{"report_id":"67a19514-54a8-448a-8ee5-1b9bd4c0bc00","version":0,"status":"done","tags":[],"date":"2026-07-24T01:33:18Z","url":{"schema":"http","addr":"horaxhora.com","fqdn":"horaxhora.com","domain":"horaxhora.com","tld":"com"},"ip":{"addr":"172.67.197.14","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"horaxhora.com/","fqdn":"horaxhora.com","domain":"horaxhora.com","tld":"com"},"title":"VLXX - Phim Sex VLXX Địt Nhau Full HD Mới Cập Nhật","dom":{"size":62133,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1567)","md5":"c7a1372e23be2e700e97ce3216266ba9","sha1":"e44e4c81c59ac571111b0c19c52337431b96c72f","sha256":"977d595c09da867aaed7cc921c845dd3d3d7a8214be7c11c410cd865362242fc","sha512":"6a71bb0224258bea29ac48168b76d18a80e8be7ad9b55fb5d695901802c808a3b5cf87b9d9a9744fff8ac55aa61dde2611ca806ed5f931a1fd5478affc0ef402","ssdeep":"768:Vbjf/I3iQfWaS6sCfwrJ3qunOyKB0Pca8q6gQuuKt:VnuW0fy3nnduu","tlshash":"1b53966340f01527426ac1b656672a0eff92d40bca52c958f6dc17e78f49df3ae132ac","dom_hash":"domhash169af0e31946e858bce6b096dbe89214","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"horaxhora.com","fqdn":"horaxhora.com","domain":"horaxhora.com","tld":"com"},"ip":{"addr":"172.67.197.14","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-28T01:33:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"horaxhora.com","ip":{"addr":"104.21.21.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-21","domain_rank":0,"first_seen":"2026-07-06T23:12:38.669201Z","last_seen":"2026-07-06T23:12:38.669201Z","alert_count":140,"request_count":35,"received_data":3349715,"sent_data":17757,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"horaxhora.com/","fqdn":"horaxhora.com","domain":"horaxhora.com","tld":"com"},"ip":{"addr":"104.21.21.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9570d2fa11f0321f5c71a1ab0107c914","sha1":"51dfde269d0aeb2371361ee15f0bfab4f3869bd6","sha256":"29f02daa65a64a0d76d45881d256cbce4a9d82c490af1898f87d73e748df017e","sha512":"5494015ed8656ebd53c7974c26d03bdae04dfaa977698a5888cb91632d609734ebb8e3aaa0dda8243484b48917e0422b2a4d21d62e0ce3c3b8532fd2ca3aac1b","ssdeep":"","tlshash":"f7c08caa25a9493500a731a353dea7d43721048f6200645a362c8b880f42c9113f09e2","size":156,"data":"","first_seen":"2026-06-11T11:23:11.156004Z","last_seen":"2026-07-24T01:33:22.06779Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"horaxhora.com/","fqdn":"horaxhora.com","domain":"horaxhora.com","tld":"com"},"ip":{"addr":"104.21.21.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9bd5b15c299f4beea674060906510da1","sha1":"9d682e730295a5d3f32a5817119ad423a2962151","sha256":"31d6676e4a12696e944e8b0ac2581164ce931c36fdb33544fbae5bf57510e473","sha512":"a358a7acfe8cd0d25c8306b7271ccb8f308e7f6bf323a02e4d7097bb66a7bac1557b0f0a83cd8cfa4f963f1e0b46799820280b55fdc4bd26d5e5cb2f6b20dee7","ssdeep":"","tlshash":"771136978f179e3901b3c3a7272ff320b21324578050e810ae6acaa89f20bd7c5104dc","size":924,"data":"","first_seen":"2026-07-09T02:42:07.379309Z","last_seen":"2026-07-24T01:33:22.068315Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"horaxhora.com/","fqdn":"horaxhora.com","domain":"horaxhora.com","tld":"com"},"ip":{"addr":"104.21.21.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a2efa05f0e7ecb0513f2f551a6c3c86","sha1":"ff1cd5ab09eb25a77b41bbb36b012ee998a718ad","sha256":"d562f0d941d6197ce7ae57345fd56b086f96a44123fc04735cc19124b4dfb77d","sha512":"a057f6a1fbe083a255fb6019d6e966b87d651e20cd7df5a8aa281e9fd362ae0ea87cd71d53b3c9c08772750c08e52fae37cc792b8a205218d2cfcaf2d0fda3ad","ssdeep":"","tlshash":"10f0ec292db7e2390a26913b233fe249727200034006e4257ceddd88af407f38c20899","size":507,"data":"","first_seen":"2026-07-20T20:23:44.355083Z","last_seen":"2026-07-24T01:33:22.068893Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"horaxhora.com/","fqdn":"horaxhora.com","domain":"horaxhora.com","tld":"com"},"ip":{"addr":"104.21.21.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b6f61c380ea8a4fd45c30b2d6439976c","sha1":"a9b013d145fa298280baad42a1d448d6410db314","sha256":"681bae68012bf8152c83b7f28518bc3838a4da360dab95a937cec3038d1f47c0","sha512":"67ba6b42fdbd29cd04491e74eb9515a7988d351a2d4088e5540e02f22ce5be7c96a78a4ea704fdaa14cf895d9ed366a49dee052624a8c3fec2dc452868ec86cb","ssdeep":"","tlshash":"574141c520f3627a5877643b97ef53697b2880072419da203e9c83664fc97f26fb1798","size":2324,"data":"","first_seen":"2026-07-04T10:15:12.302205Z","last_seen":"2026-07-24T01:33:22.069749Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"horaxhora.com/template/2-live/static/jquery.min.js","fqdn":"horaxhora.com","domain":"horaxhora.com","tld":"com"},"ip":{"addr":"104.21.21.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9771cc3e90e18f5336eedbd0fffb2cf","sha1":"6ee8aaa3ac1f4e0ae18717a3fd26892e9f0e4cc5","sha256":"3e7501d15c3630e791c8b20392eb9dee31a9f65ce3efdde76cef5c710141ab24","sha512":"c503341fa3a7176fd10bd8cd7a5717c8faf971f87fa0c158f2d94fcd484ae3ed5031f49414dae833fb806b7365b5699c21d2e655376f69adb052b22f6f6982a7","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:sHNwcv9VBQpLl88SMBQ47GK7","tlshash":"8083f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87532,"data":"","first_seen":"2023-10-13T22:05:06Z","last_seen":"2026-07-24T03:56:15.820561Z","times_seen":30184,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"horaxhora.com/template/2-live/static/jquery.lazyload.min.js","fqdn":"horaxhora.com","domain":"horaxhora.com","tld":"com"},"ip":{"addr":"104.21.21.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c01d7aff077b4ed0804b71c2e3ab4a1","sha1":"56b4c94cff0d5fdfca579eac85da28a767607644","sha256":"80351098c2478918bb80008d7836499305bf6f4d4b2abf742b8823255bbb0d8e","sha512":"c8fff9d167c05d5f09c83bea8fcfa45f717f2554982b853a3d80ab8b21f8c49bdce58b576dc04b68ed9eff879bbbfa1b19620e6f10ca9104007f346cd0bd76d4","ssdeep":"","tlshash":"1661768d7f527839b0567a9e831f3106663fd46f81814c54b0c9ece4ecec7951236d9a","size":3381,"data":"","first_seen":"2023-03-07T01:04:01Z","last_seen":"2026-07-24T01:33:22.046065Z","times_seen":5943,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"horaxhora.com/template/2-live/static/media.js","fqdn":"horaxhora.com","domain":"horaxhora.com","tld":"com"},"ip":{"addr":"104.21.21.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f3431f677ef0f3afd44960cf88a9b19","sha1":"bdb0efaa39a20bac1fbc78651becdbf82f2faa0f","sha256":"2fc2715800d253b12edd0cb4c71688660e1c4e7c2f6431381b44e150b4de8409","sha512":"19b2051393efc2a843e13fe2671c8981fef935e338e06bd6b3a5226221eda99accdf027a015b5576e247bbd9707ca85482c9f0172caa7d61ad4199389dc66fbc","ssdeep":"","tlshash":"17610f9fe1a7f1ba477a396512e330a222135f9bcb541042f4a605e50a8fec06077f1f","size":3465,"data":"","first_seen":"2026-06-11T11:23:11.104486Z","last_seen":"2026-07-24T01:33:22.058353Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"horaxhora.com/vlxx/common.js","fqdn":"horaxhora.com","domain":"horaxhora.com","tld":"com"},"ip":{"addr":"104.21.21.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ab590953996821a24f2b994d737d02e","sha1":"df3f316697c45536a69f8ce71bb301c901b38dfb","sha256":"675044812878ebdc700fb9a1286eb19d5454945f11eedbb90b9b5a0a2c840aaf","sha512":"e89f613b28bd1dc2f3abc3ad3436c408c220510def113ee09af1f7303660a4db132b49c693b22f37bcc9a6926b9258de4dbeeff6f039639b600f768bd9c7774c","ssdeep":"192:Hng1PQCiZsPxYOJa9HSEwe/Xk0mZGs7xlHFaX2sOhAxKDald:Hg+/X257xlHYX2snxWald","tlshash":"c9d10038adb311228077c17f2bbf6954f160502b2b02dd5e7adcca2c5fd1e58a5ab394","size":6311,"data":"","first_seen":"2026-07-04T20:29:59.539114Z","last_seen":"2026-07-24T01:33:22.051888Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"horaxhora.com/media/img-x/SexyLive.gif","fqdn":"horaxhora.com","domain":"horaxhora.com","tld":"com"},"ip":{"addr":"104.21.21.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://horaxhora.com/","date":"2026-07-24T01:32:56.901Z","timestamp":1784856776901,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"horaxhora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 05:18:00 GMT","end":"Sun, 11 Oct 2026 06:15:19 GMT"},"fingerprint":{"sha1":"F5:20:F7:C6:E5:FC:59:D1:7D:28:E8:B8:99:DC:B4:25:50:44:A9:A9","sha256":"23:96:22:B5:E9:3F:08:AD:81:BB:7D:90:E7:70:36:40:76:FF:B4:3C:DD:69:DC:EA:EB:3D:1C:02:2B:12:6B:F0"}}},"request":{"raw":"GET /media/img-x/SexyLive.gif HTTP/1.1\r\nHost: horaxhora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://horaxhora.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 24 Jul 2026 01:32:57 GMT\r\ncontent-type: image/gif\r\nlast-modified: Sun, 08 Mar 2026 07:43:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"69ad289f-18cf28\"\r\nexpires: Sun, 23 Aug 2026 01:32:57 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wVjiBGBSchUp0139npHnzjYhD1zfOfxZEFC%2BqgxCqQTuMwWQX2Zm2OFH%2B7%2FIdZWqoOJ3pzD1V0DFcwTeS5fpVAZ6y63nFLFtFMp7JAV8F6faqmAbz25QQJtvwrYXZQVK\"}]}\r\ncf-ray: a1ff2c87a85a0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1625896,"size_decoded":1559007,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 200","md5":"55f80a68878e0b6d6f7e8c8249ea50b4","sha1":"cd6e6522960bef6848670168523d5266e4f368ab","sha256":"23af0fe1ea2e3bd41a41e79ac5803fa30959fb4fdf32f747dd09b227f08b2b4a","sha512":"df1711416c489d5fee2f22f8a94fcd209ba818c87c73ddb15fe71842b2d59e22fa5fef99f530854722fb779f6c032990bc5f5edd2c2ed1e554c4772e757b26da","ssdeep":"24576:X1U2rgvwKWNNLWqbbXMPdmXclAhCTRgPPnnvTW:FNGwKWNgqEucSITSPvvi","tlshash":"2d2523a7e83dc996b4473474360e0db64cbc08d5acfaa737e48075d63a5312ea0d8a77","first_seen":"2026-06-02T11:54:05.0579Z","last_seen":"2026-07-24T01:33:22.032916Z","times_seen":79,"resource_available":false,"data":null}},"time_used":1830,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":466,"receive":1364,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"horaxhora.com/upload/20251024/video_f9ad64.jpg","fqdn":"horaxhora.com","domain":"horaxhora.com","tld":"com"},"ip":{"addr":"104.21.21.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://horaxhora.com/","date":"2026-07-24T01:32:51.472Z","timestamp":1784856771472,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"horaxhora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 05:18:00 GMT","end":"Sun, 11 Oct 2026 06:15:19 GMT"},"fingerprint":{"sha1":"F5:20:F7:C6:E5:FC:59:D1:7D:28:E8:B8:99:DC:B4:25:50:44:A9:A9","sha256":"23:96:22:B5:E9:3F:08:AD:81:BB:7D:90:E7:70:36:40:76:FF:B4:3C:DD:69:DC:EA:EB:3D:1C:02:2B:12:6B:F0"}}},"request":{"raw":"GET /upload/20251024/video_f9ad64.jpg HTTP/1.1\r\nHost: horaxhora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://horaxhora.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 24 Jul 2026 01:32:51 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 24 Oct 2025 08:17:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"68fb361f-52af\"\r\nexpires: Sun, 23 Aug 2026 01:32:51 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sQ7TmoJ%2BHEIUSHSRTDmxWor5flDdFzWClbAaJOpcuSTg6V0zZM%2BCpKNxQ%2FzNe9e6zD5B2USJe7hlyNB%2Bqfg3UxEMJn%2FQBXokU5RFlTj2BK6%2BQsW94nLpET6IfFepiFwQ\"}]}\r\ncf-ray: a1ff2c65b8170b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21167,"size_decoded":21795,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", progressive, precision 8, 350x178, components 3","md5":"9760841ef90e88d909eef3bc848e46d3","sha1":"99bfa0107eae645a22ca7a9bc41be9512d27ff88","sha256":"047217441bcf287c0098dd5b2c9c8d23f7ca8dcd07058cabcec516f30cd48618","sha512":"bdf9b638db9aec2fa181388ef4ebe9d887d570166be28959780ddd0b5e097089a6d317937e850fc52fe009594d064f042f5bd74516747c370e2b51ae0ffc2a56","ssdeep":"384:TKmKjYmVcLh/g3SEI2wDwgENMsgQ2xWpjE+QIgsr5f2QJPyvcfSdEeF61A76iMe5:GmCYm/C6wXFxWpE+bgCnE72A7b5","tlshash":"c492d09e8511a2a0e90f27ff5bc311909db17ca65b1f504b83368708abaf584bec4335","first_seen":"2025-12-28T23:58:25.574103Z","last_seen":"2026-07-24T01:33:22.033605Z","times_seen":7,"resource_available":false,"data":null}},"time_used":684,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":461,"receive":223,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"horaxhora.com/upload/20251024/video_a5a5eb.jpg","fqdn":"horaxhora.com","domain":"horaxhora.com","tld":"com"},"ip":{"addr":"104.21.21.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://horaxhora.com/","date":"2026-07-24T01:32:51.480Z","timestamp":1784856771480,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"horaxhora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 05:18:00 GMT","end":"Sun, 11 Oct 2026 06:15:19 GMT"},"fingerprint":{"sha1":"F5:20:F7:C6:E5:FC:59:D1:7D:28:E8:B8:99:DC:B4:25:50:44:A9:A9","sha256":"23:96:22:B5:E9:3F:08:AD:81:BB:7D:90:E7:70:36:40:76:FF:B4:3C:DD:69:DC:EA:EB:3D:1C:02:2B:12:6B:F0"}}},"request":{"raw":"GET /upload/20251024/video_a5a5eb.jpg HTTP/1.1\r\nHost: horaxhora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://horaxhora.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 24 Jul 2026 01:32:51 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 24 Oct 2025 08:00:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"68fb3237-5d92\"\r\nexpires: Sun, 23 Aug 2026 01:32:51 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vEtMjXRxjo6057Ttw5J5n1uIkU17I3dHBITk1KqHKkAsbfcW7p2Ki%2BSsOEOV70DfsVisrcyRsEmnRn5X%2FSgSKOpMhbysDtyMQ2UA33JQ6S7s3UMIuolb8BnDfh3IMxqr\"}]}\r\ncf-ray: a1ff2c65c81e0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23954,"size_decoded":24588,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", progressive, precision 8, 410x300, components 3","md5":"ee2bf02b353f7b744b36d13b4510b093","sha1":"3b0dcf9f966f6ccab796857ecfbbd56a65aa8e1f","sha256":"3267c5d5aa90580c6b3318e06ed26e7386bf029b5bce8e8b0a7ff50a785b0747","sha512":"104629752fd255b5afcf41675eff14b7117f4c7a08ac82a33cb5562175a3f019417222c898a8cd3bb32ae5a90aa5582ae1affef44be74738965a93bf9eafb255","ssdeep":"384:ZYrSFFUghvb80cPPUcYnYrBnuFpXq0sZhe1XO2LGCkmnMrw9Cwxqx:ZsSrUghAlkcYIGpajZhexpvkl0cw0","tlshash":"93b2e1d4d3969301d7be2cadd6663383ff0dc46da5da20be1621bb90bb10a985094c4e","first_seen":"2026-07-04T10:14:55.972593Z","last_seen":"2026-07-24T01:33:22.03515Z","times_seen":6,"resource_available":false,"data":null}},"time_used":694,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":469,"receive":225,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"horaxhora.com/favicon.ico","fqdn":"horaxhora.com","domain":"horaxhora.com","tld":"com"},"ip":{"addr":"104.21.21.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://horaxhora.com/","date":"2026-07-24T01:32:51.438Z","timestamp":1784856771438,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"horaxhora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 05:18:00 GMT","end":"Sun, 11 Oct 2026 06:15:19 GMT"},"fingerprint":{"sha1":"F5:20:F7:C6:E5:FC:59:D1:7D:28:E8:B8:99:DC:B4:25:50:44:A9:A9","sha256":"23:96:22:B5:E9:3F:08:AD:81:BB:7D:90:E7:70:36:40:76:FF:B4:3C:DD:69:DC:EA:EB:3D:1C:02:2B:12:6B:F0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: horaxhora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://horaxhora.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 24 Jul 2026 01:32:51 GMT\r\ncontent-type: image/x-icon\r\netag: W/\"6a5d968a-5a0\"\r\nlast-modified: Mon, 20 Jul 2026 03:31:22 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rx0MuJiQ4skG8Paf7oFryQRztTq2C3OyORk88f63GhC8yPHYUZyij4qdUb%2Fz81shzewHWo4Ud9kMBbPiPEh1IHzVMnazoz95tV4m%2B9gWXtXZg1z63K3bWkQUnw6bOQ%2Be\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1ff2c65780d0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1440,"size_decoded":2118,"mime_type":"image/x-icon","magic":"PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced","md5":"89eacf78e06aa10c370f319cadf778dc","sha1":"470e89c1398d0ef3c3aeb58a072e2df86a32a536","sha256":"bfa9be660f41c350c72292d3dbb1dff80dacc71304275f8a8190d430ff792c10","sha512":"0d5f2fa8a4cf955938478a9c1f1caf962f719e17b86e10c20001e80ee9a77818a12f35e3bd830f2f7ab2d30fdf386e810ff8b9bb37acc06de18130607f2a6365","ssdeep":"","tlshash":"4421c6385e755d6aa8970d5113fbbff446645d3f3892dadb02a7910ca68f43841e5013","first_seen":"2026-07-20T20:23:44.342876Z","last_seen":"2026-07-24T01:33:22.036152Z","times_seen":6,"resource_available":false,"data":null}},"time_used":473,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":473,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"horaxhora.com/","fqdn":"horaxhora.com","domain":"horaxhora.com","tld":"com"},"ip":{"addr":"104.21.21.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-24T01:32:49.915Z","timestamp":1784856769915,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"horaxhora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 05:18:00 GMT","end":"Sun, 11 Oct 2026 06:15:19 GMT"},"fingerprint":{"sha1":"F5:20:F7:C6:E5:FC:59:D1:7D:28:E8:B8:99:DC:B4:25:50:44:A9:A9","sha256":"23:96:22:B5:E9:3F:08:AD:81:BB:7D:90:E7:70:36:40:76:FF:B4:3C:DD:69:DC:EA:EB:3D:1C:02:2B:12:6B:F0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: horaxhora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 24 Jul 2026 01:32:50 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0vNWpnEbqfERbMttQ972D40ibZv6OmvRoSpjyG%2FoTi1b8UsxKIGgJ7TelNfR9cCf4sBGIIPY%2F0NU50UWyh1xFODEEvQcQh4fOMJXrCK1LI4Btb0qJmXv9Q9lq8cfeH3d\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a1ff2c5c2fed0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":69319,"size_decoded":10728,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (366)","md5":"17f267779f4a52407d776243088c4ca0","sha1":"1cd6765fa597abace391f6ab14535e7d20262f6f","sha256":"9b81e128dc4df75fd97088827586d9dc0907f6a503f4d6cd5d4fbbfc0ca151fd","sha512":"f3f47e170fccd0c8a16d2102e9ac3bcb47bd5b8b323c5ad4d99b4a6c628927f817a99b79578b1725187867eb85e26dd88c0025d2c3b0b776f3b40dadf5e18614","ssdeep":"768:gnjflI3idfaurmVCh+xGyvWeiVJCfKvPejJ8NcI3kiiIdfCmkCHR6gQC:gTTuUB3LiM","tlshash":"1a6396a200f0112b825d81b6526b2a0eff57d40fc651d558fadc1752cf9abf3ae6326c","first_seen":"2026-07-24T01:33:22.037159Z","last_seen":"2026-07-24T01:33:22.037159Z","times_seen":1,"resource_available":true,"data":null}},"time_used":505,"timings":{"blocked":-1,"dns":7,"connect":14,"send":0,"wait":481,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"horaxhora.com/template/2-live/static/jquery.min.js","fqdn":"horaxhora.com","domain":"horaxhora.com","tld":"com"},"ip":{"addr":"104.21.21.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://horaxhora.com/","date":"2026-07-24T01:32:50.631Z","timestamp":1784856770631,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"horaxhora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 05:18:00 GMT","end":"Sun, 11 Oct 2026 06:15:19 GMT"},"fingerprint":{"sha1":"F5:20:F7:C6:E5:FC:59:D1:7D:28:E8:B8:99:DC:B4:25:50:44:A9:A9","sha256":"23:96:22:B5:E9:3F:08:AD:81:BB:7D:90:E7:70:36:40:76:FF:B4:3C:DD:69:DC:EA:EB:3D:1C:02:2B:12:6B:F0"}}},"request":{"raw":"GET /template/2-live/static/jquery.min.js HTTP/1.1\r\nHost: horaxhora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://horaxhora.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 24 Jul 2026 01:32:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 17 Nov 2025 03:52:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"691a9bf8-155ec\"\r\nexpires: Fri, 24 Jul 2026 13:32:50 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zKVbSqG9m1OaC8wU52fGmsKnBExnF%2BPD1nsIMeCRWlLganahC70WtFS%2B8oHGNngo6Hyn5gFRgNXodsjyC4JzXsXwyOay%2BksY%2FeDjGe16UG1ij8%2Bzp7dkdDigxO8XtycX\"}]}\r\ncf-ray: a1ff2c607ff40b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87532,"size_decoded":31372,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"c9771cc3e90e18f5336eedbd0fffb2cf","sha1":"6ee8aaa3ac1f4e0ae18717a3fd26892e9f0e4cc5","sha256":"3e7501d15c3630e791c8b20392eb9dee31a9f65ce3efdde76cef5c710141ab24","sha512":"c503341fa3a7176fd10bd8cd7a5717c8faf971f87fa0c158f2d94fcd484ae3ed5031f49414dae833fb806b7365b5699c21d2e655376f69adb052b22f6f6982a7","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:sHNwcv9VBQpLl88SMBQ47GK7","tlshash":"8083f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-10-13T22:05:06Z","last_seen":"2026-07-24T03:56:15.820561Z","times_seen":30184,"resource_available":true,"data":null}},"time_used":707,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":478,"receive":229,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"horaxhora.com/template/2-live/static/jquery.lazyload.min.js","fqdn":"horaxhora.com","domain":"horaxhora.com","tld":"com"},"ip":{"addr":"104.21.21.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://horaxhora.com/","date":"2026-07-24T01:32:50.632Z","timestamp":1784856770632,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"horaxhora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 05:18:00 GMT","end":"Sun, 11 Oct 2026 06:15:19 GMT"},"fingerprint":{"sha1":"F5:20:F7:C6:E5:FC:59:D1:7D:28:E8:B8:99:DC:B4:25:50:44:A9:A9","sha256":"23:96:22:B5:E9:3F:08:AD:81:BB:7D:90:E7:70:36:40:76:FF:B4:3C:DD:69:DC:EA:EB:3D:1C:02:2B:12:6B:F0"}}},"request":{"raw":"GET /template/2-live/static/jquery.lazyload.min.js HTTP/1.1\r\nHost: horaxhora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://horaxhora.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 24 Jul 2026 01:32:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 17 Nov 2025 03:53:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"691a9c28-d35\"\r\nexpires: Fri, 24 Jul 2026 13:32:50 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tJPQri49UAevWQoSt6fguuLddTkbD30vVD6%2FaqRk5D6m0jbVatS2tU4GqNPozIGNoE8ZUasJCasL9WtRksuHYCUTKcfr8bvdtw5rQJGMNqykiyDCIMS0dQzIXozm%2Fts8\"}]}\r\ncf-ray: a1ff2c607ff50b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3381,"size_decoded":2036,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3309)","md5":"5c01d7aff077b4ed0804b71c2e3ab4a1","sha1":"56b4c94cff0d5fdfca579eac85da28a767607644","sha256":"80351098c2478918bb80008d7836499305bf6f4d4b2abf742b8823255bbb0d8e","sha512":"c8fff9d167c05d5f09c83bea8fcfa45f717f2554982b853a3d80ab8b21f8c49bdce58b576dc04b68ed9eff879bbbfa1b19620e6f10ca9104007f346cd0bd76d4","ssdeep":"","tlshash":"1661768d7f527839b0567a9e831f3106663fd46f81814c54b0c9ece4ecec7951236d9a","first_seen":"2023-03-07T01:04:01Z","last_seen":"2026-07-24T01:33:22.046065Z","times_seen":5943,"resource_available":true,"data":null}},"time_used":461,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":461,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"horaxhora.com/upload/20251024/video_fdff9d.jpg","fqdn":"horaxhora.com","domain":"horaxhora.com","tld":"com"},"ip":{"addr":"104.21.21.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://horaxhora.com/","date":"2026-07-24T01:32:51.469Z","timestamp":1784856771469,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"horaxhora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 05:18:00 GMT","end":"Sun, 11 Oct 2026 06:15:19 GMT"},"fingerprint":{"sha1":"F5:20:F7:C6:E5:FC:59:D1:7D:28:E8:B8:99:DC:B4:25:50:44:A9:A9","sha256":"23:96:22:B5:E9:3F:08:AD:81:BB:7D:90:E7:70:36:40:76:FF:B4:3C:DD:69:DC:EA:EB:3D:1C:02:2B:12:6B:F0"}}},"request":{"raw":"GET /upload/20251024/video_fdff9d.jpg HTTP/1.1\r\nHost: horaxhora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://horaxhora.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 24 Jul 2026 01:32:51 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 24 Oct 2025 08:22:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"68fb3747-8c5b\"\r\nexpires: Sun, 23 Aug 2026 01:32:51 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gtT%2B8xcP39dFER3wamAnHDJDtKy3E6tp%2FR0%2Fo5aI7Rk3ArY9mYRz8I7f5Ex54FrgjueK0b07B4ddrwv3w7xJmZdOGlx3z5gzVTB8GgH1eHzB0E4hGDasV1zFpndYk6oZ\"}]}\r\ncf-ray: a1ff2c65a8140b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35931,"size_decoded":36590,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", progressive, precision 8, 384x369, components 3","md5":"c3ba7b1ea235d774a911518b3492979c","sha1":"dd62cb099eaf7d710899ea041d9912eb9a44b201","sha256":"e1238656dd4c60161d5b3261963d518dabba1a8a81ee94b05bcfd637b7fcd8e6","sha512":"5df64b5a2bd7d3cc200ee83be0a975c1dc5c1512637f6ed55cc702b466ccc25b6a0b6a6f0f7d0e0ee8ed4eb7fce07eb8b34ad636d71defd65201cadce40df8fe","ssdeep":"768:rWzNUXAN2hzAZnklHJKcAJ7ghzy1b/Slgtj7RLCQWGvGA3L0wkv15EknVKkC7qZ:H+2hUeHoDDftjoeuA3L0wk58kt","tlshash":"4bf202c417247ce6129d25b01ad39b1e0f3609e13e5463e9368337a9ebe3e9a1f47234","first_seen":"2026-07-01T05:45:27.467263Z","last_seen":"2026-07-24T01:33:22.046965Z","times_seen":8,"resource_available":false,"data":null}},"time_used":696,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":468,"receive":228,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"horaxhora.com/upload/20251024/video_1d7e94.jpg","fqdn":"horaxhora.com","domain":"horaxhora.com","tld":"com"},"ip":{"addr":"104.21.21.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://horaxhora.com/","date":"2026-07-24T01:32:51.461Z","timestamp":1784856771461,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"horaxhora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 05:18:00 GMT","end":"Sun, 11 Oct 2026 06:15:19 GMT"},"fingerprint":{"sha1":"F5:20:F7:C6:E5:FC:59:D1:7D:28:E8:B8:99:DC:B4:25:50:44:A9:A9","sha256":"23:96:22:B5:E9:3F:08:AD:81:BB:7D:90:E7:70:36:40:76:FF:B4:3C:DD:69:DC:EA:EB:3D:1C:02:2B:12:6B:F0"}}},"request":{"raw":"GET /upload/20251024/video_1d7e94.jpg HTTP/1.1\r\nHost: horaxhora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://horaxhora.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 24 Jul 2026 01:32:51 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 24 Oct 2025 08:30:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"68fb3925-5e2d\"\r\nexpires: Sun, 23 Aug 2026 01:32:51 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JUZIhx9eoZjf9zNwvt9DrfXDpWj5SY%2BLe%2BPp%2B4zK6pT1aQr5Bx2sCSRQuiHWQrQuLYaRa3zGpgl%2FHEPRwYN3NTfLYfa5c8pck4q%2FEF9Ul9xqiSGBG%2BfFYFGY4loRd33Y\"}]}\r\ncf-ray: a1ff2c65a80f0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24109,"size_decoded":24753,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", progressive, precision 8, 500x350, components 3","md5":"a1274404e609d107aa8490019c4aa47c","sha1":"a1e0be15081b95ea274f5ce93ef77ab40fe4281e","sha256":"4709c77a4e62213b7273ff4185acb346f88402cae7d060e9a573f5faccb5c179","sha512":"132d741af85bb0c17e44b742068f9693e1c2e3da41e291e3bc15b97aefaac55729dbe0ff8168957f5cb6047daf2a4159e765a28fe2e8e2ba5e054d36bd6eab3f","ssdeep":"384:bYWF7JPkpzdN3NQwwriPobUi4OiE7aAws/S0WujQ5BLUZcCmOZ4ewLA4u5ib7UN/:bYyPkpBtNQT7Ui4Oi1Aws6J5Cnm8cb7o","tlshash":"e0b2d1272a69930ce13dd6b45ddf262ed6047cd98331d2638be62513f35f0e6244987e","first_seen":"2026-07-04T10:14:55.979947Z","last_seen":"2026-07-24T01:33:22.047906Z","times_seen":6,"resource_available":false,"data":null}},"time_used":690,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":466,"receive":224,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"horaxhora.com/upload/20251024/video_b600cc.jpg","fqdn":"horaxhora.com","domain":"horaxhora.com","tld":"com"},"ip":{"addr":"104.21.21.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://horaxhora.com/","date":"2026-07-24T01:32:51.473Z","timestamp":1784856771473,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"horaxhora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 05:18:00 GMT","end":"Sun, 11 Oct 2026 06:15:19 GMT"},"fingerprint":{"sha1":"F5:20:F7:C6:E5:FC:59:D1:7D:28:E8:B8:99:DC:B4:25:50:44:A9:A9","sha256":"23:96:22:B5:E9:3F:08:AD:81:BB:7D:90:E7:70:36:40:76:FF:B4:3C:DD:69:DC:EA:EB:3D:1C:02:2B:12:6B:F0"}}},"request":{"raw":"GET /upload/20251024/video_b600cc.jpg HTTP/1.1\r\nHost: horaxhora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://horaxhora.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 24 Jul 2026 01:32:51 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 24 Oct 2025 08:16:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"68fb35e1-4252\"\r\nexpires: Sun, 23 Aug 2026 01:32:51 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aEFj%2BWtXcpezx6uvA4t10r3ldPHFi2g37nK%2BVBU73PSsg4jrHWxCo4gtJbFyb3nKxQ2ZBWmar%2FXgNt7yisTdlWB7uWvQPGh%2BnBcVP3z1s4P8G6DiqlS%2BZ83ysWXQuKS8\"}]}\r\ncf-ray: a1ff2c65b8180b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16978,"size_decoded":17608,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", progressive, precision 8, 287x249, components 3","md5":"57b14bcd61ac8c32821c821ffede01f9","sha1":"4aed42e02b897d07039e6015315863d618cc2579","sha256":"2e09bdba4bc60382cfe49632211ae4e462a2b830e4ce61c99a98d5f3a21200ac","sha512":"12975aa075981e6d55937ee6ed1ecd911a8e2c687036ce73977b76b718671f3a38e4817d03012c8915fe24d0ee9544d80d0df97383cbf409763dd50bb4d7efc9","ssdeep":"384:pjnjU4yRgNwY6umYVjHZOs+N32HmHdQpz1gDW8t0n:pjo4yqNwRKOs+OqdWZet0","tlshash":"a972c0136b209a05e03f3b436599617d15cead080ccd99e7287ac8d8fbf1e6e99c01d2","first_seen":"2026-07-04T10:14:55.998406Z","last_seen":"2026-07-24T01:33:22.048912Z","times_seen":6,"resource_available":false,"data":null}},"time_used":686,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":463,"receive":223,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"horaxhora.com/template/2-live/static/bootstrap.min.css","fqdn":"horaxhora.com","domain":"horaxhora.com","tld":"com"},"ip":{"addr":"104.21.21.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://horaxhora.com/","date":"2026-07-24T01:32:50.626Z","timestamp":1784856770626,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"horaxhora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 05:18:00 GMT","end":"Sun, 11 Oct 2026 06:15:19 GMT"},"fingerprint":{"sha1":"F5:20:F7:C6:E5:FC:59:D1:7D:28:E8:B8:99:DC:B4:25:50:44:A9:A9","sha256":"23:96:22:B5:E9:3F:08:AD:81:BB:7D:90:E7:70:36:40:76:FF:B4:3C:DD:69:DC:EA:EB:3D:1C:02:2B:12:6B:F0"}}},"request":{"raw":"GET /template/2-live/static/bootstrap.min.css HTTP/1.1\r\nHost: horaxhora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://horaxhora.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 24 Jul 2026 01:32:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 20 Oct 2025 10:25:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68f60e2d-38df4\"\r\nexpires: Fri, 24 Jul 2026 13:32:50 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nHPe%2B9GW7KpsUT8PbCHZohqKQrWMKkdf2LdlwnO%2FBY3vaNHAY7z6rSS36GAW4eCSVkqeqxqG%2BlTHkRFAVdCpJUvgZPPKcxjrjX54t6R1MfvqZnGwR9Ws3AK22JLd6qzB\"}]}\r\ncf-ray: a1ff2c606ff10b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232948,"size_decoded":32569,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"cd822b7fd22c8a95a68470c795adea69","sha1":"1f139981b9b47a766efa0a61bb78ada351f16c4b","sha256":"3017df4a76db5f01c2b99b603d88b03106df13bcfe18e67b7c13c2341d3a67df","sha512":"6f641c4b94ac03cb59a1d703b464442e21afe5268a4a4d6f0c70da41175ad21b4f61667ad38ea5af7909e5b00041da55da6980ff8bf4c1017d33253afe90c802","ssdeep":"1536:m9YnIWbn98fhRfvO5wlP7Qy9P3CV98IsYRElV6V6pz600I41r:pnIw98fsV986I6V6pz600I41r","tlshash":"c63482d6f590317d9ca7c1499681fefd8a6fa985cb1209a6f003776807cabd30962dcc","first_seen":"2023-09-18T01:21:14Z","last_seen":"2026-07-24T03:02:21.874102Z","times_seen":18314,"resource_available":false,"data":null}},"time_used":705,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":477,"receive":228,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"horaxhora.com/upload/20251024/video_009c17.jpg","fqdn":"horaxhora.com","domain":"horaxhora.com","tld":"com"},"ip":{"addr":"104.21.21.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://horaxhora.com/","date":"2026-07-24T01:32:51.477Z","timestamp":1784856771477,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"horaxhora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 05:18:00 GMT","end":"Sun, 11 Oct 2026 06:15:19 GMT"},"fingerprint":{"sha1":"F5:20:F7:C6:E5:FC:59:D1:7D:28:E8:B8:99:DC:B4:25:50:44:A9:A9","sha256":"23:96:22:B5:E9:3F:08:AD:81:BB:7D:90:E7:70:36:40:76:FF:B4:3C:DD:69:DC:EA:EB:3D:1C:02:2B:12:6B:F0"}}},"request":{"raw":"GET /upload/20251024/video_009c17.jpg HTTP/1.1\r\nHost: horaxhora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://horaxhora.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 24 Jul 2026 01:32:51 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 24 Oct 2025 08:08:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"68fb33ef-236a\"\r\nexpires: Sun, 23 Aug 2026 01:32:51 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IT1oXV%2BdatBpHozluk%2Bq2WmupyEhSFLzP%2BWn%2Br1idYHESDEVQP1TKysG%2F2h5obBlxHtVTDV4erJM%2BXhL3DfkwKesJuDbY57fsiBU5xTWn5Wm3dDVeiC1t9x0CdtWIow%2F\"}]}\r\ncf-ray: a1ff2c65b81b0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9066,"size_decoded":9586,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", progressive, precision 8, 320x240, components 3","md5":"f13215a1542873c2eab114851919b3b4","sha1":"026e2bfda2bbc72151c7d2a2d0389af3fadbde98","sha256":"29f627c2b40927aaa5c4a17b8de98eb3ae891c96a055f43de658b626435ca8c5","sha512":"5a64d3f2640a46abebe90f51852eaa617dea7075209bd02c0058a2516eeed4006e5521373bf7b15775f68df085176d253694b6429972b0159309aaf0434292bb","ssdeep":"192:Xw+zUdtSZLGMejWqJjb+cXb8p1es9gMMNERQAlbq6hBKh6wpdqkLWP:XKLSZ6jBJftXATLCERQe1B7gq0WP","tlshash":"e312c16683c08a63d55d9e3d0144069225e8647b5cfee766efb21b0d1f357c486e007b","first_seen":"2026-07-04T10:14:55.967205Z","last_seen":"2026-07-24T01:33:22.049913Z","times_seen":6,"resource_available":false,"data":null}},"time_used":464,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":464,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"horaxhora.com/upload/20251024/video_af795e.jpg","fqdn":"horaxhora.com","domain":"horaxhora.com","tld":"com"},"ip":{"addr":"104.21.21.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://horaxhora.com/","date":"2026-07-24T01:32:51.483Z","timestamp":1784856771483,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"horaxhora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 05:18:00 GMT","end":"Sun, 11 Oct 2026 06:15:19 GMT"},"fingerprint":{"sha1":"F5:20:F7:C6:E5:FC:59:D1:7D:28:E8:B8:99:DC:B4:25:50:44:A9:A9","sha256":"23:96:22:B5:E9:3F:08:AD:81:BB:7D:90:E7:70:36:40:76:FF:B4:3C:DD:69:DC:EA:EB:3D:1C:02:2B:12:6B:F0"}}},"request":{"raw":"GET /upload/20251024/video_af795e.jpg HTTP/1.1\r\nHost: horaxhora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://horaxhora.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 24 Jul 2026 01:32:51 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 24 Oct 2025 07:52:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"68fb3055-32e1\"\r\nexpires: Sun, 23 Aug 2026 01:32:51 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qpD9peUtzwMQtljFwEEFtv08jQy6xgL6PPRoGHoUIEVXuCG8vG344Jgaul2G7085DEUqb85pGaeFOSG2W9fsXf78R73ZLm7wYkfsmb9OdA55i7K1AiybYFHxPNLhj0DG\"}]}\r\ncf-ray: a1ff2c65c8200b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13025,"size_decoded":13676,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", progressive, precision 8, 300x168, components 3","md5":"b2abf733dacfe666899556cc3652e267","sha1":"7136c1a4115d84427b78db0d709b9aeaad10bdf8","sha256":"b27b58263742ad0952fd32389e282b1ee0879c31f42c3795049c04a669c111e4","sha512":"12cdb14c8028b1391b5ee2f43a5d40a3859db2cfe39c9d94a6ea81d44fbb905c382e1330b3575ae5c8804d646d6a66e181f7e438746a8ed8f91e8c7a90973727","ssdeep":"192:Tk5Gq4zEQrsrcRAVq1uAc0N69G3rOi9ga3xKNO9e+6Wr6Nj92XIAKLabaXX:KGIyAM1uAr3bO2hKKebM65vfpn","tlshash":"4242d17d43869129db2ca2349ec5054abf69cd8928869e0f0c75591c6f3cbd0bef2661","first_seen":"2026-07-04T10:14:55.981797Z","last_seen":"2026-07-24T01:33:22.050883Z","times_seen":6,"resource_available":false,"data":null}},"time_used":473,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":473,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"horaxhora.com/vlxx/common.js","fqdn":"horaxhora.com","domain":"horaxhora.com","tld":"com"},"ip":{"addr":"104.21.21.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://horaxhora.com/","date":"2026-07-24T01:32:56.423Z","timestamp":1784856776423,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"horaxhora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 05:18:00 GMT","end":"Sun, 11 Oct 2026 06:15:19 GMT"},"fingerprint":{"sha1":"F5:20:F7:C6:E5:FC:59:D1:7D:28:E8:B8:99:DC:B4:25:50:44:A9:A9","sha256":"23:96:22:B5:E9:3F:08:AD:81:BB:7D:90:E7:70:36:40:76:FF:B4:3C:DD:69:DC:EA:EB:3D:1C:02:2B:12:6B:F0"}}},"request":{"raw":"GET /vlxx/common.js HTTP/1.1\r\nHost: horaxhora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://horaxhora.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 24 Jul 2026 01:32:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Jul 2026 14:54:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a491ebd-18a7\"\r\nexpires: Fri, 24 Jul 2026 13:32:56 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tlnKtwnQO3ugCbJCvguz9mgrO09t0zUGtIwgVsjOpElj23hwVqcrNVnke4DGKuQZBgckocNtHB3d%2B%2FsxrddR%2BLkhgoofmt8EF%2BFlLZMwayqUgT1lVCXIaQR%2Fcce5Pom3\"}]}\r\ncf-ray: a1ff2c84a8540b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6311,"size_decoded":2709,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"4ab590953996821a24f2b994d737d02e","sha1":"df3f316697c45536a69f8ce71bb301c901b38dfb","sha256":"675044812878ebdc700fb9a1286eb19d5454945f11eedbb90b9b5a0a2c840aaf","sha512":"e89f613b28bd1dc2f3abc3ad3436c408c220510def113ee09af1f7303660a4db132b49c693b22f37bcc9a6926b9258de4dbeeff6f039639b600f768bd9c7774c","ssdeep":"192:Hng1PQCiZsPxYOJa9HSEwe/Xk0mZGs7xlHFaX2sOhAxKDald:Hg+/X257xlHYX2snxWald","tlshash":"c9d10038adb311228077c17f2bbf6954f160502b2b02dd5e7adcca2c5fd1e58a5ab394","first_seen":"2026-07-04T20:29:59.539114Z","last_seen":"2026-07-24T01:33:22.051888Z","times_seen":60,"resource_available":true,"data":null}},"time_used":466,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":466,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"horaxhora.com/upload/20251024/video_3b69e2.jpg","fqdn":"horaxhora.com","domain":"horaxhora.com","tld":"com"},"ip":{"addr":"104.21.21.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://horaxhora.com/","date":"2026-07-24T01:32:51.465Z","timestamp":1784856771465,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"horaxhora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 05:18:00 GMT","end":"Sun, 11 Oct 2026 06:15:19 GMT"},"fingerprint":{"sha1":"F5:20:F7:C6:E5:FC:59:D1:7D:28:E8:B8:99:DC:B4:25:50:44:A9:A9","sha256":"23:96:22:B5:E9:3F:08:AD:81:BB:7D:90:E7:70:36:40:76:FF:B4:3C:DD:69:DC:EA:EB:3D:1C:02:2B:12:6B:F0"}}},"request":{"raw":"GET /upload/20251024/video_3b69e2.jpg HTTP/1.1\r\nHost: horaxhora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://horaxhora.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 24 Jul 2026 01:32:51 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 24 Oct 2025 08:26:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"68fb3840-82fe\"\r\nexpires: Sun, 23 Aug 2026 01:32:51 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Qr%2FoJewdA9RTT4q5BiCEbjjEfiv39zWBsMnJQbpmtVW8xqUV6xK4bnRNxInIWFDVIHfSAhZUJA9CFHznOXY3HIUYwQx3O%2BrefCbViiS%2BzKRAy3JbotCuv8xAIgCZkdI\"}]}\r\ncf-ray: a1ff2c65a8120b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33534,"size_decoded":34206,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", progressive, precision 8, 527x350, components 3","md5":"90d82687b007b3e7d4a736f17ff19fe7","sha1":"85635620271dd7c9d2e4f1d862ab092f433c3177","sha256":"6ead4e12c00921da1d403e997bc5de9d3bd6e1236efeb58ff7dc2573070eae30","sha512":"57b65a78fa6676fc5f7bc1c7f39396ad277e492cdb7a488755437a8a69847f28d0f6130daf55a87114ae52e4d4ffbe8f62b30181b3a68637578d0e0cedc284ca","ssdeep":"768:k4Fv+NvLaeMuwvxLoxK9jOr2ULaqoVvPnQoC1sD7xVzx26E:lc2eMubKdOrvoVvDVbvE","tlshash":"4fe2f13a86898977d8ed1c7bc14e8a45b8dbf112a2c9322eb1535c3de3da5f838915c4","first_seen":"2026-07-04T10:14:55.996589Z","last_seen":"2026-07-24T01:33:22.052468Z","times_seen":6,"resource_available":false,"data":null}},"time_used":699,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":472,"receive":227,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"horaxhora.com/upload/20251024/video_d55e4d.jpg","fqdn":"horaxhora.com","domain":"horaxhora.com","tld":"com"},"ip":{"addr":"104.21.21.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://horaxhora.com/","date":"2026-07-24T01:32:51.468Z","timestamp":1784856771468,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"horaxhora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 05:18:00 GMT","end":"Sun, 11 Oct 2026 06:15:19 GMT"},"fingerprint":{"sha1":"F5:20:F7:C6:E5:FC:59:D1:7D:28:E8:B8:99:DC:B4:25:50:44:A9:A9","sha256":"23:96:22:B5:E9:3F:08:AD:81:BB:7D:90:E7:70:36:40:76:FF:B4:3C:DD:69:DC:EA:EB:3D:1C:02:2B:12:6B:F0"}}},"request":{"raw":"GET /upload/20251024/video_d55e4d.jpg HTTP/1.1\r\nHost: horaxhora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://horaxhora.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 24 Jul 2026 01:32:51 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 24 Oct 2025 08:23:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"68fb379f-6ca3\"\r\nexpires: Sun, 23 Aug 2026 01:32:51 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m0tK0PKd4YLmjLRFG93GnEtvV7OZbDJ1ZSTlYcrPblYosoqTeDqqDgV64u13LWPWteKL0McQcxhp4qxD2LlGajRPLBxJOObl9rR5YraP2aHLbx%2FVpAXBP7%2FzxskDopae\"}]}\r\ncf-ray: a1ff2c65a8130b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27811,"size_decoded":28447,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", progressive, precision 8, 400x533, components 3","md5":"ea009e4df98c811dc2c622b442cbfaed","sha1":"903b119cc6b67ff47ac7c3d833b939b8a504d810","sha256":"e25c426ee4ce7191585748b113f57ed274418087958abede7c1635f11289eb7c","sha512":"ec2dd41f819f191355474a3039460da07b309be0184cbfbaf7128c2348cf312468912b03ba748f721ba650ea14e5403536627d1a7bd82542f4c56f87f65e8c84","ssdeep":"384:z1dvdeFcHV5eaLKQfM9gcwn+ILv5NZ1VvMQZfLAMpC2tGQWkgHZ0LWyE6NWR:zL8EV5tUxbI73VHZfEF2kQWDHZ9oNWR","tlshash":"6fc2e1c3d8b2196ae61f583b413a4200551baf8797b4fe643e183acad5203b5ebd14cf","first_seen":"2026-07-04T10:14:55.961361Z","last_seen":"2026-07-24T01:33:22.053775Z","times_seen":6,"resource_available":false,"data":null}},"time_used":696,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":470,"receive":226,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"horaxhora.com/upload/20251024/video_40d1ae.jpg","fqdn":"horaxhora.com","domain":"horaxhora.com","tld":"com"},"ip":{"addr":"104.21.21.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://horaxhora.com/","date":"2026-07-24T01:32:51.471Z","timestamp":1784856771471,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"horaxhora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 05:18:00 GMT","end":"Sun, 11 Oct 2026 06:15:19 GMT"},"fingerprint":{"sha1":"F5:20:F7:C6:E5:FC:59:D1:7D:28:E8:B8:99:DC:B4:25:50:44:A9:A9","sha256":"23:96:22:B5:E9:3F:08:AD:81:BB:7D:90:E7:70:36:40:76:FF:B4:3C:DD:69:DC:EA:EB:3D:1C:02:2B:12:6B:F0"}}},"request":{"raw":"GET /upload/20251024/video_40d1ae.jpg HTTP/1.1\r\nHost: horaxhora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://horaxhora.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 24 Jul 2026 01:32:51 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 24 Oct 2025 08:20:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"68fb36bf-25f1\"\r\nexpires: Sun, 23 Aug 2026 01:32:51 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yxu6Y2VdqanYfJdVCE2CRDT7qgbLv6%2FRWIIYzNvfI6vHdY09xmhyhXXOEZkPi%2FWpEwPkcd0GGQ4KZL0EMZzzos1bTyIEbJft0bprDVARaScpMWaD7zXbs4nDUvEm0gkY\"}]}\r\ncf-ray: a1ff2c65b8160b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9713,"size_decoded":10325,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", progressive, precision 8, 287x210, components 3","md5":"62d09595534a09dca74794417c577893","sha1":"d1be85d82e674bd87f30b66bf6eda173084de669","sha256":"cf60e6e3ed7dad590d4047592c8e627c1b4a6a2fe82cc3a329d83b44093cc03e","sha512":"a5d1b51fac7f34a9dfa314c2518d88de8c73f94163f16abd9e7d30bd436f78c4bfa7127feddc6b41efc131211e181919e8ae3c0a3f37df4c3d0c21068b5e2308","ssdeep":"192:RIkFKPOyPYFaTGK7KdHlsNqzeS7KqTmKsTY97N6CxOB6BaWLHeQbC4+AR3v6:RtErPT7KwUVqKgYRMB6QWZC4+M3y","tlshash":"4112cf075c75b64ec8af62b3157ba639bf148f788ccc6d230658387ec370162db61996","first_seen":"2026-07-04T10:14:55.997508Z","last_seen":"2026-07-24T01:33:22.054849Z","times_seen":6,"resource_available":false,"data":null}},"time_used":470,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":470,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"horaxhora.com/upload/20251024/video_06c716.jpg","fqdn":"horaxhora.com","domain":"horaxhora.com","tld":"com"},"ip":{"addr":"104.21.21.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://horaxhora.com/","date":"2026-07-24T01:32:51.464Z","timestamp":1784856771464,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"horaxhora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 05:18:00 GMT","end":"Sun, 11 Oct 2026 06:15:19 GMT"},"fingerprint":{"sha1":"F5:20:F7:C6:E5:FC:59:D1:7D:28:E8:B8:99:DC:B4:25:50:44:A9:A9","sha256":"23:96:22:B5:E9:3F:08:AD:81:BB:7D:90:E7:70:36:40:76:FF:B4:3C:DD:69:DC:EA:EB:3D:1C:02:2B:12:6B:F0"}}},"request":{"raw":"GET /upload/20251024/video_06c716.jpg HTTP/1.1\r\nHost: horaxhora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://horaxhora.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 24 Jul 2026 01:32:51 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 24 Oct 2025 08:28:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"68fb38b3-5393\"\r\nexpires: Sun, 23 Aug 2026 01:32:51 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XwBQtWiRjL5VXPU9huLBT4dqXJ9m%2Fh2Wq8W2KHs9TGje9QK3WSpm2GrO91CMU%2FZfA42JY9VILtzFNEWazA9p6dB8oVM8mRxLo1r0J%2BbQwuPdDa5GW63vcV%2BXpcB2rYXp\"}]}\r\ncf-ray: a1ff2c65a8110b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21395,"size_decoded":22029,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", progressive, precision 8, 500x350, components 3","md5":"96c962c2222779668e654adde72d7c14","sha1":"479c1ac70f627d62f4a0825ecc6bfd3ba33b27ad","sha256":"1612a013479a6890ed9a22042fe970420bda8bcc62811f9947efb9504a8c02e8","sha512":"c8965757988bc705d90b2f03c7191b0614cbd3b57829404cf3da0c497c21d63762d74e53bc323609a7cde502d2e5819c8cf18ae6c259e817cc8dea093e5acdfd","ssdeep":"384:c+HWzuChUuv+GucxDNsWePgn0XksykTabfBjLa/sGSy7KXn:ccWSChUuXucxNkPj0s/T2Bna/tSy7KXn","tlshash":"fba2d0463e433869f94e0f36e9f92315f600ef84979a9f2b18668c667f09ac349964c4","first_seen":"2025-11-25T22:40:02.571568Z","last_seen":"2026-07-24T01:33:22.055493Z","times_seen":7,"resource_available":false,"data":null}},"time_used":685,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":462,"receive":223,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"horaxhora.com/template/2-live/static/font-awesome/all.css","fqdn":"horaxhora.com","domain":"horaxhora.com","tld":"com"},"ip":{"addr":"104.21.21.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://horaxhora.com/","date":"2026-07-24T01:32:50.628Z","timestamp":1784856770628,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"horaxhora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 05:18:00 GMT","end":"Sun, 11 Oct 2026 06:15:19 GMT"},"fingerprint":{"sha1":"F5:20:F7:C6:E5:FC:59:D1:7D:28:E8:B8:99:DC:B4:25:50:44:A9:A9","sha256":"23:96:22:B5:E9:3F:08:AD:81:BB:7D:90:E7:70:36:40:76:FF:B4:3C:DD:69:DC:EA:EB:3D:1C:02:2B:12:6B:F0"}}},"request":{"raw":"GET /template/2-live/static/font-awesome/all.css HTTP/1.1\r\nHost: horaxhora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://horaxhora.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 24 Jul 2026 01:32:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Jan 2026 11:01:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6964d473-1e90\"\r\nexpires: Fri, 24 Jul 2026 13:32:50 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qsdD0LzPguE9ic6b8lOzonTFa4TMdKam7aq7B5VOpRLFRFH7MhAlPWt5Jf%2FYLX9Az%2F1LrbCKLGMlcMeWw7ayh%2BLAvsycNPzykHot%2F1XK6Kv%2B%2FlJvocRPClPDS8EJNrP%2F\"}]}\r\ncf-ray: a1ff2c606ff20b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7824,"size_decoded":3074,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"5435be1a00036d7b0da668fb0edddb68","sha1":"78f79458db52c36ce5e6bde87c3a18470cbb79fe","sha256":"473b2f1daa59cb6053ccc3b84b349341edee9ff86de0158c9cf75059ee53b430","sha512":"73a0599e598d443b32dfbbf6961ef41b2a5596ccc0ccb4ed4c633f1925589baa761b5938b51260427c8e3a56485f8f52dfbc170a5c5effc7d3b6d9818a4d9d89","ssdeep":"192:P2QFFx3iM9f2GW97dt+4UTIwSJA5cqRy6O9BbHa9gp7kCY:zPW5tJU5hiGYjY","tlshash":"6cf123475b67054bb957d0a46fb3538633299103d10aebbc7f9472a8cfce1a4c971b88","first_seen":"2026-06-11T11:23:11.149827Z","last_seen":"2026-07-24T01:33:22.056297Z","times_seen":15,"resource_available":false,"data":null}},"time_used":470,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":470,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"horaxhora.com/template/2-live/static/main.js","fqdn":"horaxhora.com","domain":"horaxhora.com","tld":"com"},"ip":{"addr":"104.21.21.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://horaxhora.com/","date":"2026-07-24T01:32:50.639Z","timestamp":1784856770639,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"horaxhora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 05:18:00 GMT","end":"Sun, 11 Oct 2026 06:15:19 GMT"},"fingerprint":{"sha1":"F5:20:F7:C6:E5:FC:59:D1:7D:28:E8:B8:99:DC:B4:25:50:44:A9:A9","sha256":"23:96:22:B5:E9:3F:08:AD:81:BB:7D:90:E7:70:36:40:76:FF:B4:3C:DD:69:DC:EA:EB:3D:1C:02:2B:12:6B:F0"}}},"request":{"raw":"GET /template/2-live/static/main.js HTTP/1.1\r\nHost: horaxhora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://horaxhora.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 24 Jul 2026 01:32:51 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Dec 2025 11:50:45 GMT\r\npriority: u=3,i=?0\r\netag: \"6932c715-0\"\r\nexpires: Fri, 24 Jul 2026 13:32:50 GMT\r\ncache-control: max-age=43200\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8BlZVF8Rt5fWvOtN%2Bv%2BNfmqW2zckHcrFXRDzcemUITEgFv86LpBrfCHQsr1WW4IHcaEQPzv7aDZj9%2B4BZ64eBeDFe%2Fpk1RBH70HxfUdKavzt%2BhfnP8RxCt1Ng7gcDSwU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1ff2c607ff70b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":736,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T04:50:52.682529Z","times_seen":17493390,"resource_available":true,"data":null}},"time_used":468,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":468,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"horaxhora.com/media/img-x/banner-xem-bo.gif?430","fqdn":"horaxhora.com","domain":"horaxhora.com","tld":"com"},"ip":{"addr":"104.21.21.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://horaxhora.com/","date":"2026-07-24T01:32:56.897Z","timestamp":1784856776897,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"horaxhora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 05:18:00 GMT","end":"Sun, 11 Oct 2026 06:15:19 GMT"},"fingerprint":{"sha1":"F5:20:F7:C6:E5:FC:59:D1:7D:28:E8:B8:99:DC:B4:25:50:44:A9:A9","sha256":"23:96:22:B5:E9:3F:08:AD:81:BB:7D:90:E7:70:36:40:76:FF:B4:3C:DD:69:DC:EA:EB:3D:1C:02:2B:12:6B:F0"}}},"request":{"raw":"GET /media/img-x/banner-xem-bo.gif?430 HTTP/1.1\r\nHost: horaxhora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://horaxhora.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 24 Jul 2026 01:32:57 GMT\r\ncontent-type: image/gif\r\nlast-modified: Thu, 30 Apr 2026 10:23:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"69f32db1-32bb7\"\r\nexpires: Sun, 23 Aug 2026 01:32:57 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kDPkUzicgJQoEkRwY39zfo2TgFwGSCHtjl3ZJW6ljQ61xIR6EYna03AUZ3AdaGlo%2BPHwwH0Aeg368BooDBCmvg2HVFYcyNPC6CJabxTT5%2FmzBYrpA9jBn%2FJ%2F8yRs3Ew%2B\"}]}\r\ncf-ray: a1ff2c8798560b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":207799,"size_decoded":207188,"mime_type":"image/gif","magic":"GIF image data, version 89a, 728 x 90","md5":"b8a379e288f1482aa48fbd26b3f1cf85","sha1":"ab35a3c92e2606a898ae80b7dda676fa3d1b374d","sha256":"75b5c284955e5e77a6dd884a7e898e136b585e94fd866d77968520267daf38cd","sha512":"9d6b003b20a73d2247ac0157038bf06749514eff4266ac752e8d2f66e310974e648c0f2fc6ecfa4ad18871158e3c8b2fd71e3e9bce7b374d2500a2ac3b67adbd","ssdeep":"3072:SiptOfgZNB7Own3Qhf0np2GGZ2QhfDfVTyKLLW9ffYOMU+XPvMUVqNXffYOMN:Svsviw3EM272EZTyeAtMU+/EdtMN","tlshash":"cc1412d8c01d5166fa1917178160b3887253bcc6f4b8781fca24bf1ee1797b326a9a3c","first_seen":"2026-05-04T19:33:31.339028Z","last_seen":"2026-07-24T01:33:22.057306Z","times_seen":91,"resource_available":false,"data":null}},"time_used":3008,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":475,"receive":2533,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"horaxhora.com/media/img-x/728x90.gif","fqdn":"horaxhora.com","domain":"horaxhora.com","tld":"com"},"ip":{"addr":"104.21.21.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://horaxhora.com/","date":"2026-07-24T01:32:56.899Z","timestamp":1784856776899,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"horaxhora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 05:18:00 GMT","end":"Sun, 11 Oct 2026 06:15:19 GMT"},"fingerprint":{"sha1":"F5:20:F7:C6:E5:FC:59:D1:7D:28:E8:B8:99:DC:B4:25:50:44:A9:A9","sha256":"23:96:22:B5:E9:3F:08:AD:81:BB:7D:90:E7:70:36:40:76:FF:B4:3C:DD:69:DC:EA:EB:3D:1C:02:2B:12:6B:F0"}}},"request":{"raw":"GET /media/img-x/728x90.gif HTTP/1.1\r\nHost: horaxhora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://horaxhora.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 24 Jul 2026 01:32:57 GMT\r\ncontent-type: image/gif\r\nlast-modified: Sun, 12 Jul 2026 13:54:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a539cae-50e8d\"\r\nexpires: Sun, 23 Aug 2026 01:32:57 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NkmPL7%2FJzNAZ1fwZaoS8S%2FE8vJase6SXqCNJhaKFKqJDMQ5gyKPt6QW4swLNq2QB6JAhswtmjDXdhOuGc%2BMXumVwpz2hqfJ81inHZjZNr2ObWZbXUGY71AWMzKQYFW0I\"}]}\r\ncf-ray: a1ff2c8798580b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":331405,"size_decoded":314221,"mime_type":"image/gif","magic":"GIF image data, version 89a, 728 x 90","md5":"85e2b7c3cc1a6975eb4bf5c91849e011","sha1":"ed7d96a802f2fea3204029941b1b1693db55274d","sha256":"19575d7634c4ec34660a695c410a1291d50dcbed75f5633cde25be8ac6f22ebe","sha512":"6535e467637486b87ef42eb610d927e0bcc3a3b79ee3abf334eac9548054d47197e1beefab78cec7f2e340ed7ce19eb36265d999cfdc4e1e546f5a2fb8dd6063","ssdeep":"6144:RplGGVtOlv6ScB/pQ67Ka1FqQpQdFbH0Cz0WwmGZr3+77:RpZtOQrxpB751QQp0t5wmGl3+77","tlshash":"05641205535e49502fffbe37870d3ebfa8824cc867e6c8866fd5596162306b02d92f91","first_seen":"2026-07-12T19:06:17.914471Z","last_seen":"2026-07-24T01:33:22.057839Z","times_seen":51,"resource_available":false,"data":null}},"time_used":1366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":465,"receive":901,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"horaxhora.com/template/2-live/static/media.js","fqdn":"horaxhora.com","domain":"horaxhora.com","tld":"com"},"ip":{"addr":"104.21.21.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://horaxhora.com/","date":"2026-07-24T01:32:50.637Z","timestamp":1784856770637,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"horaxhora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 05:18:00 GMT","end":"Sun, 11 Oct 2026 06:15:19 GMT"},"fingerprint":{"sha1":"F5:20:F7:C6:E5:FC:59:D1:7D:28:E8:B8:99:DC:B4:25:50:44:A9:A9","sha256":"23:96:22:B5:E9:3F:08:AD:81:BB:7D:90:E7:70:36:40:76:FF:B4:3C:DD:69:DC:EA:EB:3D:1C:02:2B:12:6B:F0"}}},"request":{"raw":"GET /template/2-live/static/media.js HTTP/1.1\r\nHost: horaxhora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://horaxhora.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 24 Jul 2026 01:32:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 17 Nov 2025 03:54:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"691a9c63-d89\"\r\nexpires: Fri, 24 Jul 2026 13:32:50 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h55Qbqb8qMEZxtD765CjYlqVZkoOBk9bRUMXG2MEsaFlmU%2F0xuR3BsAQakw8fp8Q%2BhA%2FKZ0TK30zgSuh25N5wFg%2BtF6j6APV05CTNMmE%2BsRoLqSScdWHFklFPYjOHKhq\"}]}\r\ncf-ray: a1ff2c607ff60b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3465,"size_decoded":2078,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3237), with no line terminators","md5":"9f3431f677ef0f3afd44960cf88a9b19","sha1":"bdb0efaa39a20bac1fbc78651becdbf82f2faa0f","sha256":"2fc2715800d253b12edd0cb4c71688660e1c4e7c2f6431381b44e150b4de8409","sha512":"19b2051393efc2a843e13fe2671c8981fef935e338e06bd6b3a5226221eda99accdf027a015b5576e247bbd9707ca85482c9f0172caa7d61ad4199389dc66fbc","ssdeep":"","tlshash":"17610f9fe1a7f1ba477a396512e330a222135f9bcb541042f4a605e50a8fec06077f1f","first_seen":"2026-06-11T11:23:11.104486Z","last_seen":"2026-07-24T01:33:22.058353Z","times_seen":15,"resource_available":true,"data":null}},"time_used":470,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":470,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"horaxhora.com/upload/20251024/video_e081f8.jpg","fqdn":"horaxhora.com","domain":"horaxhora.com","tld":"com"},"ip":{"addr":"104.21.21.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://horaxhora.com/","date":"2026-07-24T01:32:51.459Z","timestamp":1784856771459,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"horaxhora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 05:18:00 GMT","end":"Sun, 11 Oct 2026 06:15:19 GMT"},"fingerprint":{"sha1":"F5:20:F7:C6:E5:FC:59:D1:7D:28:E8:B8:99:DC:B4:25:50:44:A9:A9","sha256":"23:96:22:B5:E9:3F:08:AD:81:BB:7D:90:E7:70:36:40:76:FF:B4:3C:DD:69:DC:EA:EB:3D:1C:02:2B:12:6B:F0"}}},"request":{"raw":"GET /upload/20251024/video_e081f8.jpg HTTP/1.1\r\nHost: horaxhora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://horaxhora.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 24 Jul 2026 01:32:51 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 24 Oct 2025 08:32:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"68fb39a5-2425\"\r\nexpires: Sun, 23 Aug 2026 01:32:51 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yEwzl17PMiEqpBXLfsgtiBlS6oWUTuvRk0Mtzd4CyeFVEt9FgjeLe0SvV9rufYLp1aSPyCPuyfXNfBfneXng9Qh67Z3ZqqCuJdZEKGnqPiLe7oI5eJwIwBlzBZnOAGqU\"}]}\r\ncf-ray: a1ff2c65a80e0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9253,"size_decoded":9736,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", progressive, precision 8, 352x198, components 3","md5":"42e32319d4f41f3457c770cae5aec3ad","sha1":"60bf0df8d956d634190234f4cba06cc49b6363e5","sha256":"dda45033d7ef466f6279704c55579e3073257342dc7f0af37eef38f0e411a19e","sha512":"1c5e4a5a8eafef718429d805122d3ade20301ef0e3661489d06c989b549dd163758712b8d19916f016cba6457e6b6d5553c7f369fb86836b1ebfcf259a09cf07","ssdeep":"192:BDNyJx7/8WgUkOxW3rV3KcFftyxzlEq4gBEHmN85TFmIGuc+erN8lhl:Bhyz7nGiOr6EYBcmNqou6N8fl","tlshash":"63129e3bf3a24e09d45f057ccce66230bb10a941992589cfa9cba8bc5775cdecb94069","first_seen":"2026-07-04T10:14:55.989268Z","last_seen":"2026-07-24T01:33:22.058854Z","times_seen":6,"resource_available":false,"data":null}},"time_used":467,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":467,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"horaxhora.com/upload/20251024/video_449934.jpg","fqdn":"horaxhora.com","domain":"horaxhora.com","tld":"com"},"ip":{"addr":"104.21.21.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://horaxhora.com/","date":"2026-07-24T01:32:51.463Z","timestamp":1784856771463,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"horaxhora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 05:18:00 GMT","end":"Sun, 11 Oct 2026 06:15:19 GMT"},"fingerprint":{"sha1":"F5:20:F7:C6:E5:FC:59:D1:7D:28:E8:B8:99:DC:B4:25:50:44:A9:A9","sha256":"23:96:22:B5:E9:3F:08:AD:81:BB:7D:90:E7:70:36:40:76:FF:B4:3C:DD:69:DC:EA:EB:3D:1C:02:2B:12:6B:F0"}}},"request":{"raw":"GET /upload/20251024/video_449934.jpg HTTP/1.1\r\nHost: horaxhora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://horaxhora.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 24 Jul 2026 01:32:51 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 24 Oct 2025 08:30:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"68fb391d-589e\"\r\nexpires: Sun, 23 Aug 2026 01:32:51 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Du6XAKgqqDFDb5DNFyH0jJj9Ykbshn%2BOequdFM8Mn5hX5AoFo8Z66X2tNUy1H%2FN0ozMkc8gUaq2j%2FP1txozT1%2BrJ6oimVBcCRLuC5Y8LpMPBjojkThGLqMIow6yFqif2\"}]}\r\ncf-ray: a1ff2c65a8100b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22686,"size_decoded":23307,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", progressive, precision 8, 500x350, components 3","md5":"b83272059482d3885bde53322d9dafab","sha1":"9710514c14b725c83513dd871ff94c0724010528","sha256":"3fb4f35cecc17b343bab2c8d0d2a6441351a8cd164941682e16a5429756e9e08","sha512":"24088fa34a19f36166d635eed2cfebb335b578c10b41d006430b6f80658546ff813c9880fe2a74a213fea216817e317a2f5d951644556895fddb40ff07806622","ssdeep":"384:VQbowC5SysoEcEcgjPz+f+ZQAhUq9dvbRD9ghPoW9Gn0qm1MOGhdL1BvgnA5fip1:VidRoEcEcgjSmZQmfjHghOV8MOkDvsK2","tlshash":"96a2e1ba577cd8a5e40e2b379659b7114dc2d2820b8f075f3540fd3877e34da640299c","first_seen":"2026-07-04T10:14:55.984101Z","last_seen":"2026-07-24T01:33:22.05988Z","times_seen":6,"resource_available":false,"data":null}},"time_used":696,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":470,"receive":226,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"horaxhora.com/upload/20251024/video_876f5a.jpg","fqdn":"horaxhora.com","domain":"horaxhora.com","tld":"com"},"ip":{"addr":"104.21.21.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://horaxhora.com/","date":"2026-07-24T01:32:51.470Z","timestamp":1784856771470,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"horaxhora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 05:18:00 GMT","end":"Sun, 11 Oct 2026 06:15:19 GMT"},"fingerprint":{"sha1":"F5:20:F7:C6:E5:FC:59:D1:7D:28:E8:B8:99:DC:B4:25:50:44:A9:A9","sha256":"23:96:22:B5:E9:3F:08:AD:81:BB:7D:90:E7:70:36:40:76:FF:B4:3C:DD:69:DC:EA:EB:3D:1C:02:2B:12:6B:F0"}}},"request":{"raw":"GET /upload/20251024/video_876f5a.jpg HTTP/1.1\r\nHost: horaxhora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://horaxhora.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 24 Jul 2026 01:32:51 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 24 Oct 2025 08:20:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"68fb36d8-4e97\"\r\nexpires: Sun, 23 Aug 2026 01:32:51 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nC94OYYTvB6xRbbI3%2BSctIx3cKuhnD9jbVzoN%2F1DM5FEfitnhU0Hr%2F%2BLpa3I6Ujm4luis5zcKVmxg91%2BO76YjSE%2FZjDSGoEmdrmf3LNC1U0zk9OT2ZsJLBgxQvWkBbJG\"}]}\r\ncf-ray: a1ff2c65b8150b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20119,"size_decoded":20751,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", progressive, precision 8, 287x204, components 3","md5":"f4dcfc7da419a2140035b7d63f9254ec","sha1":"1cc9762a4a7ffaac517086d1189791779f23f7d3","sha256":"6360e82f36661189a27e78451752c7d70534cdfc5adf335f80ec515d60ac82d6","sha512":"a737f9fbe9ad85577dc3f5139f3137da51258ab371565632c77b7d37bb3d7749536a676daade8ddabea74be1d52afd12145f670d8a291922755f36e64e4f1a04","ssdeep":"384:EFH+MuYpU8BHWnao6XSAddj37LPt4f4QOEJY0/pCvxZb9SXWZ0qPKySWYToK:aHv9BB2amodD7D3pEyTx7IWdPR5Sx","tlshash":"1092d0f779545f50d28d48fb141d1202a6e98f999b407ff8da005b1307653daeeca2e2","first_seen":"2026-07-04T10:14:55.980843Z","last_seen":"2026-07-24T01:33:22.060915Z","times_seen":6,"resource_available":false,"data":null}},"time_used":701,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":473,"receive":228,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"horaxhora.com/upload/20251024/video_5df3d9.jpg","fqdn":"horaxhora.com","domain":"horaxhora.com","tld":"com"},"ip":{"addr":"104.21.21.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://horaxhora.com/","date":"2026-07-24T01:32:51.475Z","timestamp":1784856771475,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"horaxhora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 05:18:00 GMT","end":"Sun, 11 Oct 2026 06:15:19 GMT"},"fingerprint":{"sha1":"F5:20:F7:C6:E5:FC:59:D1:7D:28:E8:B8:99:DC:B4:25:50:44:A9:A9","sha256":"23:96:22:B5:E9:3F:08:AD:81:BB:7D:90:E7:70:36:40:76:FF:B4:3C:DD:69:DC:EA:EB:3D:1C:02:2B:12:6B:F0"}}},"request":{"raw":"GET /upload/20251024/video_5df3d9.jpg HTTP/1.1\r\nHost: horaxhora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://horaxhora.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 24 Jul 2026 01:32:51 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 24 Oct 2025 08:09:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"68fb341e-49ab\"\r\nexpires: Sun, 23 Aug 2026 01:32:51 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ynDoj%2FXLYrVCXArX4rfcqKSBMICHz1Szx8zMwMRVbLB0XKGvGVViXCUuegT40bpqobbyEloAp24Sb9B7ydp8kNVWBbkXgzzWGqIo2ce3zEPwqjMSLbDZ1MxBOI%2BQouC9\"}]}\r\ncf-ray: a1ff2c65b81a0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18859,"size_decoded":19416,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", progressive, precision 8, 410x300, components 3","md5":"68c9db1acf1993c9b0497b341c67efa4","sha1":"dbe24a07c80cd6e154e201a53fe0210d39dad22e","sha256":"ad64e9a7356913a962ac097764136b51b24b134f9ddc585caceb7dedd2e681ad","sha512":"3c1259f000de6216027a70dbf0c55a2ab5b26c86e2e5e509b889fe9fd4e98655628aebd817b04d03c496012a3cb476a89b3889e5ce82336cb8f56bca21f6aa1a","ssdeep":"384:j2Hm5S8LVWcGnNiVRkojl7E37McI+GB0R5MgL6EGIjG6nR:j2G5TLVy2Rkojl7E315ImMg2XOnR","tlshash":"2f82e1ae5b85b42ae67dc2b1c704d5b90f8ceb4464594b9733046e8eff220bf9c60865","first_seen":"2026-07-04T10:14:55.986706Z","last_seen":"2026-07-24T01:33:22.061839Z","times_seen":7,"resource_available":false,"data":null}},"time_used":689,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":465,"receive":224,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"horaxhora.com/upload/20251024/video_ef729f.jpg","fqdn":"horaxhora.com","domain":"horaxhora.com","tld":"com"},"ip":{"addr":"104.21.21.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://horaxhora.com/","date":"2026-07-24T01:32:51.481Z","timestamp":1784856771481,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"horaxhora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 05:18:00 GMT","end":"Sun, 11 Oct 2026 06:15:19 GMT"},"fingerprint":{"sha1":"F5:20:F7:C6:E5:FC:59:D1:7D:28:E8:B8:99:DC:B4:25:50:44:A9:A9","sha256":"23:96:22:B5:E9:3F:08:AD:81:BB:7D:90:E7:70:36:40:76:FF:B4:3C:DD:69:DC:EA:EB:3D:1C:02:2B:12:6B:F0"}}},"request":{"raw":"GET /upload/20251024/video_ef729f.jpg HTTP/1.1\r\nHost: horaxhora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://horaxhora.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 24 Jul 2026 01:32:51 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 24 Oct 2025 07:59:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"68fb31ea-37bd\"\r\nexpires: Sun, 23 Aug 2026 01:32:51 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=493r%2FBE9TZHUukFSAWU72pNA505bwM%2FqtIQuq0lFGFZjfeNUMTwLLB5qpEjs79Hgy1vAqt8eW96GWgGiO3bX7Br6MKecXEpN9FRdz2B2gY2YmFhgzC9BsfhNvYuioag5\"}]}\r\ncf-ray: a1ff2c65c81f0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14269,"size_decoded":14912,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", progressive, precision 8, 410x300, components 3","md5":"4110ff47e6b00b37d1617e797a02eb6e","sha1":"b41cbe049e1d276bb80e75fc9e7a5317061d8376","sha256":"f5e891cf947d50ea92d851f76cb82d5f27625dfbfbe38fc6e9c20b53c1d66165","sha512":"6a0ffb52a1e1f125f376e6f4693334cbdef952b947dfdd3ceb9425a8e2ef1c6327b3534291827bc45052a2fbdeed7290f97f18af51d2b349ff69a9cf5cfb0ebe","ssdeep":"384:juY/9Gisp9cdJFuTg15cNvtmA7ehghpQ8:juY/oTp9cdJFJy/7ehgL","tlshash":"3152c003d65f9500fb3caa23189f1df8a305eb7825004fa0f7209b65b75e8da8d960e2","first_seen":"2026-07-04T10:14:55.988098Z","last_seen":"2026-07-24T01:33:22.062392Z","times_seen":6,"resource_available":false,"data":null}},"time_used":699,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":472,"receive":227,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"horaxhora.com/template/2-live/style.php","fqdn":"horaxhora.com","domain":"horaxhora.com","tld":"com"},"ip":{"addr":"104.21.21.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://horaxhora.com/","date":"2026-07-24T01:32:50.629Z","timestamp":1784856770629,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"horaxhora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 05:18:00 GMT","end":"Sun, 11 Oct 2026 06:15:19 GMT"},"fingerprint":{"sha1":"F5:20:F7:C6:E5:FC:59:D1:7D:28:E8:B8:99:DC:B4:25:50:44:A9:A9","sha256":"23:96:22:B5:E9:3F:08:AD:81:BB:7D:90:E7:70:36:40:76:FF:B4:3C:DD:69:DC:EA:EB:3D:1C:02:2B:12:6B:F0"}}},"request":{"raw":"GET /template/2-live/style.php HTTP/1.1\r\nHost: horaxhora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://horaxhora.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 24 Jul 2026 01:32:51 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8dw0zvzfWYioHYrToYoocch79nevum0rHsJlX6TCBrU8WHdyz407JlK8Nrq0r22nxwUelGvgx%2BM6mncG2CrcDKhEPqYT5OO3iRxxxPpMsf%2FscaYjk%2F%2BcWJCOcsOp8uq%2F\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a1ff2c606ff30b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":620,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T04:50:52.682529Z","times_seen":17493390,"resource_available":true,"data":null}},"time_used":473,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":473,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"horaxhora.com/upload/20251024/video_64690f.jpg","fqdn":"horaxhora.com","domain":"horaxhora.com","tld":"com"},"ip":{"addr":"104.21.21.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://horaxhora.com/","date":"2026-07-24T01:32:51.474Z","timestamp":1784856771474,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"horaxhora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 05:18:00 GMT","end":"Sun, 11 Oct 2026 06:15:19 GMT"},"fingerprint":{"sha1":"F5:20:F7:C6:E5:FC:59:D1:7D:28:E8:B8:99:DC:B4:25:50:44:A9:A9","sha256":"23:96:22:B5:E9:3F:08:AD:81:BB:7D:90:E7:70:36:40:76:FF:B4:3C:DD:69:DC:EA:EB:3D:1C:02:2B:12:6B:F0"}}},"request":{"raw":"GET /upload/20251024/video_64690f.jpg HTTP/1.1\r\nHost: horaxhora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://horaxhora.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 24 Jul 2026 01:32:51 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 24 Oct 2025 08:14:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"68fb356a-4588\"\r\nexpires: Sun, 23 Aug 2026 01:32:51 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LFxy42n4uEJiz2q4ta9XLI39N7MRea1Tn4GKHAwSD8y3DZllVFwDAh2O4Lcgeq%2FEB0U%2B4D%2B0invZ6rc5G3%2FXzWbW4Q5ypscNB%2FB0t9vWrvfMOceB94yJP2XBvT0UBSyk\"}]}\r\ncf-ray: a1ff2c65b8190b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17800,"size_decoded":18416,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", progressive, precision 8, 350x290, components 3","md5":"2c533af6249efda59b363b0393a8e427","sha1":"bd32444f5327db21cf0d29afd2cf17c816088ee8","sha256":"521d657698e549099abcaac1b0d8dec34119592ad3f0766e03dada9cd9493307","sha512":"8e46d85a77898f88fdb4813f7991151851e4e4734f45dbfcf2204025a0e7e962c69a19dc0e486c6317286c3d341c647f6a358bcff23829d14020c7b54b30698f","ssdeep":"384:idvSb+0aPxur18mSWbYyTsR/5g7GSikrASdsqgLr/Uk:itD0aP0NS5R/5jH/TLbUk","tlshash":"fe82d03fe7b88e36ddeda997670c6710a1b8b4357fba1445a18b942853730f229c4cd2","first_seen":"2026-07-04T10:14:56.000908Z","last_seen":"2026-07-24T01:33:22.062902Z","times_seen":6,"resource_available":false,"data":null}},"time_used":701,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":472,"receive":229,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"horaxhora.com/media/img-x/colascore-gif-728x90.gif","fqdn":"horaxhora.com","domain":"horaxhora.com","tld":"com"},"ip":{"addr":"104.21.21.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://horaxhora.com/","date":"2026-07-24T01:32:56.898Z","timestamp":1784856776898,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"horaxhora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 05:18:00 GMT","end":"Sun, 11 Oct 2026 06:15:19 GMT"},"fingerprint":{"sha1":"F5:20:F7:C6:E5:FC:59:D1:7D:28:E8:B8:99:DC:B4:25:50:44:A9:A9","sha256":"23:96:22:B5:E9:3F:08:AD:81:BB:7D:90:E7:70:36:40:76:FF:B4:3C:DD:69:DC:EA:EB:3D:1C:02:2B:12:6B:F0"}}},"request":{"raw":"GET /media/img-x/colascore-gif-728x90.gif HTTP/1.1\r\nHost: horaxhora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://horaxhora.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 24 Jul 2026 01:32:57 GMT\r\ncontent-type: image/gif\r\nlast-modified: Mon, 20 Jul 2026 02:02:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a5d81d0-49ebd\"\r\nexpires: Sun, 23 Aug 2026 01:32:57 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vriTyz5uRgyYOKZR2mr9WGIH%2BtYkxjBjPpzKGKpVwypDBAJ%2B5l2rHPYUYtbyzBvvNBkZzVv36YbAmYOE1Cg24ScQHKxqiLY4w3RsZU8jGabAtpsAnTPspcyFMJLhAf7Z\"}]}\r\ncf-ray: a1ff2c8798570b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":302781,"size_decoded":301224,"mime_type":"image/gif","magic":"GIF image data, version 89a, 728 x 90","md5":"207c5050af510b9d974e342594ea1730","sha1":"176b8105663e1dc2b1b1039604e5f21c7b753895","sha256":"1f422b9d2c2eccf69899c6a2140627c362528ae8c10c617084b3eb8f92725648","sha512":"4078f0afc8084e3f9f833648fd53e923e138ab64c51540d9cea99c9ff0a2f21f15104a8e59c0bb27a0d659a45e1c11aefb936e7469241b9aa08230d920557524","ssdeep":"3072:rfa1eB40qkZb6YMhITwAB6YMhITwAB6YS044S6DDkzxdprH6jL5B9vNYzVD6Ncc5:uAAlflG4qkzgT6zVD6TQT6zVD6TQ5","tlshash":"b8541207b908d6c0f88e8a351cce6ad0ffb65c4c4d99a3d9b5aaf3d115d0d444aceb86","first_seen":"2026-07-20T10:59:33.825496Z","last_seen":"2026-07-24T01:33:22.06379Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":465,"receive":900,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"horaxhora.com/media/img-x/728x90-live-1.gif","fqdn":"horaxhora.com","domain":"horaxhora.com","tld":"com"},"ip":{"addr":"104.21.21.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://horaxhora.com/","date":"2026-07-24T01:32:56.900Z","timestamp":1784856776900,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"horaxhora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 05:18:00 GMT","end":"Sun, 11 Oct 2026 06:15:19 GMT"},"fingerprint":{"sha1":"F5:20:F7:C6:E5:FC:59:D1:7D:28:E8:B8:99:DC:B4:25:50:44:A9:A9","sha256":"23:96:22:B5:E9:3F:08:AD:81:BB:7D:90:E7:70:36:40:76:FF:B4:3C:DD:69:DC:EA:EB:3D:1C:02:2B:12:6B:F0"}}},"request":{"raw":"GET /media/img-x/728x90-live-1.gif HTTP/1.1\r\nHost: horaxhora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://horaxhora.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 24 Jul 2026 01:32:57 GMT\r\ncontent-type: image/gif\r\nlast-modified: Sat, 10 Jan 2026 13:46:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6962582e-e85b\"\r\nexpires: Sun, 23 Aug 2026 01:32:57 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Q8v7%2FrV%2Fh22oaicxWir%2BlKSfogHCLmuL7dwxjwW4L7qJvapCC70cuIq2GrLjzZ14%2F986s6kfuLpWa27tkmy%2BmaTrpl6xjtwGThC4xyumrdKAkrFeJ2ShpKW4E7U9Pjw\"}]}\r\ncf-ray: a1ff2c87a8590b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59483,"size_decoded":59510,"mime_type":"image/gif","magic":"GIF image data, version 89a, 728 x 90","md5":"b65bc08b99f3b02c7e21dc02c6aa8d95","sha1":"9be6b0c1b52cc1f7760d1f9b04ce50355b6460e5","sha256":"d53815a11ab7e3a5dcc21ca984aa5c04c527d8c8d7ef583e3f12b1df713d08e9","sha512":"40bc2cffa88b8c7c28e07af07e1cb6a5ddc367dafc0ab5d865067c430f5bb52ea7d146703fc42598fb23793fd9bbcae957bafff4065d7104a2e8989b43b04f32","ssdeep":"1536:wVS5t7qRCAq9P28Ev/AMsi7awnQmgWkKr4O+96r7e/37fjiOK:gOtORgN7EXt9QmgWkKLRcrDK","tlshash":"5e430202d240a413b1d63308952e7952add0bb42a0509377f4f99d7ab69c29fbecc5fd","first_seen":"2026-06-02T11:54:05.060652Z","last_seen":"2026-07-24T01:33:22.064932Z","times_seen":48,"resource_available":false,"data":null}},"time_used":687,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":450,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"horaxhora.com/upload/20251024/video_6e1ad3.jpg","fqdn":"horaxhora.com","domain":"horaxhora.com","tld":"com"},"ip":{"addr":"104.21.21.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://horaxhora.com/","date":"2026-07-24T01:32:51.478Z","timestamp":1784856771478,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"horaxhora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 05:18:00 GMT","end":"Sun, 11 Oct 2026 06:15:19 GMT"},"fingerprint":{"sha1":"F5:20:F7:C6:E5:FC:59:D1:7D:28:E8:B8:99:DC:B4:25:50:44:A9:A9","sha256":"23:96:22:B5:E9:3F:08:AD:81:BB:7D:90:E7:70:36:40:76:FF:B4:3C:DD:69:DC:EA:EB:3D:1C:02:2B:12:6B:F0"}}},"request":{"raw":"GET /upload/20251024/video_6e1ad3.jpg HTTP/1.1\r\nHost: horaxhora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://horaxhora.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 24 Jul 2026 01:32:51 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 24 Oct 2025 08:06:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"68fb339f-33cc\"\r\nexpires: Sun, 23 Aug 2026 01:32:51 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OjJPewmdy%2FjGkX3hmM9Xtsb004fp2yxtXhedHsFyTiIzWAvREOc7cVN%2Bsf2zlY2gNJ5o7sljsWD2st5edE5lXZzO6T7cFmfturVFIJyGz%2B1wBoe6pw7H9LJWTXO4Eq%2FW\"}]}\r\ncf-ray: a1ff2c65b81c0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13260,"size_decoded":13921,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", progressive, precision 8, 320x240, components 3","md5":"7228fa94cb6228505111cd1ff16c7d66","sha1":"c23d4ae1d29f08c56c125b30c54b4ccbc1ba4564","sha256":"ec699ddd8d79a116f27a65b7aeed1e70f8e72bef8c3423863fe85ed6949639e9","sha512":"bf5868b3979d6ed8816778ce0b8d02958497e466e68c9c67178a0f996a86c225cc25deb6c92f22cd87330e939da4d9a37c4348a71c89280e87c812e1dae820ae","ssdeep":"384:b1e0W8DA9AErxh4VmM9TJT32AERJ4T25qvNf:ZSAEoVm0d32l4eqV","tlshash":"c052d02eb37cad3af11d0830b3115a39cb213b0baab00d9c44359e195b72a450ca2fa6","first_seen":"2026-07-04T10:14:55.97349Z","last_seen":"2026-07-24T01:33:22.065485Z","times_seen":6,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"horaxhora.com/upload/20251024/video_69b4e8.jpg","fqdn":"horaxhora.com","domain":"horaxhora.com","tld":"com"},"ip":{"addr":"104.21.21.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://horaxhora.com/","date":"2026-07-24T01:32:51.479Z","timestamp":1784856771479,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"horaxhora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 05:18:00 GMT","end":"Sun, 11 Oct 2026 06:15:19 GMT"},"fingerprint":{"sha1":"F5:20:F7:C6:E5:FC:59:D1:7D:28:E8:B8:99:DC:B4:25:50:44:A9:A9","sha256":"23:96:22:B5:E9:3F:08:AD:81:BB:7D:90:E7:70:36:40:76:FF:B4:3C:DD:69:DC:EA:EB:3D:1C:02:2B:12:6B:F0"}}},"request":{"raw":"GET /upload/20251024/video_69b4e8.jpg HTTP/1.1\r\nHost: horaxhora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://horaxhora.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 24 Jul 2026 01:32:51 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 24 Oct 2025 08:06:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"68fb3384-258f\"\r\nexpires: Sun, 23 Aug 2026 01:32:51 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9dMupegRSn6RVzkp%2Fm3CyiOisEIpdzLpA01BOeVGp23x67ZxgsmmQhoAce5ko8Kd45Ka0UJfug6n58h8YQaMgTDQiitelQ1%2BO%2BHKe2OwULPv4GeZ5cUgU3fMtmoW3vzG\"}]}\r\ncf-ray: a1ff2c65b81d0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9615,"size_decoded":10227,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", progressive, precision 8, 320x240, components 3","md5":"dab34b57ea43322adbe501aafa3b99c5","sha1":"8435372f5cd3069d28b7062eccba2e314540d492","sha256":"d2ca823c7f3d6552aacf685301eb8cd1dd0857804a2f935a08ad172c79032dda","sha512":"5d3f65b6f7b7f24d3b91ad6947d5a0cdcbd8ca8eea8b6969972c97131223e299b14a376921c09beb9c53f6d1f5b48a7d52dc85c1fb59a5f928d09924468d2a8a","ssdeep":"192:tpsS2NZQ3bFArWEAZRGZr9INCrcKwPwDFxuG9pOimosXIvp+POt:tpAyOrNqKrKNtKywDDHSfIv8Q","tlshash":"cc12bf519e33691dcd0e083d17eda002ff04cbf5ec2ce79268542a655fb20e09797d86","first_seen":"2026-07-04T10:14:55.9853Z","last_seen":"2026-07-24T01:33:22.066728Z","times_seen":6,"resource_available":false,"data":null}},"time_used":464,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":464,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"horaxhora.com/upload/20251024/video_34e379.jpg","fqdn":"horaxhora.com","domain":"horaxhora.com","tld":"com"},"ip":{"addr":"104.21.21.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://horaxhora.com/","date":"2026-07-24T01:32:51.484Z","timestamp":1784856771484,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"horaxhora.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 05:18:00 GMT","end":"Sun, 11 Oct 2026 06:15:19 GMT"},"fingerprint":{"sha1":"F5:20:F7:C6:E5:FC:59:D1:7D:28:E8:B8:99:DC:B4:25:50:44:A9:A9","sha256":"23:96:22:B5:E9:3F:08:AD:81:BB:7D:90:E7:70:36:40:76:FF:B4:3C:DD:69:DC:EA:EB:3D:1C:02:2B:12:6B:F0"}}},"request":{"raw":"GET /upload/20251024/video_34e379.jpg HTTP/1.1\r\nHost: horaxhora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://horaxhora.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 24 Jul 2026 01:32:51 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 24 Oct 2025 07:48:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"68fb2f50-56e9\"\r\nexpires: Sun, 23 Aug 2026 01:32:51 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SsH3dJeaZJCUP1zRrF4KHZlNettnlHvBeDGRTRACqZng4AuuJrttYAHS9GRnkRChOIq6XbRtCB%2Bx9OrLLyaq7Lw%2Bgr2362oCLrd1UEyE36hGRzlZzAlVJ8t27dI7yGgO\"}]}\r\ncf-ray: a1ff2c65c8210b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22249,"size_decoded":22882,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", progressive, precision 8, 410x300, components 3","md5":"6457604e74d35d11beecf0d3b1525272","sha1":"185ac46a7194678131a643f0e230a8e50cb5264b","sha256":"012133221f259392125945e73012295d694efa5f015f9874cbe3fa14bb634da7","sha512":"4c2e79c0622b2b0858f90c225d2d20bb312248ae8a21f185fdb36c90efeb0796bbb16a342d6b5a1120c1281211f24039bc860c47f0a04178b755a60f7b782de0","ssdeep":"384:Q7+kPe0TPLJbAcvytnWd3XMKYItPsnDyzWJmgzwVG5BgnG2nFzI:Q7KgLJkcvytnCoPD9mgcVCKnGwFU","tlshash":"04a2d0539fe69451d41e493ae4c6c90d27b3bafa541e16c22b8db8ed87301cb5d50738","first_seen":"2026-07-04T10:14:55.976926Z","last_seen":"2026-07-24T01:33:22.067291Z","times_seen":6,"resource_available":false,"data":null}},"time_used":687,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":463,"receive":224,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"horaxhora.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}