{"report_id":"7ad8134c-f476-44c5-96b5-d1657430c8dd","version":6,"status":"done","tags":[],"date":"2026-05-31T23:57:24Z","url":{"schema":"https","addr":"oraxa-pl.live/","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"172.67.146.32","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"oraxa-pl.live/","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"title":"OraxA | Oficjalna platforma do handlu wspieranego AI","dom":{"size":47631,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (25510)","md5":"e436507bcf9f2adcdb3fbe95af2a92bc","sha1":"c5b929dfd5762cd7437930fcc91e8f47b4219c60","sha256":"4e42a3e953b725adc585ebd999ba62b6eabaaed02a507269f69f6691e00f2552","sha512":"e01ba581dc1b6dfb4653b72cb220c4e16adef5e86582f2f530d23e3b214c79a4575e0958f7d0ccd97f7c030291f471a34686f989febfb27cbce1936ad1f92238","ssdeep":"768:3KDSNBAAHr3H19bQ/l1wRUwRW9QqF57QKSIs3HvbNpl1kNdLfytSKYA1WSCOdehJ:3nAAJRQdbQu7QKSzNpluNdLfytSFyLCD","tlshash":"e9233af2a1f05477414f0bccfa5bb609fdd322ae8e858e84709d8bd453ebc96958e081","dom_hash":"domhasha72885f526ca41c981052a2d2a1edd44","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"oraxa-pl.live/","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"172.67.146.32","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-05T23:57:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-31T23:57:02Z","timestamp":1780271822,"ip_dst":{"addr":"34.117.59.81","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":40668,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET POLICY Possible External IP Lookup Domain Observed in SNI (ipinfo. io)","source":"{\"timestamp\":\"2026-05-31T23:57:02.926725+0000\",\"flow_id\":219231418233718,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.13\",\"src_port\":40668,\"dest_ip\":\"34.117.59.81\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2025331,\"rev\":5,\"signature\":\"ET POLICY Possible External IP Lookup Domain Observed in SNI (ipinfo. io)\",\"category\":\"Device Retrieving External IP Address Detected\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Linux\",\"Mac_OSX\",\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2018_02_07\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0043\"],\"mitre_tactic_name\":[\"Reconnaissance\"],\"mitre_technique_id\":[\"T1590\"],\"mitre_technique_name\":[\"Gather_Victim_Network_Information\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_09_19\"]}},\"tls\":{\"sni\":\"ipinfo.io\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":911,\"bytes_toclient\":3072,\"start\":\"2026-05-31T23:57:02.897910+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-05-31T22:42:17.707694Z","alert_count":0,"request_count":4,"received_data":375210,"sent_data":1892,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-31T22:21:48.210615Z","alert_count":0,"request_count":1,"received_data":7013,"sent_data":495,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"i.vimeocdn.com","ip":{"addr":"151.101.192.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2010-04-21","domain_rank":24258,"first_seen":"2014-03-27T22:24:57Z","last_seen":"2026-05-25T07:28:27.044404Z","alert_count":0,"request_count":2,"received_data":39065,"sent_data":1042,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-05-25T07:23:13.533444Z","alert_count":0,"request_count":1,"received_data":18799,"sent_data":466,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ipinfo.io","ip":{"addr":"34.117.59.81","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2013-04-23","domain_rank":1327,"first_seen":"2013-12-16T07:25:53Z","last_seen":"2026-05-27T18:05:04.167221Z","alert_count":0,"request_count":1,"received_data":907,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"player.vimeo.com","ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2004-12-15","domain_rank":132,"first_seen":"2013-09-26T03:16:08Z","last_seen":"2026-05-25T07:27:45.98212Z","alert_count":0,"request_count":2,"received_data":27385,"sent_data":1063,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"oraxa-pl.live","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-31T23:48:25.595248Z","last_seen":"2026-05-31T23:48:25.595248Z","alert_count":49,"request_count":49,"received_data":645664,"sent_data":56380,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.1.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"f.vimeocdn.com","ip":{"addr":"151.101.192.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2010-04-21","domain_rank":25524,"first_seen":"2014-04-09T18:24:34Z","last_seen":"2026-05-27T16:35:16.597861Z","alert_count":0,"request_count":3,"received_data":1459046,"sent_data":1368,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"oraxa-pl.live/frontend/assets/pl/js/sliders.js","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"67dd1e2333e167a77697aca034eb3df6","sha1":"306594dfb8433db362be7a689933e0eeca162f48","sha256":"eede0d06ab82379d31524d842f64e1ac779e3b3e5b0b57c026290af86649b706","sha512":"7fc94d65c296988603ad1d10539e40a52db78e8ddea794bc22ecd118084675d2fb7fb3ee16aeac57a10443e95af4db7a2a55ce5b0bbe1d2b425163bcfb553f07","ssdeep":"96:hWrrPGI8yDdWTAAOxlfWG0eTnCa9JeUW7Y:hWvPG/eeA5xlZCa2M","tlshash":"ec910366303223358a6742edae0bcc41e2dad0477905d581f58e471a8fc6faca6e5dfc","size":4454,"data":"","first_seen":"2026-05-03T18:34:41.351704Z","last_seen":"2026-06-01T10:05:26.849255Z","times_seen":732,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1140335489?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a5b4d5d3e4b011a5ab11c586f797d44","sha1":"648e005b908e068c567f5236736ea923480a8c08","sha256":"49653c792dd94bb881bb47fde59c3036d1009d19d8151b3894b09419eb4bc8e3","sha512":"2b77f66e9146c05f5f3644a72921d4efca6173c1b265c7201a2d2dd0c9231d11770440a844889ff56a84a02b2310ef81a9f05e9d960bd4562ddfd83ce56be77f","ssdeep":"","tlshash":"8211c0214210b872459ea5970297d30d7013666ecb06c78c412a9559207c9d7b3aabbe","size":877,"data":"","first_seen":"2023-05-30T16:19:13Z","last_seen":"2026-06-06T06:21:03.49294Z","times_seen":41115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/frontend/assets/pl/js/deferred-imports.js","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0ec5ae2cf2a7a7043133c1d9301fadb","sha1":"518d372d4fc783df627d3c5789284ecfca8dbeab","sha256":"b13200f905e155b75d81e059633d6c2bfc45cfe4f1b2199c0970ddc15b5a1d75","sha512":"e22cac350e50d88ea6fffa67e9ebd404fef4c79b0ff7e9c9ad01015e09676c39af37788927916e947d7b49fe0b2131873f43adad6799340d6ee2b3c186b18e20","ssdeep":"","tlshash":"6511493a09078a5544304166ecb7a72df073072323d182a27ebd32486f314175a56b9d","size":892,"data":"","first_seen":"2026-05-03T18:32:03.612818Z","last_seen":"2026-06-01T10:05:26.859713Z","times_seen":790,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bfa3f380737b46184e825669a7507a22","sha1":"c201b722d4313676dc1085c453fdccddd692e384","sha256":"b17b8fbba53beb07d161a62241f929c33b0042d664dc7f3868d10c466137a164","sha512":"0231e5ff1f10a3581165a950d201ae23f9feb7ec34c28d314d7e52b07520d103d75ab7b342697d36712f9dc85ee5406f67854261d0d311e7a0711428a97efb9c","ssdeep":"","tlshash":"ec216a06527e2b7900f371af5bcbc1daa36e24c39005ed403e4c5e152fc146186f1ada","size":1426,"data":"","first_seen":"2026-05-09T07:41:35.296665Z","last_seen":"2026-06-01T00:38:07.058159Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/frontend/assets/pl/js/jquery-3.1.1.min.js","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e071abda8fe61194711cfc2ab99fe104","sha1":"f647a6d37dc4ca055ced3cf64bbc1f490070acba","sha256":"85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf","sha512":"53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65","ssdeep":"1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5","tlshash":"3183d5d9b2c670529b7730b850bf450bb17a98dab44c8d60f058c5d57eb8a8e507bf2c","size":86709,"data":"","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-06-06T06:05:04.401649Z","times_seen":143417,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1140335489?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"aee162ba809601b87ad047e9a33ba3c6","sha1":"3476baf2b4d3c329181d21a2f199ede78124736b","sha256":"655761399cd1c1f8964e8e908a079e95b5048c196d75105a062365c5045aa46c","sha512":"e18e0b67bac0cdaa3fb7fa21ffdb61efb893f1d249657082ca7b81f981534f2de40ad24a5194c950c53d1dbbbc0cfbf2d4dcf989d365195f07efc9a1efd9685a","ssdeep":"","tlshash":"ccc0805dc841b17404914b951d547956f5a300026571c157ad1d258ee3a9bbf4e4d474","size":184,"data":"","first_seen":"2026-01-28T07:13:13.392132Z","last_seen":"2026-06-01T00:38:07.043948Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1140335489?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"89a9533ea5dc191fec44e10bfa5bcd23","sha1":"5ab7e2ae3b9d6f81efe0b6135c27d7c32254be28","sha256":"81f3ded0702427433f54b16bdf7d9a11fb4b8cd26de32a125dbb67b4f087cd8a","sha512":"22329f504133c4cbf8291969f6f119300ee76debf36e0797fd74e3acf26b803cc16f0da4d359019bf68bd24c60bea1d068c1c9d4dca5dfbe4f0c8c526417ff4e","ssdeep":"192:/ka3Y3LVb3fDrCT0xt63qkNdLfi/ntPaKYoX3vihtQ7:+DrCTstnkNdLfi/tSKYoX36A","tlshash":"5032c627b7c8c835c7cc5ccd1d9eb80665b5111b6dc09a98ea9a8b8c42ffddb360e185","size":11646,"data":"","first_seen":"2026-05-31T23:57:28.912978Z","last_seen":"2026-05-31T23:57:28.912978Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@25.12.5/build/js/utils.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e654fbae22a0762fa384b61fd03f1679","sha1":"3f2dc491443ab4d9dbf6abee895d8140196f0aab","sha256":"93c8dd85421914d3c09fdacc4b77730595202004a1d8c9ef7639c7551157bda6","sha512":"af44d0ca2f0ca731ecb7e535963c694710a3e887c8bbdfc95066f1fab72d5c5da66313e9097498d246b93a04a1b642fd65d591e80d325a72bb0f7bf5a5f8da6e","ssdeep":"3072:TklM0tDKjFs3OwPss3MwPky0zOt62xFMfM+dhvo4sUifhNyf4LtXKtofQVkmDmVu:TklMmDOW0IxFMfM+dMGou","tlshash":"fe44f0ebd63c973ba1d87b35968eb3cd5a8cbca3c858567826c3b54f52784e0706c205","size":268720,"data":"","first_seen":"2026-02-13T03:24:00.128548Z","last_seen":"2026-06-05T10:07:59.101497Z","times_seen":950,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/embla-carousel@8.6.0/embla-carousel.umd.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ccc433e7e2ed8017b86837389e278027","sha1":"ac157e8dec8dddbd9b768674968422d629d59bd9","sha256":"f05b5dbfe37d79b636b9db74ad04ed5e99b4bce369d781b0fb38b0b2ac619e66","sha512":"a62638d1120d541d148cb4714759538c9fa838a93009f3dfa1b840bdd731b3fdb2b201c677ead9c177c5f33af1dfd60ad34bdca57d41bdef2ee957fdfd3a7482","ssdeep":"384:pW3WT2X/jBbU6N/LHq0GFZGPow0Ov7NijEUE2Uy1s2B4fUXH9y0ApP:E3SmrRU6N/LHq0WZGPdzSEGKssAAP","tlshash":"c782b7ec70c2b062639724f9503f9109f37b1881384e9550e678e9e63cb606e9677f9e","size":17946,"data":"","first_seen":"2025-04-09T07:37:23.81801Z","last_seen":"2026-06-05T15:00:45.644023Z","times_seen":1396,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-06-06T06:09:41.118099Z","times_seen":164229,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/frontend/assets/pl/js/loader.js","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7495dbde5ab60ac459b25cc5c0217b0f","sha1":"a3915023aa8e39ab95d7417eef6bdcdedefde3ca","sha256":"80da25369b4c34a14b7deac6d1ca96b307bb42e738f41aea491ccf993ac946a1","sha512":"d95ed327c8180538a84de3b5b3a5fe5d2d261d32db8ceccfd978ecbd999f1ff24cc81955ca6e6482746dc8e951df3019f84457874652e13fff3454458d03c23c","ssdeep":"","tlshash":"aaf0d11a231749a48bf6c66ba3718381febe6133e445d486359f74c07f709d45065cd8","size":656,"data":"","first_seen":"2026-05-03T18:32:03.601612Z","last_seen":"2026-06-01T10:05:26.903614Z","times_seen":812,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/frontend/assets/pl/js/lazyload.min.js","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"02904458ba58d516134326a81c45c920","sha1":"bdbef500dae9927c7018801285d8b07d4aaef92d","sha256":"482427969bb13fb83dd24449a53868f8f51239ad684606639991592972bdd234","sha512":"3198a5ad2e3bb2f4814916b73f0a7316dd070184e201a40b8c53eb98473b3d791b71fb2c399e6f8f3ae6be8045532dc6659ff9cf590cd62bedb61345721e8ec4","ssdeep":"192:Wrr573s4TW1IDJTspjUAEA/UcdvM5khyLPkO21RnaUhklOx0dek7jQMiZtjpSNju:Wrrps4TW1IDqUAEEM5WeUaQFlbtN7","tlshash":"bc52cb8ba2f22438531bf024692bcd097315608f5899ae923d1d626b5f49b39f7f4fc4","size":13751,"data":"","first_seen":"2026-05-03T18:32:03.559102Z","last_seen":"2026-06-01T10:05:26.850593Z","times_seen":813,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1140335489?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a51c5ecf68ae51eed056ceb3392d0da9","sha1":"20291ab3301a78657a1ff25a0b56b72bf33389f8","sha256":"533c2248356dd75c4dff28df1c56a1d10699aa83a3121ba9ec37f72c98c0f268","sha512":"424469890f9b2a28a5ae91348af867b7a8c44e18809acff658d312dc2a2d4868bdb7aff9bf19c1d1eaaa26951a72f0c6f16783da1e35fcf5afc9b9c9eb6c967a","ssdeep":"","tlshash":"0d51ab7aa442f43a12310ce9f77b2316707636d87906a360e02e789c385dc23d627bcd","size":2657,"data":"","first_seen":"2025-12-02T19:38:07.208192Z","last_seen":"2026-06-06T06:21:03.506925Z","times_seen":22201,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1140335489?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8e500be2456c7adccd83f363e52ef5bd","sha1":"327c9f69248844f40f89b9ade646394c825f2a28","sha256":"95c35c2edce177114158dda90aa3f769080a60b08e437651df026a422da4c17d","sha512":"58094149c2d3150b0a3fe9dbb13d2f054ddc31c5cb439985aa7221aa321577dd128d97f2d5044300c5767fdf2aec18d9d77c54fdcdd33185f3987732586aaa16","ssdeep":"","tlshash":"4eb0223ba8a00028b83a88c0220a238038300002ac0ae300e0ac220c2238f030022ac2","size":129,"data":"","first_seen":"2023-05-30T16:19:14Z","last_seen":"2026-06-06T06:21:03.588955Z","times_seen":40663,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipinfo.io/?callback=jQuery311013252889477024787_1780271822733\u0026_=1780271822734","fqdn":"ipinfo.io","domain":"ipinfo.io","tld":"io"},"ip":{"addr":"34.117.59.81","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9bf1c23fa88ebc54ba3961706d1091a2","sha1":"90fa4fd7d2619fdc96f0b61eefa1b50beab2f258","sha256":"e16981682439168b1be06de133dab878f9471db1a9d78462dbd1f7c3e3abf249","sha512":"9d4310ccce02325241736691d10f33227eb3b0e1dfcc38e73d489c0101bf2a7a808ad7656a03ffd62d3155d864d5af48e95b45970e0e48ca00c2ecb47485257e","ssdeep":"","tlshash":"3d01c07710781f3ebdbf454c440f8e0632687d2b1181a5864fa32b5d40055b7606027e","size":674,"data":"","first_seen":"2026-05-31T23:57:28.872917Z","last_seen":"2026-05-31T23:57:28.872917Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/frontend/assets/pl/js/geo.js","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b9c760269aeea47905f4d33aaf740c3a","sha1":"14120a6947ffad92c5f9e886b485ec65b3bed3ee","sha256":"556384cb09c3f07d6576faea9d370459e288fbfbe44b1c5e847b2db9dab5690c","sha512":"b594df48a2e062a0618a0443ca35e4b7bcdf55eb2599b8fe782016f29b198210ab39b46e017121f150e27fa14918c37ec05c62c00752e61914b095aa1c087946","ssdeep":"","tlshash":"fd01496552b6466040e771cada6fa2601435e40b374dd8ea7a9f43480f8991dc2b27dd","size":825,"data":"","first_seen":"2026-05-03T18:34:41.313902Z","last_seen":"2026-06-01T10:05:26.858129Z","times_seen":785,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@25.12.5/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"584b32aaa35c260a3b4ddacfce274a42","sha1":"324ecf2536f3781db1f77ed454bf3c271594454f","sha256":"990fdaa51ed5c86f92d670ab5a79dbf7415f34900dc2f443c5a03dca94479475","sha512":"bca5c9cdfd2562a5a1d31e26c974022172e14ebd599e30d3daf091d27a266a820a025b2ea1e1329bf18be3489c51aafca5025db638631452fee03afedd8f8a26","ssdeep":"768:mYJ0FRsgH7XpwJxK6jk4ixVDQtwnixrUT2PXIh+vH/kvzas:mcgHl6Q4ixVDQAsrcGgmHMas","tlshash":"f603b52d6316672babfd8155f4e4a582de6f7a460944886c3dac8fcb0098dc379b3734","size":40669,"data":"","first_seen":"2025-11-18T18:36:54.272556Z","last_seen":"2026-06-05T10:07:59.100576Z","times_seen":970,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/frontend/assets/pl/js/config.js","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d4b19fc39d88043bdbb9c096f385843","sha1":"6f41533a8c20e52830c28f9d4cc62e354fc29969","sha256":"ac1a70193e1bc0e8a7ba774ccfbb01a2b0906ec4478d3c94b8dd49eba94b34d8","sha512":"cab9965c797644d298334f1c0bc6a51f5fe22286f97b038839ce5e29777d97ec56bd89466b361f4193466d0b1b76ba997b9943b8b7821bb42b9295e2e34d6e01","ssdeep":"","tlshash":"c401d06fc17488032df2129eba462b29f512423f076cc06a71bd516c2f7a26fd6471c1","size":782,"data":"","first_seen":"2026-05-03T18:32:03.512014Z","last_seen":"2026-06-01T10:05:26.838465Z","times_seen":790,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-06T06:09:41.239888Z","times_seen":361631,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/dashboard-assets/js/disclaimer.js","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d31bf8a0967d5a38631c38691e66540c","sha1":"f4e654b84b034023b5e3db513087dd9205bd49ba","sha256":"d6712b0ff373f0cf02d1c81ff5a6fb945b47d5d173f02e41d1da28eee52b39d5","sha512":"3d4f2750a27f99297636d2e655b9d157d70113d304085e8ff716a907a7abd01252fbbc7ea521f695b6ec31bcb7a9198e0fc378ee71480a52abe2ab83f94b8181","ssdeep":"","tlshash":"58014c9e79e236b1a2c7eb7c19ab530566314003d11c85053d2c6262afa4f6816b3bc9","size":854,"data":"","first_seen":"2026-05-03T18:32:03.521288Z","last_seen":"2026-06-01T10:05:26.897724Z","times_seen":813,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/frontend/assets/pl/js/scripts.js?v=20260329-card-hover-fix","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d354f602a5b263b97eac602760c62394","sha1":"33973424627c0d76c9edbc6d3f392f3d212ff2d0","sha256":"786294d98bb03e5aed3f5ff961478f6f8e2bb7c6e2a0de226fccb5ea1ff4db7e","sha512":"6b55970482004d47791fc61844e68c390bd87f2f309db4788520c0de0b898351f6bb6c8751ecef535450850dc115ee619ac93fe72dece868fa03cb4619486f8e","ssdeep":"96:5v5UUOUNrDeAAePtSx+Px7v0PwckyEeiK6jYikhez8rs:5vaUOUNrDeAHVSx8x70XkyEeiK6cths","tlshash":"b2d10e7a7af604364133019f9b9f85592a113087ba09faae3f4cd2041fc97ac54f1be9","size":6226,"data":"","first_seen":"2026-05-09T07:41:35.231964Z","last_seen":"2026-06-01T10:05:26.876324Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"52114356e0118b1732a7b139279d88e4","sha1":"cb352d2cccc6361142755ed52fcaa5ee2a8ae102","sha256":"06e206f1bb9bfd91e41a24266bcb8f203fc5324dbe23abc2edc4c3d336dd84fd","sha512":"d5052ab38fe27a2d0f6e325ce7baf4ba14172bbeaf1265bc49ac1702e2b54afd5399eb51a6484c60c2952f7da0b26dd5f53118da13be62dba3fed341c7797502","ssdeep":"96:LmLuN9WnLBfRanrYzTcy7uSQbUMjBnz0eCi0ZyltXpaS2c3AyLP/+T:LmC7WnLNR+RTbS/i0ZyloSAyLP/+T","tlshash":"5712508e2af6175c9973317e3bcfa505611650271848ed427e9c0b901fcc8a97be2bc9","size":9228,"data":"","first_seen":"2026-05-31T23:48:30.952635Z","last_seen":"2026-05-31T23:57:28.915809Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.51/js/player.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.192.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c301d158f9af06e0f26b40c10b53322","sha1":"a66df2c8892d8e883bf01d11f735245c240a1f16","sha256":"b31f9796802f6c19e09c2952e1827dd69bb2c5a042817d4ee8e462b9862bda1b","sha512":"2f17b599df4f79d1d0014125e0c4d14da023c8ab1cc8dec7036dceeed4625396d9b254331b0b3b617d24fe5528ed20769c4d34362a3561f96a38198b52ce18e8","ssdeep":"12288:lUBIPdKt8tmxp9QEH16+1TSDwjd4L+RRYPTMGZ274VNYy6KWp835MKKAbZTLYE/g:n8t8whH16+1TSDwkkUHcjs8yjFk","tlshash":"04156bd672c2f43181d645a5e17b1203b33e1b9cb80d865cb03daddc2a9e545a2bbbf4","size":892956,"data":"","first_seen":"2026-05-25T15:52:34.450023Z","last_seen":"2026-06-02T11:35:28.342392Z","times_seen":1068,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.51/js/vendor.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.192.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"3e6cb7907b3bb24aa5b1a7482cb0c2a0","sha1":"2ede8cdcdfe0563eca5f73a51d63021f865d0097","sha256":"de1befcea3c34e111929d81d7fa0a511766e4429db742329de97475df99a36f9","sha512":"065e19f5eca254d4a93aadf0d6f150409b508ff630a67a84f716cd1e31cd0912c9eb06c8f8552935dcbfd6d18adf4afd7d0c1edd17158eb40716326020c3fabb","ssdeep":"6144:lxrQb8XM5U5dAbYwlkc9IERRcRDZx12r/g5lpc:lx/85ucTcPrLm","tlshash":"5c64e7dcb2d6f07143e764a6403f200bf23a5e15a84d8454e26ae4d57cb9a4e823bf7d","size":327216,"data":"","first_seen":"2026-05-25T15:52:34.485083Z","last_seen":"2026-06-02T11:35:28.281566Z","times_seen":1067,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@25.8.3/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7657299ef4e0a3abdc478c0b9d7075aa","sha1":"25138af863e2ad69bb09af4e93009449f2e75ccb","sha256":"8e184485db8b6a8a741dd831f7bae84644eedf8f0c371172e69721e1236a7cd1","sha512":"eb5e7ae63fb48ea7b543f7339625284b3cc5477b6c8be03667714ebab1eb7c493a1445bae46348d992a4477a2080634c532b16c7b6ae4102e1524e51ab142b6b","ssdeep":"768:U+h03XVqC/iPIqXpwJxsyysdjx2nmY249lHGIw:UiPIsy/tWHG","tlshash":"c0f2f9aeb3646637abfd82a270e54403ae6f79444604043d78bc8ede1399dd171f6b38","size":34586,"data":"","first_seen":"2025-10-21T03:51:56.40324Z","last_seen":"2026-06-06T03:52:09.23489Z","times_seen":1353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"oraxa-pl.live/flags/fr.svg","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:02.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /flags/fr.svg HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ijc1SG1CelVreHEwbHJmT2plYTJOUVE9PSIsInZhbHVlIjoib0dUVFZxOXVlMjI5QlVYTkQyS0JrRzU0bnEyU1dXWE4vZURpWmtkdUN3Z1FSMmFPdW9vY3Y3dC9RUytSM1RPVE9wRXIrL2ZvaVM3ckxqN1Jsd2F3WlVOTzVsbllLOEFWSWQvSklIakxST082dFFZVCtBYitIYVNOSUdJbkRXWk0iLCJtYWMiOiIyN2FlMzVlNTk1MjJiNTc1NmY2YjVjOTVkMDljMjcwN2NmOGQyZDFkY2Y0YjUzMTQ5YTVjZmQ3ZGI5ZjA2MjQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU5a0NRc25BcGdHbWViWG8zOTlyd3c9PSIsInZhbHVlIjoieXZtbU5lQzM5bXd0MmZ1S1lkd0xITjN3c1BvTUIyN0NyZFhLZ3NwRi9hQTRucGtiU0FkZmxYSytNQm50QWU2MzFiR3V3K1BzYWlnbFFucm5FdUtSUmZJQndhdjRTMTQ3UEhZQ2lvdURVRHhmVElnLzV6YUt4dmRYclpRU1R3SloiLCJtYWMiOiI3ZWZkMWEwYWM1Yjk2M2M4NDEwZDQ3ODU3NWRiNzNjNjQ2OGFkOTFlZGY5ZmRmYjEwOTE0YjZjNTMyNjA3MWJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:57:02 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\nage: 544\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=euqsMKm1Gl96X0KP3%2B6PD1Qc6SEStQTxwLgcNlkEFtH7GEdm4YVQDdqVmwIi1p58B5umRlDGJAGx64Y4B4mvYINjnRGzJRjubAmPTDaUnSaBTqjlpk2kPIa9tbPXgpnZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a049eb2839bd0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":352,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e9efcfc75d8fdee9370032dc72e78bcf","sha1":"77d974568d91216054eee046c19c99f71cccb9be","sha256":"a7d195ab974d9555702eede5af18287b5767efcea5fc6dadf529e114dc6fb568","sha512":"12e0fd3eafb13d648d46f86cb8eeeea05e4acccceb2510abb4c888e07284de90503ddd8b3c02513d6fe84b6b66d6600039d56749f316d012cddd0d3d89cff8ea","ssdeep":"","tlshash":"1ae0d885a1a9c9094a16037959bc71d65123708f158905fc74842518bd4e39b3c51aac","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-06-06T05:06:17.077393Z","times_seen":7815,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/flags/no.svg","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:02.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /flags/no.svg HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ijc1SG1CelVreHEwbHJmT2plYTJOUVE9PSIsInZhbHVlIjoib0dUVFZxOXVlMjI5QlVYTkQyS0JrRzU0bnEyU1dXWE4vZURpWmtkdUN3Z1FSMmFPdW9vY3Y3dC9RUytSM1RPVE9wRXIrL2ZvaVM3ckxqN1Jsd2F3WlVOTzVsbllLOEFWSWQvSklIakxST082dFFZVCtBYitIYVNOSUdJbkRXWk0iLCJtYWMiOiIyN2FlMzVlNTk1MjJiNTc1NmY2YjVjOTVkMDljMjcwN2NmOGQyZDFkY2Y0YjUzMTQ5YTVjZmQ3ZGI5ZjA2MjQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU5a0NRc25BcGdHbWViWG8zOTlyd3c9PSIsInZhbHVlIjoieXZtbU5lQzM5bXd0MmZ1S1lkd0xITjN3c1BvTUIyN0NyZFhLZ3NwRi9hQTRucGtiU0FkZmxYSytNQm50QWU2MzFiR3V3K1BzYWlnbFFucm5FdUtSUmZJQndhdjRTMTQ3UEhZQ2lvdURVRHhmVElnLzV6YUt4dmRYclpRU1R3SloiLCJtYWMiOiI3ZWZkMWEwYWM1Yjk2M2M4NDEwZDQ3ODU3NWRiNzNjNjQ2OGFkOTFlZGY5ZmRmYjEwOTE0YjZjNTMyNjA3MWJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:57:02 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\nage: 544\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zY9Ru%2BleRHtuJsS%2F31GYAyqzMzRy4wrbWMYvH%2FmkvJ2EXQKfRF7GrShqLEwUuD6fmXJ3gzLXiagDLVNQg6XE%2FqMG2vgGvUYYaCt9p%2BWPUXSg13PyTn%2BuiO3ohU3Ihe5t\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a049eb2849cc0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":424,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ebe2b7f4aefa3c8869fa9f0a402210bb","sha1":"dc0ceab0f048a8c8ac97e3277f2ed237b974f005","sha256":"7021694edfe47096e0aa9a5ea85a6851181f723ae3a8806779a8e01702325804","sha512":"f176bd1aa2416960b0eec285da0b91e983a162a1d475bac76786b33ab0aede45783d422ce4d909b62ee6e6ba1fa55bf5b6b6ffcdf2463e305941e2d804073da5","ssdeep":"","tlshash":"d6e0e5809b9d1a6da91283a41ddcb885022b70e6328c0ced658dae987f412eaf466264","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-06-01T10:05:26.893057Z","times_seen":4526,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ipinfo.io/?callback=jQuery311013252889477024787_1780271822733\u0026_=1780271822734","fqdn":"ipinfo.io","domain":"ipinfo.io","tld":"io"},"ip":{"addr":"34.117.59.81","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:02.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipinfo.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 16:36:00 GMT","end":"Sat, 01 Aug 2026 16:35:59 GMT"},"fingerprint":{"sha1":"06:75:C4:FB:38:6E:E1:2E:FA:EB:1F:53:64:D4:A8:68:81:AA:9A:4A","sha256":"74:4A:07:24:C9:DA:4C:BA:4E:1D:C1:1D:2D:9D:6B:AD:65:55:3E:08:89:78:B2:E0:36:DF:14:3D:B1:7E:BD:21"}}},"request":{"raw":"GET /?callback=jQuery311013252889477024787_1780271822733\u0026_=1780271822734 HTTP/1.1\r\nHost: ipinfo.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\ndate: Sun, 31 May 2026 23:57:03 GMT\r\nvary: accept-encoding\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":674,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (393)","md5":"9bf1c23fa88ebc54ba3961706d1091a2","sha1":"90fa4fd7d2619fdc96f0b61eefa1b50beab2f258","sha256":"e16981682439168b1be06de133dab878f9471db1a9d78462dbd1f7c3e3abf249","sha512":"9d4310ccce02325241736691d10f33227eb3b0e1dfcc38e73d489c0101bf2a7a808ad7656a03ffd62d3155d864d5af48e95b45970e0e48ca00c2ecb47485257e","ssdeep":"","tlshash":"3d01c07710781f3ebdbf454c440f8e0632687d2b1181a5864fa32b5d40055b7606027e","first_seen":"2026-05-31T23:57:28.872917Z","last_seen":"2026-05-31T23:57:28.872917Z","times_seen":1,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":52,"dns":13,"connect":12,"send":0,"wait":139,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.51/js/player.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.192.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://player.vimeo.com/video/1140335489?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-31T23:57:03.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /p/4.46.51/js/player.module.js HTTP/1.1\r\nHost: f.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://player.vimeo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 31 May 2026 23:57:03 GMT\r\nage: 547660\r\nx-served-by: cache-iad-kcgs7200042-IAD, cache-hel1410021-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 10, 97765\r\nx-timer: S1780271823.126016,VS0,VE0\r\nvary: Accept-Encoding,x-http-method-override\r\naccess-control-allow-headers: Cache-Control, Pragma\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=1209600\r\naccess-control-allow-origin: *\r\ncontent-length: 219075\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":892956,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65454)","md5":"6c301d158f9af06e0f26b40c10b53322","sha1":"a66df2c8892d8e883bf01d11f735245c240a1f16","sha256":"b31f9796802f6c19e09c2952e1827dd69bb2c5a042817d4ee8e462b9862bda1b","sha512":"2f17b599df4f79d1d0014125e0c4d14da023c8ab1cc8dec7036dceeed4625396d9b254331b0b3b617d24fe5528ed20769c4d34362a3561f96a38198b52ce18e8","ssdeep":"12288:lUBIPdKt8tmxp9QEH16+1TSDwjd4L+RRYPTMGZ274VNYy6KWp835MKKAbZTLYE/g:n8t8whH16+1TSDwkkUHcjs8yjFk","tlshash":"04156bd672c2f43181d645a5e17b1203b33e1b9cb80d865cb03daddc2a9e545a2bbbf4","first_seen":"2026-05-25T15:52:34.450023Z","last_seen":"2026-06-02T11:35:28.342392Z","times_seen":1068,"resource_available":true,"data":null}},"time_used":272,"timings":{"blocked":84,"dns":2,"connect":26,"send":0,"wait":27,"receive":72,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-31T23:57:01.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 23:57:01 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Accept-Encoding,User-Agent\r\ncache-control: max-age=3600, public, s-maxage=86400\r\nset-cookie: XSRF-TOKEN=eyJpdiI6Ijc1SG1CelVreHEwbHJmT2plYTJOUVE9PSIsInZhbHVlIjoib0dUVFZxOXVlMjI5QlVYTkQyS0JrRzU0bnEyU1dXWE4vZURpWmtkdUN3Z1FSMmFPdW9vY3Y3dC9RUytSM1RPVE9wRXIrL2ZvaVM3ckxqN1Jsd2F3WlVOTzVsbllLOEFWSWQvSklIakxST082dFFZVCtBYitIYVNOSUdJbkRXWk0iLCJtYWMiOiIyN2FlMzVlNTk1MjJiNTc1NmY2YjVjOTVkMDljMjcwN2NmOGQyZDFkY2Y0YjUzMTQ5YTVjZmQ3ZGI5ZjA2MjQxIiwidGFnIjoiIn0%3D; expires=Mon, 01 Jun 2026 01:57:01 GMT; Max-Age=7200; path=/; secure; samesite=lax\nlaravel_session=eyJpdiI6IjU5a0NRc25BcGdHbWViWG8zOTlyd3c9PSIsInZhbHVlIjoieXZtbU5lQzM5bXd0MmZ1S1lkd0xITjN3c1BvTUIyN0NyZFhLZ3NwRi9hQTRucGtiU0FkZmxYSytNQm50QWU2MzFiR3V3K1BzYWlnbFFucm5FdUtSUmZJQndhdjRTMTQ3UEhZQ2lvdURVRHhmVElnLzV6YUt4dmRYclpRU1R3SloiLCJtYWMiOiI3ZWZkMWEwYWM1Yjk2M2M4NDEwZDQ3ODU3NWRiNzNjNjQ2OGFkOTFlZGY5ZmRmYjEwOTE0YjZjNTMyNjA3MWJkIiwidGFnIjoiIn0%3D; expires=Mon, 01 Jun 2026 01:57:01 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YItckc3ogtrRcFbiJGFbrpiy8KsHW6IqH%2FLM1J%2By1Iq81qngMLSky7pVc4giwJfGdTVr6OfMJLiubX%2FY3%2BJ1%2B%2BeLndzwOGqyqlT%2BNFKdSYNmTG2DI8y9AL%2BaD6462SzL\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: a049eb25fe0fb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.1.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":266032,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"20aae6828e10099ed1ff729396e35921","sha1":"dee75077e851ea6456a919f00c1e9caaded4d187","sha256":"4e5179e53a6215f96689882c3f2a273cad4801026c1d828f22971b4481ba0360","sha512":"1541385d7ad068d6559a403468115ee88ca15e90e6ae08f06b1aa829f3b91fe6e443b3f0aa7dfd5a9603948b8dce2778e3ab38e0f47f61a4b1d75ee3bfb31b6f","ssdeep":"1536:xl8odE/DXnvg3vDNAAWeOvg6YW5AAef+JaMsaFpblRMZGuPG+lNpJAJqy5AAef+C:H8P/L28N5hpfyhOu","tlshash":"c24408ed13a0499900b783f1af6825e9ee4ba66fd64a4d01f2ec57023ff1c6c9d1b644","first_seen":"2026-05-31T23:57:28.874694Z","last_seen":"2026-05-31T23:57:28.874694Z","times_seen":1,"resource_available":true,"data":null}},"time_used":767,"timings":{"blocked":294,"dns":286,"connect":1,"send":0,"wait":172,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/dashboard-assets/css/disclaimer.css","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:02.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /dashboard-assets/css/disclaimer.css HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ijc1SG1CelVreHEwbHJmT2plYTJOUVE9PSIsInZhbHVlIjoib0dUVFZxOXVlMjI5QlVYTkQyS0JrRzU0bnEyU1dXWE4vZURpWmtkdUN3Z1FSMmFPdW9vY3Y3dC9RUytSM1RPVE9wRXIrL2ZvaVM3ckxqN1Jsd2F3WlVOTzVsbllLOEFWSWQvSklIakxST082dFFZVCtBYitIYVNOSUdJbkRXWk0iLCJtYWMiOiIyN2FlMzVlNTk1MjJiNTc1NmY2YjVjOTVkMDljMjcwN2NmOGQyZDFkY2Y0YjUzMTQ5YTVjZmQ3ZGI5ZjA2MjQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU5a0NRc25BcGdHbWViWG8zOTlyd3c9PSIsInZhbHVlIjoieXZtbU5lQzM5bXd0MmZ1S1lkd0xITjN3c1BvTUIyN0NyZFhLZ3NwRi9hQTRucGtiU0FkZmxYSytNQm50QWU2MzFiR3V3K1BzYWlnbFFucm5FdUtSUmZJQndhdjRTMTQ3UEhZQ2lvdURVRHhmVElnLzV6YUt4dmRYclpRU1R3SloiLCJtYWMiOiI3ZWZkMWEwYWM1Yjk2M2M4NDEwZDQ3ODU3NWRiNzNjNjQ2OGFkOTFlZGY5ZmRmYjEwOTE0YjZjNTMyNjA3MWJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:57:02 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding, Accept-Encoding,User-Agent\r\nlast-modified: Mon, 27 Apr 2026 14:12:07 GMT\r\ncache-control: max-age=2592000\r\nexpires: Tue, 30 Jun 2026 23:47:57 GMT\r\ncontent-encoding: gzip\r\nage: 544\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QTQ71Pp71q1DrdwtLfjLUY%2B8VN6m5mxRCPhciU39yJxYZMjRyx69QsHljkVsY8j9h9z5m7hwim8fHlUfCS48t0VmHNctsPLwiwaUj7tk4YARAtgWkGrPt%2BsfaODYIMVj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049eb2819980b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1538,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"81157dd8c0e81ac2b6dff5a554dff6a1","sha1":"4767f0372c03eb2db3cf2705c15fd8bac00bf423","sha256":"1b576ad8f27ee3d9bdc8beef2df0ea289bd98632237049bd9580e57ade70ea5a","sha512":"3e9ed8987ed15123623ea8a153382be1995970e9217900532e9caccbd2398218553f779fd80bb60c524325ecc11880729eadbce4f08020912c55267abb8ab2ef","ssdeep":"","tlshash":"3b31a0df25630a11788dea9c5fa643455a248087e30ec8593fdc21f99f4e3d9c922b9c","first_seen":"2026-05-02T23:33:09.791669Z","last_seen":"2026-06-01T10:05:26.893554Z","times_seen":814,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/flags/pt.svg","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:02.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /flags/pt.svg HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ijc1SG1CelVreHEwbHJmT2plYTJOUVE9PSIsInZhbHVlIjoib0dUVFZxOXVlMjI5QlVYTkQyS0JrRzU0bnEyU1dXWE4vZURpWmtkdUN3Z1FSMmFPdW9vY3Y3dC9RUytSM1RPVE9wRXIrL2ZvaVM3ckxqN1Jsd2F3WlVOTzVsbllLOEFWSWQvSklIakxST082dFFZVCtBYitIYVNOSUdJbkRXWk0iLCJtYWMiOiIyN2FlMzVlNTk1MjJiNTc1NmY2YjVjOTVkMDljMjcwN2NmOGQyZDFkY2Y0YjUzMTQ5YTVjZmQ3ZGI5ZjA2MjQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU5a0NRc25BcGdHbWViWG8zOTlyd3c9PSIsInZhbHVlIjoieXZtbU5lQzM5bXd0MmZ1S1lkd0xITjN3c1BvTUIyN0NyZFhLZ3NwRi9hQTRucGtiU0FkZmxYSytNQm50QWU2MzFiR3V3K1BzYWlnbFFucm5FdUtSUmZJQndhdjRTMTQ3UEhZQ2lvdURVRHhmVElnLzV6YUt4dmRYclpRU1R3SloiLCJtYWMiOiI3ZWZkMWEwYWM1Yjk2M2M4NDEwZDQ3ODU3NWRiNzNjNjQ2OGFkOTFlZGY5ZmRmYjEwOTE0YjZjNTMyNjA3MWJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:57:02 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, Accept-Encoding,User-Agent\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\ncontent-encoding: gzip\r\nage: 544\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P5OAIgmiolgFdyMJK7lgE33TT8ZXasD0x8JzOvRehaIZlOnMbe1VmW4KdrJlQJ8ANUAQQ1SO3BjNJV4YCLGQ%2FJ%2FIGcx46aQcvmtdAybKcK3vPBQjitExVIh4oNOSDuGa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049eb2849cd0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1912,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b0f66bd6beaac99c6e2f26c24305a1a2","sha1":"afea1f64055e95d095cb738e07e7751036d3bfe6","sha256":"a97c198d9404f1f1db3616ee0b26980087346fff121db3bb7f13540b90b56c96","sha512":"9bf4d9b22cd6cf9f0fb08b52cd1a93eb9886be4abbd1374bc05e1f3a6b822f127e03c1a5b0256bf0450393ae89406db6ffbfeaf4918ce2a30fd6accf8a212a7f","ssdeep":"","tlshash":"83410de82f2c50dc84a33aad2d25f544d34d50b572a54ec0af8db769d063895f0c7e80","first_seen":"2024-08-19T18:26:58.073415Z","last_seen":"2026-06-01T10:05:26.854391Z","times_seen":4405,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/flags/tr.svg","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:02.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /flags/tr.svg HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ijc1SG1CelVreHEwbHJmT2plYTJOUVE9PSIsInZhbHVlIjoib0dUVFZxOXVlMjI5QlVYTkQyS0JrRzU0bnEyU1dXWE4vZURpWmtkdUN3Z1FSMmFPdW9vY3Y3dC9RUytSM1RPVE9wRXIrL2ZvaVM3ckxqN1Jsd2F3WlVOTzVsbllLOEFWSWQvSklIakxST082dFFZVCtBYitIYVNOSUdJbkRXWk0iLCJtYWMiOiIyN2FlMzVlNTk1MjJiNTc1NmY2YjVjOTVkMDljMjcwN2NmOGQyZDFkY2Y0YjUzMTQ5YTVjZmQ3ZGI5ZjA2MjQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU5a0NRc25BcGdHbWViWG8zOTlyd3c9PSIsInZhbHVlIjoieXZtbU5lQzM5bXd0MmZ1S1lkd0xITjN3c1BvTUIyN0NyZFhLZ3NwRi9hQTRucGtiU0FkZmxYSytNQm50QWU2MzFiR3V3K1BzYWlnbFFucm5FdUtSUmZJQndhdjRTMTQ3UEhZQ2lvdURVRHhmVElnLzV6YUt4dmRYclpRU1R3SloiLCJtYWMiOiI3ZWZkMWEwYWM1Yjk2M2M4NDEwZDQ3ODU3NWRiNzNjNjQ2OGFkOTFlZGY5ZmRmYjEwOTE0YjZjNTMyNjA3MWJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:57:02 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\nage: 544\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yf1n5Klmxc2R%2FrrQsN8enOqUjka%2FNKX%2BZDHmWs8RDpwahgXLizx6zAMngTmNqa5D10Cw7sNi34lwNvZhVxUjzXYUkGtYyazKtb4%2FSFpWC%2BA8mBF9bIycNyVuukW69h%2Bu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a049eb2849d40b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7af14a6fd5253f05724502662d478fac","sha1":"df6f03167492046dd2f02e3e005e66201f80ceb9","sha256":"f101fe5cf7c2fe25bb1d2c7efcacb8acb52c90561497576f2f16be8a5d628315","sha512":"a1b4e0fca3d92adf4b6bd1473bfaceb5d1877c682378f84bd862e54927c9bea34b0781cb4e1cc5d44ce637887ac93a30465496e63b94169ac15cd1c155396802","ssdeep":"","tlshash":"c2f0c0d91a78c4ddbf4647314d3db0d92639209f399900b830c96529ea6a24b2401904","first_seen":"2023-05-07T18:03:13Z","last_seen":"2026-06-06T05:06:17.105491Z","times_seen":5146,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/flags/th.svg","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:02.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /flags/th.svg HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ijc1SG1CelVreHEwbHJmT2plYTJOUVE9PSIsInZhbHVlIjoib0dUVFZxOXVlMjI5QlVYTkQyS0JrRzU0bnEyU1dXWE4vZURpWmtkdUN3Z1FSMmFPdW9vY3Y3dC9RUytSM1RPVE9wRXIrL2ZvaVM3ckxqN1Jsd2F3WlVOTzVsbllLOEFWSWQvSklIakxST082dFFZVCtBYitIYVNOSUdJbkRXWk0iLCJtYWMiOiIyN2FlMzVlNTk1MjJiNTc1NmY2YjVjOTVkMDljMjcwN2NmOGQyZDFkY2Y0YjUzMTQ5YTVjZmQ3ZGI5ZjA2MjQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU5a0NRc25BcGdHbWViWG8zOTlyd3c9PSIsInZhbHVlIjoieXZtbU5lQzM5bXd0MmZ1S1lkd0xITjN3c1BvTUIyN0NyZFhLZ3NwRi9hQTRucGtiU0FkZmxYSytNQm50QWU2MzFiR3V3K1BzYWlnbFFucm5FdUtSUmZJQndhdjRTMTQ3UEhZQ2lvdURVRHhmVElnLzV6YUt4dmRYclpRU1R3SloiLCJtYWMiOiI3ZWZkMWEwYWM1Yjk2M2M4NDEwZDQ3ODU3NWRiNzNjNjQ2OGFkOTFlZGY5ZmRmYjEwOTE0YjZjNTMyNjA3MWJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:57:02 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\nage: 544\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pHuAXvButN2SlNACknYBxqehuyxU6gNe41FMqi7fUhXoYiJ2bfDXnEHiOiq0coezVcSug8%2FqWX8UXkB%2FX%2BxIU3CSAtcrAXML2FcTNsVNijgSmODoYoFsnDIZdIYOe6kj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a049eb2859d70b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":367,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"756f64249f1f943e61bff54780b49cd8","sha1":"e4beba68e98c966f57a6cca0e40915ba60500e23","sha256":"cf1c5911962ac51db0ff4e36a6a91f5ff42c1ba40246ada4067b3b5a846f21b4","sha512":"d8d34a3b82cba3a38c9f4025440e7177ca7ad6347bdff81f1691e88ff0f7e8a58fe3491e2d53e9d433cf685af00af37193c07afd2799fa12aefb54d53ff30498","ssdeep":"","tlshash":"c2e0d8c6a869890e1e140f754dbc75ed5136b0cf214d41fcb1c12629aa4a39f2541a68","first_seen":"2023-05-07T18:03:13Z","last_seen":"2026-06-06T05:06:17.10336Z","times_seen":4180,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/frontend/assets/pl/js/jquery-3.1.1.min.js","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:02.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /frontend/assets/pl/js/jquery-3.1.1.min.js HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ijc1SG1CelVreHEwbHJmT2plYTJOUVE9PSIsInZhbHVlIjoib0dUVFZxOXVlMjI5QlVYTkQyS0JrRzU0bnEyU1dXWE4vZURpWmtkdUN3Z1FSMmFPdW9vY3Y3dC9RUytSM1RPVE9wRXIrL2ZvaVM3ckxqN1Jsd2F3WlVOTzVsbllLOEFWSWQvSklIakxST082dFFZVCtBYitIYVNOSUdJbkRXWk0iLCJtYWMiOiIyN2FlMzVlNTk1MjJiNTc1NmY2YjVjOTVkMDljMjcwN2NmOGQyZDFkY2Y0YjUzMTQ5YTVjZmQ3ZGI5ZjA2MjQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU5a0NRc25BcGdHbWViWG8zOTlyd3c9PSIsInZhbHVlIjoieXZtbU5lQzM5bXd0MmZ1S1lkd0xITjN3c1BvTUIyN0NyZFhLZ3NwRi9hQTRucGtiU0FkZmxYSytNQm50QWU2MzFiR3V3K1BzYWlnbFFucm5FdUtSUmZJQndhdjRTMTQ3UEhZQ2lvdURVRHhmVElnLzV6YUt4dmRYclpRU1R3SloiLCJtYWMiOiI3ZWZkMWEwYWM1Yjk2M2M4NDEwZDQ3ODU3NWRiNzNjNjQ2OGFkOTFlZGY5ZmRmYjEwOTE0YjZjNTMyNjA3MWJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:57:02 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding,User-Agent\r\nlast-modified: Mon, 20 Apr 2026 17:08:22 GMT\r\ncontent-encoding: gzip\r\nage: 544\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0d4WfgoYDaaUNoVMtDypdv6MrYF1SvRPQqVXUdd%2FdcdknN20UWfOnXc2FIExXioqbt6OCPOex8TO4Zjiv3Bq8oYhFozfXciObNdtdc%2Bk9n1JewypGnIEPgirBeDik4da\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049eb2859dc0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86709,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32030)","md5":"e071abda8fe61194711cfc2ab99fe104","sha1":"f647a6d37dc4ca055ced3cf64bbc1f490070acba","sha256":"85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf","sha512":"53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65","ssdeep":"1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5","tlshash":"3183d5d9b2c670529b7730b850bf450bb17a98dab44c8d60f058c5d57eb8a8e507bf2c","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-06-06T06:05:04.401649Z","times_seen":143417,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@25.8.3/build/img/flags.webp","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:02.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@25.8.3/build/img/flags.webp HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 28186\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/webp\r\nx-jsd-version: 25.8.3\r\nx-jsd-version-type: version\r\netag: W/\"6e1a-JHPdY1y9Ow2NjbjaGyegi0Qmya4\"\r\naccept-ranges: bytes\r\ndate: Sun, 31 May 2026 23:57:02 GMT\r\nage: 935585\r\nx-served-by: cache-fra-etou8220074-FRA, cache-osl6535-OSL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28186,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4af30d041d95c5a83b016ec6812cda19","sha1":"2473dd635cbd3b0d8d8db8da1b27a08b4426c9ae","sha256":"0e2a53ec4d77d08efa8e8f5fc86b1c25e8f2af39d6b44334e1219ed3e0687a61","sha512":"a43b49d0a8830608a8351b1fe3afc5d468664ad79b674583f6e8f1c647fd5270181e9b1d35cbbbddc0285dc15b49e9d53f34a8bd414d32ae3ad6d659168e095e","ssdeep":"384:NmynJhMcWfubAG0nXDutFs4CIwMB7Po+NKC5NPQic7vmUbx2Kh4du2r0mRo3d0:NmynJhMze5CD+3PZ7AEZPyx2KhSRj","tlshash":"66c2e133be32a6c76d998ab018364ffa97354446bdd359c3a1f6ba98dd374c3294020d","first_seen":"2025-03-06T15:46:52.721855Z","last_seen":"2026-06-06T03:52:09.261372Z","times_seen":2564,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Questrial\u0026family=Lexend+Deca:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:02.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:15 GMT","end":"Thu, 30 Jul 2026 15:53:14 GMT"},"fingerprint":{"sha1":"19:42:B0:56:3A:E4:79:BF:8B:69:E2:50:F4:76:BF:1E:A9:D7:7A:49","sha256":"D7:FF:C1:46:95:F3:5F:08:04:B0:E1:A8:FE:14:FC:60:19:58:D6:C7:D3:6E:82:B3:64:07:E9:E1:CB:9A:27:8C"}}},"request":{"raw":"GET /css2?family=Questrial\u0026family=Lexend+Deca:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 31 May 2026 23:57:02 GMT\r\ndate: Sun, 31 May 2026 23:57:02 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6327,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"5a182b65e1da38541d4149cd43e8c979","sha1":"cbf5a24c6802d261b5a10a0552ea00c680350451","sha256":"63c600ce72c5123677f95af5a36d8360250d4d4bb1bec8d233bca877dff66fb5","sha512":"9b4dbb3d19f62de0611806f4add8756a2b30288d5fefb69410752077e6e37468998cd12cdae47c764477a25cd4e6c56ee8533f85734f7b156bd177c98c695daf","ssdeep":"96:cULOEa5SnLOEa5SSJc+ugLOEa5SSNDULOXa5SnLOXa5SSJc+ugLOXa5SSNDULOxr:cpRDCB6iDxBX/DYBw4DfBkT/bj","tlshash":"83d1da91046b9500eb5b1cc222cf7e32ae9f61657444c439affd18d8ecaed262366b0d","first_seen":"2026-03-12T05:25:58.277422Z","last_seen":"2026-06-05T10:07:59.056997Z","times_seen":832,"resource_available":false,"data":null}},"time_used":687,"timings":{"blocked":301,"dns":1,"connect":32,"send":0,"wait":45,"receive":0,"ssl":303},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/frontend/assets/pl/js/loader.js","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:02.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /frontend/assets/pl/js/loader.js HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ijc1SG1CelVreHEwbHJmT2plYTJOUVE9PSIsInZhbHVlIjoib0dUVFZxOXVlMjI5QlVYTkQyS0JrRzU0bnEyU1dXWE4vZURpWmtkdUN3Z1FSMmFPdW9vY3Y3dC9RUytSM1RPVE9wRXIrL2ZvaVM3ckxqN1Jsd2F3WlVOTzVsbllLOEFWSWQvSklIakxST082dFFZVCtBYitIYVNOSUdJbkRXWk0iLCJtYWMiOiIyN2FlMzVlNTk1MjJiNTc1NmY2YjVjOTVkMDljMjcwN2NmOGQyZDFkY2Y0YjUzMTQ5YTVjZmQ3ZGI5ZjA2MjQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU5a0NRc25BcGdHbWViWG8zOTlyd3c9PSIsInZhbHVlIjoieXZtbU5lQzM5bXd0MmZ1S1lkd0xITjN3c1BvTUIyN0NyZFhLZ3NwRi9hQTRucGtiU0FkZmxYSytNQm50QWU2MzFiR3V3K1BzYWlnbFFucm5FdUtSUmZJQndhdjRTMTQ3UEhZQ2lvdURVRHhmVElnLzV6YUt4dmRYclpRU1R3SloiLCJtYWMiOiI3ZWZkMWEwYWM1Yjk2M2M4NDEwZDQ3ODU3NWRiNzNjNjQ2OGFkOTFlZGY5ZmRmYjEwOTE0YjZjNTMyNjA3MWJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:57:02 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Mon, 20 Apr 2026 17:08:22 GMT\r\nvary: Accept-Encoding,User-Agent\r\nage: 544\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m6n9byS96JLUc9Z%2BUd7LkpdglUsdF%2FiYQFAazIeWz0SZqdPPmGw%2FlyM6RugBtYfT4Xl5H2KJOOzk8eVqWGpLAexItvnR2%2BsUGf34xmyuahzkc%2BfoWrm7CLH0ZRVB%2FwMT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a049eb2829a20b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":656,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"7495dbde5ab60ac459b25cc5c0217b0f","sha1":"a3915023aa8e39ab95d7417eef6bdcdedefde3ca","sha256":"80da25369b4c34a14b7deac6d1ca96b307bb42e738f41aea491ccf993ac946a1","sha512":"d95ed327c8180538a84de3b5b3a5fe5d2d261d32db8ceccfd978ecbd999f1ff24cc81955ca6e6482746dc8e951df3019f84457874652e13fff3454458d03c23c","ssdeep":"","tlshash":"aaf0d11a231749a48bf6c66ba3718381febe6133e445d486359f74c07f709d45065cd8","first_seen":"2026-05-03T18:32:03.601612Z","last_seen":"2026-06-01T10:05:26.903614Z","times_seen":812,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/flags/ko.png","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:02.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /flags/ko.png HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ijc1SG1CelVreHEwbHJmT2plYTJOUVE9PSIsInZhbHVlIjoib0dUVFZxOXVlMjI5QlVYTkQyS0JrRzU0bnEyU1dXWE4vZURpWmtkdUN3Z1FSMmFPdW9vY3Y3dC9RUytSM1RPVE9wRXIrL2ZvaVM3ckxqN1Jsd2F3WlVOTzVsbllLOEFWSWQvSklIakxST082dFFZVCtBYitIYVNOSUdJbkRXWk0iLCJtYWMiOiIyN2FlMzVlNTk1MjJiNTc1NmY2YjVjOTVkMDljMjcwN2NmOGQyZDFkY2Y0YjUzMTQ5YTVjZmQ3ZGI5ZjA2MjQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU5a0NRc25BcGdHbWViWG8zOTlyd3c9PSIsInZhbHVlIjoieXZtbU5lQzM5bXd0MmZ1S1lkd0xITjN3c1BvTUIyN0NyZFhLZ3NwRi9hQTRucGtiU0FkZmxYSytNQm50QWU2MzFiR3V3K1BzYWlnbFFucm5FdUtSUmZJQndhdjRTMTQ3UEhZQ2lvdURVRHhmVElnLzV6YUt4dmRYclpRU1R3SloiLCJtYWMiOiI3ZWZkMWEwYWM1Yjk2M2M4NDEwZDQ3ODU3NWRiNzNjNjQ2OGFkOTFlZGY5ZmRmYjEwOTE0YjZjNTMyNjA3MWJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:57:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 1361\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\ncache-control: max-age=31536000\r\nexpires: Mon, 31 May 2027 23:47:57 GMT\r\nvary: User-Agent\r\naccept-ranges: bytes\r\nage: 544\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8X8V21xoWQkzQV5R5hic9CUxVzbhPgUVtTOr5khGbIIZ4RdtyjhdDFoPgffEay0KVnOY6q03AUmIKV1%2B%2B8is5H5%2FpnEpsGxhgKrls8X7Sx2pAeBF%2Fwy1yB7sfopw4IM7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049eb2849c70b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1361,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"ed87e4c8a4dd16c9c3f8499a0aaa28bd","sha1":"f818a0782047c159ed8e5cd041ad7f09e8fe52fb","sha256":"eb59eb7dcf155a7b38c8f4c9db869ed942bf55a4457e3f4ff0791be4f2c736d5","sha512":"bcf1992bfb1d0ed92e4393e0b85fe5c768ed29285d38a259d0cfb60827537b74d39a925cfc4df58ed8b478d5015fad047a211ec2ddffa5a69b0d08f5abcdab6e","ssdeep":"","tlshash":"05210bad1b7c302cd6f9c5799909fb01ddfb04040c9fa1c59129d6cc28c588b70d5436","first_seen":"2023-05-07T21:05:59Z","last_seen":"2026-06-05T03:43:53.10207Z","times_seen":5090,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/frontend/assets/pl/js/geo.js","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:04.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /frontend/assets/pl/js/geo.js HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/frontend/assets/pl/js/deferred-imports.js\r\nCookie: XSRF-TOKEN=eyJpdiI6IkN3YXZ3bE1CS2t5ZzVjNHJwTjlTT0E9PSIsInZhbHVlIjoiVFhWYkdicHZvV0JJdys1cGNsVDFET2tBNUo3a1JRbFJvU20ra2FVTlZXZ1pNOU4vNUJOc3UrTWtYbEdRWm84b204amFBdDVRYzNhTlo1VG5GTWJKcXZwTUlOYkVyR2h2M1MyK3U1QkIydWJxR1BhRDlISThuM2VHYkU1K3pKa3AiLCJtYWMiOiI1NDlmMmVmYjA0ZjRhZmEyYWNiOTVkZjg0YTk3ZThkYTg0MDQyZTk1YTMzMmY3ZGQwMTk2M2M4NWE3Mjc1MWViIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InJGbU80VDhZRVVKaWJITk0vTkdmUUE9PSIsInZhbHVlIjoiOVlGaGxmK015WXpCMFc2VnJIUDI2b1hJcDF1UzRacWVoR2FEaXdlVWRLVHlGZXQrWElFa0YzZGprWDZoZktSbVM3UGwyVThxbGFIem5IMUI0US9MZlNxdWo3eHhUMEl2QjZOZjJucGpKbHQ2ZURhWWhyTEllWjVNcVRrM0NTK1giLCJtYWMiOiI5YjhjZWYwNzVlMzdiMTQ4NzBjZGNiNjVmYzgxYzQ2NzNhODJjZjAxZjMwMjg4YmJjODAwOTRmYzk0ODA4YTEwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:57:04 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 20 Apr 2026 17:08:22 GMT\r\nvary: Accept-Encoding,User-Agent\r\nage: 544\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DJratASmf2cUNaZ%2F2x98%2BbtTbipV%2FNK03fJi%2BylHYnE0D07sXIrJ%2F8rTmMM5YRVm0YHRJK3v3pm4UUtSWoD1miAhpUSrDodQdWB0870%2F84puxkrWtypDXgcankmf5l25\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a049eb363dc80b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":825,"size_decoded":0,"mime_type":"text/javascript","magic":"C++ source, ASCII text","md5":"b9c760269aeea47905f4d33aaf740c3a","sha1":"14120a6947ffad92c5f9e886b485ec65b3bed3ee","sha256":"556384cb09c3f07d6576faea9d370459e288fbfbe44b1c5e847b2db9dab5690c","sha512":"b594df48a2e062a0618a0443ca35e4b7bcdf55eb2599b8fe782016f29b198210ab39b46e017121f150e27fa14918c37ec05c62c00752e61914b095aa1c087946","ssdeep":"","tlshash":"fd01496552b6466040e771cada6fa2601435e40b374dd8ea7a9f43480f8991dc2b27dd","first_seen":"2026-05-03T18:34:41.313902Z","last_seen":"2026-06-01T10:05:26.858129Z","times_seen":785,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/frontend/assets/pl/js/sliders.js","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:04.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /frontend/assets/pl/js/sliders.js HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/frontend/assets/pl/js/deferred-imports.js\r\nCookie: XSRF-TOKEN=eyJpdiI6IkN3YXZ3bE1CS2t5ZzVjNHJwTjlTT0E9PSIsInZhbHVlIjoiVFhWYkdicHZvV0JJdys1cGNsVDFET2tBNUo3a1JRbFJvU20ra2FVTlZXZ1pNOU4vNUJOc3UrTWtYbEdRWm84b204amFBdDVRYzNhTlo1VG5GTWJKcXZwTUlOYkVyR2h2M1MyK3U1QkIydWJxR1BhRDlISThuM2VHYkU1K3pKa3AiLCJtYWMiOiI1NDlmMmVmYjA0ZjRhZmEyYWNiOTVkZjg0YTk3ZThkYTg0MDQyZTk1YTMzMmY3ZGQwMTk2M2M4NWE3Mjc1MWViIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InJGbU80VDhZRVVKaWJITk0vTkdmUUE9PSIsInZhbHVlIjoiOVlGaGxmK015WXpCMFc2VnJIUDI2b1hJcDF1UzRacWVoR2FEaXdlVWRLVHlGZXQrWElFa0YzZGprWDZoZktSbVM3UGwyVThxbGFIem5IMUI0US9MZlNxdWo3eHhUMEl2QjZOZjJucGpKbHQ2ZURhWWhyTEllWjVNcVRrM0NTK1giLCJtYWMiOiI5YjhjZWYwNzVlMzdiMTQ4NzBjZGNiNjVmYzgxYzQ2NzNhODJjZjAxZjMwMjg4YmJjODAwOTRmYzk0ODA4YTEwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:57:04 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding,User-Agent\r\nlast-modified: Mon, 20 Apr 2026 17:08:22 GMT\r\ncontent-encoding: gzip\r\nage: 544\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8vNETtsNs%2BWHQ7ZfHVEoCWUT08EtXYBpL13E%2FgubIcidXfWilBwD%2BqmufI7iqftjpqkFJJPsTqsT0boLz6yeXjya5%2F2tBI6nnd5Rfg%2Bnq1wiJufqT3XdSvM3XAzlAlXM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049eb364dcc0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4454,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"67dd1e2333e167a77697aca034eb3df6","sha1":"306594dfb8433db362be7a689933e0eeca162f48","sha256":"eede0d06ab82379d31524d842f64e1ac779e3b3e5b0b57c026290af86649b706","sha512":"7fc94d65c296988603ad1d10539e40a52db78e8ddea794bc22ecd118084675d2fb7fb3ee16aeac57a10443e95af4db7a2a55ce5b0bbe1d2b425163bcfb553f07","ssdeep":"96:hWrrPGI8yDdWTAAOxlfWG0eTnCa9JeUW7Y:hWvPG/eeA5xlZCa2M","tlshash":"ec910366303223358a6742edae0bcc41e2dad0477905d581f58e471a8fc6faca6e5dfc","first_seen":"2026-05-03T18:34:41.351704Z","last_seen":"2026-06-01T10:05:26.849255Z","times_seen":732,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/assets/css/form/intltelinput.min.css","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:02.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /assets/css/form/intltelinput.min.css HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ijc1SG1CelVreHEwbHJmT2plYTJOUVE9PSIsInZhbHVlIjoib0dUVFZxOXVlMjI5QlVYTkQyS0JrRzU0bnEyU1dXWE4vZURpWmtkdUN3Z1FSMmFPdW9vY3Y3dC9RUytSM1RPVE9wRXIrL2ZvaVM3ckxqN1Jsd2F3WlVOTzVsbllLOEFWSWQvSklIakxST082dFFZVCtBYitIYVNOSUdJbkRXWk0iLCJtYWMiOiIyN2FlMzVlNTk1MjJiNTc1NmY2YjVjOTVkMDljMjcwN2NmOGQyZDFkY2Y0YjUzMTQ5YTVjZmQ3ZGI5ZjA2MjQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU5a0NRc25BcGdHbWViWG8zOTlyd3c9PSIsInZhbHVlIjoieXZtbU5lQzM5bXd0MmZ1S1lkd0xITjN3c1BvTUIyN0NyZFhLZ3NwRi9hQTRucGtiU0FkZmxYSytNQm50QWU2MzFiR3V3K1BzYWlnbFFucm5FdUtSUmZJQndhdjRTMTQ3UEhZQ2lvdURVRHhmVElnLzV6YUt4dmRYclpRU1R3SloiLCJtYWMiOiI3ZWZkMWEwYWM1Yjk2M2M4NDEwZDQ3ODU3NWRiNzNjNjQ2OGFkOTFlZGY5ZmRmYjEwOTE0YjZjNTMyNjA3MWJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:57:02 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding, Accept-Encoding,User-Agent\r\nlast-modified: Thu, 12 Mar 2026 12:14:09 GMT\r\ncache-control: max-age=2592000\r\nexpires: Tue, 30 Jun 2026 23:47:57 GMT\r\ncontent-encoding: gzip\r\nage: 544\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mrFc8FH0NmQ6hwvKK0mrwcBh21wWcLd3LgG2KuxpEQx5rLUHhLHc2cMWwbzJTdsl%2F9Rq%2Fk5uzq7dsYLDy9SJTlbdsmoJl9vzt2GywvBfJlokvrJY0qNAZJlqrjnlwEwe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049eb28299f0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18630,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f832705cac17afa9ac678cbfe89e1088","sha1":"89b2b08b07e41ec8b69bac2ada42b7323fd2ca2f","sha256":"b83ef02bff5c0c1d579e95aae90cb3f6f72f06c3842cbe3bbb22ed76dcadfa74","sha512":"7ac6d65b33659374567f020167802ddf89df4a32ad82499203ed60dc0162b6d623af0c4cafbf1dd37cc7f21938f209bd0d095029baf694692136692d64b09005","ssdeep":"192:mB/nPLIsL4L9LqTA7J9IADdTKQK9A3kZ0Y980F+ND7laGG7agLUJ/LZ5MVcH6EdZ:Y/PlcR4+T49+hFhLZ5MV3m","tlshash":"10829d1343b11c7ea61dc1ba3aea95b2733b188b34abedd3f6d920060f43551e1eac54","first_seen":"2026-03-12T09:22:20.73665Z","last_seen":"2026-06-01T10:05:26.844735Z","times_seen":835,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/flags/de.svg","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:02.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /flags/de.svg HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ijc1SG1CelVreHEwbHJmT2plYTJOUVE9PSIsInZhbHVlIjoib0dUVFZxOXVlMjI5QlVYTkQyS0JrRzU0bnEyU1dXWE4vZURpWmtkdUN3Z1FSMmFPdW9vY3Y3dC9RUytSM1RPVE9wRXIrL2ZvaVM3ckxqN1Jsd2F3WlVOTzVsbllLOEFWSWQvSklIakxST082dFFZVCtBYitIYVNOSUdJbkRXWk0iLCJtYWMiOiIyN2FlMzVlNTk1MjJiNTc1NmY2YjVjOTVkMDljMjcwN2NmOGQyZDFkY2Y0YjUzMTQ5YTVjZmQ3ZGI5ZjA2MjQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU5a0NRc25BcGdHbWViWG8zOTlyd3c9PSIsInZhbHVlIjoieXZtbU5lQzM5bXd0MmZ1S1lkd0xITjN3c1BvTUIyN0NyZFhLZ3NwRi9hQTRucGtiU0FkZmxYSytNQm50QWU2MzFiR3V3K1BzYWlnbFFucm5FdUtSUmZJQndhdjRTMTQ3UEhZQ2lvdURVRHhmVElnLzV6YUt4dmRYclpRU1R3SloiLCJtYWMiOiI3ZWZkMWEwYWM1Yjk2M2M4NDEwZDQ3ODU3NWRiNzNjNjQ2OGFkOTFlZGY5ZmRmYjEwOTE0YjZjNTMyNjA3MWJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:57:02 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\nage: 544\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lRYhiYdo2QUssPv5hOzMTQUsMReSUeJ96udqNLPE21sskJLfFDT%2FST9cyyfebmiRQZmqZ%2FMHCUqootNcHbQD2DcN%2FAmgesLFTL7YMLzu5LKtNKZqxdE7g0gZhYqrcakO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a049eb2829b00b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":335,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"51768606d83a265da9e7ee8efbb21edb","sha1":"b22c5b98344da8d3ea54ecb9baab4c5a5a7ebdb4","sha256":"8fcaa96d8835e39fa6a74ff4dc781d908112d46ceb8fb81ff37c433f390a4c8b","sha512":"cec42089404b17430bc0d8c7882cfd6249d4fa7401b538f1899b2d315d639cb6fd28cf33da34d91afc40572f5dd59aac75dee16b0c65aa1abf2e0b93bc779c3d","ssdeep":"","tlshash":"a7e02644e0e98d0a8e2607a88efc71d280a230cc12cc00ed72842528fd4e3eb6845be5","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-06-06T05:06:17.073158Z","times_seen":7895,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/flags/ja.svg","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:02.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /flags/ja.svg HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ijc1SG1CelVreHEwbHJmT2plYTJOUVE9PSIsInZhbHVlIjoib0dUVFZxOXVlMjI5QlVYTkQyS0JrRzU0bnEyU1dXWE4vZURpWmtkdUN3Z1FSMmFPdW9vY3Y3dC9RUytSM1RPVE9wRXIrL2ZvaVM3ckxqN1Jsd2F3WlVOTzVsbllLOEFWSWQvSklIakxST082dFFZVCtBYitIYVNOSUdJbkRXWk0iLCJtYWMiOiIyN2FlMzVlNTk1MjJiNTc1NmY2YjVjOTVkMDljMjcwN2NmOGQyZDFkY2Y0YjUzMTQ5YTVjZmQ3ZGI5ZjA2MjQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU5a0NRc25BcGdHbWViWG8zOTlyd3c9PSIsInZhbHVlIjoieXZtbU5lQzM5bXd0MmZ1S1lkd0xITjN3c1BvTUIyN0NyZFhLZ3NwRi9hQTRucGtiU0FkZmxYSytNQm50QWU2MzFiR3V3K1BzYWlnbFFucm5FdUtSUmZJQndhdjRTMTQ3UEhZQ2lvdURVRHhmVElnLzV6YUt4dmRYclpRU1R3SloiLCJtYWMiOiI3ZWZkMWEwYWM1Yjk2M2M4NDEwZDQ3ODU3NWRiNzNjNjQ2OGFkOTFlZGY5ZmRmYjEwOTE0YjZjNTMyNjA3MWJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:57:02 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\nage: 544\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FCwERd7NUj4HQATOVmnpYBJeGKvTO4Q14UzqYfNUjhXb9HVVa2wDl%2Be785U%2Bw6jbFW94quwcHlICdd9aCQJVc0fJ66SqXEnbIalJzAXxrtNMu64dFNB05hiPDaHrGkFU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a049eb2849c50b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":357,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b072ff9b575b2c9db1f40db4a8603ea1","sha1":"56c055fa39d04fdfbf8ca59c3186b982e301bbf2","sha256":"3cff261749f98b839faf4cbd34b7748daf28ed5d9377f3cb9929d6cc506665a2","sha512":"9a42eab5c883210142df99507c2cb0d4a2b8bba9cc91d87440039f0cb340d010b5137066ae28269ceb59e23b5901528506b4f3af4b49eec1ab405f1629a76a4a","ssdeep":"","tlshash":"a0e0c060a0ecc94c4e098b640b7c70d041a670dd268b01fc748c2668e98ebc77811a7c","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-06-06T05:06:17.088083Z","times_seen":2322,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@25.8.3/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:02.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@25.8.3/build/js/intlTelInput.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 25.8.3\r\nx-jsd-version-type: version\r\netag: W/\"871a-JROK+GPirWm7Ca9OkwCUSfLnXMs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 31 May 2026 23:57:02 GMT\r\nage: 1516452\r\nx-served-by: cache-fra-eddf8230041-FRA, cache-osl6541-OSL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 12976\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34586,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18251)","md5":"7657299ef4e0a3abdc478c0b9d7075aa","sha1":"25138af863e2ad69bb09af4e93009449f2e75ccb","sha256":"8e184485db8b6a8a741dd831f7bae84644eedf8f0c371172e69721e1236a7cd1","sha512":"eb5e7ae63fb48ea7b543f7339625284b3cc5477b6c8be03667714ebab1eb7c493a1445bae46348d992a4477a2080634c532b16c7b6ae4102e1524e51ab142b6b","ssdeep":"768:U+h03XVqC/iPIqXpwJxsyysdjx2nmY249lHGIw:UiPIsy/tWHG","tlshash":"c0f2f9aeb3646637abfd82a270e54403ae6f79444604043d78bc8ede1399dd171f6b38","first_seen":"2025-10-21T03:51:56.40324Z","last_seen":"2026-06-06T03:52:09.23489Z","times_seen":1353,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":1,"connect":2,"send":0,"wait":2,"receive":1,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/frontend/assets/pl/css/tailwind.min.css","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:02.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /frontend/assets/pl/css/tailwind.min.css HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ijc1SG1CelVreHEwbHJmT2plYTJOUVE9PSIsInZhbHVlIjoib0dUVFZxOXVlMjI5QlVYTkQyS0JrRzU0bnEyU1dXWE4vZURpWmtkdUN3Z1FSMmFPdW9vY3Y3dC9RUytSM1RPVE9wRXIrL2ZvaVM3ckxqN1Jsd2F3WlVOTzVsbllLOEFWSWQvSklIakxST082dFFZVCtBYitIYVNOSUdJbkRXWk0iLCJtYWMiOiIyN2FlMzVlNTk1MjJiNTc1NmY2YjVjOTVkMDljMjcwN2NmOGQyZDFkY2Y0YjUzMTQ5YTVjZmQ3ZGI5ZjA2MjQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU5a0NRc25BcGdHbWViWG8zOTlyd3c9PSIsInZhbHVlIjoieXZtbU5lQzM5bXd0MmZ1S1lkd0xITjN3c1BvTUIyN0NyZFhLZ3NwRi9hQTRucGtiU0FkZmxYSytNQm50QWU2MzFiR3V3K1BzYWlnbFFucm5FdUtSUmZJQndhdjRTMTQ3UEhZQ2lvdURVRHhmVElnLzV6YUt4dmRYclpRU1R3SloiLCJtYWMiOiI3ZWZkMWEwYWM1Yjk2M2M4NDEwZDQ3ODU3NWRiNzNjNjQ2OGFkOTFlZGY5ZmRmYjEwOTE0YjZjNTMyNjA3MWJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:57:02 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding, Accept-Encoding,User-Agent\r\nlast-modified: Mon, 20 Apr 2026 17:08:22 GMT\r\ncache-control: max-age=2592000\r\nexpires: Tue, 30 Jun 2026 23:47:57 GMT\r\ncontent-encoding: gzip\r\nage: 544\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6KzeukYMUuOkhkU4rGlFAwApl8jocV3gp%2FECYfiYNVeID9nH1X6JbVBORm5WUpsgYN5AeHhcO6z1oumWVAkJHNY6KQdVwIyFIcV1OJ%2F3aSe%2BOme%2FkTLkhKUOfTB95chC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049eb28199a0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88630,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (338)","md5":"c76d96edc3e2e3d106da87e8f0fd9a15","sha1":"b69ecffdfd386fa8ad4f4c6c8146f22df0f00740","sha256":"5a75b9a1dd8043e72e81fae3eeb85b51c874fa12d6551dfadce07969d8caaba7","sha512":"da5c80ce6582916b731f48a91b373713fb9e9bfdfc7e335d842d34311ce91fb902d5cd587fa1eec6174218a11d6131fe476e5adb247aba7d494d0b52b8e44baa","ssdeep":"768:LGNrcMXgh38I7sae2U84ujSsbQavDfFL6dUZ0LsSW6SQZpqtbWA7ho1Kn5MVDJV9:WadmujkSDfF8Zty6A1oE5+s6ME","tlshash":"4e830f17527289bead27e07e37ed911a3339a047981addd5fecd21018fc62b469e2f04","first_seen":"2026-05-09T07:41:35.2168Z","last_seen":"2026-06-01T10:05:26.903046Z","times_seen":79,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/frontend/assets/pl/css/loader.css","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:02.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /frontend/assets/pl/css/loader.css HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ijc1SG1CelVreHEwbHJmT2plYTJOUVE9PSIsInZhbHVlIjoib0dUVFZxOXVlMjI5QlVYTkQyS0JrRzU0bnEyU1dXWE4vZURpWmtkdUN3Z1FSMmFPdW9vY3Y3dC9RUytSM1RPVE9wRXIrL2ZvaVM3ckxqN1Jsd2F3WlVOTzVsbllLOEFWSWQvSklIakxST082dFFZVCtBYitIYVNOSUdJbkRXWk0iLCJtYWMiOiIyN2FlMzVlNTk1MjJiNTc1NmY2YjVjOTVkMDljMjcwN2NmOGQyZDFkY2Y0YjUzMTQ5YTVjZmQ3ZGI5ZjA2MjQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU5a0NRc25BcGdHbWViWG8zOTlyd3c9PSIsInZhbHVlIjoieXZtbU5lQzM5bXd0MmZ1S1lkd0xITjN3c1BvTUIyN0NyZFhLZ3NwRi9hQTRucGtiU0FkZmxYSytNQm50QWU2MzFiR3V3K1BzYWlnbFFucm5FdUtSUmZJQndhdjRTMTQ3UEhZQ2lvdURVRHhmVElnLzV6YUt4dmRYclpRU1R3SloiLCJtYWMiOiI3ZWZkMWEwYWM1Yjk2M2M4NDEwZDQ3ODU3NWRiNzNjNjQ2OGFkOTFlZGY5ZmRmYjEwOTE0YjZjNTMyNjA3MWJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sun, 31 May 2026 23:57:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding, User-Agent\r\ncache-control: no-cache, private\r\npragma: no-cache\r\nexpires: -1\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T0ylRklrN0Iy4B5QlHcU4LrZfhxHycAVoUeez%2Bw8gh89vvPV%2BwZHPbiM4jtnLYodsWn6BxhuiYR15LQ3oimPRcQQqBAxv2pZgR9pePZwRI4RY%2F2iT716ir9BQ4qK0rYe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a049eb28299d0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6603,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5391)","md5":"543ac81966d87ac815e08eb0e436d719","sha1":"e35bb4e32ccf08c11a3935084b50660feb835350","sha256":"8cbc10ee9755ef972000f666711a5c4d0e025d3cedf53079ba3bfd8f2b19a968","sha512":"0c6a8f7948f93d4d00b5fbb98f487d7e2ee15d104acd83dfbc884ef9b77826dc7daa27b906640572977750a00cb7ef590ed5cd93e2f40ef4def88b9ff92f1dc3","ssdeep":"96:/J/SNi/FLQVTLKCGWz5NN5PXy0jRdoMCX4SZTdI5:/pV2RKCxnNByTMCX4SZT0","tlshash":"aed1871eeac5101e60d785b7e8d4e64c8916aac3de238bdfb54f7915cf8038719a321c","first_seen":"2023-04-06T17:05:03Z","last_seen":"2026-06-05T17:02:06.624013Z","times_seen":8444,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/flags/da.svg","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:02.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /flags/da.svg HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ijc1SG1CelVreHEwbHJmT2plYTJOUVE9PSIsInZhbHVlIjoib0dUVFZxOXVlMjI5QlVYTkQyS0JrRzU0bnEyU1dXWE4vZURpWmtkdUN3Z1FSMmFPdW9vY3Y3dC9RUytSM1RPVE9wRXIrL2ZvaVM3ckxqN1Jsd2F3WlVOTzVsbllLOEFWSWQvSklIakxST082dFFZVCtBYitIYVNOSUdJbkRXWk0iLCJtYWMiOiIyN2FlMzVlNTk1MjJiNTc1NmY2YjVjOTVkMDljMjcwN2NmOGQyZDFkY2Y0YjUzMTQ5YTVjZmQ3ZGI5ZjA2MjQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU5a0NRc25BcGdHbWViWG8zOTlyd3c9PSIsInZhbHVlIjoieXZtbU5lQzM5bXd0MmZ1S1lkd0xITjN3c1BvTUIyN0NyZFhLZ3NwRi9hQTRucGtiU0FkZmxYSytNQm50QWU2MzFiR3V3K1BzYWlnbFFucm5FdUtSUmZJQndhdjRTMTQ3UEhZQ2lvdURVRHhmVElnLzV6YUt4dmRYclpRU1R3SloiLCJtYWMiOiI3ZWZkMWEwYWM1Yjk2M2M4NDEwZDQ3ODU3NWRiNzNjNjQ2OGFkOTFlZGY5ZmRmYjEwOTE0YjZjNTMyNjA3MWJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:57:02 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\nage: 544\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dKmGP1v%2FyJT3w22Zks1rxRY%2FW1Kdps4qI95UGWh9326qpU3ab2TNaGADXDwO%2BJYrST95OPplzoHyItUcUd51FktHh4aPkmZAWQzPRPjMQew%2B0U9QvgRw2OrrXHBVhziC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a049eb2829ae0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":362,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c4d7abcf4c21c729ea9aab45faa1912a","sha1":"6ecbf40cb392204b8c7af284352108b500111969","sha256":"33815e73a3d07b3ae77cec1fdc77a285646e4e730136632f0ff5de6f8697c98c","sha512":"6d928963ac9562306e34f006030ddb4430cf81f3e37d8a5d805f90d5cc89659457e9f98257a2ec971205cf044387b7c3e87847c85bf7760ecfa2b667bdab3230","ssdeep":"","tlshash":"f6e0c09260ae8a0d4e1543205a3c70e2526770cf218e04fcf0c13e28fd667ab3800f5c","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-06-06T05:06:17.076364Z","times_seen":5107,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/flags/ru.svg","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:02.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /flags/ru.svg HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ijc1SG1CelVreHEwbHJmT2plYTJOUVE9PSIsInZhbHVlIjoib0dUVFZxOXVlMjI5QlVYTkQyS0JrRzU0bnEyU1dXWE4vZURpWmtkdUN3Z1FSMmFPdW9vY3Y3dC9RUytSM1RPVE9wRXIrL2ZvaVM3ckxqN1Jsd2F3WlVOTzVsbllLOEFWSWQvSklIakxST082dFFZVCtBYitIYVNOSUdJbkRXWk0iLCJtYWMiOiIyN2FlMzVlNTk1MjJiNTc1NmY2YjVjOTVkMDljMjcwN2NmOGQyZDFkY2Y0YjUzMTQ5YTVjZmQ3ZGI5ZjA2MjQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU5a0NRc25BcGdHbWViWG8zOTlyd3c9PSIsInZhbHVlIjoieXZtbU5lQzM5bXd0MmZ1S1lkd0xITjN3c1BvTUIyN0NyZFhLZ3NwRi9hQTRucGtiU0FkZmxYSytNQm50QWU2MzFiR3V3K1BzYWlnbFFucm5FdUtSUmZJQndhdjRTMTQ3UEhZQ2lvdURVRHhmVElnLzV6YUt4dmRYclpRU1R3SloiLCJtYWMiOiI3ZWZkMWEwYWM1Yjk2M2M4NDEwZDQ3ODU3NWRiNzNjNjQ2OGFkOTFlZGY5ZmRmYjEwOTE0YjZjNTMyNjA3MWJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:57:02 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\nage: 544\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ULk0%2BAspO1ubSnltUrLdtRvyH2d7qt9bIrC6vOQxAntIbsO6OuAZrlSICqCugZJbnNkS8n%2FaiUIAvt5VyZVG4e9Med9Bhzyj98xDD3Xx4WKmbyT2C4fe3l6lVj5q3CEB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a049eb2849d00b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":355,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"42103243a1d4c3f2e823e99f3c00aaa4","sha1":"1d95a227efb867c8b3dfa2902ea8a803f3fd3519","sha256":"0a720bc83f72d17849bd213570ed808ae6b430fa5f3d50dc7fdb32413f7ade01","sha512":"752fcf59700e20bed16831a684eef542a1fd525d73078c97894a6e7b3e2009296af1f4b31f2da100aa8403b3aebf3fff464cd8c1c6330a3b6da36796e2b70cd7","ssdeep":"","tlshash":"39e0d886a4e989095a1947694eec71d6406270ce218d01fd70853529fe4d3db2451aa8","first_seen":"2023-05-24T00:34:39Z","last_seen":"2026-06-06T04:55:14.494106Z","times_seen":5288,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/flags/ar.svg","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:02.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /flags/ar.svg HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ijc1SG1CelVreHEwbHJmT2plYTJOUVE9PSIsInZhbHVlIjoib0dUVFZxOXVlMjI5QlVYTkQyS0JrRzU0bnEyU1dXWE4vZURpWmtkdUN3Z1FSMmFPdW9vY3Y3dC9RUytSM1RPVE9wRXIrL2ZvaVM3ckxqN1Jsd2F3WlVOTzVsbllLOEFWSWQvSklIakxST082dFFZVCtBYitIYVNOSUdJbkRXWk0iLCJtYWMiOiIyN2FlMzVlNTk1MjJiNTc1NmY2YjVjOTVkMDljMjcwN2NmOGQyZDFkY2Y0YjUzMTQ5YTVjZmQ3ZGI5ZjA2MjQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU5a0NRc25BcGdHbWViWG8zOTlyd3c9PSIsInZhbHVlIjoieXZtbU5lQzM5bXd0MmZ1S1lkd0xITjN3c1BvTUIyN0NyZFhLZ3NwRi9hQTRucGtiU0FkZmxYSytNQm50QWU2MzFiR3V3K1BzYWlnbFFucm5FdUtSUmZJQndhdjRTMTQ3UEhZQ2lvdURVRHhmVElnLzV6YUt4dmRYclpRU1R3SloiLCJtYWMiOiI3ZWZkMWEwYWM1Yjk2M2M4NDEwZDQ3ODU3NWRiNzNjNjQ2OGFkOTFlZGY5ZmRmYjEwOTE0YjZjNTMyNjA3MWJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:57:02 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, Accept-Encoding,User-Agent\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\ncontent-encoding: gzip\r\nage: 544\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MsOvAKSg9%2BjVCPJUExIgcdrAtEvPrBmraChbu8eK7999Xf9jY19BOypYFVVrgeAqHkkiRYFMmRuwucw9x2ZMqI5jRAC469DPUx0NSWs498FVnf629iIKR4KCp4gamxBF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049eb2829aa0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24678,"size_decoded":0,"mime_type":"image/svg+xml","magic":"ASCII text, with very long lines (24676), with CRLF line terminators","md5":"ff8d7927af846f11628284e5b270adaf","sha1":"06a32de0c63edfc6bec722294be0f50faad3f669","sha256":"0c606d62cbc00b47a56e55ee4dab3c85c4ef81e26b6896a8570020b464237816","sha512":"c25c00856a3beb0dd27dd5dd9e489398d3fb8d39ac8e0229553ae6853c9c13682b58cbdcdc4b6078222707e0bb2cb8365718d927026af77b9dfda6ccdb3d32a3","ssdeep":"384:TWqbKBQivkm1CEaCxcAHitd+aJNeCwdWuCRLWWmoPYK+SwYNR9/SL9iu2:TnbOvtxcAHiCuwgCWrPJbvyiu2","tlshash":"d1b2a6d92770e3d8a6cb996eff319c986a4bf4fe8e7742c0816e9a0459d7dc4e604c00","first_seen":"2025-08-21T23:09:42.503051Z","last_seen":"2026-06-01T10:05:26.834936Z","times_seen":1540,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1140335489?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:02.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vimeo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 11:55:53 GMT","end":"Thu, 06 Aug 2026 12:55:51 GMT"},"fingerprint":{"sha1":"D6:E1:3F:D8:FD:5C:3B:D4:99:72:24:5C:10:67:DE:50:68:00:1E:9F","sha256":"AA:99:7A:5D:AA:D6:C8:12:18:9B:D4:1B:A5:A6:F7:08:E5:D6:D0:48:83:D8:B3:BD:3B:1D:B6:61:E3:6E:08:3E"}}},"request":{"raw":"GET /video/1140335489?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1 HTTP/1.1\r\nHost: player.vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://oraxa-pl.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 23:57:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __cf_bm=icgquW6fzP_ESRjtCyrnmTLW9z16VMiBkVwcXK3QW9o-1780271822.6029673-1.0.1.1-.0AyKAtUP_pm2ZiyufcuRrgD82c1oW7kDUriVFw8buHlr1elZHjuQQVQFErOm0k4h5Hu0H.UM0MLJ_P7fIund6n4YLfuRJgOXB9v37EngcAcR2fYf1a0alpFvUBKFDJX; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com; Expires=Mon, 01 Jun 2026 00:27:02 GMT\n_cfuvid=uTJoOr89zD7tlAN2vjMSIwPSmX9HMP5Qo9w5J7rAXMM-1780271822.6029673-1.0.1.1-bk_nkQB0S2KX6gLgmoEPMX02QYzzTrRg7UH77jmla6g; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com\r\ncf-ray: a049eb2b48f85a0f-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Fri, 15 Dec 1985 19:30:00 GMT\r\nlink: \u003chttps://lensflare.vimeo.com\u003e; rel=preconnect; crossorigin, \u003chttps://arclight.vimeo.com\u003e; rel=preconnect; crossorigin, \u003chttps://i.vimeocdn.com\u003e; rel=preconnect; crossorigin, \u003chttps://f.vimeocdn.com\u003e; rel=preconnect; crossorigin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Referer, Accept-Encoding\r\nvia: 1.1 varnish, 1.1 varnish\r\ncontent-security-policy: default-src 'none'; script-src 'self' 'unsafe-inline' https://*.vimeocdn.com 'unsafe-eval' resource: https://vimeo.com https://imasdk.googleapis.com/ https://adservice.google.com/ https://s0.2mdn.net/instream/video/ https://browser-intake-datadoghq.com https://src.litix.io https://www.gstatic.com https://cdn.kollective.app/ https://wirewax.s3.eu-west-1.amazonaws.com https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://embedder-sdk.wirewax.com https://embedder-sdk.wirewax.video https://embedder-sdk.wirewax.tv https://*.vimeo.work; style-src 'self' 'unsafe-inline' https://*.vimeocdn.com https://fonts.googleapis.com https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://edge-player5.wirewax.com https://edge-player5.wirewax.video; connect-src 'self' ws: wss: https://vimeo.com https://api.vimeo.com https://csi.gstatic.com https://*.akamaized.net https://*.akamaized-staging.net https://*.vimeocdn.com https://drm.vhx.com/v2/fairplay/cert https://wv.service.expressplay.com https://fp.service.expressplay.com https://pr.service.expressplay.com https://storage.googleapis.com https://browser-intake-datadoghq.com https://live-api.cloud.vimeo.com https://*.litix.io/ https://collector.vhx.tv https://collector.vhxstaging.com https://*.kollective.app https://*.kollective.app:31015 https://*.kollectivecd.com https://*.paychex.com https://*.hivestreaming.com https://vimeo.magisto.com https://stage.vimeo.magisto.com https://stage-proxy.vimeo.magisto.com https://interactive.create.vimeo.com https://*.wirewax.com https://*.wirewax.video https://*.wirewax.tv https://wirewax.s3.eu-west-1.amazonaws.com https://sqs.us-east-1.amazonaws.com https://sqs.eu-west-1.amazonaws.com https://s3-eu-west-1.amazonaws.com https://cognito-identity.us-east-1.amazonaws.com https://cognito-identity.eu-west-1.amazonaws.com https://player-telemetry.vimeo.com https://lensflare.vimeo.com https://arclight.vimeo.com https://orion.bendingspoons.com https://pico.bendingspoons.com https://*.vimeo.work; font-src data: https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://branding.cdn.magisto.com https://d2by6sxflmuwyq.cloudfront.net https://fonts.gstatic.com https://player.vimeo.com; img-src 'self' data: https://player.vimeo.com https://i.vimeocdn.com https://secure-b.vimeocdn.com https://f.vimeocdn.com https://*.vimeocdn.com https://vimeo.com https://secure.gravatar.com https://i0.wp.com https://i1.wp.com https://i2.wp.com https://pagead2.googlesyndication.com https://i.vimeocdn.com https://duysrfiajusdh.cloudfront.net https://d263mgllkjh2k2.cloudfront.net https://storage.googleapis.com https://wirewax.s3.eu-west-1.amazonaws.com https://studio-media.wirewax.com https://studio-media.wirewax.video https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://maps.googleapis.com android-webview-video-poster: https://*.vimeo.work; object-src 'self' https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net; media-src 'self' blob: https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net https://*.gvt1.com https://live-api.cloud.vimeo.com https://captions.vimeo.com https://captions-eu.vimeo.com; frame-src 'self' https://*; worker-src blob:\r\ncross-origin-resource-policy: cross-origin\r\nx-backend-server: srv001\r\nx-bapp-server: player-backend-64c8598c9b-bbgxd\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0, 0\r\nx-content-type-options: nosniff\r\nx-host: player-backend-64c8598c9b-bbgxd\r\nx-link-match: 105\r\nx-player-backend: g\r\nx-served-by: cache-iad-kiad7000085-IAD, cache-bma-essb1270031-BMA\r\nx-timer: S1780271823.617034,VS0,VE165\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":20043,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (11663)","md5":"8c5f16406f86802c1af6c27fe79d10ad","sha1":"18eea0f13093231aa0027f9b204723255f378aa9","sha256":"b98b460558a0d7a725a607798694a637f801088735fe061fed701a674418871a","sha512":"f2737127bcb2caa71ff15b7acb1ba0fb527645352c9b5c39508d577dd0684c9867ce27ed46b16f067d80aceff563c8da7caf7c4419f66f629b424fd677e5a340","ssdeep":"384:PmmKyedeGj7pDrCTstnkNdLfi/tSKYoX36GWSPqOdM/+MhHFgfEpbKqKck:1Kyejd1kNdLfytSKYA1WSCOdehHFgfEU","tlshash":"91922a27b6d1d835828d4cc91eafb70974b5110b6e80c644f49e9a8c5bbfdd7a90b2c8","first_seen":"2026-05-31T23:57:28.888895Z","last_seen":"2026-05-31T23:57:28.888895Z","times_seen":1,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":19,"dns":2,"connect":1,"send":0,"wait":187,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.vimeocdn.com/video/2087319397-a19a5fecc8163e55c5139e384298fdb59530144f1f37ae9a58e9a99aa1e84d27-d?mw=1200\u0026mh=660","fqdn":"i.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.192.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://player.vimeo.com/video/1140335489?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-31T23:57:03.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /video/2087319397-a19a5fecc8163e55c5139e384298fdb59530144f1f37ae9a58e9a99aa1e84d27-d?mw=1200\u0026mh=660 HTTP/1.1\r\nHost: i.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=2592000\r\ncontent-type: image/avif\r\netag: \"dded7e6815e51a06be546adfcc08ed2a\"\r\nviewmaster-source-region: US\r\nvia: 1.1 google, 1.1 varnish, 1.1 varnish\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Viewmaster-Status\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\nage: 405256\r\ndate: Sun, 31 May 2026 23:57:03 GMT\r\nx-served-by: cache-dfw-kdal2120132-DFW, cache-hel1410034-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 14, 0\r\nx-timer: S1780271824.752771,VS0,VE1\r\nvary: Accept\r\ncontent-length: 36398\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":36398,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"dded7e6815e51a06be546adfcc08ed2a","sha1":"beb824454dc0f37f0d547c5653962757a25180fe","sha256":"2fb2913626eaec10ec650c7b3ca5e44b925476354015e16df29512701c8aa68f","sha512":"2c4e3777d87cb5d5fb73397cbf307a553587343b6cbb1008f6e05d297ff36807f785e84ce599b1b1295c0ffa6ddba4d4d9e8e80bce68c4a89edc59a7e0a71036","ssdeep":"768:U6Au2ZyxLK1x2yONfviZ9b8Wa5J3TBE7iM7LYejyxbjHVBcPD/5Pb5KKQ/H:PAjFyv+F8TFE7iMfYzHPcrxPtKKQP","tlshash":"7df2f2ad61fa876188b46c36757482bf870ce1ff332554226535d267c28378fba3c148","first_seen":"2026-05-09T07:41:35.294337Z","last_seen":"2026-06-01T00:38:06.990727Z","times_seen":35,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@25.12.5/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:04.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@25.12.5/build/js/intlTelInput.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://oraxa-pl.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 14763\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 25.12.5\r\nx-jsd-version-type: version\r\netag: W/\"9edd-Mk7PJTbzeB2x937UVL88JxWURU8\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 31 May 2026 23:57:04 GMT\r\nage: 1731118\r\nx-served-by: cache-fra-eddf8230046-FRA, cache-osl6535-OSL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40669,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26135)","md5":"584b32aaa35c260a3b4ddacfce274a42","sha1":"324ecf2536f3781db1f77ed454bf3c271594454f","sha256":"990fdaa51ed5c86f92d670ab5a79dbf7415f34900dc2f443c5a03dca94479475","sha512":"bca5c9cdfd2562a5a1d31e26c974022172e14ebd599e30d3daf091d27a266a820a025b2ea1e1329bf18be3489c51aafca5025db638631452fee03afedd8f8a26","ssdeep":"768:mYJ0FRsgH7XpwJxK6jk4ixVDQtwnixrUT2PXIh+vH/kvzas:mcgHl6Q4ixVDQAsrcGgmHMas","tlshash":"f603b52d6316672babfd8155f4e4a582de6f7a460944886c3dac8fcb0098dc379b3734","first_seen":"2025-11-18T18:36:54.272556Z","last_seen":"2026-06-05T10:07:59.100576Z","times_seen":970,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@25.12.5/build/js/utils.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:04.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@25.12.5/build/js/utils.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://oraxa-pl.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 63100\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 25.12.5\r\nx-jsd-version-type: version\r\netag: W/\"419b0-Py3EkUQ6tNnb9qvuiV2BQBlvCqs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 31 May 2026 23:57:04 GMT\r\nage: 2853345\r\nx-served-by: cache-fra-etou8220020-FRA, cache-osl6535-OSL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":268720,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1903)","md5":"e654fbae22a0762fa384b61fd03f1679","sha1":"3f2dc491443ab4d9dbf6abee895d8140196f0aab","sha256":"93c8dd85421914d3c09fdacc4b77730595202004a1d8c9ef7639c7551157bda6","sha512":"af44d0ca2f0ca731ecb7e535963c694710a3e887c8bbdfc95066f1fab72d5c5da66313e9097498d246b93a04a1b642fd65d591e80d325a72bb0f7bf5a5f8da6e","ssdeep":"3072:TklM0tDKjFs3OwPss3MwPky0zOt62xFMfM+dhvo4sUifhNyf4LtXKtofQVkmDmVu:TklMmDOW0IxFMfM+dMGou","tlshash":"fe44f0ebd63c973ba1d87b35968eb3cd5a8cbca3c858567826c3b54f52784e0706c205","first_seen":"2026-02-13T03:24:00.128548Z","last_seen":"2026-06-05T10:07:59.101497Z","times_seen":950,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/frontend/assets/pl/js/currency.js","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:04.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /frontend/assets/pl/js/currency.js HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/frontend/assets/pl/js/deferred-imports.js\r\nCookie: XSRF-TOKEN=eyJpdiI6IkN3YXZ3bE1CS2t5ZzVjNHJwTjlTT0E9PSIsInZhbHVlIjoiVFhWYkdicHZvV0JJdys1cGNsVDFET2tBNUo3a1JRbFJvU20ra2FVTlZXZ1pNOU4vNUJOc3UrTWtYbEdRWm84b204amFBdDVRYzNhTlo1VG5GTWJKcXZwTUlOYkVyR2h2M1MyK3U1QkIydWJxR1BhRDlISThuM2VHYkU1K3pKa3AiLCJtYWMiOiI1NDlmMmVmYjA0ZjRhZmEyYWNiOTVkZjg0YTk3ZThkYTg0MDQyZTk1YTMzMmY3ZGQwMTk2M2M4NWE3Mjc1MWViIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InJGbU80VDhZRVVKaWJITk0vTkdmUUE9PSIsInZhbHVlIjoiOVlGaGxmK015WXpCMFc2VnJIUDI2b1hJcDF1UzRacWVoR2FEaXdlVWRLVHlGZXQrWElFa0YzZGprWDZoZktSbVM3UGwyVThxbGFIem5IMUI0US9MZlNxdWo3eHhUMEl2QjZOZjJucGpKbHQ2ZURhWWhyTEllWjVNcVRrM0NTK1giLCJtYWMiOiI5YjhjZWYwNzVlMzdiMTQ4NzBjZGNiNjVmYzgxYzQ2NzNhODJjZjAxZjMwMjg4YmJjODAwOTRmYzk0ODA4YTEwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:57:04 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding,User-Agent\r\nlast-modified: Mon, 20 Apr 2026 17:08:22 GMT\r\ncontent-encoding: gzip\r\nage: 544\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xOF%2FMvUk%2FEXys8vUv8JxnOStVhREQPD%2FX90QnXHhQp4Q7ljxmiVBtuenHd1bbQL4z9CU3vPrfR0K%2FTYsObzBb6qbOGMp7eaMuooENyWQ5CnG14jLNbTW8EerxOVMg%2Bq2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049eb363dc90b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4746,"size_decoded":0,"mime_type":"text/javascript","magic":"C++ source, Unicode text, UTF-8 text","md5":"4160b6922867907ece073fc2c064ebc7","sha1":"e92a9d8bab66d120ecf7d4f39bc6c7fb7dc60dc1","sha256":"8d4194c5892b959b1bfe12f8ef98473cd58e94b6b68d9b20bb6893fe9b178640","sha512":"e5c81b8851ed78c8aa5bb165f43e5cd5c72f7fb8d3d81ad14c78e88a36d5778e9fdd360dda8737f61de09c442534d2ff857ce20dc2c9c2e0c473e934d504161a","ssdeep":"96:mkMuTXwIKaqEl0Y1ry6YigPWQmxgbKWjdsaqmo6n:mkNbqCo6YVWQOgbKWjds6n","tlshash":"0ba1fdd86a634590c2713199484f7c80a4f2a63b7c09bacab85f810c2f4dc1de935bfb","first_seen":"2026-05-03T18:34:41.365318Z","last_seen":"2026-06-01T10:05:26.833874Z","times_seen":732,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/frontend/assets/pl/js/config.js","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:02.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /frontend/assets/pl/js/config.js HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ijc1SG1CelVreHEwbHJmT2plYTJOUVE9PSIsInZhbHVlIjoib0dUVFZxOXVlMjI5QlVYTkQyS0JrRzU0bnEyU1dXWE4vZURpWmtkdUN3Z1FSMmFPdW9vY3Y3dC9RUytSM1RPVE9wRXIrL2ZvaVM3ckxqN1Jsd2F3WlVOTzVsbllLOEFWSWQvSklIakxST082dFFZVCtBYitIYVNOSUdJbkRXWk0iLCJtYWMiOiIyN2FlMzVlNTk1MjJiNTc1NmY2YjVjOTVkMDljMjcwN2NmOGQyZDFkY2Y0YjUzMTQ5YTVjZmQ3ZGI5ZjA2MjQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU5a0NRc25BcGdHbWViWG8zOTlyd3c9PSIsInZhbHVlIjoieXZtbU5lQzM5bXd0MmZ1S1lkd0xITjN3c1BvTUIyN0NyZFhLZ3NwRi9hQTRucGtiU0FkZmxYSytNQm50QWU2MzFiR3V3K1BzYWlnbFFucm5FdUtSUmZJQndhdjRTMTQ3UEhZQ2lvdURVRHhmVElnLzV6YUt4dmRYclpRU1R3SloiLCJtYWMiOiI3ZWZkMWEwYWM1Yjk2M2M4NDEwZDQ3ODU3NWRiNzNjNjQ2OGFkOTFlZGY5ZmRmYjEwOTE0YjZjNTMyNjA3MWJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:57:02 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Mon, 20 Apr 2026 17:08:22 GMT\r\nvary: Accept-Encoding,User-Agent\r\nage: 544\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4x0qMXY0fm29c%2BKldZWiCDtXU5C7t5b6h6eIH7a7gbtfubxFrD2hOImkMBBYLRvZKdiSZWuu0%2B73DtM7Bw%2BQkIurVO94%2F%2FzukMCTYz%2FnVIBv%2FJu7mw%2Bq9d%2BIilLN%2FRgj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a049eb2829a10b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":782,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"3d4b19fc39d88043bdbb9c096f385843","sha1":"6f41533a8c20e52830c28f9d4cc62e354fc29969","sha256":"ac1a70193e1bc0e8a7ba774ccfbb01a2b0906ec4478d3c94b8dd49eba94b34d8","sha512":"cab9965c797644d298334f1c0bc6a51f5fe22286f97b038839ce5e29777d97ec56bd89466b361f4193466d0b1b76ba997b9943b8b7821bb42b9295e2e34d6e01","ssdeep":"","tlshash":"c401d06fc17488032df2129eba462b29f512423f076cc06a71bd516c2f7a26fd6471c1","first_seen":"2026-05-03T18:32:03.512014Z","last_seen":"2026-06-01T10:05:26.838465Z","times_seen":790,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/flags/fi.svg","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:02.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /flags/fi.svg HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ijc1SG1CelVreHEwbHJmT2plYTJOUVE9PSIsInZhbHVlIjoib0dUVFZxOXVlMjI5QlVYTkQyS0JrRzU0bnEyU1dXWE4vZURpWmtkdUN3Z1FSMmFPdW9vY3Y3dC9RUytSM1RPVE9wRXIrL2ZvaVM3ckxqN1Jsd2F3WlVOTzVsbllLOEFWSWQvSklIakxST082dFFZVCtBYitIYVNOSUdJbkRXWk0iLCJtYWMiOiIyN2FlMzVlNTk1MjJiNTc1NmY2YjVjOTVkMDljMjcwN2NmOGQyZDFkY2Y0YjUzMTQ5YTVjZmQ3ZGI5ZjA2MjQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU5a0NRc25BcGdHbWViWG8zOTlyd3c9PSIsInZhbHVlIjoieXZtbU5lQzM5bXd0MmZ1S1lkd0xITjN3c1BvTUIyN0NyZFhLZ3NwRi9hQTRucGtiU0FkZmxYSytNQm50QWU2MzFiR3V3K1BzYWlnbFFucm5FdUtSUmZJQndhdjRTMTQ3UEhZQ2lvdURVRHhmVElnLzV6YUt4dmRYclpRU1R3SloiLCJtYWMiOiI3ZWZkMWEwYWM1Yjk2M2M4NDEwZDQ3ODU3NWRiNzNjNjQ2OGFkOTFlZGY5ZmRmYjEwOTE0YjZjNTMyNjA3MWJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:57:02 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\nage: 544\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=00O2hSZH7zGrWvhYZbNURK3kLp7yDRIBdotTOiHvctpFM1On3NA86FWZ7nBmqOAuAzZl5236K%2BDXXsnYbn3QWbUxwNqcKoerduWJR7FjYB9RBYWsxQ%2F8m%2BnXalKjUmfM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a049eb2839b70b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":249,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d1724c02c151d1f44b22d5c89e199c54","sha1":"fbb67ed0796f19c50d9354ffa54a0103d33049b7","sha256":"0d9fdf20d3b93aa471132ea660f36e3331fc137bb628121caeec33e905a2a33b","sha512":"b25f8b249311ea474d847f05738c744e4b3590a79c6859db8b7cef67f7e50c234ac86b2eedd86778cfebe26fce6f376b93e202a0ebf7b519700a87b56302a741","ssdeep":"","tlshash":"8bd05e9690b96a044902476a8dec76da6026a0e6668d01fdb0811525f6893df78a36a8","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-06-06T05:06:17.091039Z","times_seen":2185,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/frontend/assets/pl/js/scripts.js?v=20260329-card-hover-fix","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:02.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /frontend/assets/pl/js/scripts.js?v=20260329-card-hover-fix HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ijc1SG1CelVreHEwbHJmT2plYTJOUVE9PSIsInZhbHVlIjoib0dUVFZxOXVlMjI5QlVYTkQyS0JrRzU0bnEyU1dXWE4vZURpWmtkdUN3Z1FSMmFPdW9vY3Y3dC9RUytSM1RPVE9wRXIrL2ZvaVM3ckxqN1Jsd2F3WlVOTzVsbllLOEFWSWQvSklIakxST082dFFZVCtBYitIYVNOSUdJbkRXWk0iLCJtYWMiOiIyN2FlMzVlNTk1MjJiNTc1NmY2YjVjOTVkMDljMjcwN2NmOGQyZDFkY2Y0YjUzMTQ5YTVjZmQ3ZGI5ZjA2MjQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU5a0NRc25BcGdHbWViWG8zOTlyd3c9PSIsInZhbHVlIjoieXZtbU5lQzM5bXd0MmZ1S1lkd0xITjN3c1BvTUIyN0NyZFhLZ3NwRi9hQTRucGtiU0FkZmxYSytNQm50QWU2MzFiR3V3K1BzYWlnbFFucm5FdUtSUmZJQndhdjRTMTQ3UEhZQ2lvdURVRHhmVElnLzV6YUt4dmRYclpRU1R3SloiLCJtYWMiOiI3ZWZkMWEwYWM1Yjk2M2M4NDEwZDQ3ODU3NWRiNzNjNjQ2OGFkOTFlZGY5ZmRmYjEwOTE0YjZjNTMyNjA3MWJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:57:02 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding,User-Agent\r\nlast-modified: Mon, 20 Apr 2026 17:08:22 GMT\r\ncontent-encoding: gzip\r\nage: 544\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7loSf%2FjraSCeGM6EGylX4bD2%2BS%2FJKfvwGZXW6D53dDRycuBiyP9I3%2BQcXNodciYCwmSX4518jiWJ1U4kC6QO%2FDZmxOoAogvT4JooJghgju4PX68PbSLXBOQHOhkUe2a%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049eb2829a70b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6226,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"d354f602a5b263b97eac602760c62394","sha1":"33973424627c0d76c9edbc6d3f392f3d212ff2d0","sha256":"786294d98bb03e5aed3f5ff961478f6f8e2bb7c6e2a0de226fccb5ea1ff4db7e","sha512":"6b55970482004d47791fc61844e68c390bd87f2f309db4788520c0de0b898351f6bb6c8751ecef535450850dc115ee619ac93fe72dece868fa03cb4619486f8e","ssdeep":"96:5v5UUOUNrDeAAePtSx+Px7v0PwckyEeiK6jYikhez8rs:5vaUOUNrDeAHVSx8x70XkyEeiK6cths","tlshash":"b2d10e7a7af604364133019f9b9f85592a113087ba09faae3f4cd2041fc97ac54f1be9","first_seen":"2026-05-09T07:41:35.231964Z","last_seen":"2026-06-01T10:05:26.876324Z","times_seen":79,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/flags/en.svg","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:02.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /flags/en.svg HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ijc1SG1CelVreHEwbHJmT2plYTJOUVE9PSIsInZhbHVlIjoib0dUVFZxOXVlMjI5QlVYTkQyS0JrRzU0bnEyU1dXWE4vZURpWmtkdUN3Z1FSMmFPdW9vY3Y3dC9RUytSM1RPVE9wRXIrL2ZvaVM3ckxqN1Jsd2F3WlVOTzVsbllLOEFWSWQvSklIakxST082dFFZVCtBYitIYVNOSUdJbkRXWk0iLCJtYWMiOiIyN2FlMzVlNTk1MjJiNTc1NmY2YjVjOTVkMDljMjcwN2NmOGQyZDFkY2Y0YjUzMTQ5YTVjZmQ3ZGI5ZjA2MjQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU5a0NRc25BcGdHbWViWG8zOTlyd3c9PSIsInZhbHVlIjoieXZtbU5lQzM5bXd0MmZ1S1lkd0xITjN3c1BvTUIyN0NyZFhLZ3NwRi9hQTRucGtiU0FkZmxYSytNQm50QWU2MzFiR3V3K1BzYWlnbFFucm5FdUtSUmZJQndhdjRTMTQ3UEhZQ2lvdURVRHhmVElnLzV6YUt4dmRYclpRU1R3SloiLCJtYWMiOiI3ZWZkMWEwYWM1Yjk2M2M4NDEwZDQ3ODU3NWRiNzNjNjQ2OGFkOTFlZGY5ZmRmYjEwOTE0YjZjNTMyNjA3MWJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:57:02 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, Accept-Encoding,User-Agent\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\ncontent-encoding: gzip\r\nage: 544\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WkwaLFAFOeubpduYePu8dspHcXHMGD3JX7lSkq0B8Fpt2vMW3wMwLUtbcO8lqGYQCSrwNR%2Bak0IrPvUTMg8XH34rdpuI9lIPQSZW7MqCgnE%2FpuvPIQLLifQlksxyER1N\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049eb2839b20b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1290,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a60a1cb88e021acfa9dae480687c55b4","sha1":"0badf2ca702eb29df29786296160d68ec247af9d","sha256":"c1fcc7d1f18d3597c793170b12cf568207e5d13ad0c2778fd165d33be41c05dc","sha512":"354c148d992a22b729fa7b5736d0f3bde4b477aeaa9d157d692fd190dc57f566f11e2741775534f5a69c3c499e3d8482da01800db5cda5bb95dc5ad49ed88ec4","ssdeep":"","tlshash":"c821ddd2495459c08d8a037cdf1f6bdb72335cce3a584af832d53a165d90bb7341ad85","first_seen":"2025-04-08T10:05:49.355682Z","last_seen":"2026-06-01T10:05:26.878306Z","times_seen":4383,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/flags/is.png","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:02.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /flags/is.png HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ijc1SG1CelVreHEwbHJmT2plYTJOUVE9PSIsInZhbHVlIjoib0dUVFZxOXVlMjI5QlVYTkQyS0JrRzU0bnEyU1dXWE4vZURpWmtkdUN3Z1FSMmFPdW9vY3Y3dC9RUytSM1RPVE9wRXIrL2ZvaVM3ckxqN1Jsd2F3WlVOTzVsbllLOEFWSWQvSklIakxST082dFFZVCtBYitIYVNOSUdJbkRXWk0iLCJtYWMiOiIyN2FlMzVlNTk1MjJiNTc1NmY2YjVjOTVkMDljMjcwN2NmOGQyZDFkY2Y0YjUzMTQ5YTVjZmQ3ZGI5ZjA2MjQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU5a0NRc25BcGdHbWViWG8zOTlyd3c9PSIsInZhbHVlIjoieXZtbU5lQzM5bXd0MmZ1S1lkd0xITjN3c1BvTUIyN0NyZFhLZ3NwRi9hQTRucGtiU0FkZmxYSytNQm50QWU2MzFiR3V3K1BzYWlnbFFucm5FdUtSUmZJQndhdjRTMTQ3UEhZQ2lvdURVRHhmVElnLzV6YUt4dmRYclpRU1R3SloiLCJtYWMiOiI3ZWZkMWEwYWM1Yjk2M2M4NDEwZDQ3ODU3NWRiNzNjNjQ2OGFkOTFlZGY5ZmRmYjEwOTE0YjZjNTMyNjA3MWJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:57:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 3691\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\ncache-control: max-age=31536000\r\nexpires: Mon, 31 May 2027 23:47:57 GMT\r\nvary: User-Agent\r\naccept-ranges: bytes\r\nage: 544\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pQfR6WD7rX76KC73HZBqyn0AXuCx6%2FeQozWljkvw2nB9lepQFkjkDprZz38%2F81MxgR4ZUMXhfXAb%2BMvUSdFTkNdctGmgPUpht8sWylkpBO3w7Y3SUI57JBgbx4bysA%2FA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049eb2849c30b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3691,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"49e6492e69d8e5d94a9ba3dad3d5f6dc","sha1":"48fe4fa67e8180002566572f346ad45118103fa5","sha256":"be6b2aff9deb6971c3a30c41eb4480a30a0feb25196052a646362c10ecdbd6ef","sha512":"bda45925b0bd84baed7fd41faa8136fc1d8d94eeec6d7518328f657695c1dab45570867f722cb52952b7d5cbb5cd1b6071f6e436ef1a091d89247a422981b6d6","ssdeep":"","tlshash":"eb71a5fa191ee567a4d52a9dd67b28c6cd618431c019edc28f30d114ae6e04f8acb5c9","first_seen":"2025-08-21T23:09:42.451261Z","last_seen":"2026-06-01T10:05:26.894183Z","times_seen":1541,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.51/js/vendor.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.192.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://player.vimeo.com/video/1140335489?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-31T23:57:03.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /p/4.46.51/js/vendor.module.js HTTP/1.1\r\nHost: f.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://player.vimeo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f.vimeocdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 31 May 2026 23:57:03 GMT\r\nage: 547661\r\nx-served-by: cache-iad-kjyo7100159-IAD, cache-hel1410021-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 12, 97900\r\nx-timer: S1780271823.420994,VS0,VE0\r\nvary: Accept-Encoding,x-http-method-override\r\naccess-control-allow-headers: Cache-Control, Pragma\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=1209600\r\naccess-control-allow-origin: *\r\ncontent-length: 95419\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":327216,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65422)","md5":"3e6cb7907b3bb24aa5b1a7482cb0c2a0","sha1":"2ede8cdcdfe0563eca5f73a51d63021f865d0097","sha256":"de1befcea3c34e111929d81d7fa0a511766e4429db742329de97475df99a36f9","sha512":"065e19f5eca254d4a93aadf0d6f150409b508ff630a67a84f716cd1e31cd0912c9eb06c8f8552935dcbfd6d18adf4afd7d0c1edd17158eb40716326020c3fabb","ssdeep":"6144:lxrQb8XM5U5dAbYwlkc9IERRcRDZx12r/g5lpc:lx/85ucTcPrLm","tlshash":"5c64e7dcb2d6f07143e764a6403f200bf23a5e15a84d8454e26ae4d57cb9a4e823bf7d","first_seen":"2026-05-25T15:52:34.485083Z","last_seen":"2026-06-02T11:35:28.281566Z","times_seen":1067,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/flags/id.png","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:02.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /flags/id.png HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ijc1SG1CelVreHEwbHJmT2plYTJOUVE9PSIsInZhbHVlIjoib0dUVFZxOXVlMjI5QlVYTkQyS0JrRzU0bnEyU1dXWE4vZURpWmtkdUN3Z1FSMmFPdW9vY3Y3dC9RUytSM1RPVE9wRXIrL2ZvaVM3ckxqN1Jsd2F3WlVOTzVsbllLOEFWSWQvSklIakxST082dFFZVCtBYitIYVNOSUdJbkRXWk0iLCJtYWMiOiIyN2FlMzVlNTk1MjJiNTc1NmY2YjVjOTVkMDljMjcwN2NmOGQyZDFkY2Y0YjUzMTQ5YTVjZmQ3ZGI5ZjA2MjQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU5a0NRc25BcGdHbWViWG8zOTlyd3c9PSIsInZhbHVlIjoieXZtbU5lQzM5bXd0MmZ1S1lkd0xITjN3c1BvTUIyN0NyZFhLZ3NwRi9hQTRucGtiU0FkZmxYSytNQm50QWU2MzFiR3V3K1BzYWlnbFFucm5FdUtSUmZJQndhdjRTMTQ3UEhZQ2lvdURVRHhmVElnLzV6YUt4dmRYclpRU1R3SloiLCJtYWMiOiI3ZWZkMWEwYWM1Yjk2M2M4NDEwZDQ3ODU3NWRiNzNjNjQ2OGFkOTFlZGY5ZmRmYjEwOTE0YjZjNTMyNjA3MWJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:57:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 351\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\ncache-control: max-age=31536000\r\nexpires: Mon, 31 May 2027 23:47:57 GMT\r\nvary: User-Agent\r\naccept-ranges: bytes\r\nage: 544\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r7L0GRJJZrRuM2Hzioqc51IbqQRcQVMboekGZpO8ppiM3nkuFAqPR48k6pzU59tGBLrb9369cd2vlA22%2Bez025wBu8a6qcgrbeyo%2FbR7zW9FfVRjyBH0EvWsM0rthmQQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049eb2849c20b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":351,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 13, 2-bit colormap, non-interlaced","md5":"fd273ad5f3d1e33a14e6fd37860a58a3","sha1":"a0891a0bb126e310d6f963108c875c52b5f0db5c","sha256":"1fce31ae1ba50ed9e3e01f06dfe4866bd4132847dccbc1de171b455c990636e8","sha512":"daef9968e8706e62a91288c11f8573533868e91a8d858b50bb6baae7f42b30b3c0a97b49ee902c4f28285bfdb6d049b910a997c14af60f495e32f8c16876edf7","ssdeep":"","tlshash":"35e020e1b1709ed0c5472325a5172240fef3ca094fe24504ba69e1448d18fcf5f747d2","first_seen":"2025-08-21T23:09:42.483866Z","last_seen":"2026-06-01T10:05:26.867008Z","times_seen":1540,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/dashboard-assets/js/disclaimer.js","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:02.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /dashboard-assets/js/disclaimer.js HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ijc1SG1CelVreHEwbHJmT2plYTJOUVE9PSIsInZhbHVlIjoib0dUVFZxOXVlMjI5QlVYTkQyS0JrRzU0bnEyU1dXWE4vZURpWmtkdUN3Z1FSMmFPdW9vY3Y3dC9RUytSM1RPVE9wRXIrL2ZvaVM3ckxqN1Jsd2F3WlVOTzVsbllLOEFWSWQvSklIakxST082dFFZVCtBYitIYVNOSUdJbkRXWk0iLCJtYWMiOiIyN2FlMzVlNTk1MjJiNTc1NmY2YjVjOTVkMDljMjcwN2NmOGQyZDFkY2Y0YjUzMTQ5YTVjZmQ3ZGI5ZjA2MjQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU5a0NRc25BcGdHbWViWG8zOTlyd3c9PSIsInZhbHVlIjoieXZtbU5lQzM5bXd0MmZ1S1lkd0xITjN3c1BvTUIyN0NyZFhLZ3NwRi9hQTRucGtiU0FkZmxYSytNQm50QWU2MzFiR3V3K1BzYWlnbFFucm5FdUtSUmZJQndhdjRTMTQ3UEhZQ2lvdURVRHhmVElnLzV6YUt4dmRYclpRU1R3SloiLCJtYWMiOiI3ZWZkMWEwYWM1Yjk2M2M4NDEwZDQ3ODU3NWRiNzNjNjQ2OGFkOTFlZGY5ZmRmYjEwOTE0YjZjNTMyNjA3MWJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:57:02 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 27 Apr 2026 17:27:37 GMT\r\nvary: Accept-Encoding,User-Agent\r\nage: 544\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f9egiivfWkh3f%2BAMMHTcWLaw9w7s50EPrqrItKz%2B2QRRiASb0rrRK44piI74fDKwrBiD7eXO8hG8jZJE86fz4Z%2FaTkFVojrgpFvpMjioxYB4Sz0JBgG5j19rMd93tZWp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a049eb2819990b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":854,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"d31bf8a0967d5a38631c38691e66540c","sha1":"f4e654b84b034023b5e3db513087dd9205bd49ba","sha256":"d6712b0ff373f0cf02d1c81ff5a6fb945b47d5d173f02e41d1da28eee52b39d5","sha512":"3d4f2750a27f99297636d2e655b9d157d70113d304085e8ff716a907a7abd01252fbbc7ea521f695b6ec31bcb7a9198e0fc378ee71480a52abe2ab83f94b8181","ssdeep":"","tlshash":"58014c9e79e236b1a2c7eb7c19ab530566314003d11c85053d2c6262afa4f6816b3bc9","first_seen":"2026-05-03T18:32:03.521288Z","last_seen":"2026-06-01T10:05:26.897724Z","times_seen":813,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/flags/pl.svg","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:02.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /flags/pl.svg HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ijc1SG1CelVreHEwbHJmT2plYTJOUVE9PSIsInZhbHVlIjoib0dUVFZxOXVlMjI5QlVYTkQyS0JrRzU0bnEyU1dXWE4vZURpWmtkdUN3Z1FSMmFPdW9vY3Y3dC9RUytSM1RPVE9wRXIrL2ZvaVM3ckxqN1Jsd2F3WlVOTzVsbllLOEFWSWQvSklIakxST082dFFZVCtBYitIYVNOSUdJbkRXWk0iLCJtYWMiOiIyN2FlMzVlNTk1MjJiNTc1NmY2YjVjOTVkMDljMjcwN2NmOGQyZDFkY2Y0YjUzMTQ5YTVjZmQ3ZGI5ZjA2MjQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU5a0NRc25BcGdHbWViWG8zOTlyd3c9PSIsInZhbHVlIjoieXZtbU5lQzM5bXd0MmZ1S1lkd0xITjN3c1BvTUIyN0NyZFhLZ3NwRi9hQTRucGtiU0FkZmxYSytNQm50QWU2MzFiR3V3K1BzYWlnbFFucm5FdUtSUmZJQndhdjRTMTQ3UEhZQ2lvdURVRHhmVElnLzV6YUt4dmRYclpRU1R3SloiLCJtYWMiOiI3ZWZkMWEwYWM1Yjk2M2M4NDEwZDQ3ODU3NWRiNzNjNjQ2OGFkOTFlZGY5ZmRmYjEwOTE0YjZjNTMyNjA3MWJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:57:02 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\nage: 544\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FC9wCRhSjztnSTN%2FV1ErTdu4OBXaZcL7vcL%2BhVPeXj79zcfFzRzlCdOQLWJ6Z0lWk3bzoJU28BfZMsF%2BgQ6vwRUtLnQr%2FmUwldCfhoPeGXB9ntTmS4dmN4XHjccH4iXO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a049eb2829a90b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":310,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"73699780fe17013ad360d5441cba044d","sha1":"3e37c78fdc79aada415a05c2275c0fdf9664f062","sha256":"e03d57c0f7db7d4dc8eb6a2bc359f3a40591b490130bcfa06fba08d514fbdb07","sha512":"94ef034160ec61a32cd5ce34621c993aa3a14f0fd5d60adb807f7c3c116060d45956297c0213950824c0886292669cfb2aec40c110e32e43049ba733490f6e4b","ssdeep":"","tlshash":"c2e0c2d5a4a9ce4e4e1407758ebcb1e9917270df218d04fc71c52a29fd1e38b2811e99","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-06-06T05:06:17.102841Z","times_seen":5460,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/flags/es.svg","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:02.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /flags/es.svg HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ijc1SG1CelVreHEwbHJmT2plYTJOUVE9PSIsInZhbHVlIjoib0dUVFZxOXVlMjI5QlVYTkQyS0JrRzU0bnEyU1dXWE4vZURpWmtkdUN3Z1FSMmFPdW9vY3Y3dC9RUytSM1RPVE9wRXIrL2ZvaVM3ckxqN1Jsd2F3WlVOTzVsbllLOEFWSWQvSklIakxST082dFFZVCtBYitIYVNOSUdJbkRXWk0iLCJtYWMiOiIyN2FlMzVlNTk1MjJiNTc1NmY2YjVjOTVkMDljMjcwN2NmOGQyZDFkY2Y0YjUzMTQ5YTVjZmQ3ZGI5ZjA2MjQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU5a0NRc25BcGdHbWViWG8zOTlyd3c9PSIsInZhbHVlIjoieXZtbU5lQzM5bXd0MmZ1S1lkd0xITjN3c1BvTUIyN0NyZFhLZ3NwRi9hQTRucGtiU0FkZmxYSytNQm50QWU2MzFiR3V3K1BzYWlnbFFucm5FdUtSUmZJQndhdjRTMTQ3UEhZQ2lvdURVRHhmVElnLzV6YUt4dmRYclpRU1R3SloiLCJtYWMiOiI3ZWZkMWEwYWM1Yjk2M2M4NDEwZDQ3ODU3NWRiNzNjNjQ2OGFkOTFlZGY5ZmRmYjEwOTE0YjZjNTMyNjA3MWJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:57:02 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\nage: 544\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aFuhY46nQ0x%2BPy2Ul5aHBmN96c7n7l6u53rCNPzqsU7w9Ca02fn8MWjYYGPQadLP141mMLPBQrG2QQdafFc8FIZwDva4NWNxpc7nBZhUdj71qfLxPs25KS2I2Hw43eK8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a049eb2839b30b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":714,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"82a1bb6b96ec71df6247971da6e35155","sha1":"bb5be7dedff6612e4c8cb7c8019563c547238897","sha256":"8fc508fdb3ef11a4e38f9123f1ae903962ca14841cefd7b98ed5550d50d2f1bb","sha512":"dc54baf3110ea3a0512a272b5dac1bd1b24e50ecc32e9944436708791394a98fae1220f440ed1615c7d5e6f05d761190f3720105c9bf5f63300ff940cbb2738e","ssdeep":"","tlshash":"9b019cd4ba6c498c9e15837d0b6c70d1a20e20bc31cf40e8b98c8164b26a3ebe943d50","first_seen":"2023-05-07T18:03:13Z","last_seen":"2026-06-06T05:06:17.097114Z","times_seen":8245,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/frontend/assets/pl/images/favicon.ico","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:03.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /frontend/assets/pl/images/favicon.ico HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ijc1SG1CelVreHEwbHJmT2plYTJOUVE9PSIsInZhbHVlIjoib0dUVFZxOXVlMjI5QlVYTkQyS0JrRzU0bnEyU1dXWE4vZURpWmtkdUN3Z1FSMmFPdW9vY3Y3dC9RUytSM1RPVE9wRXIrL2ZvaVM3ckxqN1Jsd2F3WlVOTzVsbllLOEFWSWQvSklIakxST082dFFZVCtBYitIYVNOSUdJbkRXWk0iLCJtYWMiOiIyN2FlMzVlNTk1MjJiNTc1NmY2YjVjOTVkMDljMjcwN2NmOGQyZDFkY2Y0YjUzMTQ5YTVjZmQ3ZGI5ZjA2MjQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU5a0NRc25BcGdHbWViWG8zOTlyd3c9PSIsInZhbHVlIjoieXZtbU5lQzM5bXd0MmZ1S1lkd0xITjN3c1BvTUIyN0NyZFhLZ3NwRi9hQTRucGtiU0FkZmxYSytNQm50QWU2MzFiR3V3K1BzYWlnbFFucm5FdUtSUmZJQndhdjRTMTQ3UEhZQ2lvdURVRHhmVElnLzV6YUt4dmRYclpRU1R3SloiLCJtYWMiOiI3ZWZkMWEwYWM1Yjk2M2M4NDEwZDQ3ODU3NWRiNzNjNjQ2OGFkOTFlZGY5ZmRmYjEwOTE0YjZjNTMyNjA3MWJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:57:03 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nlast-modified: Mon, 20 Apr 2026 17:08:22 GMT\r\nvary: Accept-Encoding,User-Agent\r\nage: 544\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dBZ%2BE5%2BbYoeusEL0j%2FKZEPXekEs%2Fc1HLjdgX0Gafj3curo1O73z90%2BOKSjzoclw9yTtV0L5ycVroPmIiZI4EjlTJA7kr%2BwRULRdngSnuzLDBBHYKJwQrprTwlgrotvoT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a049eb2deb7d0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"b34506cdd39059243bbbcf00bb24b737","sha1":"dbad8e1c03a30cb1c4332e9c1a6a09adde016ed2","sha256":"bcf1e7f91a3017be5b2309bb6cbf092e0c7d527140c6f045b24acf1e7e6f9a35","sha512":"e80650a0d1c794f55453f2121a85ff82559ef8ab37ecc10975d9e60aa6a22f01e04dac7f1db1d865a5bd3be26cd68ecc1a384c97a1080e92779cd62ee054ed7d","ssdeep":"192:iCEIRDbc0HYUHTVzRM8liKHNOJO6PVFt+5eFWablbUIbY2E:iCzDbcNUHTlRHPHQIwFtOeFWabN9bY2E","tlshash":"5c627d607651a84cd29578f5cda1c28a26f9fe5085ab11033ab27a9f3bb82643e121d5","first_seen":"2026-03-23T08:58:19.833251Z","last_seen":"2026-06-01T10:05:26.864188Z","times_seen":81,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1140335489/outro?on_site=0\u0026type=videos","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://player.vimeo.com/video/1140335489?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-31T23:57:04.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vimeo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 11:55:53 GMT","end":"Thu, 06 Aug 2026 12:55:51 GMT"},"fingerprint":{"sha1":"D6:E1:3F:D8:FD:5C:3B:D4:99:72:24:5C:10:67:DE:50:68:00:1E:9F","sha256":"AA:99:7A:5D:AA:D6:C8:12:18:9B:D4:1B:A5:A6:F7:08:E5:D6:D0:48:83:D8:B3:BD:3B:1D:B6:61:E3:6E:08:3E"}}},"request":{"raw":"GET /video/1140335489/outro?on_site=0\u0026type=videos HTTP/1.1\r\nHost: player.vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/video/1140335489?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:57:04 GMT\r\ncontent-type: application/json\r\ncf-ray: a049eb341bad3181-OSL\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://player.vimeo.com/video/1140335489?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Fri, 15 Dec 1985 19:30:00 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Referer\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, x-requested-with\r\naccess-control-allow-methods: GET, POST, PUT, OPTIONS\r\naccess-control-max-age: 86400\r\ncontent-security-policy: default-src 'self'; script-src 'self' https://f.vimeocdn.com; style-src 'self' https://f.vimeocdn.com; img-src 'self' https://f.vimeocdn.com https://i.vimeocdn.com\r\nx-backend-server: srv001\r\nx-bapp-server: player-backend-64c8598c9b-k6khn\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0, 0\r\nx-content-type-options: nosniff\r\nx-host: player-backend-64c8598c9b-k6khn\r\nx-link-match: 108\r\nx-player-backend: g\r\nx-served-by: cache-iad-kjyo7100105-IAD, cache-bma-essb1270054-BMA\r\nx-timer: S1780271824.029433,VS0,VE162\r\nx-xss-protection: 1; mode=block\r\nset-cookie: __cf_bm=3G4vAztzpNjKRhD5jDbxXDS1zah4kDxC8HvnxwXUsr8-1780271824.0140774-1.0.1.1-G_WpL40xNXqsPSvyOEHoz2igv9Onbvm_8wtbAbjoRRTP2tb.QxbCEjbao29zR2qHaaTXu8ZsbAjnsGrjSFi1GWeSY_j5RncX7XTV_R4J99NNzO4T0YeKJqI4J6qz7Qw4; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com; Expires=Mon, 01 Jun 2026 00:27:04 GMT\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":730,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1942be87bb5d80dcc35f04df1bce8d6a","sha1":"97773fa1f67b68c5eda4bd6ac64e72963156fb52","sha256":"dfa7dedd11fba428522595b00adc8265e4bd37e241d70d1d031f384d6a7c0b40","sha512":"f0c2d0943a6d7c367f647bea1ebc78cca81a65c2def10b1f08d9730de07caacdd9e6a9b02669f7c8ae91f727fd94a2ebc38b4bf7ca2864d5dcda5d69af31994d","ssdeep":"","tlshash":"1801f4b702d408f6a382e3da5ecdb41b5313917addc1699d5a1b4c0c4aed0d779442a2","first_seen":"2026-05-31T23:57:28.899006Z","last_seen":"2026-05-31T23:57:28.899006Z","times_seen":1,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/flags/it.svg","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:02.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /flags/it.svg HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ijc1SG1CelVreHEwbHJmT2plYTJOUVE9PSIsInZhbHVlIjoib0dUVFZxOXVlMjI5QlVYTkQyS0JrRzU0bnEyU1dXWE4vZURpWmtkdUN3Z1FSMmFPdW9vY3Y3dC9RUytSM1RPVE9wRXIrL2ZvaVM3ckxqN1Jsd2F3WlVOTzVsbllLOEFWSWQvSklIakxST082dFFZVCtBYitIYVNOSUdJbkRXWk0iLCJtYWMiOiIyN2FlMzVlNTk1MjJiNTc1NmY2YjVjOTVkMDljMjcwN2NmOGQyZDFkY2Y0YjUzMTQ5YTVjZmQ3ZGI5ZjA2MjQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU5a0NRc25BcGdHbWViWG8zOTlyd3c9PSIsInZhbHVlIjoieXZtbU5lQzM5bXd0MmZ1S1lkd0xITjN3c1BvTUIyN0NyZFhLZ3NwRi9hQTRucGtiU0FkZmxYSytNQm50QWU2MzFiR3V3K1BzYWlnbFFucm5FdUtSUmZJQndhdjRTMTQ3UEhZQ2lvdURVRHhmVElnLzV6YUt4dmRYclpRU1R3SloiLCJtYWMiOiI3ZWZkMWEwYWM1Yjk2M2M4NDEwZDQ3ODU3NWRiNzNjNjQ2OGFkOTFlZGY5ZmRmYjEwOTE0YjZjNTMyNjA3MWJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:57:02 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\nage: 544\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0s5P2o4EggAgSRR7C8GpQ8EqVOYhXya40qhRfBPDInomWa%2BlrsuVD7xgRO4Zk87z%2Fr93crj1B8pDv79A9DvxsUhscIK4NHFvLeUXBiQZg9AJh6%2BuM4CqWqHk%2Fc2E6cwB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a049eb2849c40b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":352,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"34ec214f5547e19d4e1fe9d0d638f9c7","sha1":"7ef49fd31ffa7a0ea47e8ad0a2fa2121621baae5","sha256":"ebdeb69d61fd3e3b429eafd9b45b51422b87348d932a7fbcd668975437650fdd","sha512":"95f427b45f9af6fbc409cba7617a3a653ea21bb15bc722a442edc8f9a492914e0eb0e25d113403eff378c7ab9078d3bcd38e9e7cd7bc9c987e8b0da621e2b477","ssdeep":"","tlshash":"96e02084a5a9c9098b16437959bc71da512370cf15cc05fd75c43518bd4d3df3c51a6c","first_seen":"2023-05-10T09:01:08Z","last_seen":"2026-06-06T05:06:17.07456Z","times_seen":7421,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/flags/sk.svg","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:02.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /flags/sk.svg HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ijc1SG1CelVreHEwbHJmT2plYTJOUVE9PSIsInZhbHVlIjoib0dUVFZxOXVlMjI5QlVYTkQyS0JrRzU0bnEyU1dXWE4vZURpWmtkdUN3Z1FSMmFPdW9vY3Y3dC9RUytSM1RPVE9wRXIrL2ZvaVM3ckxqN1Jsd2F3WlVOTzVsbllLOEFWSWQvSklIakxST082dFFZVCtBYitIYVNOSUdJbkRXWk0iLCJtYWMiOiIyN2FlMzVlNTk1MjJiNTc1NmY2YjVjOTVkMDljMjcwN2NmOGQyZDFkY2Y0YjUzMTQ5YTVjZmQ3ZGI5ZjA2MjQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU5a0NRc25BcGdHbWViWG8zOTlyd3c9PSIsInZhbHVlIjoieXZtbU5lQzM5bXd0MmZ1S1lkd0xITjN3c1BvTUIyN0NyZFhLZ3NwRi9hQTRucGtiU0FkZmxYSytNQm50QWU2MzFiR3V3K1BzYWlnbFFucm5FdUtSUmZJQndhdjRTMTQ3UEhZQ2lvdURVRHhmVElnLzV6YUt4dmRYclpRU1R3SloiLCJtYWMiOiI3ZWZkMWEwYWM1Yjk2M2M4NDEwZDQ3ODU3NWRiNzNjNjQ2OGFkOTFlZGY5ZmRmYjEwOTE0YjZjNTMyNjA3MWJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:57:02 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, Accept-Encoding,User-Agent\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\ncontent-encoding: gzip\r\nage: 544\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nz6wI%2FEruhF63ThbJCp%2B3ZwBCbv%2Fea654Q%2B8FdizjH5pgeRB3P7BKHGSteXmQCrPzmujpsuKaCj2H2xexwCmwFzbhHaHBQppWn8n%2BYHApfgxvNXIuGVPL6ZIgyPJVvtG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049eb2849d10b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1637,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6ed3cf547a2f8579e45330fde3095537","sha1":"dfc6023844bb5a110c3d9219c82dd326940ae055","sha256":"c1b338efd99956c2ae0c62fcf559b2d956fa11f71751985d62c9942b061dad6a","sha512":"4ed0e6912bfa55a7bee5b4f6318c3878bff3bf23d5a220225b5e19d207d7f55bd816f06dfb8daf8a5eb4c2e266d0fcce8f40d0f797c81d97a2517e5eba2a3be4","ssdeep":"","tlshash":"193176c55178aa4849c7a76fde7cb8959015a0fd21f940fd7a4a470c956caceaf00cb4","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-06-06T05:06:17.070906Z","times_seen":4977,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/undefined","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:02.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /undefined HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ijc1SG1CelVreHEwbHJmT2plYTJOUVE9PSIsInZhbHVlIjoib0dUVFZxOXVlMjI5QlVYTkQyS0JrRzU0bnEyU1dXWE4vZURpWmtkdUN3Z1FSMmFPdW9vY3Y3dC9RUytSM1RPVE9wRXIrL2ZvaVM3ckxqN1Jsd2F3WlVOTzVsbllLOEFWSWQvSklIakxST082dFFZVCtBYitIYVNOSUdJbkRXWk0iLCJtYWMiOiIyN2FlMzVlNTk1MjJiNTc1NmY2YjVjOTVkMDljMjcwN2NmOGQyZDFkY2Y0YjUzMTQ5YTVjZmQ3ZGI5ZjA2MjQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU5a0NRc25BcGdHbWViWG8zOTlyd3c9PSIsInZhbHVlIjoieXZtbU5lQzM5bXd0MmZ1S1lkd0xITjN3c1BvTUIyN0NyZFhLZ3NwRi9hQTRucGtiU0FkZmxYSytNQm50QWU2MzFiR3V3K1BzYWlnbFFucm5FdUtSUmZJQndhdjRTMTQ3UEhZQ2lvdURVRHhmVElnLzV6YUt4dmRYclpRU1R3SloiLCJtYWMiOiI3ZWZkMWEwYWM1Yjk2M2M4NDEwZDQ3ODU3NWRiNzNjNjQ2OGFkOTFlZGY5ZmRmYjEwOTE0YjZjNTMyNjA3MWJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sun, 31 May 2026 23:57:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, User-Agent\r\ncache-control: max-age=3600, public, s-maxage=86400\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IkN3YXZ3bE1CS2t5ZzVjNHJwTjlTT0E9PSIsInZhbHVlIjoiVFhWYkdicHZvV0JJdys1cGNsVDFET2tBNUo3a1JRbFJvU20ra2FVTlZXZ1pNOU4vNUJOc3UrTWtYbEdRWm84b204amFBdDVRYzNhTlo1VG5GTWJKcXZwTUlOYkVyR2h2M1MyK3U1QkIydWJxR1BhRDlISThuM2VHYkU1K3pKa3AiLCJtYWMiOiI1NDlmMmVmYjA0ZjRhZmEyYWNiOTVkZjg0YTk3ZThkYTg0MDQyZTk1YTMzMmY3ZGQwMTk2M2M4NWE3Mjc1MWViIiwidGFnIjoiIn0%3D; expires=Mon, 01 Jun 2026 01:57:02 GMT; Max-Age=7200; path=/; secure; samesite=lax\nlaravel_session=eyJpdiI6InJGbU80VDhZRVVKaWJITk0vTkdmUUE9PSIsInZhbHVlIjoiOVlGaGxmK015WXpCMFc2VnJIUDI2b1hJcDF1UzRacWVoR2FEaXdlVWRLVHlGZXQrWElFa0YzZGprWDZoZktSbVM3UGwyVThxbGFIem5IMUI0US9MZlNxdWo3eHhUMEl2QjZOZjJucGpKbHQ2ZURhWWhyTEllWjVNcVRrM0NTK1giLCJtYWMiOiI5YjhjZWYwNzVlMzdiMTQ4NzBjZGNiNjVmYzgxYzQ2NzNhODJjZjAxZjMwMjg4YmJjODAwOTRmYzk0ODA4YTEwIiwidGFnIjoiIn0%3D; expires=Mon, 01 Jun 2026 01:57:02 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5jkNTKFMH1Z0B1LidwlAANvYvBr7MmDt8aVw1pL%2FM4zi4Y1drR8kuM7S%2BfBDtS9zaorJpuaSY4OpRRxN4m4ESUVNKYyahaqaiau7vv27b5Nb4Ya7mykzUQq9iFe19xR3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a049eb2cdb340b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6603,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5391)","md5":"543ac81966d87ac815e08eb0e436d719","sha1":"e35bb4e32ccf08c11a3935084b50660feb835350","sha256":"8cbc10ee9755ef972000f666711a5c4d0e025d3cedf53079ba3bfd8f2b19a968","sha512":"0c6a8f7948f93d4d00b5fbb98f487d7e2ee15d104acd83dfbc884ef9b77826dc7daa27b906640572977750a00cb7ef590ed5cd93e2f40ef4def88b9ff92f1dc3","ssdeep":"96:/J/SNi/FLQVTLKCGWz5NN5PXy0jRdoMCX4SZTdI5:/pV2RKCxnNByTMCX4SZT0","tlshash":"aed1871eeac5101e60d785b7e8d4e64c8916aac3de238bdfb54f7915cf8038719a321c","first_seen":"2023-04-06T17:05:03Z","last_seen":"2026-06-05T17:02:06.624013Z","times_seen":8444,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/frontend/assets/pl/images/favicon.ico","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:03.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /frontend/assets/pl/images/favicon.ico HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ijc1SG1CelVreHEwbHJmT2plYTJOUVE9PSIsInZhbHVlIjoib0dUVFZxOXVlMjI5QlVYTkQyS0JrRzU0bnEyU1dXWE4vZURpWmtkdUN3Z1FSMmFPdW9vY3Y3dC9RUytSM1RPVE9wRXIrL2ZvaVM3ckxqN1Jsd2F3WlVOTzVsbllLOEFWSWQvSklIakxST082dFFZVCtBYitIYVNOSUdJbkRXWk0iLCJtYWMiOiIyN2FlMzVlNTk1MjJiNTc1NmY2YjVjOTVkMDljMjcwN2NmOGQyZDFkY2Y0YjUzMTQ5YTVjZmQ3ZGI5ZjA2MjQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU5a0NRc25BcGdHbWViWG8zOTlyd3c9PSIsInZhbHVlIjoieXZtbU5lQzM5bXd0MmZ1S1lkd0xITjN3c1BvTUIyN0NyZFhLZ3NwRi9hQTRucGtiU0FkZmxYSytNQm50QWU2MzFiR3V3K1BzYWlnbFFucm5FdUtSUmZJQndhdjRTMTQ3UEhZQ2lvdURVRHhmVElnLzV6YUt4dmRYclpRU1R3SloiLCJtYWMiOiI3ZWZkMWEwYWM1Yjk2M2M4NDEwZDQ3ODU3NWRiNzNjNjQ2OGFkOTFlZGY5ZmRmYjEwOTE0YjZjNTMyNjA3MWJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:57:03 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nlast-modified: Mon, 20 Apr 2026 17:08:22 GMT\r\nvary: Accept-Encoding,User-Agent\r\nage: 544\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S0g2l%2FLicLt%2Bal8zaktpWjbsjU%2B7CxJE1fLU3msVblAC7TWweYODsu29RVYKit2Sc%2BLTCaidfBis9gq6Mb3fdmytt1L4Y92GvOVKqx6zOFZdiCEgUfXWgenLf%2Fau4uga\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a049eb2deb7a0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"b34506cdd39059243bbbcf00bb24b737","sha1":"dbad8e1c03a30cb1c4332e9c1a6a09adde016ed2","sha256":"bcf1e7f91a3017be5b2309bb6cbf092e0c7d527140c6f045b24acf1e7e6f9a35","sha512":"e80650a0d1c794f55453f2121a85ff82559ef8ab37ecc10975d9e60aa6a22f01e04dac7f1db1d865a5bd3be26cd68ecc1a384c97a1080e92779cd62ee054ed7d","ssdeep":"192:iCEIRDbc0HYUHTVzRM8liKHNOJO6PVFt+5eFWablbUIbY2E:iCzDbcNUHTlRHPHQIwFtOeFWabN9bY2E","tlshash":"5c627d607651a84cd29578f5cda1c28a26f9fe5085ab11033ab27a9f3bb82643e121d5","first_seen":"2026-03-23T08:58:19.833251Z","last_seen":"2026-06-01T10:05:26.864188Z","times_seen":81,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/flags/hu.svg","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:02.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /flags/hu.svg HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ijc1SG1CelVreHEwbHJmT2plYTJOUVE9PSIsInZhbHVlIjoib0dUVFZxOXVlMjI5QlVYTkQyS0JrRzU0bnEyU1dXWE4vZURpWmtkdUN3Z1FSMmFPdW9vY3Y3dC9RUytSM1RPVE9wRXIrL2ZvaVM3ckxqN1Jsd2F3WlVOTzVsbllLOEFWSWQvSklIakxST082dFFZVCtBYitIYVNOSUdJbkRXWk0iLCJtYWMiOiIyN2FlMzVlNTk1MjJiNTc1NmY2YjVjOTVkMDljMjcwN2NmOGQyZDFkY2Y0YjUzMTQ5YTVjZmQ3ZGI5ZjA2MjQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU5a0NRc25BcGdHbWViWG8zOTlyd3c9PSIsInZhbHVlIjoieXZtbU5lQzM5bXd0MmZ1S1lkd0xITjN3c1BvTUIyN0NyZFhLZ3NwRi9hQTRucGtiU0FkZmxYSytNQm50QWU2MzFiR3V3K1BzYWlnbFFucm5FdUtSUmZJQndhdjRTMTQ3UEhZQ2lvdURVRHhmVElnLzV6YUt4dmRYclpRU1R3SloiLCJtYWMiOiI3ZWZkMWEwYWM1Yjk2M2M4NDEwZDQ3ODU3NWRiNzNjNjQ2OGFkOTFlZGY5ZmRmYjEwOTE0YjZjNTMyNjA3MWJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:57:02 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\nage: 544\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wQk4fV%2BMBC9%2FGB8EF9wDkn6l8R2LdDDmz294gUSYyolCEpnWumDIpGHSe7CLTqBFTeX%2BMJLIGJnQNtz5qUpVG7chjC6oSLQ2eY9sFf3ksele80EYdGJMO%2B1z7BSMrfvE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a049eb2849c00b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":359,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3621c5eb449691cbe1d3bc8757c831a1","sha1":"e7e3674fe42359cc9a376e543d7548418071aea0","sha256":"2c1380bd6fb1a88cabcae439eaf960d4dffa929a74cfe3d44f7552084fc1150b","sha512":"7c66bd80019b994685400d020e37d38ba3c45ee3cec449b83bf8a2e8d08d346e03d6245e81f9b868eab42325782107cbf837f3c057efb2c83a5151b22b1104c7","ssdeep":"","tlshash":"61e0d8caa9e9c90e9a1947694eed71da416270cd21cc01fd71843528fd4d3ef2411764","first_seen":"2023-05-29T23:05:28Z","last_seen":"2026-06-06T05:06:17.078378Z","times_seen":4979,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/flags/ro.svg","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:02.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /flags/ro.svg HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ijc1SG1CelVreHEwbHJmT2plYTJOUVE9PSIsInZhbHVlIjoib0dUVFZxOXVlMjI5QlVYTkQyS0JrRzU0bnEyU1dXWE4vZURpWmtkdUN3Z1FSMmFPdW9vY3Y3dC9RUytSM1RPVE9wRXIrL2ZvaVM3ckxqN1Jsd2F3WlVOTzVsbllLOEFWSWQvSklIakxST082dFFZVCtBYitIYVNOSUdJbkRXWk0iLCJtYWMiOiIyN2FlMzVlNTk1MjJiNTc1NmY2YjVjOTVkMDljMjcwN2NmOGQyZDFkY2Y0YjUzMTQ5YTVjZmQ3ZGI5ZjA2MjQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU5a0NRc25BcGdHbWViWG8zOTlyd3c9PSIsInZhbHVlIjoieXZtbU5lQzM5bXd0MmZ1S1lkd0xITjN3c1BvTUIyN0NyZFhLZ3NwRi9hQTRucGtiU0FkZmxYSytNQm50QWU2MzFiR3V3K1BzYWlnbFFucm5FdUtSUmZJQndhdjRTMTQ3UEhZQ2lvdURVRHhmVElnLzV6YUt4dmRYclpRU1R3SloiLCJtYWMiOiI3ZWZkMWEwYWM1Yjk2M2M4NDEwZDQ3ODU3NWRiNzNjNjQ2OGFkOTFlZGY5ZmRmYjEwOTE0YjZjNTMyNjA3MWJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:57:02 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\nage: 544\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VTLmAjaM6aGXd91cozBUvr6%2BQECJ2hxZNEHOIYJY%2FQBLVQybZILiC035qAZ2bxiEFhaBar5sNKDpe7rMIwLfpA%2FN4BnaSOxB%2B%2Fnv5r25XbkGWkGK2g765g36LlMkPlvy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a049eb2849ce0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":352,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b3459066e38308492a7ac98271d7b034","sha1":"bdc08d8b6b3a4ab7eef55fb2b73028001f045581","sha256":"3244688e345eb37de4069b23d32d91b59ecb2c28a14e38aaa4e02678f5d0bb7c","sha512":"5e68e1f9adf42375f8432dfc1a5b8a5f91849b2e3fdaa7ac1de0fb111cce8d61daf0330cca3137ae1ee66e20ba12c7e135114bb565b5f711cc730f8db4e20f81","ssdeep":"","tlshash":"00e0d88595a9c9094a1603795abc70d65123708e158905fc74c42514bd4e79b3c51aac","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-06-06T05:06:17.084076Z","times_seen":4989,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/flags/sv.svg","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:02.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /flags/sv.svg HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ijc1SG1CelVreHEwbHJmT2plYTJOUVE9PSIsInZhbHVlIjoib0dUVFZxOXVlMjI5QlVYTkQyS0JrRzU0bnEyU1dXWE4vZURpWmtkdUN3Z1FSMmFPdW9vY3Y3dC9RUytSM1RPVE9wRXIrL2ZvaVM3ckxqN1Jsd2F3WlVOTzVsbllLOEFWSWQvSklIakxST082dFFZVCtBYitIYVNOSUdJbkRXWk0iLCJtYWMiOiIyN2FlMzVlNTk1MjJiNTc1NmY2YjVjOTVkMDljMjcwN2NmOGQyZDFkY2Y0YjUzMTQ5YTVjZmQ3ZGI5ZjA2MjQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU5a0NRc25BcGdHbWViWG8zOTlyd3c9PSIsInZhbHVlIjoieXZtbU5lQzM5bXd0MmZ1S1lkd0xITjN3c1BvTUIyN0NyZFhLZ3NwRi9hQTRucGtiU0FkZmxYSytNQm50QWU2MzFiR3V3K1BzYWlnbFFucm5FdUtSUmZJQndhdjRTMTQ3UEhZQ2lvdURVRHhmVElnLzV6YUt4dmRYclpRU1R3SloiLCJtYWMiOiI3ZWZkMWEwYWM1Yjk2M2M4NDEwZDQ3ODU3NWRiNzNjNjQ2OGFkOTFlZGY5ZmRmYjEwOTE0YjZjNTMyNjA3MWJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:57:02 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\nage: 544\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z75iMhBWK48DagUU7A8Bdcw9in8%2FD9eK12V77j%2BVVsVyIJbC9t2WdzpSaPPTJJbhafEKgMDdwBHvnm%2BbUFkQK%2B0wa1s1fg7ixOyBmvA8uTrh3aO3xyHmHW16z8aY%2BmbB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a049eb2849d30b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":376,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6d7b2e74f61e873c0fb690155956025e","sha1":"b515a34c1884d45ef9a2b7f3ebdf731a0613e1c8","sha256":"4a271da0e5fbcda6d2d15092d8a564e8ef3d36ad507215563ac2faa0e8833001","sha512":"e2ccfb1f70a37129ea1a51b5e143e103904df03d6dfd5966f169d13222bd87a2d54b1ec21ac28ef3ce09c1d853f07c16eae7190c263c0e250506ecb8abdff54b","ssdeep":"","tlshash":"97e068d0902ec60a9e1507b95fbc70ca4232b08e298e00fc70c12528f49e7cf2810bb9","first_seen":"2023-05-07T18:03:13Z","last_seen":"2026-06-06T05:06:17.089102Z","times_seen":5228,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/frontend/assets/pl/js/calc.js","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:04.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /frontend/assets/pl/js/calc.js HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/frontend/assets/pl/js/deferred-imports.js\r\nCookie: XSRF-TOKEN=eyJpdiI6IkN3YXZ3bE1CS2t5ZzVjNHJwTjlTT0E9PSIsInZhbHVlIjoiVFhWYkdicHZvV0JJdys1cGNsVDFET2tBNUo3a1JRbFJvU20ra2FVTlZXZ1pNOU4vNUJOc3UrTWtYbEdRWm84b204amFBdDVRYzNhTlo1VG5GTWJKcXZwTUlOYkVyR2h2M1MyK3U1QkIydWJxR1BhRDlISThuM2VHYkU1K3pKa3AiLCJtYWMiOiI1NDlmMmVmYjA0ZjRhZmEyYWNiOTVkZjg0YTk3ZThkYTg0MDQyZTk1YTMzMmY3ZGQwMTk2M2M4NWE3Mjc1MWViIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InJGbU80VDhZRVVKaWJITk0vTkdmUUE9PSIsInZhbHVlIjoiOVlGaGxmK015WXpCMFc2VnJIUDI2b1hJcDF1UzRacWVoR2FEaXdlVWRLVHlGZXQrWElFa0YzZGprWDZoZktSbVM3UGwyVThxbGFIem5IMUI0US9MZlNxdWo3eHhUMEl2QjZOZjJucGpKbHQ2ZURhWWhyTEllWjVNcVRrM0NTK1giLCJtYWMiOiI5YjhjZWYwNzVlMzdiMTQ4NzBjZGNiNjVmYzgxYzQ2NzNhODJjZjAxZjMwMjg4YmJjODAwOTRmYzk0ODA4YTEwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:57:04 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding,User-Agent\r\nlast-modified: Mon, 20 Apr 2026 17:08:22 GMT\r\ncontent-encoding: gzip\r\nage: 544\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aqN%2FU2rjsUHUWJyFDdEmgt4qwsn5Pz779XOTJ1Pw0PKRfQQPhef9AusnzvJnqsqWofFKsXiRdS6GPcTZjbtD55d2RlregbFhEhYLzT1rbSgE%2Fz5BFnjRVsGMgGA9Tf3k\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049eb364dcd0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2116,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"8db1c397f4875a2f87a43231fdc04d1f","sha1":"f085d10aa760378cb58a4427f9811737f04f4233","sha256":"2d0a615e04ee58fe04a7fea897a6e519a7c8e272f0f996d72ec50854ea214605","sha512":"0665e2c41eef2cee0b21045b74c34d264027c9ee313cf833b7f0cf7ec35f7df81a4187522e5294231cf90d58f1dd7c42d9f608b0da5757e896b3e44a4a7e1d05","ssdeep":"","tlshash":"a441ff567ff20070cdb321d527ab4a44283d36433081d6c4b71c86211fb1d92e15bebd","first_seen":"2026-05-03T18:34:41.366198Z","last_seen":"2026-06-01T10:05:26.901686Z","times_seen":785,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/flags/cs.svg","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:02.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /flags/cs.svg HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ijc1SG1CelVreHEwbHJmT2plYTJOUVE9PSIsInZhbHVlIjoib0dUVFZxOXVlMjI5QlVYTkQyS0JrRzU0bnEyU1dXWE4vZURpWmtkdUN3Z1FSMmFPdW9vY3Y3dC9RUytSM1RPVE9wRXIrL2ZvaVM3ckxqN1Jsd2F3WlVOTzVsbllLOEFWSWQvSklIakxST082dFFZVCtBYitIYVNOSUdJbkRXWk0iLCJtYWMiOiIyN2FlMzVlNTk1MjJiNTc1NmY2YjVjOTVkMDljMjcwN2NmOGQyZDFkY2Y0YjUzMTQ5YTVjZmQ3ZGI5ZjA2MjQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU5a0NRc25BcGdHbWViWG8zOTlyd3c9PSIsInZhbHVlIjoieXZtbU5lQzM5bXd0MmZ1S1lkd0xITjN3c1BvTUIyN0NyZFhLZ3NwRi9hQTRucGtiU0FkZmxYSytNQm50QWU2MzFiR3V3K1BzYWlnbFFucm5FdUtSUmZJQndhdjRTMTQ3UEhZQ2lvdURVRHhmVElnLzV6YUt4dmRYclpRU1R3SloiLCJtYWMiOiI3ZWZkMWEwYWM1Yjk2M2M4NDEwZDQ3ODU3NWRiNzNjNjQ2OGFkOTFlZGY5ZmRmYjEwOTE0YjZjNTMyNjA3MWJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:57:02 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\nage: 544\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vyJvinUYmZrNiIEhfx2TWJCYPW2JembCxBR9WaUkjwJX6GL1yqUS6agmBvM7LWi3CfhsmwLnOgvx4JYJQ2HfW%2F4dza8F79hLdZPAh9fm5zZRR8pnLb932l1vJ9jAtJyE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a049eb2829ac0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":374,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0fe0a2e4225eee5dd8a3c73a5ab5a312","sha1":"c930c1341640bee697cf50053721ddfd750dae2e","sha256":"2a3a7fa3da584643cbac6234aa452705982f50454ed0a259d8c8cd6a9c2fa8c8","sha512":"92390117a5b345c7f9123d5d06839d95959664b32e621961e0d28a353ee515df51a446563354cf9f3911acbd0032a0fb61b1ca356250262157aae05dc907fe8e","ssdeep":"","tlshash":"80e06889a0e88e094e1803b60efcb0d5612330ee208d02ecb0c06619e9197cb2808ee8","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-06-06T05:06:17.094113Z","times_seen":5066,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.vimeocdn.com/video/2087319397-a19a5fecc8163e55c5139e384298fdb59530144f1f37ae9a58e9a99aa1e84d27-d?mw=80\u0026q=85","fqdn":"i.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.192.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://player.vimeo.com/video/1140335489?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-31T23:57:03.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /video/2087319397-a19a5fecc8163e55c5139e384298fdb59530144f1f37ae9a58e9a99aa1e84d27-d?mw=80\u0026q=85 HTTP/1.1\r\nHost: i.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=2592000\r\ncontent-type: image/avif\r\netag: \"772680a22c4d86e6849ebfcb5627d68a\"\r\nviewmaster-source-region: US\r\nvia: 1.1 google, 1.1 varnish, 1.1 varnish\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Viewmaster-Status\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\nage: 564116\r\ndate: Sun, 31 May 2026 23:57:03 GMT\r\nx-served-by: cache-dfw-kdfw8210102-DFW, cache-hel1410034-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 874, 0\r\nx-timer: S1780271823.026389,VS0,VE1\r\nvary: Accept\r\ncontent-length: 1521\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1521,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"772680a22c4d86e6849ebfcb5627d68a","sha1":"d57cf42b5dba615dd18836c7896e0193b23570bb","sha256":"f172f7e7419e18206356faa1439bed646876cac8789e10e7a4cba304ce7ce953","sha512":"b9d27a6587f311222bf5a10331284e9c7ba73228e566b858f5ed5082fa9070c5aadf036f6dcc5ec0173a987b29f45ddd56c880fcae0b3869f1e8bc5b9b4f48b8","ssdeep":"","tlshash":"4d31c72e64a6dc13d48d03b24d821a2b9b12dbb93a5066f9bf983515cc641e10d87f5f","first_seen":"2026-04-25T23:48:35.389608Z","last_seen":"2026-06-01T00:38:07.000873Z","times_seen":49,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/embla-carousel@8.6.0/embla-carousel.umd.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:04.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 17:38:50 GMT","end":"Tue, 11 Aug 2026 18:38:47 GMT"},"fingerprint":{"sha1":"85:3A:E3:4D:41:9A:40:A5:EA:4D:21:21:BC:8B:AF:E9:9B:B2:27:3A","sha256":"41:2C:5C:27:2E:1B:0A:16:BA:4A:09:22:08:86:E9:EC:B5:B9:C4:CF:94:00:3A:8F:52:77:35:8C:F9:C4:FC:A4"}}},"request":{"raw":"GET /embla-carousel@8.6.0/embla-carousel.umd.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://oraxa-pl.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 23:57:04 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: a049eb36be0c5688-OSL\r\ncf-cache-status: HIT\r\nfly-request-id: 01KPW5VKFVKVBHQR0ZHVJPPTYF-fra\r\naccess-control-allow-origin: *\r\nage: 544\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 31 May 2027 23:57:04 GMT\r\nlast-modified: Tue, 12 May 2026 10:58:16 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:8Ftdv+N9ebY2udt0rQTtXpm0vONp14Gw+ziwsqxhnmY=:\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17946,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (17945)","md5":"ccc433e7e2ed8017b86837389e278027","sha1":"ac157e8dec8dddbd9b768674968422d629d59bd9","sha256":"f05b5dbfe37d79b636b9db74ad04ed5e99b4bce369d781b0fb38b0b2ac619e66","sha512":"a62638d1120d541d148cb4714759538c9fa838a93009f3dfa1b840bdd731b3fdb2b201c677ead9c177c5f33af1dfd60ad34bdca57d41bdef2ee957fdfd3a7482","ssdeep":"384:pW3WT2X/jBbU6N/LHq0GFZGPow0Ov7NijEUE2Uy1s2B4fUXH9y0ApP:E3SmrRU6N/LHq0WZGPdzSEGKssAAP","tlshash":"c782b7ec70c2b062639724f9503f9109f37b1881384e9550e678e9e63cb606e9677f9e","first_seen":"2025-04-09T07:37:23.81801Z","last_seen":"2026-06-05T15:00:45.644023Z","times_seen":1396,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":83,"dns":64,"connect":4,"send":0,"wait":20,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/frontend/assets/pl/js/deferred-imports.js","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:02.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /frontend/assets/pl/js/deferred-imports.js HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ijc1SG1CelVreHEwbHJmT2plYTJOUVE9PSIsInZhbHVlIjoib0dUVFZxOXVlMjI5QlVYTkQyS0JrRzU0bnEyU1dXWE4vZURpWmtkdUN3Z1FSMmFPdW9vY3Y3dC9RUytSM1RPVE9wRXIrL2ZvaVM3ckxqN1Jsd2F3WlVOTzVsbllLOEFWSWQvSklIakxST082dFFZVCtBYitIYVNOSUdJbkRXWk0iLCJtYWMiOiIyN2FlMzVlNTk1MjJiNTc1NmY2YjVjOTVkMDljMjcwN2NmOGQyZDFkY2Y0YjUzMTQ5YTVjZmQ3ZGI5ZjA2MjQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU5a0NRc25BcGdHbWViWG8zOTlyd3c9PSIsInZhbHVlIjoieXZtbU5lQzM5bXd0MmZ1S1lkd0xITjN3c1BvTUIyN0NyZFhLZ3NwRi9hQTRucGtiU0FkZmxYSytNQm50QWU2MzFiR3V3K1BzYWlnbFFucm5FdUtSUmZJQndhdjRTMTQ3UEhZQ2lvdURVRHhmVElnLzV6YUt4dmRYclpRU1R3SloiLCJtYWMiOiI3ZWZkMWEwYWM1Yjk2M2M4NDEwZDQ3ODU3NWRiNzNjNjQ2OGFkOTFlZGY5ZmRmYjEwOTE0YjZjNTMyNjA3MWJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:57:02 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 20 Apr 2026 17:08:22 GMT\r\nvary: Accept-Encoding,User-Agent\r\nage: 544\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kUM9JFDDh0pz3Um%2BW9jJEtRDqGQIN4Nndp0tb2cQofOhymoZHbGrbDi49qtJ03WIyD%2B0cR52SWEKcHQttuuTEQr%2Be63YCyz2qoBB8tHi%2BYXRnOmBLtRGqNQ2N0M4KO3C\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a049eb2829a80b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":892,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"b0ec5ae2cf2a7a7043133c1d9301fadb","sha1":"518d372d4fc783df627d3c5789284ecfca8dbeab","sha256":"b13200f905e155b75d81e059633d6c2bfc45cfe4f1b2199c0970ddc15b5a1d75","sha512":"e22cac350e50d88ea6fffa67e9ebd404fef4c79b0ff7e9c9ad01015e09676c39af37788927916e947d7b49fe0b2131873f43adad6799340d6ee2b3c186b18e20","ssdeep":"","tlshash":"6511493a09078a5544304166ecb7a72df073072323d182a27ebd32486f314175a56b9d","first_seen":"2026-05-03T18:32:03.612818Z","last_seen":"2026-06-01T10:05:26.859713Z","times_seen":790,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/flags/fil.jpg","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:02.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /flags/fil.jpg HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ijc1SG1CelVreHEwbHJmT2plYTJOUVE9PSIsInZhbHVlIjoib0dUVFZxOXVlMjI5QlVYTkQyS0JrRzU0bnEyU1dXWE4vZURpWmtkdUN3Z1FSMmFPdW9vY3Y3dC9RUytSM1RPVE9wRXIrL2ZvaVM3ckxqN1Jsd2F3WlVOTzVsbllLOEFWSWQvSklIakxST082dFFZVCtBYitIYVNOSUdJbkRXWk0iLCJtYWMiOiIyN2FlMzVlNTk1MjJiNTc1NmY2YjVjOTVkMDljMjcwN2NmOGQyZDFkY2Y0YjUzMTQ5YTVjZmQ3ZGI5ZjA2MjQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU5a0NRc25BcGdHbWViWG8zOTlyd3c9PSIsInZhbHVlIjoieXZtbU5lQzM5bXd0MmZ1S1lkd0xITjN3c1BvTUIyN0NyZFhLZ3NwRi9hQTRucGtiU0FkZmxYSytNQm50QWU2MzFiR3V3K1BzYWlnbFFucm5FdUtSUmZJQndhdjRTMTQ3UEhZQ2lvdURVRHhmVElnLzV6YUt4dmRYclpRU1R3SloiLCJtYWMiOiI3ZWZkMWEwYWM1Yjk2M2M4NDEwZDQ3ODU3NWRiNzNjNjQ2OGFkOTFlZGY5ZmRmYjEwOTE0YjZjNTMyNjA3MWJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:57:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16588\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\ncache-control: max-age=31536000\r\nexpires: Mon, 31 May 2027 23:47:57 GMT\r\nvary: User-Agent\r\naccept-ranges: bytes\r\nage: 544\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BAI9uJRw9nb3mteWs4XekRhoTqGs7r%2BM3%2FmRUDmdQc4PCAbuZmEG3Ex1loQMIencIIIWT697hR98v%2Ff%2B0DoG8%2FYMa6Tx%2B8XLCdPhuPVbZaIq2qLAazgEw2SgM%2B%2BfVMaS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049eb2839b80b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16588,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=13, height=0, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=0], baseline, precision 8, 20x11, components 3","md5":"0ae75b237b6dae635543c467ac8bfe5f","sha1":"5d35f0ce2acc3ead91fe68cfc7128c6e1f5b6654","sha256":"bee53edec9e55d91d851aa59423516050d3a9edbd67d30c35c7bb5a8c5ded0a7","sha512":"7591a08b13cb0c67301f17c6ef567ef0798a2ee97ac9dc3e67957f676e0652c947c2bb09727c623c847720252d271f07c63d630dd974b109b6af56488f6934fa","ssdeep":"192:McgnJzx+gCuVF03jiOkrQy4FwnJzx+gCuVF03bGXbtebIAFKIx0Ny3ajZtzz96OP:McuJzxb7C+JzxPX5WIAFKr9RP","tlshash":"fd720920ffe1be12f1d4323a64d8da458633ddc1e983198a7addec557f21a920d97283","first_seen":"2025-08-21T23:09:42.477784Z","last_seen":"2026-06-01T10:05:26.851575Z","times_seen":1541,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.51/css/player.css","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.192.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://player.vimeo.com/video/1140335489?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-31T23:57:02.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /p/4.46.51/css/player.css HTTP/1.1\r\nHost: f.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 31 May 2026 23:57:02 GMT\r\nage: 547661\r\nx-served-by: cache-iad-kcgs7200070-IAD, cache-hel1410034-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 14, 97137\r\nx-timer: S1780271823.957792,VS0,VE0\r\nvary: Accept-Encoding,x-http-method-override\r\naccess-control-allow-headers: Cache-Control, Pragma\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=1209600\r\naccess-control-allow-origin: *\r\ncontent-length: 24355\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":237168,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65490)","md5":"3782a75bc9b2a6b20eeee4c890b88187","sha1":"600b65aca90f6bffd226202b7ca5cc79d12e7044","sha256":"ea96c833f438dbcade5e14605a039381f1374addcb55f6e5e0008c9602776a71","sha512":"985cafe316ff168fd19cc73e424e59f72226f244973f850bb8ca02633651d5be4728ce3d4760c965245bfbc3797b38162051d6a6308608d368874a159480aab6","ssdeep":"1536:Td1fPBcFdFgF7FW8RT8RX8X98z98pl98pgv5BencLCZspnq6kUuLdvHIhRGWdHHy:5v5BOwnq6kUu5DlxczQ","tlshash":"a734a1d526f6552b605e6ee2f4c21848fdbc43dc97226f8af00e79cd85ca1a60dfd206","first_seen":"2026-05-25T15:52:34.479386Z","last_seen":"2026-06-02T11:35:28.343629Z","times_seen":1087,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":50,"dns":1,"connect":14,"send":0,"wait":14,"receive":4,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/flags/el.svg","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:02.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /flags/el.svg HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ijc1SG1CelVreHEwbHJmT2plYTJOUVE9PSIsInZhbHVlIjoib0dUVFZxOXVlMjI5QlVYTkQyS0JrRzU0bnEyU1dXWE4vZURpWmtkdUN3Z1FSMmFPdW9vY3Y3dC9RUytSM1RPVE9wRXIrL2ZvaVM3ckxqN1Jsd2F3WlVOTzVsbllLOEFWSWQvSklIakxST082dFFZVCtBYitIYVNOSUdJbkRXWk0iLCJtYWMiOiIyN2FlMzVlNTk1MjJiNTc1NmY2YjVjOTVkMDljMjcwN2NmOGQyZDFkY2Y0YjUzMTQ5YTVjZmQ3ZGI5ZjA2MjQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU5a0NRc25BcGdHbWViWG8zOTlyd3c9PSIsInZhbHVlIjoieXZtbU5lQzM5bXd0MmZ1S1lkd0xITjN3c1BvTUIyN0NyZFhLZ3NwRi9hQTRucGtiU0FkZmxYSytNQm50QWU2MzFiR3V3K1BzYWlnbFFucm5FdUtSUmZJQndhdjRTMTQ3UEhZQ2lvdURVRHhmVElnLzV6YUt4dmRYclpRU1R3SloiLCJtYWMiOiI3ZWZkMWEwYWM1Yjk2M2M4NDEwZDQ3ODU3NWRiNzNjNjQ2OGFkOTFlZGY5ZmRmYjEwOTE0YjZjNTMyNjA3MWJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:57:02 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\nage: 544\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H3yWSD5aheGAMTthZFcniNPWb7XqBGylCZKgZF3yxNED7nBVtPoOztBowY4xyKBYEUXda%2B467%2Fvbm0a4E%2FM5VwIlru3Q8X7%2BuvQvz9ssC63ecFnxBH8yEb98jUnV7Qk2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a049eb2829b10b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":509,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ad2d06f8e09051f574083a3d00b0d3c4","sha1":"278327ff2ba9f9ff2075e69635576298e083a56f","sha256":"855ef79130c430a08f89dad91b7206b3d31b42a1b509000029c60b9336856e45","sha512":"741f41770f7a55e36f6b436b2518986a01a587236f08461c94bfd30a92004c6736b4844a99b46ab6363a95779d9470bc8b374e539a5858c6baae661eccbf884f","ssdeep":"","tlshash":"caf0599496e588c80f2f4e75c97c76d1103224cd6048c8aca0b43819f9053ff11a16be","first_seen":"2023-05-07T18:02:32Z","last_seen":"2026-06-06T05:06:17.073988Z","times_seen":2323,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:02.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ijc1SG1CelVreHEwbHJmT2plYTJOUVE9PSIsInZhbHVlIjoib0dUVFZxOXVlMjI5QlVYTkQyS0JrRzU0bnEyU1dXWE4vZURpWmtkdUN3Z1FSMmFPdW9vY3Y3dC9RUytSM1RPVE9wRXIrL2ZvaVM3ckxqN1Jsd2F3WlVOTzVsbllLOEFWSWQvSklIakxST082dFFZVCtBYitIYVNOSUdJbkRXWk0iLCJtYWMiOiIyN2FlMzVlNTk1MjJiNTc1NmY2YjVjOTVkMDljMjcwN2NmOGQyZDFkY2Y0YjUzMTQ5YTVjZmQ3ZGI5ZjA2MjQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU5a0NRc25BcGdHbWViWG8zOTlyd3c9PSIsInZhbHVlIjoieXZtbU5lQzM5bXd0MmZ1S1lkd0xITjN3c1BvTUIyN0NyZFhLZ3NwRi9hQTRucGtiU0FkZmxYSytNQm50QWU2MzFiR3V3K1BzYWlnbFFucm5FdUtSUmZJQndhdjRTMTQ3UEhZQ2lvdURVRHhmVElnLzV6YUt4dmRYclpRU1R3SloiLCJtYWMiOiI3ZWZkMWEwYWM1Yjk2M2M4NDEwZDQ3ODU3NWRiNzNjNjQ2OGFkOTFlZGY5ZmRmYjEwOTE0YjZjNTMyNjA3MWJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:57:02 GMT\r\ncontent-type: application/javascript\r\nexpires: Tue, 02 Jun 2026 23:57:02 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BVVF04p2MAGv5eOUmEHRL%2FM7GfZrpJIrxiKXidB4TMSyyKWU36hDgrm2xW9wEfmdm%2Fy1yw5U%2BNSQli3KWm9FJVZn6kEbe1yjd%2BPtHzxIhf027vy0ksRFbF5dLBU998Xj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a049eb2859da0b02-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-06T06:09:41.239888Z","times_seen":361631,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/frontend/assets/pl/js/forms.js","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:04.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /frontend/assets/pl/js/forms.js HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/frontend/assets/pl/js/deferred-imports.js\r\nCookie: XSRF-TOKEN=eyJpdiI6IkN3YXZ3bE1CS2t5ZzVjNHJwTjlTT0E9PSIsInZhbHVlIjoiVFhWYkdicHZvV0JJdys1cGNsVDFET2tBNUo3a1JRbFJvU20ra2FVTlZXZ1pNOU4vNUJOc3UrTWtYbEdRWm84b204amFBdDVRYzNhTlo1VG5GTWJKcXZwTUlOYkVyR2h2M1MyK3U1QkIydWJxR1BhRDlISThuM2VHYkU1K3pKa3AiLCJtYWMiOiI1NDlmMmVmYjA0ZjRhZmEyYWNiOTVkZjg0YTk3ZThkYTg0MDQyZTk1YTMzMmY3ZGQwMTk2M2M4NWE3Mjc1MWViIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InJGbU80VDhZRVVKaWJITk0vTkdmUUE9PSIsInZhbHVlIjoiOVlGaGxmK015WXpCMFc2VnJIUDI2b1hJcDF1UzRacWVoR2FEaXdlVWRLVHlGZXQrWElFa0YzZGprWDZoZktSbVM3UGwyVThxbGFIem5IMUI0US9MZlNxdWo3eHhUMEl2QjZOZjJucGpKbHQ2ZURhWWhyTEllWjVNcVRrM0NTK1giLCJtYWMiOiI5YjhjZWYwNzVlMzdiMTQ4NzBjZGNiNjVmYzgxYzQ2NzNhODJjZjAxZjMwMjg4YmJjODAwOTRmYzk0ODA4YTEwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:57:04 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding,User-Agent\r\nlast-modified: Mon, 20 Apr 2026 17:08:22 GMT\r\ncontent-encoding: gzip\r\nage: 544\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QLOxoMcaJJeuyUspzwvZqDdkiKnVmmjtFFPabhcXNSfBPGPvBSLiQIhh0XJ%2FbpsJw1kyd3HmrTO2C3twmX4NC%2BmFxAUm8TldtBBM2c9NGL0wNtmPHBnfdiPB3IpxpRt6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049eb363dcb0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7614,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"311cc8bbb57cf1048f70b036cf6bfd70","sha1":"576fd8aa56ecf0d01015f6b15b29afbac4569d83","sha256":"668ed47288df834eaffcf666d3463cb39a3c53b52f8db94b8f1eb99a73e19cc0","sha512":"b7e8b2bd654cbeb43474a3520937750909cb6049ceb8da4c95d24ac13da0a4980052a09b0fe41f6f2ebae498b0564f4f51897b80c8a71ee412a586917acc984e","ssdeep":"192:wFzWhJL6YQRR9JYvGJ64U/8tkUCb+EWPH9ZZisEqN:QWhJOF9OO5U/EkUCbiH9ZZZl","tlshash":"f0f1009921fa45394db321fcafc7650229293027188dde547e4ca3106fc9bed6bf0b98","first_seen":"2026-05-03T18:34:41.364367Z","last_seen":"2026-06-01T10:05:26.905146Z","times_seen":732,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/frontend/assets/pl/js/lazyload.min.js","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:02.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /frontend/assets/pl/js/lazyload.min.js HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ijc1SG1CelVreHEwbHJmT2plYTJOUVE9PSIsInZhbHVlIjoib0dUVFZxOXVlMjI5QlVYTkQyS0JrRzU0bnEyU1dXWE4vZURpWmtkdUN3Z1FSMmFPdW9vY3Y3dC9RUytSM1RPVE9wRXIrL2ZvaVM3ckxqN1Jsd2F3WlVOTzVsbllLOEFWSWQvSklIakxST082dFFZVCtBYitIYVNOSUdJbkRXWk0iLCJtYWMiOiIyN2FlMzVlNTk1MjJiNTc1NmY2YjVjOTVkMDljMjcwN2NmOGQyZDFkY2Y0YjUzMTQ5YTVjZmQ3ZGI5ZjA2MjQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU5a0NRc25BcGdHbWViWG8zOTlyd3c9PSIsInZhbHVlIjoieXZtbU5lQzM5bXd0MmZ1S1lkd0xITjN3c1BvTUIyN0NyZFhLZ3NwRi9hQTRucGtiU0FkZmxYSytNQm50QWU2MzFiR3V3K1BzYWlnbFFucm5FdUtSUmZJQndhdjRTMTQ3UEhZQ2lvdURVRHhmVElnLzV6YUt4dmRYclpRU1R3SloiLCJtYWMiOiI3ZWZkMWEwYWM1Yjk2M2M4NDEwZDQ3ODU3NWRiNzNjNjQ2OGFkOTFlZGY5ZmRmYjEwOTE0YjZjNTMyNjA3MWJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:57:02 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding,User-Agent\r\nlast-modified: Mon, 20 Apr 2026 17:08:22 GMT\r\ncontent-encoding: gzip\r\nage: 544\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6LcFH6I%2FHYMjkf5yrLn7DpDbdiHGvwbDsLFPWvmjlre5LhGYUjRIyBiweBlYSJQ2h7KMiY5OodYX4pNZPbTxnEuN46ppeH2gO9PUAW4Fy9Frrn29m%2FV3yuPirlVc5CLa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049eb2829a40b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13751,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"02904458ba58d516134326a81c45c920","sha1":"bdbef500dae9927c7018801285d8b07d4aaef92d","sha256":"482427969bb13fb83dd24449a53868f8f51239ad684606639991592972bdd234","sha512":"3198a5ad2e3bb2f4814916b73f0a7316dd070184e201a40b8c53eb98473b3d791b71fb2c399e6f8f3ae6be8045532dc6659ff9cf590cd62bedb61345721e8ec4","ssdeep":"192:Wrr573s4TW1IDJTspjUAEA/UcdvM5khyLPkO21RnaUhklOx0dek7jQMiZtjpSNju:Wrrps4TW1IDqUAEEM5WeUaQFlbtN7","tlshash":"bc52cb8ba2f22438531bf024692bcd097315608f5899ae923d1d626b5f49b39f7f4fc4","first_seen":"2026-05-03T18:32:03.559102Z","last_seen":"2026-06-01T10:05:26.850593Z","times_seen":813,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/flags/hr.png","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:02.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /flags/hr.png HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ijc1SG1CelVreHEwbHJmT2plYTJOUVE9PSIsInZhbHVlIjoib0dUVFZxOXVlMjI5QlVYTkQyS0JrRzU0bnEyU1dXWE4vZURpWmtkdUN3Z1FSMmFPdW9vY3Y3dC9RUytSM1RPVE9wRXIrL2ZvaVM3ckxqN1Jsd2F3WlVOTzVsbllLOEFWSWQvSklIakxST082dFFZVCtBYitIYVNOSUdJbkRXWk0iLCJtYWMiOiIyN2FlMzVlNTk1MjJiNTc1NmY2YjVjOTVkMDljMjcwN2NmOGQyZDFkY2Y0YjUzMTQ5YTVjZmQ3ZGI5ZjA2MjQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU5a0NRc25BcGdHbWViWG8zOTlyd3c9PSIsInZhbHVlIjoieXZtbU5lQzM5bXd0MmZ1S1lkd0xITjN3c1BvTUIyN0NyZFhLZ3NwRi9hQTRucGtiU0FkZmxYSytNQm50QWU2MzFiR3V3K1BzYWlnbFFucm5FdUtSUmZJQndhdjRTMTQ3UEhZQ2lvdURVRHhmVElnLzV6YUt4dmRYclpRU1R3SloiLCJtYWMiOiI3ZWZkMWEwYWM1Yjk2M2M4NDEwZDQ3ODU3NWRiNzNjNjQ2OGFkOTFlZGY5ZmRmYjEwOTE0YjZjNTMyNjA3MWJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:57:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 982\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\ncache-control: max-age=31536000\r\nexpires: Mon, 31 May 2027 23:47:57 GMT\r\nvary: User-Agent\r\naccept-ranges: bytes\r\nage: 544\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wNSF%2BD0nSi1qI%2BqyMHcCXRxaVzUJigCbZX6SfX%2B3l2GT3RI74dUP1PxbbF5iVn52xsw8fXbrUjyaCxLDLOkdEHN4UpPR%2Bn3jDvBrSklICaPK%2Fedl9rqXY%2B43rbj%2FFX6I\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049eb2839be0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":982,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"41a7b90f600ed32eefb5e620a4f653fc","sha1":"7a6ab7cfc55a1239de75e073430c9634d5c18746","sha256":"63e36970eea32e52849d7b4d3a15d1da36be12ad3078df8c2b848aa7e9baa19b","sha512":"004bddcda655838947c0922be1f74ac3833ca444f3c872c9432232e5660f7ca9288c87acf2d1df19a21a768ae8a04e3f67278f7b6be4998a5e0355f279ba92dd","ssdeep":"","tlshash":"261165dec411043c410b39e6ae9b0bd989b767ac43520a45906db49abc795043ee49a5","first_seen":"2023-06-13T00:33:19Z","last_seen":"2026-06-05T03:43:53.130029Z","times_seen":4947,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/flags/nl.svg","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:02.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /flags/nl.svg HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ijc1SG1CelVreHEwbHJmT2plYTJOUVE9PSIsInZhbHVlIjoib0dUVFZxOXVlMjI5QlVYTkQyS0JrRzU0bnEyU1dXWE4vZURpWmtkdUN3Z1FSMmFPdW9vY3Y3dC9RUytSM1RPVE9wRXIrL2ZvaVM3ckxqN1Jsd2F3WlVOTzVsbllLOEFWSWQvSklIakxST082dFFZVCtBYitIYVNOSUdJbkRXWk0iLCJtYWMiOiIyN2FlMzVlNTk1MjJiNTc1NmY2YjVjOTVkMDljMjcwN2NmOGQyZDFkY2Y0YjUzMTQ5YTVjZmQ3ZGI5ZjA2MjQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU5a0NRc25BcGdHbWViWG8zOTlyd3c9PSIsInZhbHVlIjoieXZtbU5lQzM5bXd0MmZ1S1lkd0xITjN3c1BvTUIyN0NyZFhLZ3NwRi9hQTRucGtiU0FkZmxYSytNQm50QWU2MzFiR3V3K1BzYWlnbFFucm5FdUtSUmZJQndhdjRTMTQ3UEhZQ2lvdURVRHhmVElnLzV6YUt4dmRYclpRU1R3SloiLCJtYWMiOiI3ZWZkMWEwYWM1Yjk2M2M4NDEwZDQ3ODU3NWRiNzNjNjQ2OGFkOTFlZGY5ZmRmYjEwOTE0YjZjNTMyNjA3MWJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:57:02 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\nage: 544\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UW9SWAHiQpsz%2FYdZAdVcMJsBHCUc2OQqOs0X4QEjJAqw1xqJeO3C%2BfX11WwTgqgkLhA%2BYvrhCif3c0yYX1Wt5DMfqRbOc8b6OV2YFvheNyiL3MqT52q4C%2FCx9GoS2%2FVi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a049eb2849c80b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":355,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1932756ac7767c2f33986237417d8731","sha1":"84a604da4f8df24af728a73685c4cc2cad9de962","sha256":"8ca8a2dc879e29edd00a08bffc8d825f67d0988e55538d52e43861bb3af22f83","sha512":"9138b8b056aa4c5a5e0179ba58175ec8b98b2aa66b2a9f0bf17e2defed3b441f9f0d5d91a463bb45ed6f002c6e81d85730338890c3990a604677ded0bfdff8e9","ssdeep":"","tlshash":"d4e0d886a4e989095a1947694eec71d6406270ce218d01fd70853529fe4d3db2451aa8","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-06-06T05:06:17.099033Z","times_seen":6126,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oraxa-pl.live/flags/zh.png","fqdn":"oraxa-pl.live","domain":"oraxa-pl.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oraxa-pl.live/","date":"2026-05-31T23:57:02.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oraxa-pl.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:56 GMT","end":"Mon, 24 Aug 2026 16:45:55 GMT"},"fingerprint":{"sha1":"B6:81:7F:12:51:20:AF:99:5C:D3:44:71:1D:B1:83:BA:2B:99:91:5B","sha256":"0B:33:0A:50:13:E4:E8:FA:7A:84:D6:C5:4C:35:31:2F:47:AC:4B:04:B6:C0:AF:C9:41:59:2F:35:E3:53:B7:C3"}}},"request":{"raw":"GET /flags/zh.png HTTP/1.1\r\nHost: oraxa-pl.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oraxa-pl.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ijc1SG1CelVreHEwbHJmT2plYTJOUVE9PSIsInZhbHVlIjoib0dUVFZxOXVlMjI5QlVYTkQyS0JrRzU0bnEyU1dXWE4vZURpWmtkdUN3Z1FSMmFPdW9vY3Y3dC9RUytSM1RPVE9wRXIrL2ZvaVM3ckxqN1Jsd2F3WlVOTzVsbllLOEFWSWQvSklIakxST082dFFZVCtBYitIYVNOSUdJbkRXWk0iLCJtYWMiOiIyN2FlMzVlNTk1MjJiNTc1NmY2YjVjOTVkMDljMjcwN2NmOGQyZDFkY2Y0YjUzMTQ5YTVjZmQ3ZGI5ZjA2MjQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU5a0NRc25BcGdHbWViWG8zOTlyd3c9PSIsInZhbHVlIjoieXZtbU5lQzM5bXd0MmZ1S1lkd0xITjN3c1BvTUIyN0NyZFhLZ3NwRi9hQTRucGtiU0FkZmxYSytNQm50QWU2MzFiR3V3K1BzYWlnbFFucm5FdUtSUmZJQndhdjRTMTQ3UEhZQ2lvdURVRHhmVElnLzV6YUt4dmRYclpRU1R3SloiLCJtYWMiOiI3ZWZkMWEwYWM1Yjk2M2M4NDEwZDQ3ODU3NWRiNzNjNjQ2OGFkOTFlZGY5ZmRmYjEwOTE0YjZjNTMyNjA3MWJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:57:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 870\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\ncache-control: max-age=31536000\r\nexpires: Mon, 31 May 2027 23:47:57 GMT\r\nvary: User-Agent\r\naccept-ranges: bytes\r\nage: 544\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fJNn8XEEVFDXvG2WM%2B%2Fceo91y54U0a3vQJECWOn40A9Cch%2Fxt1U5brPNPute3%2F8WOFC1g%2BzyvhtEUXPDPZTuv5SmbvhfuttyAa1xiIthFEXXx3IL2cTt3Fv9pCqumIqS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049eb2859d90b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":870,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"2a2b643bc15c7363c9e58e6b47d7de30","sha1":"506ab44f76022397b3aa9682e8972d7944703d54","sha256":"c63293f5412adc096b8e492e88b8d8edfca5367a491acdd9071ef8d31b4ba9a1","sha512":"a742115cc74831e58f2607fda3ecdf88d8a01d1f9f19d784e1c46a24f9dc23f3a8b5f11251b1c6c911a53a18ee3a01d841e82952f7ab97fcc44b2a0673238e43","ssdeep":"","tlshash":"1f1196ca2450d5d7c2ea12e389ee4b452b4f4afc28560d886c151ab511df1d740e4710","first_seen":"2023-06-10T08:53:38Z","last_seen":"2026-06-05T03:43:53.101043Z","times_seen":4935,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"oraxa-pl.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}