78:D6:29:7C","sha256":"32:B7:F4:BD:F2:7C:2A:E4:9C:76:77:32:F6:51:FF:10:1F:CB:E7:45:B5:FE:46:B4:84:EE:BD:7C:90:31:67:BB"}}},"request":{"raw":"GET /assets/landings/1/img/3.png HTTP/1.1\r\nHost: oreodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oreodex.com/\r\nCookie: JSESSIONID=55E37ACE68F454593DEC60C78E6F1146\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Fri, 29 May 2026 20:25:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=5,i\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BSmu3wvix2YMjM%2FURvMZXJiWY1rc3038BsdoDOz8CjLHQeuvjOEO8Jy9hk2DoF384G%2FNVLA9N5FyigfjOOoV2irddnN4mLnKGCaiIS6nGcK6fmFGQCitk5JqzxMg2Q%3D%3D\"}]}\r\ncontent-length: 19223\r\ncf-ray: a12802a5ffc5b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19223,"size_decoded":20064,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 240 x 240, 8-bit colormap, non-interlaced","md5":"d827c14b709a99a5d907c4e438ee3042","sha1":"4027baed2b68da27dd9a2b7cc83acc3e7cfc2c61","sha256":"ff6ea3cc3fb2bc4412314f4a600dccf25c8ac2d3a72912584e626c204b22711c","sha512":"430a950bc828d0dc524f513ec5e1ad19cd88e2efadc1c1b8a80e0d417dc4daf48a469efd2a396d6bcbbd132f62e7436dfe14bbf0bac8234b916f343579d18a9f","ssdeep":"384:SZlOSKicoRZr2GKPJubzd63sZNMphbe5nzNFUopaqWg9PKwqsjKJEg:Sxj4/hubzdR4PmIoIPg5Kj7Eg","tlshash":"3a82e1c835811838dfca01b1cf96a089d669af25e1cbf35a27613e3e1d78adc465b242","first_seen":"2026-05-14T12:20:58.143061Z","last_seen":"2026-07-22T23:22:13.585028Z","times_seen":18,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/assets/landings/1/img/mobile/line-1.png","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.042Z","timestamp":1782600623042,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreodex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 11:31:20 GMT","end":"Thu, 20 Aug 2026 11:31:19 GMT"},"fingerprint":{"sha1":"23:96:9B:B6:EE:BF:E9:EF:70:B8:C4:29:96:18:65:69:78:D6:29:7C","sha256":"32:B7:F4:BD:F2:7C:2A:E4:9C:76:77:32:F6:51:FF:10:1F:CB:E7:45:B5:FE:46:B4:84:EE:BD:7C:90:31:67:BB"}}},"request":{"raw":"GET /assets/landings/1/img/mobile/line-1.png HTTP/1.1\r\nHost: oreodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oreodex.com/\r\nCookie: JSESSIONID=55E37ACE68F454593DEC60C78E6F1146\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Fri, 29 May 2026 20:25:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=5,i\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=22SAZZWOnBXfF%2FXJNF9gRO9KWhx7L3PeoLMvpNpHcpICSLk3kl40RLhpBYayCLeLmDuGGLI%2FkiNobb9KZJARGLy%2F1hIjur9eOuvj8ST8AODv8KL0GF5dRNB6fU4CRQ%3D%3D\"}]}\r\ncontent-length: 9049\r\ncf-ray: a12802a60fcfb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9049,"size_decoded":9889,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 367 x 318, 8-bit colormap, non-interlaced","md5":"278c2677e721db985800645f7c54dd72","sha1":"328ec58f6988811941ef0901a2cb3ee3ada3e777","sha256":"519e152a0cbb076bdf5bc2378615aab9b6fcff3a641ef8ae44ac3b9dcd140617","sha512":"2dbc87933249b922abd963f88643236083db3af038e88f902139bb42438f04780d26cfbc6b13041b2881328ad14256c6239a2e9e99a00a2dd92972ef33db1006","ssdeep":"192:utoRtmstUUewxAbT413PD3M1P9ClBf7dpnrxDxVn:S6msWUJubU13b3K85D","tlshash":"5012bf524be5867552a8937fbc28b742832207bc58d33006bff94971c3d653af992cb4","first_seen":"2025-09-11T10:34:36.032834Z","last_seen":"2026-07-22T23:22:13.607894Z","times_seen":19,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/assets/js/main.js","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:22.982Z","timestamp":1782600622982,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreodex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 11:31:20 GMT","end":"Thu, 20 Aug 2026 11:31:19 GMT"},"fingerprint":{"sha1":"23:96:9B:B6:EE:BF:E9:EF:70:B8:C4:29:96:18:65:69:78:D6:29:7C","sha256":"32:B7:F4:BD:F2:7C:2A:E4:9C:76:77:32:F6:51:FF:10:1F:CB:E7:45:B5:FE:46:B4:84:EE:BD:7C:90:31:67:BB"}}},"request":{"raw":"GET /assets/js/main.js HTTP/1.1\r\nHost: oreodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oreodex.com/\r\nCookie: JSESSIONID=55E37ACE68F454593DEC60C78E6F1146\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Fri, 29 May 2026 20:25:04 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/javascript;charset=UTF-8\r\npriority: u=3,i=?0\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JNeb%2BAict9a3JdqsL5sDoRBvuWTrq9XXC8VS2JK1BmUrsY2jloyrYldkRfSayeLoGhgH9AYoyHQSjbeEEeMd5vUJ03KIQbGjnEa5oXAgeLyJNjW13UK0lmQv0ZeDbg%3D%3D\"}]}\r\ncf-ray: a12802a5afadb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12495,"size_decoded":3822,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"996321d271369c93e3c429c15d147ce9","sha1":"816adfaef188c77d9965baf1030c1ff3b58bc90a","sha256":"f5287ff46040863d8cc9131e48625fb4d05ac3ddd7b2adb5ba830dead4a41138","sha512":"53944d2406eb1d15248c81ff0d374371264e9d82c89a50a3d013d3e7b764c3da3e418f4e72ee5263eb27e3fefb2e4eb9d4b7981686003dddb0234fa6aa0e033a","ssdeep":"192:GVH2ZcNxO8zKAXEWOho7Y/YJYScEElXRe0wlWORz8:GPKlo7s8RElXRnwlWsw","tlshash":"cb4251a4b220199a813b337aaabb5645f7381017d342d74cbd6c1cd21ff248599d3e6f","first_seen":"2026-05-14T12:20:58.121638Z","last_seen":"2026-07-22T23:22:13.638276Z","times_seen":16,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=XRPUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.164.231.206","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.857Z","timestamp":1782600623857,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=XRPUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://oreodex.com/\r\nOrigin: https://oreodex.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1197\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 40370349-d53b-4541-aaf4-b5669b8bac1c\r\nx-mbx-used-weight: 12\r\nx-mbx-used-weight-1m: 12\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 410991d185a8360cd416b5fbcf493074.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: 9QTuJFtbBzs8KkrGAafHiJYAsPv3KHWUjEvJ9TwIRBPuVxPrSRqcfQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4009,"size_decoded":2121,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1f84315e15781d9ee5fb92f98a5bebca","sha1":"d09cf1483d5577373ed804974a1ec5e76c89279a","sha256":"0ad3d8bc92e13d58722d31b774864be0a641735b4f58dd7147a94d2606384d8a","sha512":"e97eeccbfbf212041eb16c133e3f79d9829d86e5676c0bc9e6fdbd79c6466bd5bf94c525466169a1dc1b4082cb72f7faf4107691bad0863e63f796baf1a636c6","ssdeep":"","tlshash":"a58191410a90c574fa3a8f582399b9a5653a301fafcb1fc895a1796f78f3071564cf24","first_seen":"2026-06-27T22:50:53.33026Z","last_seen":"2026-06-27T22:50:53.33026Z","times_seen":1,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:22.971Z","timestamp":1782600622971,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/swiper@11/swiper-bundle.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oreodex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 11.2.10\r\nx-jsd-version-type: version\r\netag: W/\"4816-00NTceTFOXSCfuleSHYg+tVGAkA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\nage: 10806\r\nx-served-by: cache-fra-etou8220067-FRA, cache-bma-essb1270035-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 4774\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18454,"size_decoded":5537,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (18199)","md5":"6408a7c2033ed72b31f850268bfa9a0a","sha1":"d3435371e4c53974827ee95e487620fad5460240","sha256":"74ca6aae5468dbc924790c3b4d219a089b90a34bad53a0f7ca3a73e73b6f5ab8","sha512":"b74b551224b5abe662f4380393eab59b8f9481d8aff978af27d66d0e4b4b6eaaa4271f0aedb97c6298b3245915136f52dbc15135b46c04841b8214ea9397cbf4","ssdeep":"192:CzmUJbiKne5JTLdKSme+jeF474nQ7p/l2GZb0Q5RfufKDvAYfg5faeesedOJxbpy:CSUbe5JndKW+Sa0ni24tnWfz4eNi","tlshash":"ce8256a45350182753274f374bb1cbb9e97444c20f9389ae91c0ee58d7facb9132f2a9","first_seen":"2025-06-28T16:11:53.618794Z","last_seen":"2026-07-24T08:01:55.004499Z","times_seen":25046,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":11,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.1.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:22.975Z","timestamp":1782600622975,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.7.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://oreodex.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oreodex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-155ed\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\nage: 832488\r\nx-served-by: cache-lga21978-LGA, cache-bma-essb1270036-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 580211, 103015\r\nx-timer: S1782600623.017178,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30336\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":87533,"size_decoded":30978,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-07-24T07:53:21.019312Z","times_seen":181650,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":5,"connect":9,"send":0,"wait":9,"receive":3,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/assets/landings/1/img/mobile/star-1.png","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.046Z","timestamp":1782600623046,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreodex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 11:31:20 GMT","end":"Thu, 20 Aug 2026 11:31:19 GMT"},"fingerprint":{"sha1":"23:96:9B:B6:EE:BF:E9:EF:70:B8:C4:29:96:18:65:69:78:D6:29:7C","sha256":"32:B7:F4:BD:F2:7C:2A:E4:9C:76:77:32:F6:51:FF:10:1F:CB:E7:45:B5:FE:46:B4:84:EE:BD:7C:90:31:67:BB"}}},"request":{"raw":"GET /assets/landings/1/img/mobile/star-1.png HTTP/1.1\r\nHost: oreodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oreodex.com/\r\nCookie: JSESSIONID=55E37ACE68F454593DEC60C78E6F1146\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Fri, 29 May 2026 20:25:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=5,i\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v9zMr1vGk5jCAvbnOqoQUpCXzvKVSoWtFlGvdWb%2Fo5iSgFDvuaAOiGJiAvGQRWoXOdLm16V%2BDUDQwmUPfN77FO69OJixvlr0yA%2FjxfOGS3lYmXPDz77Aixn0K1y4YQ%3D%3D\"}]}\r\ncontent-length: 1564\r\ncf-ray: a12802a60fd3b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1564,"size_decoded":2404,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 114 x 114, 8-bit colormap, non-interlaced","md5":"637eb9fe7a423586daa9b0d2972ac0d3","sha1":"4d646c621377ec2773e6a04d15c5cdf3e62ae969","sha256":"ef9abbcd201d7ceb62993ed327305aeeb0d9a75c12ef57bd1eae7874045cc68e","sha512":"31d4ec8a82e9e2a0ed54e97c881661a0c8840e223d0bc84e71a07875517010dba82ab8cea887d92650249950cbcde8198ebd2f93220b5ce51872e1f20e2bfef4","ssdeep":"","tlshash":"a031ba676825fa3571aedfe72113981c6db11f446d05d8874065cf3574078a7309b9c3","first_seen":"2025-09-11T10:34:36.116202Z","last_seen":"2026-07-22T23:22:13.612642Z","times_seen":19,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=DOGEUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.164.231.206","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.859Z","timestamp":1782600623859,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=DOGEUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://oreodex.com/\r\nOrigin: https://oreodex.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1136\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 9fcf0434-7707-4794-87c8-41012056173f\r\nx-mbx-used-weight: 10\r\nx-mbx-used-weight-1m: 10\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 410991d185a8360cd416b5fbcf493074.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: K12vPVmbjC3MmAtmpPOE6gKstRkShREh7zuvvU6O5M9Q2D0tRG4PDQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3993,"size_decoded":2060,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"0097800bd6415704867a9a2b7bbe2f7c","sha1":"8beb73faa632adf22b78e30d4d40ebcc7c09fb2d","sha256":"310962213a259f22010fb9ce3c1a36e29c1e0abbc93dde35612b8605dc86fad8","sha512":"561598eeb9ff32d3db036c9bdc1b9072ccdf0e6ebb3f2414ade201f2a41ad3c659b8e3e9878729ff1a5a3ff2126046b88fc8a9c539dc28eadfb64b8b1780e43b","ssdeep":"","tlshash":"b5815a90da5846a1f9f60d09ef95fd21a96b301b6fcb0ec884e2752f58f1072172cf25","first_seen":"2026-06-27T22:50:53.333982Z","last_seen":"2026-06-27T22:50:53.333982Z","times_seen":1,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/assets/css2/support.css","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:22.983Z","timestamp":1782600622983,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreodex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 11:31:20 GMT","end":"Thu, 20 Aug 2026 11:31:19 GMT"},"fingerprint":{"sha1":"23:96:9B:B6:EE:BF:E9:EF:70:B8:C4:29:96:18:65:69:78:D6:29:7C","sha256":"32:B7:F4:BD:F2:7C:2A:E4:9C:76:77:32:F6:51:FF:10:1F:CB:E7:45:B5:FE:46:B4:84:EE:BD:7C:90:31:67:BB"}}},"request":{"raw":"GET /assets/css2/support.css HTTP/1.1\r\nHost: oreodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oreodex.com/\r\nCookie: JSESSIONID=55E37ACE68F454593DEC60C78E6F1146\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Fri, 29 May 2026 20:25:04 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/css;charset=UTF-8\r\npriority: u=2,i=?0\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xrCHhrS9CoJifUABDv5FqK2saTduUYE5rvcV3a1whdUDwcMKkuMCaBfhEtJJ8BBx7%2BPYFXN%2BzS2OrkGCc020t01bWxcID%2FgV83VEZuKqX00wooOu5TQkv%2Bf0XOPiig%3D%3D\"}]}\r\ncf-ray: a12802a5afafb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11452,"size_decoded":3627,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"a240bcd090d87597a6de832e508b129c","sha1":"525dde4a49241385ed69ae476b0cb6db1232e232","sha256":"ad5b6cbace712a3248670887b18d8c824e07decbe4a218efa4546b062b419f77","sha512":"93b9ad0118ef26289771531ab620b25cf1485c20d1e3dfaaf1a263be4ee73b7ff6d7edd2b7d28e6fc18bdf6dd59651f5c546d9137b19830644df74a96c356c39","ssdeep":"192:2hWAqXNyGRfMAILoGIZ135Q1bW0htFHOzPyINFVo5QeUEM7B+Ey1GRuM/NqbTQXy:FyCVL15K6tyPOOCAqxo4nN8wk/gk","tlshash":"d4321254da61644661339f6abff18e0bdb1450138641c0eebbdd23990fb66ecc161edc","first_seen":"2026-05-14T12:20:58.147327Z","last_seen":"2026-07-22T23:22:13.597579Z","times_seen":12,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/assets/img/logo.svg","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.008Z","timestamp":1782600623008,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreodex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 11:31:20 GMT","end":"Thu, 20 Aug 2026 11:31:19 GMT"},"fingerprint":{"sha1":"23:96:9B:B6:EE:BF:E9:EF:70:B8:C4:29:96:18:65:69:78:D6:29:7C","sha256":"32:B7:F4:BD:F2:7C:2A:E4:9C:76:77:32:F6:51:FF:10:1F:CB:E7:45:B5:FE:46:B4:84:EE:BD:7C:90:31:67:BB"}}},"request":{"raw":"GET /assets/img/logo.svg HTTP/1.1\r\nHost: oreodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oreodex.com/\r\nCookie: JSESSIONID=55E37ACE68F454593DEC60C78E6F1146\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Fri, 29 May 2026 20:25:04 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=5,i\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g4T9gKpPurZ%2F2lWFSqDNXHZt%2F3lMv0tgeJ%2F936SyxtFRBX%2FdI6J5KXRqzibXmgePwclJZJRvgsLLMHe9dy5REh7rCUJwt6JDUVlc8fD2SOywzeJxzu52hETWDe1nPw%3D%3D\"}]}\r\ncf-ray: a12802a5dfb3b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2227,"size_decoded":1915,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"e82b9de2643dde872f671f7b2e349ec7","sha1":"fcddc76304c89a9a97160d1e34cfdbda7839bace","sha256":"cdafc53b2e1293468db1560bbbe01fd0355aa6f5b38b364756093cfd1392d8a3","sha512":"c098c42fa63c509e8cee1314c44f00ad646e9c01f942317ed6686e7264172c32f396461d541240bd7eede6a17fd176243ee0c907868d0b1b51f8b0241d642335","ssdeep":"","tlshash":"7b4188aeb2b011f8b55d43d189e28c7b263d1bab3b41c0948f786ea4c93147d4068ec7","first_seen":"2026-05-15T00:49:48.41097Z","last_seen":"2026-07-22T23:22:13.583119Z","times_seen":6,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/assets/landings/1/img/cosmo/cosmo.png","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.017Z","timestamp":1782600623017,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreodex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 11:31:20 GMT","end":"Thu, 20 Aug 2026 11:31:19 GMT"},"fingerprint":{"sha1":"23:96:9B:B6:EE:BF:E9:EF:70:B8:C4:29:96:18:65:69:78:D6:29:7C","sha256":"32:B7:F4:BD:F2:7C:2A:E4:9C:76:77:32:F6:51:FF:10:1F:CB:E7:45:B5:FE:46:B4:84:EE:BD:7C:90:31:67:BB"}}},"request":{"raw":"GET /assets/landings/1/img/cosmo/cosmo.png HTTP/1.1\r\nHost: oreodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oreodex.com/\r\nCookie: JSESSIONID=55E37ACE68F454593DEC60C78E6F1146\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Fri, 29 May 2026 20:25:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=5,i\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z%2BioahoEXrTkdnAGNT2qn%2FmpdS9RW34aADAR%2BiAmtMhGtVQx6U9H9IQmQrRaQvLMO9GdvZ4JSRp8aLbQQFTBMxUEa4tkX%2FZZJ%2BQBMN1vmJJulP%2BfBKiB90o8N2pglA%3D%3D\"}]}\r\ncontent-length: 158717\r\ncf-ray: a12802a5dfb8b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":158717,"size_decoded":159565,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 571 x 1165, 8-bit/color RGBA, non-interlaced","md5":"db1f69f415ddc11f11e010d203b712d8","sha1":"d45ad97c46a4c75bb1d8aed8d1c7c9c3c06bc9d0","sha256":"cbbcafaf1a3c00c298e4ebdcd97820ba8d51cb2a6ba775894a4be463fadeff20","sha512":"b942388c80a56a0662df2f8e14c8b5e213f01688a28ece241cf794c60e696b2b26692b01f10de9603b83b34cfc30fe7e58b6a1f64f5491c3c07430de966f04ca","ssdeep":"3072:MpmiXq/xBF/8a/9dHeeCary3ah4MhL/68BRr9Cm72qMnYS0b6frF:MpmiXOJ8s5OfCXdJBvfynbZ","tlshash":"fcf3121c07f6b71bb5852abb71e99b43a639d2cc43b8cf56653cf8a1e9e64c82210750","first_seen":"2026-05-26T21:59:31.202052Z","last_seen":"2026-07-22T23:22:13.600226Z","times_seen":10,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":163,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/assets/landings/1/img/6.png","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.035Z","timestamp":1782600623035,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreodex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 11:31:20 GMT","end":"Thu, 20 Aug 2026 11:31:19 GMT"},"fingerprint":{"sha1":"23:96:9B:B6:EE:BF:E9:EF:70:B8:C4:29:96:18:65:69:78:D6:29:7C","sha256":"32:B7:F4:BD:F2:7C:2A:E4:9C:76:77:32:F6:51:FF:10:1F:CB:E7:45:B5:FE:46:B4:84:EE:BD:7C:90:31:67:BB"}}},"request":{"raw":"GET /assets/landings/1/img/6.png HTTP/1.1\r\nHost: oreodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oreodex.com/\r\nCookie: JSESSIONID=55E37ACE68F454593DEC60C78E6F1146\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Fri, 29 May 2026 20:25:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=5,i\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pUdThBbKAQlEJlBPmjCb6jH5AiifG0Y4GGc1vJrtfX4134YKgkipaBfc7NKGfsjym302TSoWe0MPrZEORYiqptyGw9bsGchDoQ1FhdWn5hQKyQuK9z4BGUMZggTpug%3D%3D\"}]}\r\ncontent-length: 16167\r\ncf-ray: a12802a5ffc8b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16167,"size_decoded":17002,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 240 x 240, 8-bit colormap, non-interlaced","md5":"d059f136313dbfd7b19de137d292aa73","sha1":"890e11f5b660b83612207a2ad6de069ed19a6b95","sha256":"eeaba0a2098e0d6c2fddc253478ff38c0f0eadbc1fd2868e966813a806286916","sha512":"6a7d6dc467c00bbd6ce5bed580d2bd008fad93d0cfdf684e99b999c44cf2254b342ee4e8930415227ff79b15539a800d2d693f803bde3281ec0875e6cb809a60","ssdeep":"384:2zYHirtrV4/c3EtdkCWA/LrpFwCYFryAKbHPVpOa:2zYHmC/cUtdGAvQBzyD","tlshash":"7d72c0d225b23173fe9261cf698dd6a4a1105cd47a7674b87320b7cf29fabfe0814648","first_seen":"2026-05-14T12:20:58.115065Z","last_seen":"2026-07-22T23:22:13.635945Z","times_seen":18,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/assets/landings/1/img/mobile/back-right-top.png","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.038Z","timestamp":1782600623038,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreodex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 11:31:20 GMT","end":"Thu, 20 Aug 2026 11:31:19 GMT"},"fingerprint":{"sha1":"23:96:9B:B6:EE:BF:E9:EF:70:B8:C4:29:96:18:65:69:78:D6:29:7C","sha256":"32:B7:F4:BD:F2:7C:2A:E4:9C:76:77:32:F6:51:FF:10:1F:CB:E7:45:B5:FE:46:B4:84:EE:BD:7C:90:31:67:BB"}}},"request":{"raw":"GET /assets/landings/1/img/mobile/back-right-top.png HTTP/1.1\r\nHost: oreodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oreodex.com/\r\nCookie: JSESSIONID=55E37ACE68F454593DEC60C78E6F1146\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Fri, 29 May 2026 20:25:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=5,i\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sUPg5wie0xpNctM9VbbyS9Q3sF9oaIp5FSQi0WOhS3eMWLsp5rQdPtneNYj%2B1ooLc27c28AywVGuBTAsB%2FQENRi2EU1ayCqWRJa%2FdWsbU7l42Ql8WV7%2FjAnp6nZSmA%3D%3D\"}]}\r\ncontent-length: 52343\r\ncf-ray: a12802a5ffcbb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52343,"size_decoded":53186,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 418 x 639, 8-bit colormap, non-interlaced","md5":"00f0b2df5a8329dd2664684abb8370e0","sha1":"3446cfb6f3a07870ca2de3d55ae3bb510088720b","sha256":"da26d4471e46f2564349c529e736ce24239e9bfc4aa11992a715baf01c8582f5","sha512":"c783f5678a78d0c81e79c2d7ced16858ccd9d099da0b81b1abed4cf2cfb9d37c5f46f4b5b534d2eb0c0e0b2ed255ca4e388f850fd561610fec628c0e861d8d30","ssdeep":"768:+EdewU+h1iPW+gC23Zvg3aYQZzVmb1kGL4lJ/gSw8for2+rsPQk14HB24:9d11iPNgDJIK3ZJm6GL4lW11rHthf","tlshash":"6c33f19f423ecc61cfe6a038b78f9ef13c94c196643c958c555aceba1dd054d2a35a34","first_seen":"2025-09-11T10:34:36.114519Z","last_seen":"2026-07-22T23:22:13.562421Z","times_seen":19,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Manrope:wght@500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.275Z","timestamp":1782600623275,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:10 GMT","end":"Mon, 31 Aug 2026 08:38:09 GMT"},"fingerprint":{"sha1":"8A:2F:DC:6F:C0:09:07:D3:E5:9C:B7:EE:C2:C4:63:DC:59:36:B5:1B","sha256":"64:7C:E4:55:AB:5C:58:7E:89:F1:19:3B:95:DB:7B:4B:E6:75:42:2C:0C:51:2E:66:85:F5:BB:51:58:08:39:19"}}},"request":{"raw":"GET /css2?family=Manrope:wght@500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oreodex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 27 Jun 2026 22:50:23 GMT\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8576,"size_decoded":1359,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"36a4d80f865374c4e43c7cf3f185f17e","sha1":"3a481b0ace0746dbf4969e5b4577ca2fb6f42263","sha256":"c1fd31c0371bddd4d33b4867f559c050c3cbd40b49442c686192654ff1d62c33","sha512":"c48e66cda54788e66f5fe89aac9bd17c534979cc5a9d08c8702c0ac6c0c3de76d52ccdacd5a1af543d8ce0cf1013abd0a2b7557dfec5a051ed8790163745072c","ssdeep":"192:sJ8rV3118+4JlOV3MM8b/JGNV3TT80uJHYV3668hs:G+ME02EQJ","tlshash":"52029990002be804eb470cd677ce7e39ad4e61567451c5ba5bfe1cd8addbd222320b5e","first_seen":"2025-12-27T11:01:28.444816Z","last_seen":"2026-07-22T23:22:13.630706Z","times_seen":93,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/api/getLocale?v=2\u0026lang=en","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.424Z","timestamp":1782600623424,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreodex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 11:31:20 GMT","end":"Thu, 20 Aug 2026 11:31:19 GMT"},"fingerprint":{"sha1":"23:96:9B:B6:EE:BF:E9:EF:70:B8:C4:29:96:18:65:69:78:D6:29:7C","sha256":"32:B7:F4:BD:F2:7C:2A:E4:9C:76:77:32:F6:51:FF:10:1F:CB:E7:45:B5:FE:46:B4:84:EE:BD:7C:90:31:67:BB"}}},"request":{"raw":"GET /api/getLocale?v=2\u0026lang=en HTTP/1.1\r\nHost: oreodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oreodex.com/\r\nCookie: JSESSIONID=55E37ACE68F454593DEC60C78E6F1146\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nset-cookie: lang=en; Path=/; SameSite=Lax\r\ncache-control: max-age=10800, public\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: application/json;charset=UTF-8\r\npriority: u=3,i=?0\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lr6Ls7s7G9L6Kp3rSIODaXdhcZLCx7E3Ccm%2F1i%2Bzbcfylte5%2F%2FoqrO4JWBxD%2FykyThQHtHm61ETiGSGRj4exvxeGsNxTXOrDP%2F%2B2kr98p3fbMTIMF34mNnQ1vCcbag%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a12802a86805b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172151,"size_decoded":57030,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"14a42c1e92f30b2066bd8fd3eca25dc1","sha1":"f671f499776a731e3f14f28582f68bf4636411f0","sha256":"9f04cb4422baf8e0b82a15d1207d2d150063ec1e92afe1b51aca858ddcc300b1","sha512":"0a147964884d36875c25d918ca10679f5d97a47eceee491dbfeed1b1104dbdae99e872c3e01edd1fd4851f56c636050fc2b45b82e76631a4608caa690cb97e7f","ssdeep":"3072:cYGYaRB83OOxhYJPPY6vXROme+7WacJJ/lZDRAmdhn:cnRROrYJPPYFmDijfDRlhn","tlshash":"a8f31a1b961f26730bc603a17ceb5dc876bdb14426e1e42939ed80ac239de8cc377566","first_seen":"2026-05-26T21:59:31.132449Z","last_seen":"2026-07-06T04:05:46.482604Z","times_seen":6,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":131,"receive":162,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-27T22:50:22.332Z","timestamp":1782600622332,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreodex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 11:31:20 GMT","end":"Thu, 20 Aug 2026 11:31:19 GMT"},"fingerprint":{"sha1":"23:96:9B:B6:EE:BF:E9:EF:70:B8:C4:29:96:18:65:69:78:D6:29:7C","sha256":"32:B7:F4:BD:F2:7C:2A:E4:9C:76:77:32:F6:51:FF:10:1F:CB:E7:45:B5:FE:46:B4:84:EE:BD:7C:90:31:67:BB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: oreodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nset-cookie: JSESSIONID=55E37ACE68F454593DEC60C78E6F1146; Path=/; HttpOnly\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/html;charset=UTF-8\r\ncontent-language: en\r\npriority: u=0,i\r\ndate: Sat, 27 Jun 2026 22:50:22 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ycT0d%2FGETVkKHeWuh0veQoB5AD3OvF3stOHbSJLsk1yYb0WY8WBIGQo8RLVOB2zhyvzFdTGZsl%2Br%2FcnEafNJY6KomGlpWV0SI2Nu4iafpLX6DY6B1k87G9fwUzFgkg%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a12802a1df62b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Chart.js","description":"Chart.js is an open-source JavaScript library that allows you to draw different types of charts by using the HTML5 canvas element.","website":"https://www.chartjs.org","common_platform_enumeration":"","icon":"Chart.js.svg","categories":["JavaScript graphics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":117741,"size_decoded":23282,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (413), with CRLF, LF line terminators","md5":"2b3738ba41e84df03c3d31d7e4103135","sha1":"8928e9694ed72354a45ef670ae457ddc040c6458","sha256":"13300f7e19e70ff8a36c67cb61040f8d7765e40fc524bbd54d5b647bb5ab5f21","sha512":"f64e33db93bb4b733e6e91102a0785e4ea1035be94a4f29078d011e2c0ccff97be7242791a6c37939730920f0797c65a9569e23348138ea5f39c968780c7fa26","ssdeep":"768:AbqlqCMO3X/6K6fo/IIxzaQ0wLM539iqQGzcAM9uqUCVWeCbfZkckL1UPHn:FssIIxuAM59jFzc59uqU8WeYfi/L4Hn","tlshash":"31b3c525a5e2113a0033529a9ba7671dffa56143d24690187fec43a71ff6c48e873fac","first_seen":"2026-06-27T22:50:53.343174Z","last_seen":"2026-06-27T22:50:53.343174Z","times_seen":1,"resource_available":true,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":15,"connect":23,"send":0,"wait":131,"receive":160,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/assets/img/coins/BTC.png","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.019Z","timestamp":1782600623019,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreodex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 11:31:20 GMT","end":"Thu, 20 Aug 2026 11:31:19 GMT"},"fingerprint":{"sha1":"23:96:9B:B6:EE:BF:E9:EF:70:B8:C4:29:96:18:65:69:78:D6:29:7C","sha256":"32:B7:F4:BD:F2:7C:2A:E4:9C:76:77:32:F6:51:FF:10:1F:CB:E7:45:B5:FE:46:B4:84:EE:BD:7C:90:31:67:BB"}}},"request":{"raw":"GET /assets/img/coins/BTC.png HTTP/1.1\r\nHost: oreodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oreodex.com/\r\nCookie: JSESSIONID=55E37ACE68F454593DEC60C78E6F1146\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Fri, 29 May 2026 20:25:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=5,i\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XuInH%2Fu8M41TpKT%2FK9UGKYH3C2eNHX6vqcCsr0qbLeMY1MPCgh7OTjIXvqbzzWuhr9n4BN3cZ7s4UEWW7QrUIzausP83UlMm86pN4%2B2d4V1RaA8mFaIUIoQQYW5uUw%3D%3D\"}]}\r\ncontent-length: 1125\r\ncf-ray: a12802a5efbab51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1125,"size_decoded":1965,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"75f196b437f9d87fdc198bc904c66c4c","sha1":"79b6e300761520f7ad41856878999dbc1fafc137","sha256":"f72b9a231c13012613217eec2bec27b923204e8c6cebc2b2ae51485d2b5d679d","sha512":"de4633885db64868d13a4a4699631acf0b00af0b2cda542c5be26b4dce3a1f8b4e071949280ddd9f3c59eb7a236d5d8d7003ffcb9633e0749fb62d46c780ac60","ssdeep":"","tlshash":"2421f9d3df09102ec4029c9cd4730c6bcc287a963410445b5f7c823fcc0b6496864b67","first_seen":"2023-05-07T19:16:41Z","last_seen":"2026-07-23T22:16:33.479778Z","times_seen":1795,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=BTCUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.164.231.206","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.851Z","timestamp":1782600623851,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=BTCUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://oreodex.com/\r\nOrigin: https://oreodex.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1399\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 0f901bf2-16f6-4c18-8419-7e6807735ee4\r\nx-mbx-used-weight: 2\r\nx-mbx-used-weight-1m: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 410991d185a8360cd416b5fbcf493074.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: eZo_YH8-x88zKGVU-BvCio5vPIrxWcBuSImz62qsBTetkDqUF4RhnQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4267,"size_decoded":2321,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"25513ca41693654db4fdd9795c896beb","sha1":"d1823725905586c77932753bfddee9f7e8f3de34","sha256":"2b8a13014f5cd86a59635ec80bc36a9b49b29b77c5f70d0dc0ed17180f01e357","sha512":"8a996623db6537cff78f780c28cbcafc7bda0e52b839c02da6c5a0ea98518d9dfeed710161c6bcb3eae12ca4ec3af726379c50802519ca8d51b0bc2cb552cc14","ssdeep":"96:b8dZEzxE8sz9vbNIk3IYwYW3RWnsTMMkbn7Y1qnQYrQrqTx7yw5HdJeJGiJxsxtB:b8d0xE8spvbNIk4eW3RUsTMMKn7Y1Y86","tlshash":"b5914cd11bb452a4fe3a480923a6b955797b701b9fcb0edca4d135378be03b25a4c339","first_seen":"2026-06-27T22:50:53.345079Z","last_seen":"2026-06-27T22:50:53.345079Z","times_seen":1,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":4,"connect":9,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/assets/landings/1/img/mobile/front.png","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.041Z","timestamp":1782600623041,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreodex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 11:31:20 GMT","end":"Thu, 20 Aug 2026 11:31:19 GMT"},"fingerprint":{"sha1":"23:96:9B:B6:EE:BF:E9:EF:70:B8:C4:29:96:18:65:69:78:D6:29:7C","sha256":"32:B7:F4:BD:F2:7C:2A:E4:9C:76:77:32:F6:51:FF:10:1F:CB:E7:45:B5:FE:46:B4:84:EE:BD:7C:90:31:67:BB"}}},"request":{"raw":"GET /assets/landings/1/img/mobile/front.png HTTP/1.1\r\nHost: oreodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oreodex.com/\r\nCookie: JSESSIONID=55E37ACE68F454593DEC60C78E6F1146\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Fri, 29 May 2026 20:25:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=5,i\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wSklwWW%2F38F9a8cCJc2EnFOud4P1OprKYmZSiucCxCI0f6l0uS0OqnAFlZRZnNdxQMrwd6FJ%2BJM387cB%2BIERfloSerV%2FBe%2B5Yts8CLZ5HxP72Ze9cSLUkwrcz8FXLA%3D%3D\"}]}\r\ncontent-length: 54566\r\ncf-ray: a12802a60fceb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54566,"size_decoded":55411,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 618 x 498, 8-bit colormap, non-interlaced","md5":"198472b171b8300a137aa8141e7aa706","sha1":"d5ad910775ff9bc4b719cb6ee70518d88a51207c","sha256":"9fbc1a2cf62a564a3a8011a34b696654c48b947825900d763da95ff0ef990810","sha512":"8cc803dbc81862e106e184083e60cead70ef854421559366237df746cad94f33758fbee954c10a4b0b7c11e7e9703d4a6477cc31d1fd62716bf36f7d7b07c794","ssdeep":"1536:RGw1iDGubRLeSIwnveB6DINo16bYWo1KzJj67Du9CUS:4w1UtbRLeSIwnfImnxW+jUS","tlshash":"e43302ded328ddc5f53c8f2ad4b67804626bd1c9fe9a4e1762442137d32b51120363ba","first_seen":"2025-09-11T10:34:36.025182Z","last_seen":"2026-07-22T23:22:13.611696Z","times_seen":19,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":107,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/assets/landings/1/img/mobile/star-2.png","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.047Z","timestamp":1782600623047,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreodex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 11:31:20 GMT","end":"Thu, 20 Aug 2026 11:31:19 GMT"},"fingerprint":{"sha1":"23:96:9B:B6:EE:BF:E9:EF:70:B8:C4:29:96:18:65:69:78:D6:29:7C","sha256":"32:B7:F4:BD:F2:7C:2A:E4:9C:76:77:32:F6:51:FF:10:1F:CB:E7:45:B5:FE:46:B4:84:EE:BD:7C:90:31:67:BB"}}},"request":{"raw":"GET /assets/landings/1/img/mobile/star-2.png HTTP/1.1\r\nHost: oreodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oreodex.com/\r\nCookie: JSESSIONID=55E37ACE68F454593DEC60C78E6F1146\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Fri, 29 May 2026 20:25:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=5,i\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v09Gv6r0jzmOyATr6pVDzUKUyhxhNsf7u4204wjPX2z0I3UAEeV6F93o2FYsySjpGfK2tUqrVfn7UIargi8p2go1C8TnCDo8Gfve8EizYXBg26MIc%2Bipkqag1OgaEQ%3D%3D\"}]}\r\ncontent-length: 1476\r\ncf-ray: a12802a60fd4b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1476,"size_decoded":2312,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 69 x 69, 8-bit colormap, non-interlaced","md5":"0d15608fd4c8ab0ecd7a639b47b422e9","sha1":"a85f29ef3346fce496e9ed3d766d8d447ab2b8fb","sha256":"206d0c42333f7a1fa9183e6ef2a1791bad091ecc21a78a797102427d59d7aff9","sha512":"5c45eac3d6e891d850ce20902dbc3592eadfe9b8c5213f8fc586c1a2bd96e1d7f2174b5bdde7da6b609c2d9ec09c2a61473b3d43b512ee7b0eea239f8c39c982","ssdeep":"","tlshash":"df31e94fcc1c337510050c2ef914aa192de370a313519cd0c10f58e9f57b5bb1805d7a","first_seen":"2025-09-11T10:34:35.957043Z","last_seen":"2026-07-22T23:22:13.566675Z","times_seen":19,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=TONUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.164.231.206","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.860Z","timestamp":1782600623860,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=TONUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://oreodex.com/\r\nOrigin: https://oreodex.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1113\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 0d95f064-111f-4460-b6a8-532750704486\r\nx-mbx-used-weight: 14\r\nx-mbx-used-weight-1m: 14\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 410991d185a8360cd416b5fbcf493074.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: w_-eZ4Z7nWKiAGHAzBOL7hL1LL0RWZnHnhByisj-9QAH44dN9Hxz6Q==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3848,"size_decoded":2037,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"03c6206576f069f027e8a3b3db468c6e","sha1":"73c90ba016c653ac909015470367141636fee58a","sha256":"fee4de2499eecb3d6fc8409ee790e7aafb18ba76ce6b162936eacc5636382918","sha512":"b17d4b029de58b8c6ddcd7cc940c75dd28e7ce8f480be666ff94991ef64b2e2a64db6ca73ec440c1d91017c4d7aefe7d8b38c1e987183e916ad482f698d18f5f","ssdeep":"","tlshash":"0a813f121a8842b0f97a4d1d3393b926a97b305aaecf1fc9959179237cf1072560cf75","first_seen":"2026-06-27T22:50:53.349369Z","last_seen":"2026-06-27T22:50:53.349369Z","times_seen":1,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=TRXUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.164.231.206","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.861Z","timestamp":1782600623861,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=TRXUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://oreodex.com/\r\nOrigin: https://oreodex.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1069\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: f0004697-9798-4030-b348-84cde8274da3\r\nx-mbx-used-weight: 16\r\nx-mbx-used-weight-1m: 16\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 410991d185a8360cd416b5fbcf493074.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: tcnF40vWkm7C1A0SSWwP0JV69FE3GzjaCXSghJzjVj8yCVfCVHdMwA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":3953,"size_decoded":1993,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"bb86f2a149ad14c3b91e5eeecc87a400","sha1":"2684729edcaf8cd328357ac231b1ca4be22a8e2d","sha256":"82759fdfc60aa2f9e3c0be5e8f8e1ff786033f1cbbe6a214efdce58581308b8d","sha512":"0379c7502d9b7fd7d38afd0214e12bc684c7ea02f11a5d730b3048d033cf90e8c8354de7ddff4f3f075f54b70ec4213cec9e3f2f6ba9f409a9770932259f6ea8","ssdeep":"","tlshash":"40817e710a8d42a4fb3e88092395f8626a7b341bbfcb0fd989e5392318e1571578cf74","first_seen":"2026-06-27T22:50:53.350579Z","last_seen":"2026-06-27T22:50:53.350579Z","times_seen":1,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/assets/landings/1/img/mobile/main.png","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.045Z","timestamp":1782600623045,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreodex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 11:31:20 GMT","end":"Thu, 20 Aug 2026 11:31:19 GMT"},"fingerprint":{"sha1":"23:96:9B:B6:EE:BF:E9:EF:70:B8:C4:29:96:18:65:69:78:D6:29:7C","sha256":"32:B7:F4:BD:F2:7C:2A:E4:9C:76:77:32:F6:51:FF:10:1F:CB:E7:45:B5:FE:46:B4:84:EE:BD:7C:90:31:67:BB"}}},"request":{"raw":"GET /assets/landings/1/img/mobile/main.png HTTP/1.1\r\nHost: oreodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oreodex.com/\r\nCookie: JSESSIONID=55E37ACE68F454593DEC60C78E6F1146\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Fri, 29 May 2026 20:25:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=5,i\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8uZZ6WSb%2B0F86zGknwCw7skcldvqMfQrVCrNtxRvRprov1r8Zr3Fq0YDYUieccYYbymCgX%2Bo1guVXOhCnjn4tmNAic69VdLQfpKrvB2n2Lu6om3ZI2O2V9MEcioCWA%3D%3D\"}]}\r\ncontent-length: 169139\r\ncf-ray: a12802a60fd2b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":169139,"size_decoded":169979,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 502 x 956, 8-bit/color RGBA, non-interlaced","md5":"e9d1d3082bc0d63c01787e5cd908b9e6","sha1":"ccdfec83cd78c5e45ba371be6b343c76f96255a6","sha256":"9cc925c375b8fcc228ecadfeafa02307f78e805ccac409f1476dccb0bb209d09","sha512":"bd8989aa7a1a15fb7373c685180a80f8b4413fee8b58992c37b5087ed8370f38fc29a3d18eca4e40518572395356f63a9066a1f97a0245281da768af1ea4027c","ssdeep":"3072:REl0Lv0rTRhrzHhT8z9Bn+QmNaFvDHLAYAVh1+dCnzaTTnGRpoReo+:REGgRhrzB4z9x+QUMXAhzaTTleo+","tlshash":"14f312212add6504fe3920b2ee3f491671383de5e564883196c84ce7d1b06cc8ea5edf","first_seen":"2026-05-14T12:20:58.10167Z","last_seen":"2026-07-22T23:22:13.592817Z","times_seen":11,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":164,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/assets/img/coins/TRX.png","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.029Z","timestamp":1782600623029,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreodex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 11:31:20 GMT","end":"Thu, 20 Aug 2026 11:31:19 GMT"},"fingerprint":{"sha1":"23:96:9B:B6:EE:BF:E9:EF:70:B8:C4:29:96:18:65:69:78:D6:29:7C","sha256":"32:B7:F4:BD:F2:7C:2A:E4:9C:76:77:32:F6:51:FF:10:1F:CB:E7:45:B5:FE:46:B4:84:EE:BD:7C:90:31:67:BB"}}},"request":{"raw":"GET /assets/img/coins/TRX.png HTTP/1.1\r\nHost: oreodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oreodex.com/\r\nCookie: JSESSIONID=55E37ACE68F454593DEC60C78E6F1146\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Fri, 29 May 2026 20:25:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=5,i\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d54a%2BNg0EkV6YE8nOogyfQcWVpTYjqEc9ZUBfPW%2Fk12KLZlBz%2FdTQPczqmeJ3pcX9EK9G7Qlxvvbhz1C2BriQWfR5gFfjIIKi8rxxRqSGOvoNB%2FX4AGVwEix6JpE%2FA%3D%3D\"}]}\r\ncontent-length: 1315\r\ncf-ray: a12802a5efc2b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1315,"size_decoded":2159,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"79cbcbdfcc32e9ed14054fb9f306d76b","sha1":"d0fe46ecc0664340d7027500d23cb6ee7b8de4f6","sha256":"ac3824adc2a37e25d5e63fe30c4de623c0985730450f3e12b58bcc58677d107d","sha512":"98eb00b634f4214e5d546aff3c51c6e889a337ed9e9a59d96b2dc189bb822352d01d2d53e02db22255c2c3f44836ce30c52c8e22199eca10c8e431d17560cedd","ssdeep":"","tlshash":"1f21f8b87b5d652cc209c890e8364aa77098f9ae0512041e3830ec3dfee098be2567c3","first_seen":"2023-05-04T03:36:11Z","last_seen":"2026-07-23T22:16:33.468599Z","times_seen":1088,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/assets/landings/1/img/2.png","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.031Z","timestamp":1782600623031,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreodex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 11:31:20 GMT","end":"Thu, 20 Aug 2026 11:31:19 GMT"},"fingerprint":{"sha1":"23:96:9B:B6:EE:BF:E9:EF:70:B8:C4:29:96:18:65:69:78:D6:29:7C","sha256":"32:B7:F4:BD:F2:7C:2A:E4:9C:76:77:32:F6:51:FF:10:1F:CB:E7:45:B5:FE:46:B4:84:EE:BD:7C:90:31:67:BB"}}},"request":{"raw":"GET /assets/landings/1/img/2.png HTTP/1.1\r\nHost: oreodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oreodex.com/\r\nCookie: JSESSIONID=55E37ACE68F454593DEC60C78E6F1146\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Fri, 29 May 2026 20:25:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=5,i\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jydTfPtIEPulIMlI2dNGgTlvFb2PrtfmUQJ2VY1D7QjXXZPvIUV1BnsT0E9D6FJsVS8RensKVeoZsUODqrqMv3mIzBkdjvqhNMof1vdGD8WwyG1LVxHnjhYBczzFFw%3D%3D\"}]}\r\ncontent-length: 17066\r\ncf-ray: a12802a5ffc4b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17066,"size_decoded":17901,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 240 x 240, 8-bit colormap, non-interlaced","md5":"9362d61cc6cea6ad5751c3f4ce4465ae","sha1":"4bea976afb8b58a3720105cd431edb42bbe54305","sha256":"40c86423aa198384934541ec440b115fcd682a2dfcf5205d35c14fb31dd1d179","sha512":"796a319ed8e23994ff773bcc49af63fd13df7092d1fe54221427b631686e62dfa9cae8d5f2c91254b444e05c40985e4512d177aadf644eb692cd624fd6cee7f5","ssdeep":"384:H51L1dxOdK0g8fQpXseqj5xsMKbPmKtzyiGT6:H51TxOdHgh5yYbe+yzT6","tlshash":"df72d1c048dc607c669ed0352f9044a694da2e0cc7bdd7a15147be27537b4639f5bac3","first_seen":"2026-05-14T12:20:58.07355Z","last_seen":"2026-07-22T23:22:13.591279Z","times_seen":18,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/assets/css2/root.css","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:22.978Z","timestamp":1782600622978,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreodex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 11:31:20 GMT","end":"Thu, 20 Aug 2026 11:31:19 GMT"},"fingerprint":{"sha1":"23:96:9B:B6:EE:BF:E9:EF:70:B8:C4:29:96:18:65:69:78:D6:29:7C","sha256":"32:B7:F4:BD:F2:7C:2A:E4:9C:76:77:32:F6:51:FF:10:1F:CB:E7:45:B5:FE:46:B4:84:EE:BD:7C:90:31:67:BB"}}},"request":{"raw":"GET /assets/css2/root.css HTTP/1.1\r\nHost: oreodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oreodex.com/\r\nCookie: JSESSIONID=55E37ACE68F454593DEC60C78E6F1146\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Fri, 29 May 2026 20:25:04 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/css;charset=UTF-8\r\npriority: u=2,i=?0\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q%2BCkUaNq34y94omp%2Fpdknc%2B6qq0TvFU3WPFq7qW2bl9mBA0T4cwvy7lxbvApJ4OFfkBhEOEV%2B9g%2F2CefeKNbuRZA5TmhgfL817xRnoRFmKJ5EFwYYJ6XpzK9tghMpQ%3D%3D\"}]}\r\ncf-ray: a12802a5afabb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53622,"size_decoded":12098,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"305c447699f1b17756001f0f7623b92e","sha1":"9529dbef62b5c8fc300eed35decd3e227fc7479b","sha256":"713fbeedb0b26410e66a050ea549cf2e3afdef1323bdd75132a30b02ddb81d46","sha512":"f02a21776aac6f3b6b603c6bf5e65ab87079c5c1447fdedd89fa0a1690ae38fd90b7423369300b4be3d877cc318010573e3a94f2b1ae31502b99327a1296c85b","ssdeep":"384:oy1n7k5VsUMMnGgVDbJeo2KV2gyFhxBYVfGhPkviTAAE6s4ruKEXt+4:oy9gJ5aKVjuQVfEkKTm6s4ruTXt+4","tlshash":"82331164da0605187236a789bbd3ca4fe7b95003db02132afff2108a5f852ddd671f98","first_seen":"2026-05-14T12:20:58.158927Z","last_seen":"2026-07-22T23:22:13.63154Z","times_seen":12,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":107,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/assets/landings/1/img/cosmo/startafter.svg","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.018Z","timestamp":1782600623018,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreodex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 11:31:20 GMT","end":"Thu, 20 Aug 2026 11:31:19 GMT"},"fingerprint":{"sha1":"23:96:9B:B6:EE:BF:E9:EF:70:B8:C4:29:96:18:65:69:78:D6:29:7C","sha256":"32:B7:F4:BD:F2:7C:2A:E4:9C:76:77:32:F6:51:FF:10:1F:CB:E7:45:B5:FE:46:B4:84:EE:BD:7C:90:31:67:BB"}}},"request":{"raw":"GET /assets/landings/1/img/cosmo/startafter.svg HTTP/1.1\r\nHost: oreodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oreodex.com/\r\nCookie: JSESSIONID=55E37ACE68F454593DEC60C78E6F1146\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Fri, 29 May 2026 20:25:04 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=5,i\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zjJdzI4%2Br6jbJqgTzQ8OBNM%2FtOKlYPTDIIJJHuxKgiezqPn9h0UhV0jo5MKPA7cBcZaRC9E8h%2BHWwMGGpiO9wbLrN46Y2xk0YeUL5k0o%2Fe7dlDimIYorVwGH%2BUBpBA%3D%3D\"}]}\r\ncf-ray: a12802a5dfb9b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5771,"size_decoded":2706,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"613cf9c4bc2e8909a213de2c41b50f41","sha1":"29560685365b1996be37255bccf82ec0e2b01e78","sha256":"16b8087f4a6efee56c28bdf53445d7deeb5da1a34c7a670954f814bd12c6a0aa","sha512":"2fab4452b0b8076ab3352b46af921f2c9b7d6c0f83a4763bff6a7686ff6f4b3ff5b0e4aa1844a6f16d85c3fec6a13c2573bc062b3b4a2967ff9e8a3594ae37fd","ssdeep":"96:cWKAmvG6h5W5q0SXbO75L1RYiHdRh8NXW2rhGxmUsE:cWKAmv75cqTXbOdLn99h2rhg5sE","tlshash":"cfc156fc1b0448882de96bf53f1c9a96442782ea055b1b59d94b2f5c114681ffccbd83","first_seen":"2026-05-14T12:20:58.122989Z","last_seen":"2026-07-22T23:22:13.63227Z","times_seen":11,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=BNBUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.164.231.206","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.853Z","timestamp":1782600623853,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=BNBUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://oreodex.com/\r\nOrigin: https://oreodex.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1218\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: a0723c00-f1a4-4e92-be0f-29e40b506c12\r\nx-mbx-used-weight: 8\r\nx-mbx-used-weight-1m: 8\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 410991d185a8360cd416b5fbcf493074.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: WZbZAVVyQbrYHvm0f4p2RJdHdM3O_uxkFkZoioIRQQ4lIsgUFBGHmg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4053,"size_decoded":2140,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"2d058a6e614e0e613532fa8ca38d1b63","sha1":"131a02148741a2cc9ac49c2cf0566a959e8a7ddb","sha256":"7c2c49a4578103015c79cb9e0046df0502aac2935a53a7bd487595bbbe600cb2","sha512":"d9ab42a49f05be02281942d049c5cc4b23ce9aef64a115a46468031cdff27f2349cd160af2efdf5f6529851d858ca6257a350a5c04730620f15e8b8afc767a5a","ssdeep":"","tlshash":"7e81ae751f9c8290fa768c0933d1b86da9ab309aafdf0cd8b590f56348f14710e1c769","first_seen":"2026-06-27T22:50:53.362776Z","last_seen":"2026-06-27T22:50:53.362776Z","times_seen":1,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":1,"connect":8,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/assets/landings/1/img/cosmo/startbefore.svg","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.015Z","timestamp":1782600623015,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreodex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 11:31:20 GMT","end":"Thu, 20 Aug 2026 11:31:19 GMT"},"fingerprint":{"sha1":"23:96:9B:B6:EE:BF:E9:EF:70:B8:C4:29:96:18:65:69:78:D6:29:7C","sha256":"32:B7:F4:BD:F2:7C:2A:E4:9C:76:77:32:F6:51:FF:10:1F:CB:E7:45:B5:FE:46:B4:84:EE:BD:7C:90:31:67:BB"}}},"request":{"raw":"GET /assets/landings/1/img/cosmo/startbefore.svg HTTP/1.1\r\nHost: oreodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oreodex.com/\r\nCookie: JSESSIONID=55E37ACE68F454593DEC60C78E6F1146\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Fri, 29 May 2026 20:25:04 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=5,i\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v9O9z6MzsxBek3rcoJ2LBJ34CTKkUOXifRHMO79fkx8%2FJr8oMwFraHIoUzB61SYqOCt3MppOnIri481zTybdoqcSRkrcvdFhLlUATdvNYinidG1Lk8SfCbYrd1KkcQ%3D%3D\"}]}\r\ncf-ray: a12802a5dfb7b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6592,"size_decoded":3438,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"746e946f6ba5a90596874af9fe06948f","sha1":"fafa727278912e386720440a84a7362b9607eba1","sha256":"03dc73e8e006beb75775042844856ddc2924e7d3d684ff14a64562c8148e9d02","sha512":"eef49cef86c8ea2192a3855af6b84003806a243c9f3ec1fc92292b9061eb358ab7ad64b39bb9e062fb53f576434338df647b4b3c5685e7c3ed78fb7e9688c58e","ssdeep":"96:clAdCvwnLBQuXWIBUizekIUTBVP64+O+iSI52+R60TOh+l+qC6i6EVkWa+7fro:clKCmLBv/FdVz+PI52GnGx6i6Eho","tlshash":"b4d194ed3f1046d4cc895afaef299289ec6ad4e15e9c1da4d21cdf0c908142dae87953","first_seen":"2026-05-14T12:20:58.112717Z","last_seen":"2026-07-22T23:22:13.601194Z","times_seen":11,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/assets/img/coins/ETH.png","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.021Z","timestamp":1782600623021,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreodex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 11:31:20 GMT","end":"Thu, 20 Aug 2026 11:31:19 GMT"},"fingerprint":{"sha1":"23:96:9B:B6:EE:BF:E9:EF:70:B8:C4:29:96:18:65:69:78:D6:29:7C","sha256":"32:B7:F4:BD:F2:7C:2A:E4:9C:76:77:32:F6:51:FF:10:1F:CB:E7:45:B5:FE:46:B4:84:EE:BD:7C:90:31:67:BB"}}},"request":{"raw":"GET /assets/img/coins/ETH.png HTTP/1.1\r\nHost: oreodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oreodex.com/\r\nCookie: JSESSIONID=55E37ACE68F454593DEC60C78E6F1146\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Fri, 29 May 2026 20:25:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=5,i\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AtzEKCnGDHul%2BWvcrMZnFxavuNLFfElf4iRLvOIz0NRXGGmG51KUrzSEvc2xeJQJlJ3oPKiJMjTkA3XH1kp5o3nEi%2BNEvQb3WYF%2BOf%2BMC0LVPtP0c9tx4gaLTGBdMg%3D%3D\"}]}\r\ncontent-length: 1100\r\ncf-ray: a12802a5efbbb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1100,"size_decoded":1942,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"8658d5935ab59ee39d15c39226279d46","sha1":"27463866eb9fa6fe4b6d2bd2cd3d6fd88392cb43","sha256":"595a7c97f329934d40fa297958ccbb31d3cd101c2965b02a32a7c96fd49c9e11","sha512":"0179fd67c6baa7d46fba32986a8f6fe1586f2d9d3c57161bc33ecae609d6e608e8d9bfcdad0459bf41ba087843955a45ce5daca8ea223cb33138de6b4c8b13db","ssdeep":"","tlshash":"f211b6b64261eec7905c8a22da820b38ed2d9718f01c3f06ef73efb39225b045105d0a","first_seen":"2023-05-25T23:01:30Z","last_seen":"2026-07-23T22:16:33.497656Z","times_seen":1813,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=ETHUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.164.231.206","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.852Z","timestamp":1782600623852,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=ETHUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://oreodex.com/\r\nOrigin: https://oreodex.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1317\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: f0004697-9798-4030-b348-84cde8274da3\r\nx-mbx-used-weight: 4\r\nx-mbx-used-weight-1m: 4\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 410991d185a8360cd416b5fbcf493074.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: BGX1-z2_W8eYk696buWcoX7zFyrlmc69nExhdSgUgQ686mfOGA88Vg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":4189,"size_decoded":2239,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"ef4331c2d83b8af82a8b39014c986ceb","sha1":"c4184255fe50abbfb1654512bd4443d5287c99ed","sha256":"89cf568b57cf5b013826ff41c312b04e396dfee672fa70c3cc9390e4c57b2858","sha512":"89f4db9e098bad4c990cf9406c0121d1026a1021d8a06312422a860ab58a9e4d5108b55df77d30992cc45b9f18ad038f437522d2762ba9cd3acd0ba984d5893e","ssdeep":"96:bXezDAMnzsTUaKLUu/NSVInCiM5ypEiNrGauF9VHvBWO2fJ2M+JH6JRRkWDG0:bXezDLnvaKQkNSSnCiM5ypEiNqau3VHK","tlshash":"8a81f1a61b9447b4fab54d0937d2bc62aa2b359eafcb0cdc59e0366308f1471570c731","first_seen":"2026-06-27T22:50:53.365959Z","last_seen":"2026-06-27T22:50:53.365959Z","times_seen":1,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":3,"connect":8,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/assets/img/coins/BNB.png","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.022Z","timestamp":1782600623022,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreodex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 11:31:20 GMT","end":"Thu, 20 Aug 2026 11:31:19 GMT"},"fingerprint":{"sha1":"23:96:9B:B6:EE:BF:E9:EF:70:B8:C4:29:96:18:65:69:78:D6:29:7C","sha256":"32:B7:F4:BD:F2:7C:2A:E4:9C:76:77:32:F6:51:FF:10:1F:CB:E7:45:B5:FE:46:B4:84:EE:BD:7C:90:31:67:BB"}}},"request":{"raw":"GET /assets/img/coins/BNB.png HTTP/1.1\r\nHost: oreodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oreodex.com/\r\nCookie: JSESSIONID=55E37ACE68F454593DEC60C78E6F1146\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Fri, 29 May 2026 20:25:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=5,i\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FDY1o1kuJ9YVbJFFE1I4YzUz6LeudmWfqf%2BwxW6B6nkFd1xN17zXaK0fHaT9Pk%2Bx1ZQ4Ng8I9HIbvrA9KiZA1f1tSt1WVIgc8f6640hfW0%2FBed0iXm%2BINe41iu0%2BDw%3D%3D\"}]}\r\ncontent-length: 2560\r\ncf-ray: a12802a5efbcb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2560,"size_decoded":3406,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"cb84d3ca48a52e3df1025731a8bef4ec","sha1":"b059f2eb3aaf93145fd62647cb908c5532e06795","sha256":"0f4502d8c5254df1eb0eb8d124c7684b4f02e2a5004525d5bd7acd18a6ebb9fc","sha512":"d7cd5d9aface1bb4718d418d1f7108bbbde7e8e24e926ce4bd4a88f51c715759e55741de3d6b17e7e54dea502761817e093e768a337fc0030a259fe9b4338151","ssdeep":"","tlshash":"7e513a6a47020c971334d44f89fc3eea1d6edc1ad421e0aeee0197fa18101c18dbe343","first_seen":"2023-05-25T23:01:30Z","last_seen":"2026-07-23T14:11:53.086082Z","times_seen":1582,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/assets/landings/1/img/4.png","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.033Z","timestamp":1782600623033,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreodex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 11:31:20 GMT","end":"Thu, 20 Aug 2026 11:31:19 GMT"},"fingerprint":{"sha1":"23:96:9B:B6:EE:BF:E9:EF:70:B8:C4:29:96:18:65:69:78:D6:29:7C","sha256":"32:B7:F4:BD:F2:7C:2A:E4:9C:76:77:32:F6:51:FF:10:1F:CB:E7:45:B5:FE:46:B4:84:EE:BD:7C:90:31:67:BB"}}},"request":{"raw":"GET /assets/landings/1/img/4.png HTTP/1.1\r\nHost: oreodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oreodex.com/\r\nCookie: JSESSIONID=55E37ACE68F454593DEC60C78E6F1146\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Fri, 29 May 2026 20:25:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=5,i\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cu7oBqsLRfL4CnpWBGgTjET38nDWQQ%2BmFCzE4Vzf%2FPqX1baFrtxGnaiYHlU6xmenusYVoBT8AX46O65BRTnu8QOdi0ZfAUtw2Sxqm9AeNW9gwgxSvh4W2UOyISrPgQ%3D%3D\"}]}\r\ncontent-length: 15197\r\ncf-ray: a12802a5ffc6b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15197,"size_decoded":16036,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 240 x 240, 8-bit colormap, non-interlaced","md5":"a8974d145e35dd8e87c73e726a723c83","sha1":"c172cac03394bf373eb436aabe7dddb9ddfb1556","sha256":"245e85694ee72851b88f1e0ad66999e4e70737cd79d37977a0c24811b6a05e58","sha512":"c89494b3f9b9232a3cd6354eee924e906f52b04d71536aec04bef6256e7e5e34086b8dfba15f7a850f3b64069ff82545981c5553c044cd9b1254bfff967ea03a","ssdeep":"384:kUwUQh42T1Ib8RbA6CyeiiSPbaDnYjxmQyZuIJgVqMKR8iR:411kCbpC37O2nYtkZiEV8A","tlshash":"4662c07cdbf8826bd489ed4740d7077067be2de653b03512104d3574753baa66ec480b","first_seen":"2026-05-14T12:20:58.149999Z","last_seen":"2026-07-22T23:22:13.626997Z","times_seen":18,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/assets/landings/1/img/mobile/back-left-top.png","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.037Z","timestamp":1782600623037,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreodex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 11:31:20 GMT","end":"Thu, 20 Aug 2026 11:31:19 GMT"},"fingerprint":{"sha1":"23:96:9B:B6:EE:BF:E9:EF:70:B8:C4:29:96:18:65:69:78:D6:29:7C","sha256":"32:B7:F4:BD:F2:7C:2A:E4:9C:76:77:32:F6:51:FF:10:1F:CB:E7:45:B5:FE:46:B4:84:EE:BD:7C:90:31:67:BB"}}},"request":{"raw":"GET /assets/landings/1/img/mobile/back-left-top.png HTTP/1.1\r\nHost: oreodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oreodex.com/\r\nCookie: JSESSIONID=55E37ACE68F454593DEC60C78E6F1146\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Fri, 29 May 2026 20:25:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=5,i\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HMDbZhQfFhAIfzYL3ltdJHATkCYn1NoRKcjAip0yb4sYiFXfi0tPOC0ba3h%2FwGt3OIMu9j8Y1YGKUBFETTsyx57QCQPd%2FPkbHUW1fWvmGGuNGtNYwvhvJd%2BH5kAAJQ%3D%3D\"}]}\r\ncontent-length: 35833\r\ncf-ray: a12802a5ffcab51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35833,"size_decoded":36674,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 418 x 438, 8-bit colormap, non-interlaced","md5":"6ed25d5b356e457918ad5eee2d47efee","sha1":"9767690839795c47e7fdef4b17b01981c40252bb","sha256":"554de8be2ca90de8e14cc78c4ccc106768e06cf26a06da4955b0353fc3b658a4","sha512":"9a39ed8bf67957dfeb36d257314ceb840af74af1ced36aa8bdb6d02d9def9b8d47cd8c369334ecaf85e41a73731f718df49fe7d327c4afc8a161c4b38cdacf1c","ssdeep":"768:UioSxav2qSKr5Jjl+4vnCW5sLlz2pn+V2Xn9d:UiNxauqSKXx+4vCW5sLlz2pn+A3L","tlshash":"03f2e1cf15d429864d49ae980069dfefcc1b0ccc357a174f0a653c5c9ed72aab654b0b","first_seen":"2025-09-11T10:34:36.095037Z","last_seen":"2026-07-22T23:22:13.639096Z","times_seen":19,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreodex.com/assets/landings/1/img/mobile/line-2.png","fqdn":"oreodex.com","domain":"oreodex.com","tld":"com"},"ip":{"addr":"104.21.16.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.043Z","timestamp":1782600623043,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreodex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 11:31:20 GMT","end":"Thu, 20 Aug 2026 11:31:19 GMT"},"fingerprint":{"sha1":"23:96:9B:B6:EE:BF:E9:EF:70:B8:C4:29:96:18:65:69:78:D6:29:7C","sha256":"32:B7:F4:BD:F2:7C:2A:E4:9C:76:77:32:F6:51:FF:10:1F:CB:E7:45:B5:FE:46:B4:84:EE:BD:7C:90:31:67:BB"}}},"request":{"raw":"GET /assets/landings/1/img/mobile/line-2.png HTTP/1.1\r\nHost: oreodex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oreodex.com/\r\nCookie: JSESSIONID=55E37ACE68F454593DEC60C78E6F1146\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Fri, 29 May 2026 20:25:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=5,i\r\ndate: Sat, 27 Jun 2026 22:50:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BYMV%2Bf2My5aDs5xdj8FIhOai9D6q6d3CGIj%2FySrSI9l1fabXdVZ7qALKlArJ8ZqzXp0SO674UBHgnF5bGc6itqcEx4jmZHvY3mm83lW4HPA88ZQKFIUjC18RVNMo1w%3D%3D\"}]}\r\ncontent-length: 10495\r\ncf-ray: a12802a60fd1b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10495,"size_decoded":11336,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 233 x 324, 8-bit colormap, non-interlaced","md5":"d77a8ff2a6ffd14ca0b5598874bb20c4","sha1":"ce61b1ac458d9d812f0efbb9b9b9a651d128b27d","sha256":"cf0a4e59c2274b6705e815ceaf5db447c7d3d32f73f34bfab7726d3f2420dfd9","sha512":"bb9d09745b97fdc52551806dabf4e8f53094050a4d2b9303060d4853e6024bc88f9cf55aa15f28e841f86a990284484743541e969ad96c2f874617c829e83ff2","ssdeep":"192:yMWnd8UvhtepVUCxfZqabPwTzjpQpBdIz6RvvXL3F+++PkfYfPNSlW2gafYuau:yMWnBhQpvflbP0jwKzQnXL3F+XUYXwFT","tlshash":"0122b0b9844747b0f89934e9144ff128e68ffb413db8759fb90626291dc119bf35b051","first_seen":"2025-09-11T10:34:35.873596Z","last_seen":"2026-07-22T23:22:13.629478Z","times_seen":19,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"oreodex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.419Z","timestamp":1782600623419,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://oreodex.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 21 Jun 2026 10:12:13 GMT\r\nexpires: Mon, 21 Jun 2027 10:12:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 563890\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":24836,"size_decoded":25649,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-07-24T07:52:26.852317Z","times_seen":35438,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":3,"connect":53,"send":0,"wait":39,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://oreodex.com/","date":"2026-06-27T22:50:23.421Z","timestamp":1782600623421,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://oreodex.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 21 Jun 2026 10:12:13 GMT\r\nexpires: Mon, 21 Jun 2027 10:12:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 563890\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":24836,"size_decoded":25649,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-07-24T07:52:26.852317Z","times_seen":35438,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":55,"dns":0,"connect":0,"send":0,"wait":42,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}