{"report_id":"8851e151-ce4f-49a4-ba52-3fadb3d35e1f","version":6,"status":"done","tags":[],"date":"2026-01-05T09:03:59Z","url":{"schema":"https","addr":"citrixon.com/","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"172.67.187.212","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"citrixon.com/","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"title":"CitrixOn - Trade, Invest, Exchange with one of the largest cryptocurrency exchanges in the world. Use simple and effective tools in cryptocurrency trading. Create portfolios, execute trades with us.","dom":{"size":29864,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (339)","md5":"5466127beb8ff227b46ec68c46de35cf","sha1":"68713f3d7ac93bb71d78e16a08f80f2f17ec6598","sha256":"cfe3f829808aac584a018150038cab780039369440bb6fd0b15b50c421b5c525","sha512":"594fb59e46ca42d8e89635f93adbad2d568dcf8c5b30215089be477547261e8e6997fa9b50416c213081248f1305c2af192d9e2ca4fb38d75429b99587e12cd7","ssdeep":"384:CLuLljL8bLANnp7+R54iPlIc7jv4s2G7UkkIFF:CLuLhLWLARk54OlIcgs97UMFF","tlshash":"7ad2fd5153ee6d73016203c67832af8ea8eb8e02f2578495f6bf4684bbddd949d03523","dom_hash":"domhashca11109b5f2b00f169fb3d23b475f58c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"citrixon.com/","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"172.67.187.212","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-09T09:03:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"i.ibb.co","ip":{"addr":"45.43.142.6","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"domain_registered":"2010-07-20","domain_rank":21643,"first_seen":"2018-11-25T10:13:48Z","last_seen":"2025-12-29T14:46:03.227372Z","alert_count":0,"request_count":5,"received_data":217886,"sent_data":2169,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"citrixon.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-10","domain_rank":0,"first_seen":"2026-01-05T09:04:00.401898Z","last_seen":"2026-01-05T09:04:00.401898Z","alert_count":66,"request_count":66,"received_data":1081774,"sent_data":33002,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-04T22:14:09.841371Z","alert_count":0,"request_count":20,"received_data":528960,"sent_data":10865,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-04T22:17:15.216142Z","alert_count":0,"request_count":7,"received_data":372792,"sent_data":4069,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-01-04T22:21:06.427471Z","alert_count":0,"request_count":2,"received_data":261166,"sent_data":1013,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.ipregistry.co","ip":{"addr":"104.18.26.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-02-16","domain_rank":748257,"first_seen":"2019-06-15T21:08:20Z","last_seen":"2025-12-31T09:43:20.764111Z","alert_count":0,"request_count":1,"received_data":3540,"sent_data":440,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"citrixon.com/storage/js/ohsnap.js","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7cbb8091a5376ae11699a87a6a81762a","sha1":"25c1a73346ce1ab073d13c4abbf5cf9aa9f1c652","sha256":"1fba6e8a4687b69cd11b66bc349be6f85981bdc2d215399d991de794bc7623c7","sha512":"fc7d67ee6144817cda5659f43f1403d428da2ef496d78fa072a8827ee144934258a31fe8232ecf93b599b95c73d0d8baf1f8bc060dd97a66f417cf6da48d4e37","ssdeep":"","tlshash":"bc5110882556973257e321aa435f68d462309a2fb41bad14b88fc3c40f85d74ebe3ad9","size":2637,"data":"","first_seen":"2025-08-06T15:05:47.138874Z","last_seen":"2026-01-05T09:04:08.745944Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/js/jquery.js","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c14a783dfeb3d238ccd3edd840d82ee","sha1":"ad886e472b3557f3dc7dfa2bc43468ab8d1cef5b","sha256":"80f04717f32ea0320c5e8618fbacedd1fee3a8775ad8292140a6113551d4b5b0","sha512":"fa3e021ca60a9adbe570c6565c7370727904c4396c23a4c519daf258d05fae3e17bfb7607a0ab6dfe2b7150a4ec1b6a95e6d49675291be5f6a4e5679ad78d858","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vN:DIh8GgP3hujzwbhd3XvSiDQ47GK/","tlshash":"6f9309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89500,"data":"","first_seen":"2023-03-07T01:06:20Z","last_seen":"2026-06-13T17:13:17.713149Z","times_seen":19974,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"96db8440b0d540c4aed72be9ef4c6e8d","sha1":"a825b2e65d5c7c3a0d34893ff85c338686e187aa","sha256":"6fc9a2b7373e153b8d5474ec0e9282ad8f5856c6f1a0b42455a5ec1f68d6f564","sha512":"f06c3409d017da9c988dfed7ce5a0ce5f6bc07b72840976551d19b72ead590e71258f9385d1dda8fcb5781f28edabf7f76562b87372fa1ab5e5b6a9021ffe988","ssdeep":"","tlshash":"44d0c9e278ad022c2d3f316149270188227501877590f614b0be21c1bf8474ca46bd15","size":219,"data":"","first_seen":"2025-08-06T15:05:47.269285Z","last_seen":"2026-01-05T09:04:08.818433Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b1ddcff20be3c264851b5810d1cd9a98","sha1":"f9df65014afdb177f53f045a0af0ac5dfd19c0cc","sha256":"794d652bd149dd530c3c50e347da82d10ab52f057fb94d36e50809886dde363b","sha512":"552e1f4408d0dda8702ff3afab8e629209e697119b92e61ebd694d2a7a8f92c1cd550ff106c3db7e27c256f3cab4b354438a15526762f28994efcc6bf13940f2","ssdeep":"","tlshash":"a1313a62fa84106052e7776f7a66da94b5f6401539015c84d08c4564efe1c9889ffdfc","size":1590,"data":"","first_seen":"2025-08-06T15:05:47.270936Z","last_seen":"2026-01-05T09:04:08.819315Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fa7bf97e834038e9a0029c37369e86d3","sha1":"7c154a83544e1d2edab6d773b4e2623811c24989","sha256":"9e4f5a6607bea926335adb3a4856b20e9343a4b6d153a3b51b3bc04e61bbaef2","sha512":"19e1029ade79e91077740181a71f945d03eea87d7dc6b7d607c9b173ffc8f3cccf14ecac35a4340ccbd3fbf1f2c8e3a036db3a5b8bcc05aeab59cb6bcfc088a7","ssdeep":"","tlshash":"e6d022e5dbaa2008e2f870734c7720c6608f806b140639dff6841d7086cc30c0a37a6d","size":208,"data":"","first_seen":"2025-08-06T15:05:47.272456Z","last_seen":"2026-01-05T09:04:08.820278Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b843d240e99b9a25f247ab1bbe768c7a","sha1":"17b224858076629321abfb2d77d67d5ca5cad50a","sha256":"de9c27171abb23e3292106cec000ac1a5a065aeedd2f868f1de48a6a02bec782","sha512":"f9b20db63f322e7cf6b305663319c389f392f3fe619f1ddbac99a06353600939b13f3c6e1835358a2afe718e750389393a4e52fb51151d696bd176f34c50c3b9","ssdeep":"","tlshash":"5a21021bf6bd7b4024bd71342827a4a42a7a044b9d024031e0bc47995e91fff7c47e0c","size":1376,"data":"","first_seen":"2025-08-06T15:05:47.274285Z","last_seen":"2026-01-05T09:04:08.821114Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/js/index.js?x=95d26a49880c953338f7c5863a90957b","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"85d816b6cf3e3f949f643726b3532c0d","sha1":"11766cfaa45e255294d28e8dae4532cecae4b56c","sha256":"471fed84ff123fb15ed6e6a9ace4336b20b1068d5e4b38b20a7425e1b925586a","sha512":"1a55382d1c57e82451729a1568847db460f7c2b767f6544d0b3c1e584dfbff6f4b5ebfe3f78ea50a9eaad1a7fab73c5fc0b8c12977e11dde80b9d3e103d83a6c","ssdeep":"","tlshash":"ca415884fbd46561867a39721d9fb84c2afd3a22fc0bdc95901d58e08b90c68bb1fd08","size":1998,"data":"","first_seen":"2025-08-06T15:05:47.124828Z","last_seen":"2026-01-05T09:04:08.746828Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"i.ibb.co/HXvVJJ1/bg-mk-2.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.6","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:38.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Dec 2025 07:17:47 GMT","end":"Mon, 16 Mar 2026 07:17:46 GMT"},"fingerprint":{"sha1":"DD:3D:A5:50:70:7F:39:42:46:31:C9:98:9F:15:65:82:62:1B:CB:64","sha256":"F9:9D:18:4C:82:20:26:63:14:76:0A:30:CD:96:1F:CE:F9:77:EB:76:34:EC:DF:EE:6E:54:50:88:39:05:C5:C2"}}},"request":{"raw":"GET /HXvVJJ1/bg-mk-2.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 09:03:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 5129\r\nlast-modified: Wed, 07 Aug 2024 09:52:03 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5129,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 241 x 49, 8-bit/color RGBA, non-interlaced","md5":"9721d7ed8eec1c4ed28d6ed8eb8cec05","sha1":"69b1841f59d0fb2cfd074f19b6c4b0a19db6cb56","sha256":"bd109c554ffecade3e7c1ce1d504a2b76e83b9901ba168928f53fdd2e307c49b","sha512":"7ca812e28a4dcb81f5e73f26bd14309741217beed6bb594405ea8ecb4bd156026571b87d694074f2585fc8be779b36a9ebffa662453136f91af2d90f4de3bfac","ssdeep":"96:bSNuZZVls90lReHLQ0nBB1Zt8kWhjmCMJ59mIm1CH/ty8sbwkbL:bSNemqGE0nBfZt8hmC3i/ty8s1v","tlshash":"94b18ec84a833f2dcc2e37b19f6d7dfc6972e95851844120c4b50a8010f97bc241b49e","first_seen":"2025-08-06T15:05:47.176096Z","last_seen":"2026-01-05T09:04:08.715942Z","times_seen":3,"resource_available":false,"data":null}},"time_used":529,"timings":{"blocked":255,"dns":66,"connect":25,"send":0,"wait":25,"receive":0,"ssl":140},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/trc.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/trc.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 690\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-2b2\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H%2FDvYRnI8eXuv6OIxi6YD27jD%2BczwTBSuuKTcRZIxrIylGZAT3TVxmSrlIg82rs3nKfzkZ%2BYU6MV5SrVW7FejcmuUOsD5NNPGj4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb4eeb756a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":690,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"e50a1668caeb0b2ca529da4ca9a42cb6","sha1":"3485c53cad00f8e6cfd86e1cf38011435228382d","sha256":"f08140cfcc0e01d98b254613d6fccf7e181447c9425d5abd2467e6a3fe9b0fa6","sha512":"277fad1b40529c0ce5e3ea64d9259765ad676e3b0ecefe5912813cb82619801fb896c21b1f855c63c5bcd65544175c55e76f29e3981bb1d549a67ec3e310c868","ssdeep":"","tlshash":"640144c1b3fb2983062446e06f5a0110868f4ab707287e88f9347510276cea291ca792","first_seen":"2025-08-06T15:05:47.147641Z","last_seen":"2026-01-05T09:04:08.717542Z","times_seen":3,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/bch-t.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/bch-t.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 1186\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-4a2\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uX%2FSDzZLhb5KH3ax7D%2B5P36c66slbrReOfRSqcGWCxt%2FqoOH5ULLhtpjcAqf8f1Wt%2Fcn4ZWOhSKkkbUIXnkjX2RLvRk8Qj65%2FlA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb4fec656a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1186,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 45 x 45, 8-bit/color RGBA, non-interlaced","md5":"485c6225f687bb141e7876cf7429b413","sha1":"95c5cac3c5fb407ff4a20669b8a5fa401c6128c5","sha256":"abf0955e091b9f9733b6893fe736192e29eac0b4cc0e16b0694d7a35bcf7c951","sha512":"b693a45594281ea9e5d781fedf90c363656e002efb76c01efcf05ceefd981cf2934c6c01fbf6749a45f45ac15f3fb3ed24f9fe958a2d52a3c337cf23f1ee858d","ssdeep":"","tlshash":"9721a7ed25ceb8afd95e45e44663022fe4636db93b80381d1b216024a12d0caaf55d87","first_seen":"2025-08-06T15:05:47.181092Z","last_seen":"2026-01-05T09:04:08.718732Z","times_seen":3,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/slide14.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/slide14.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 3715\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-e83\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5q7UD39ll5GziapCqjvR0J%2BhqpVOJ97WIYqVIe919%2FjsjskRgytJieiQQh9QzOwJGYupCw2qinieuzvyMLWZMUo9gG73clTVhsE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb52f0156a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3715,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 213 x 71, 8-bit/color RGBA, non-interlaced","md5":"c6147a10055dd42380002c8b5a7de9f9","sha1":"446ff37e6ed4e8441a0a383ca73ec956cce57c86","sha256":"79f88fa151a5eab57a145277ff6c666f7a368c9b09c34f4b77ab0c3f3e51fca6","sha512":"66ff1a33b712690c1fa3cbfa332c4dec1ae66411d1acfef19fadec2dda333d266b94eeb56e6997f408f3d60cfe81cd3e2c26698167e7f2789f62cc45abd639a0","ssdeep":"","tlshash":"11715bf65334245642118f781007ce8da4e9b983f5b3b46156b20a39865eaf02fbc3b1","first_seen":"2025-08-06T15:05:47.199854Z","last_seen":"2026-03-06T11:21:27.762201Z","times_seen":4,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/slide11.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/slide11.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 3671\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-e57\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UHESmsqT%2FsBkDBdaMmlJS6jdye8CMuRiPWAp0ucSGz%2BesAqP2qiDHpmFHRWLcONX5uKviUwVVzMk6ee8lBvcmY7NISNfk3Y30d8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb52ef856a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3671,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 201 x 71, 8-bit/color RGBA, non-interlaced","md5":"400721574d64c5d674f68a6889a570df","sha1":"a678c0ef9a56c11afc967b68fbb382e6ecfbfabb","sha256":"356976819f869b53ac73f11bd1c1d4134ed43e198dee5ee3606426ab0f677da5","sha512":"d0f8b4c06df39fe55ce94e65fde6f8b07e0f982266b662620b55aa703a2cf9bcc862ad04ee92d0a2b208ee256357776f16343c9ed15667ea012e34d7a0f83117","ssdeep":"","tlshash":"85719d4051b6303e297e10b205841a6066cd2fea09d28a34d76f485bb64ba67fd8ee62","first_seen":"2025-08-06T15:05:47.18605Z","last_seen":"2026-03-06T11:21:27.705041Z","times_seen":4,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/cubes3.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/cubes3.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 36122\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-8d1a\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hQb7KHziI1hZh%2BmqE9M2rx86SqaGS2j8bNo%2BaF6s80enyPngFVHKtWa6g4ksD4bNmHAKSH9tZI7V88N8CbAlKSWgaU4aquo2kVw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb4de9e56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36122,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 588 x 643, 8-bit/color RGBA, non-interlaced","md5":"e180f3850ea22aa8cd34aca3fb1a3818","sha1":"4b112558d5d127cc92762a7eb0281a906a7e8e15","sha256":"0cad2fd4c370a0fe6141f8fee186b40c3e6d7f8d9ed5e0b52a1daf0feb35ddaf","sha512":"168dcc35621011add401525a525d892240a6fb2cf8e7518ec1e161b2a98ae8c96a2c23605fbb9d69563ef758ae602139e9127455b338584612d813a44797453e","ssdeep":"768:S0eZrnsIZT4zweWvuBdQSuuhlovyDlQaADHXJR5ngRVXtA7:SFhxEdWv2QSuIQfN8RV9C","tlshash":"41f27d2be51ad139fd4e544401be8ead7d73aeb281e8083d399748896f25a270c76fc4","first_seen":"2025-08-06T15:05:47.117374Z","last_seen":"2026-03-06T11:21:27.72663Z","times_seen":4,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:39.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://citrixon.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 31 Dec 2025 21:59:25 GMT\r\nexpires: Thu, 31 Dec 2026 21:59:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 385454\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-06-13T17:30:01.9726Z","times_seen":356090,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":122,"dns":0,"connect":0,"send":0,"wait":97,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/slide7.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/slide7.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 3486\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-d9e\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yrtVXyEHP7H6R7yjdbhj7xwLgVTPGCLN7PSTKS0M9M1mQ7Bb6TuZsCOK%2F0yeSMs0I1PQoC5LMMmwq1g3KOYdDAqIh87KZTWmMNE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb51ee656a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3486,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 209 x 71, 8-bit/color RGBA, non-interlaced","md5":"c3c8e66711836c7f7784d9fd39250803","sha1":"3d655bd2a270b80ecdea1dd8915b145b150825e3","sha256":"0f38a69c41aedf63b4869b94066ad4c9405b88f1afc624db03bd7f8ba2680886","sha512":"11cd75cf95cd0533e065e6b1db96d84c9085459aac62632579854ec2f3663dcad6a26c36d7d87b718b6631e9cc4963a7c853cc689f9c7b478a9b097cd0e652fc","ssdeep":"","tlshash":"7f718ed3464234788a0d16603191efd4c12d6f181d1e963302b07eb56b9368e8d82d7e","first_seen":"2025-08-06T15:05:47.210849Z","last_seen":"2026-03-06T11:21:27.759028Z","times_seen":4,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,300..800;1,300..800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:38.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=Open+Sans:ital,wght@0,300..800;1,300..800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 05 Jan 2026 09:03:38 GMT\r\ndate: Mon, 05 Jan 2026 09:03:38 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12137,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"7fbc57b14bea8d6561fdb50fc9c3008c","sha1":"9c9ed86aaf4ca655f083c9c80db324d053d3dd11","sha256":"d90d7d2947e295cba230edef392df55e276c2f3c87e04908d093aeb005da805a","sha512":"d70400de88d9d540ba4e871b2c2c4b997f81bdf1765150d65c2ab18a959c9efa4f910735b3873d43e1eabc646c078533972106c111a4838357f866b44cf57c40","ssdeep":"192:+foOfcfLf9L5fMfgqvfZbqGIwV49fOnf+ofjCXXS2asrqAnbqGIwV4uxzBY:+QOkTltULv1qY49GnDu6SqY47","tlshash":"9f420c910417144096835dd233de7e34ee0fa6616044c0baabfd9bdbeecad69a3b435c","first_seen":"2025-09-17T08:42:41.023406Z","last_seen":"2026-06-13T15:07:13.568694Z","times_seen":6176,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":100,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:39.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://citrixon.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 03 Jan 2026 10:39:00 GMT\r\nexpires: Sun, 03 Jan 2027 10:39:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 167079\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72964,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-06-13T16:41:36.076938Z","times_seen":26419,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":126,"dns":0,"connect":0,"send":0,"wait":65,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/css/style.css?x=95d26a49880c953338f7c5863a90957b","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/css/style.css?x=95d26a49880c953338f7c5863a90957b HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=2,i=?0\r\netag: W/\"6856ee27-26419\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LMCUwUMZwxQA8YGYBANrjgmQaoHCUgGFzkfb6OimK5IpH11ingPPgqFSdE4GyQZnPgIwDDdWP7ATIEP7soyoE1FdfWNPr%2F5YA6Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb4ce7e56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156697,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (428)","md5":"fa767131f9eb23e6391e17f47d418783","sha1":"e43a982aad60efdfdbccfbfd373522f3cbce5ae3","sha256":"b838cae8304a168b2304e2129aeef7896ca9232685b1ea02d05b01f1ab825095","sha512":"4ceac2a96a423be0588f1c6b3b3271ef117bf51c37d7195aa33391525aed312bed8bb4ac279c0650400b525c974ed71464f84236f7313a422f0eee9eb5b70c06","ssdeep":"3072:uLWhOj3aA9ug6rGovQ+Cv9kxSfmFOASWlqv:uL53aAXovQ+Cv9kxSfmFOASWUv","tlshash":"12e375572e162445b60bd0993fb45b55921ec043ea0f8ebb7a9625acdfcd18804f3f8e","first_seen":"2025-08-06T15:05:47.206797Z","last_seen":"2026-01-05T09:04:08.728309Z","times_seen":3,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/function3.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/function3.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 5799\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-16a7\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=23F8DTBjgVlGFoYEc3qHUYn%2BEnaaZr03SSPxkIFli30cFxzxaSSNCk%2FCT8RUj1pP4PRXvir871%2B6VTqI%2FoQ0d3VRXk%2BlchVsCpQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb53f0a56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5799,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 90 x 91, 8-bit/color RGBA, non-interlaced","md5":"14fc61d4b7d96daaf03b8d709018c7a4","sha1":"a5d9df1d4576d622513c0b8fbb90d5ce919a60ba","sha256":"a7a8c0ecc11103088875f7c667d62950d2321d283fade0f1b71beef4aa86e4aa","sha512":"b0757f6a237ec21518be5b6de15cb46651637e10e72bba189b110b5bf046b9e98b2ef106778ab0fd80594a184b519ed37681386427d00784c5881d1e7f2c10ac","ssdeep":"96:aSjyfKZfStgQ+t3+1m/spVxKzYQ86X7caotGzWOaza7HFlpiqfFi4T/3/9/4lj:aSrfdx/6mYQXNWjabFlpDfFi4TlGj","tlshash":"4ec19fe442019fc3f923c2c6276844561a9c7e02ab138b1c09afac324f7dd6782b717b","first_seen":"2025-08-06T15:05:47.145148Z","last_seen":"2026-03-06T11:21:27.828331Z","times_seen":4,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:38.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://citrixon.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 19:22:36 GMT\r\nexpires: Wed, 30 Dec 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 481263\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-13T17:30:15.594017Z","times_seen":880480,"resource_available":false,"data":null}},"time_used":498,"timings":{"blocked":203,"dns":1,"connect":7,"send":0,"wait":77,"receive":8,"ssl":195},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/cubes6.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/cubes6.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 28983\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-7137\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WIj1YITUhj7q21o5FYFMOZLWg%2Bc7bAQM4XppX6oniZ6BopbOSfe1dvnrX3beGpeFEOhTNZG8%2FmHP0tCbZQ3Hb5fHnrrLQK7duNs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb4dea556a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28983,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 588 x 643, 8-bit/color RGBA, non-interlaced","md5":"2e2e85338ce70eb6ccac5a7bdc463569","sha1":"4fd7a3570e590a2bf48f317ce6c77cae410224b6","sha256":"62059ddd5ba2095cb652a03978aef922db1337ccba25ee3f77cf0d148852fcce","sha512":"1aa8039ec4734b97a5913ca4ea53363abb80995652dc16377594a059309aec2d272062cddb34067278883001f28b17c6ce7aa97bc4ce9d40faad96b0aec8fd00","ssdeep":"384:axn0xOuxkS2Qfg/5u0KhWPAHtQFJNa76LXEaC3AJyfcQNLRBIQt4xEudFZX3zHyi:S0xaEg/s0KhbOZaZaCQJ0b9udDxpoG","tlshash":"65d2bf1ff9065e10b39daa008672949733378ac0dd9572e1b9d948a231f167ef4ecf48","first_seen":"2025-08-06T15:05:47.208153Z","last_seen":"2026-03-06T11:21:27.780816Z","times_seen":4,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/bnb.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/bnb.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 809\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-329\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RkyHppisRjsr9qU9TDeMIuf33niKtcct3Zf0kX%2FZxOXOQZ1gSSZFukNLQLQ2aOB%2BMuK8mfPiYP2%2B%2BQc%2BtAU2xHj5CBrREKkSz4Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb4eeb156a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":809,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"d15e5706fdd23bbe550ee9bd187b7e3d","sha1":"e2c4031e0d82d73f315396a4321b615480ddf88a","sha256":"e3615ae8da94a6150d98496709b71df95052215bc9e8bb007dd96db399576237","sha512":"7e2c19ce1e7dea56deb74799d37666d5e88987175c1964b1a046a24deb28b71fbd458c22e48e3c6c2ab7c4c0fbc4223527f83a7015e948bc755af9344d3f9e69","ssdeep":"","tlshash":"ff0186cb270c7cfa5879e05b3b77aa5ae5dd5725e22d956e0400c200a2804c19e5af92","first_seen":"2025-08-06T15:05:47.227234Z","last_seen":"2026-01-05T09:04:08.734495Z","times_seen":3,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/ltc-p.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/ltc-p.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 469\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-1d5\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MQ6mSBMrG1iwJ3l5%2BMNNGPbSM6dLcDXcJn5CS3TKR7w76HwKMiRWwq2zGDA6dCSVFw54Z49hycCTN9ihs5DwvTe33COVYae%2FDnE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb4eebc56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":469,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 31 x 12, 8-bit/color RGBA, non-interlaced","md5":"b5869ea11168b13b2394c424bac9126f","sha1":"c81ea9e66fac0b3c20fd67cf0bee7c089239972f","sha256":"2233268004fca7b7b1807654619865a9f9994029888b8f6c7d257166c9fe15b3","sha512":"244027d7e7e94adb34886c925cc5accea1417753bbd53760124b36002d315b64c1b9bb23290bbcfbd8605d6694ab746540402a87feeea56d9e81f5d2c14b1362","ssdeep":"","tlshash":"0cf054c96a94f53db5a24144098a0271c02dd00e90550ec8b0381e0054d6c5cf304280","first_seen":"2025-08-06T15:05:47.204431Z","last_seen":"2026-01-05T09:04:08.735804Z","times_seen":3,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/big-coin.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/big-coin.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 216038\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-34be6\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UuV9hRbddMrQSjbd%2FJaxlHGcY4bwZMX9JAsgFWdDt88NMQaaYhYc2nlTV%2FgpHpWuhiEWBxmIlUVdSQi9oxxu8PGQ5eybJXQoRgg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb50ed656a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":216038,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 731 x 732, 8-bit/color RGBA, non-interlaced","md5":"c14e312a94f2e6f45c640896d900010a","sha1":"25c3843e9ebb7711c0ffa2250d160dd05e2d349e","sha256":"923506777032ae123a0c232b2c0adae488307175f14d982228370fc6135a8559","sha512":"4843fbc354d1aea5a7c228bd1911970aa52c633acea024e1d2471e3641a6c2d012dd489e2f8856774628a43544c9bd29780c0405a6487f5c98b9854d13099f50","ssdeep":"6144:ikyh8Qctx3fjo5jOLa3VtZko3qIfZ452ZcLH418pNZjEctq:yrQdro5KG33ZlaQJZcDm8pNZq","tlshash":"5f241270b4edd76d678584cc721e30331e5aadb7ce2b43a9e87855192e680426d2cf3e","first_seen":"2025-08-06T15:05:47.252189Z","last_seen":"2026-03-06T11:21:27.886824Z","times_seen":4,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":178,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/coin-4.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/coin-4.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 17498\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-445a\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LhJytSpcHpZHpOA9H0psS5xe1FGgWRxw8AyJqFWmrwqJEeTEIB7g8sdu4Ami1K%2F3FE1OfwTvt469bVKyAvkaV75tRu7kkuMVkXg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb50ed856a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17498,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"732dc7d12f3fe948c36d9983a856c858","sha1":"25b3e2bf26740638081bd4d29d26eb277a3c81d6","sha256":"81c0b8bc8b6f804c4276b1dfaee48e35028827f65f23ebd4a7352024c1c25d99","sha512":"afd03d109d1c338633380b6e42c881b4f53ab27facdde9a635260f7b8b92180cb50f334f872336e119a92ca5aa1124a368f466c3cbfa7a779f40ba6a9148310d","ssdeep":"384:gZ0UCoT4bmi5RX/hZXOrtZ0AuBGmOZDEm8J5YFA:Olc7H/rXOpZkBGmUQFqA","tlshash":"2272c063e9bba41fd47d7c1fe1d604307e696e283b9887c165436a48018b5e21ac1dfa","first_seen":"2025-08-06T15:05:47.191579Z","last_seen":"2026-03-06T11:21:27.874272Z","times_seen":4,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/function4.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/function4.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 5636\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-1604\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nF2ORt9exY7n%2FgFiP9Ld8wKB2f4j0JNwQz7DLZJzm%2FPaoHpJ5VtL1paBpWuNslrc3C54tEkgj2kjNTaeBBjf5jKRXlSdPdHORLk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb53f0b56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5636,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 94 x 91, 8-bit/color RGBA, non-interlaced","md5":"6b2afd2d0ac148f5c103547abb547103","sha1":"6305a1b15b73f3fbe29e942b5b340c70271d266e","sha256":"7141d48e55851869cea26ad1bdedd0e8029da3b3c8bcd4e341cadca9ae9286dc","sha512":"2158699ae555e98d31e7c30bfe812c99e477f4b9256b7ede33511f6a46a1f10016504bf9a06a52a3fb301a391a40d706a0d56207ce721b9fdfabb71ea47ffb30","ssdeep":"96:P0SwJ6j1JtbPSbGJcZ530wG/j/WbUZoQlWkA44Bic0LKgoXuDSrHz/+cRhH+kTQ/:P0SwJ6j1JtbPcZ530z/j2ULlWn41xoXw","tlshash":"64c19e5732e6792fc5b6e7de4233c1a1b199aa07f2268294d92076243409ed3d65b703","first_seen":"2025-08-06T15:05:47.196506Z","last_seen":"2026-03-06T11:21:27.868593Z","times_seen":4,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Raleway:ital,wght@0,100..900;1,100..900\u0026family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:38.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=Raleway:ital,wght@0,100..900;1,100..900\u0026family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 05 Jan 2026 09:03:38 GMT\r\ndate: Mon, 05 Jan 2026 09:03:38 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70904,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"0e097a392ff535672b9adbb9e319b516","sha1":"d58aff69e34eab8317e1a5074239ff9dd4d656c0","sha256":"5792bad599e5c7c6b4b5c53526263b1a83c5cce2408987ca6c06c08e7b056df2","sha512":"6df1064a9308be7f6d7174ab1831a446f191f60bf281cc2830c451753f24ec08d60f80e647167073a338aaf829799e20161cc84353a9bc0af57e4f8aee9c0472","ssdeep":"768:7DcDaDvDcDzBDFKDeDOD14KF4zLFa+OgN7wNzaFLXnnGE3GzhFUQgx8uB8zXF+aq:S5YRdvI0rAwyl","tlshash":"7b630ea1041b5040ab834ce223cfbe35fe1f92507141d1b9abfd9b6baddbc66526835c","first_seen":"2025-11-28T07:08:01.417054Z","last_seen":"2026-02-13T02:59:46.585951Z","times_seen":6,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":103,"dns":2,"connect":8,"send":0,"wait":23,"receive":0,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/BcNqSDt/bg-mk-red.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.6","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:38.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Dec 2025 07:17:47 GMT","end":"Mon, 16 Mar 2026 07:17:46 GMT"},"fingerprint":{"sha1":"DD:3D:A5:50:70:7F:39:42:46:31:C9:98:9F:15:65:82:62:1B:CB:64","sha256":"F9:9D:18:4C:82:20:26:63:14:76:0A:30:CD:96:1F:CE:F9:77:EB:76:34:EC:DF:EE:6E:54:50:88:39:05:C5:C2"}}},"request":{"raw":"GET /BcNqSDt/bg-mk-red.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 09:03:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 4259\r\nlast-modified: Wed, 07 Aug 2024 09:54:33 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4259,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 45, 8-bit/color RGBA, non-interlaced","md5":"1f1d5332df29fe9b7c08197d781d0ac2","sha1":"88ca82522966228a7dde6b3cbf4c5535e0b80d18","sha256":"52d66699e0e3ec77573e51d35af583cca80b85df8d1679a371179b80a679d351","sha512":"e586d6b5d910fac6e2f06f54c9bbec675d4ac9340208b7d951026e9d6cadab8a53063df4850931e8b086c4e83e02ea66ad99579a9f2c06ede49d3898073e017a","ssdeep":"96:uSiSDp6R/00SZDp4rXIl9LHyyc0Y1r6YW25NUuFq1PBDR1LoStfYC:uSia6IDoX+Hvcx1kfQqVBDR5tfYC","tlshash":"6c917ccd9628d9bd09c45ac2166985fa853f1dbe9d4334c5396b8e9424e0ec00eccf43","first_seen":"2025-08-06T15:05:47.24075Z","last_seen":"2026-01-05T09:04:08.741279Z","times_seen":3,"resource_available":false,"data":null}},"time_used":540,"timings":{"blocked":260,"dns":64,"connect":25,"send":0,"wait":26,"receive":0,"ssl":137},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:39.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://citrixon.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 31 Dec 2025 19:56:18 GMT\r\nexpires: Thu, 31 Dec 2026 19:56:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 392841\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-06-13T17:30:01.648682Z","times_seen":257242,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":129,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:39.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://citrixon.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:39 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 156496\r\ncf-ray: 9b91cdbe1aa5b503-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"65692999-26350\"\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1388550\r\nexpires: Sat, 26 Dec 2026 09:03:39 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=jBsRtOAmPK93D8bNiV5Fw9DYjTQmVsAKTIIh9p8UexzQgpg3e5ELBszh%2B9mMXMvDeeNEt4aJhtKH%2F8rToAERiC1F2mdeEJ4iHLemG6JmQFLIs%2FHrbP9ldoeBI22zUvbrArrTYTSI\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":156496,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 156496, version 773.768","md5":"6c4eee562650e53cee32496bdfbe534b","sha1":"1aae708e3b94ee981b452a918d28ed037fbb5e18","sha256":"9fc85f3a4544ab0d570c7f8f9bbb88db8d92c359b2707580ea8b07c75673eae2","sha512":"ebcb5a2e2a908228f77ecd03b45491778cad73ddc39fa3a6334b129aaf9fa36c16c0307aeaad74d77f616b5b34aac52d91e9f4816945253dc9a826ddd71f4d12","ssdeep":"3072:OvM6gZMLmY8uGpjVnlooQ+GQs8jic0f/KkMdE:OU65LoP5QSsuic0f/cdE","tlshash":"8ce31200d620498d9978fd5b2a1fa1ffa7a939c95ed210bad3c30cb93257143bbc2556","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-06-13T17:05:42.148498Z","times_seen":42895,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":184,"dns":12,"connect":0,"send":0,"wait":14,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18861\r\ncf-ray: 9b91cdb4dbdd5a0f-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65692999-49ad\"\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1656512\r\nexpires: Sat, 26 Dec 2026 09:03:37 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=JseGhTdeQHo9f7XgzSEENzwMUoKeWv4fdSrZygvcmv61OYBanrckv7nqszigPvtidLnAzKCQ4AukGMXevZSW7qC4VDRN4cfSbqZ8DXWPtd54lTTBO%2BaJP%2BHFjfE4qurAVDo%2BEoMs\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102641,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"9402848c3d4bbc710c764326f8b887c9","sha1":"b6e555166eb1381392e00adcde9bf8863f16ff01","sha256":"c22cfb6520a7fdbb738632834019acf47c78b1279462c0eb4cb83bae83ecb5a7","sha512":"0d33903bd456087de9a46a9c59a100d41219382eb1c5a97012cc3d73641078021fb65f957a0a2f96779ed5cf505f84dcb6758c9f5dd36727be822326f1ed8bc0","ssdeep":"1536:iwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9ZpgSLCJ:O709gMGFiyPG9ZiSLCJ","tlshash":"79a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-06-13T17:32:43.130723Z","times_seen":29727,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":20,"receive":8,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/cubes5.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/cubes5.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 34699\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-878b\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CPA8jxLbEeiUm7UANhaOYTF4DwT2AM%2B5ja%2Bty6lkkLujqmGP87KYNoyfw7TrroVNIMiMJguK8%2FTTs64gwZ%2BVYXtg3srkXQ91BCo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb4dea156a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34699,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 588 x 643, 8-bit/color RGBA, non-interlaced","md5":"fb9127690a302d4ada5be785c8e6d253","sha1":"f2d56216dee660e9994c4b21e58bf621d6957f12","sha256":"7dc9ff170b2ec9ae93a9421515f16f35f051fc819aaf919e043e99ae7fe9cf04","sha512":"9294f20d65fccc2eee0ddb5a263f1272389fa37e13794c4db23c774613d82c46f82d551e3ea527be5d02c2d0aa351f24c900b21eccabffdb176d11ccbd1a7ee9","ssdeep":"384:axn0IuxOuwlWonBkwiHyqrHrT4UBm/9OfOFTnH7BuQYNneilQkrp3nT4J9a1ytWg:S0QwoBkZHm9OfqH7TGlfJ46QtWhNC9Gi","tlshash":"7df2363c7578bd50f2c15b866cdc20627ea325c966f421c0f47b9b2ba3f0665e71a385","first_seen":"2025-08-06T15:05:47.255758Z","last_seen":"2026-03-06T11:21:27.857753Z","times_seen":4,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/function6.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/function6.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 5244\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-147c\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pKa0MVfxd78Cb9liNRukjNQ7Fu53%2BRtjfNI7oZX7v%2B6SjLl3zA8jrKi%2FIngLZFu2dkIdbxDLLF6LWy%2BspZ2hDesuSiJ112lmFlc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb53f1156a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5244,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 90 x 90, 8-bit/color RGBA, non-interlaced","md5":"433e5320f54bade260f741a937a52f8f","sha1":"8f2bdd095cb60cc56f627d7345f6a72dcb160756","sha256":"a962ef40687ed4877235eed486854804b1a7e16d1be50c08ccd41d019230a0a1","sha512":"d0333cd75151b12959639be0978980ff173f90c1e20981bcca77b5c2d7718e822bd0a5cad96d3bbff68fae98e2e6c1b056857d178b93eb0d5874cc6f56a513d7","ssdeep":"96:0STlxlSGHsgD1FWcMZb8Q+G8mXkugUkuNKiONqJCL0dbaeeYjpVFS+XBJI8J4z93:0SmM10Rl+vm01uNK9BBcDhXyz9j","tlshash":"06b19edd382e2417dcff1ceac0639777661368474c18b8a20878411c84a15efa6a65da","first_seen":"2025-08-06T15:05:47.162628Z","last_seen":"2026-03-06T11:21:27.88321Z","times_seen":4,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:38.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://citrixon.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 19:22:36 GMT\r\nexpires: Wed, 30 Dec 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 481263\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-13T17:30:15.594017Z","times_seen":880480,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":1,"connect":17,"send":0,"wait":22,"receive":2,"ssl":236},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:39.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://citrixon.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20408\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 20:14:59 GMT\r\nexpires: Wed, 30 Dec 2026 20:14:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 478120\r\nlast-modified: Tue, 18 Nov 2025 19:00:14 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20408,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20408, version 1.0","md5":"e8730678d4610fa908d3cba1ef0b4ddf","sha1":"1efcbee909ce74bf04878d74867f12a1e41ae7a4","sha256":"e921785496ed2d98c2257c88a6f838afa6acbee05cb8467048501bfe2a301461","sha512":"d7c3f81ad11ac5b3e6f454fbbb9be0940b3e8da93cde0b80f9a91a8259966be466b4d6a0fd5527fcc6c8f218aad8ffd0124bb29dfa08f6ca658ce49fe9e37e6c","ssdeep":"384:D+h1xN53scre+kLtT5+wpcR98ffVvdSMyNaHAUvLFNPBtn2aotFn9mTCAKDi055c:Ss/XRT5+wpM98ffxd6uZZRXnemWDj5WL","tlshash":"fa92d1cdfc0e5797a8e14ee93c0a7a4dd76f438af366a94b25e66122e67a55c040320c","first_seen":"2025-01-09T02:30:28.977279Z","last_seen":"2026-06-13T16:51:35.18154Z","times_seen":58749,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":135,"dns":0,"connect":0,"send":0,"wait":79,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/js/ohsnap.js","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/js/ohsnap.js HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=2,i=?0\r\netag: W/\"6856ee27-a4d\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QpNlnIhQTGQqPZ12Apak5WiZaQ66ssBGtS8tG3DHOpjTKWP2wbwD%2FLYQbfPF1%2FwPoKHOM4jDA6siGARKCuPOAB4o0URBbaHwrfs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb4de8c56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2637,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"7cbb8091a5376ae11699a87a6a81762a","sha1":"25c1a73346ce1ab073d13c4abbf5cf9aa9f1c652","sha256":"1fba6e8a4687b69cd11b66bc349be6f85981bdc2d215399d991de794bc7623c7","sha512":"fc7d67ee6144817cda5659f43f1403d428da2ef496d78fa072a8827ee144934258a31fe8232ecf93b599b95c73d0d8baf1f8bc060dd97a66f417cf6da48d4e37","ssdeep":"","tlshash":"bc5110882556973257e321aa435f68d462309a2fb41bad14b88fc3c40f85d74ebe3ad9","first_seen":"2025-08-06T15:05:47.138874Z","last_seen":"2026-01-05T09:04:08.745944Z","times_seen":3,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/js/index.js?x=95d26a49880c953338f7c5863a90957b","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/js/index.js?x=95d26a49880c953338f7c5863a90957b HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=2,i=?0\r\netag: W/\"6856ee27-7ce\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NJ3X3OQ0IvmwEyZnD%2BgDolzpeQJHJ0LyoSaI0xC2Zu%2Bd%2BqSB1f45zlLrcuc%2FWuUt6DZ%2Fmm1b12d%2BEO5TOSwatza3pKkc9u%2FKO%2B0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb4ce8956a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1998,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"85d816b6cf3e3f949f643726b3532c0d","sha1":"11766cfaa45e255294d28e8dae4532cecae4b56c","sha256":"471fed84ff123fb15ed6e6a9ace4336b20b1068d5e4b38b20a7425e1b925586a","sha512":"1a55382d1c57e82451729a1568847db460f7c2b767f6544d0b3c1e584dfbff6f4b5ebfe3f78ea50a9eaad1a7fab73c5fc0b8c12977e11dde80b9d3e103d83a6c","ssdeep":"","tlshash":"ca415884fbd46561867a39721d9fb84c2afd3a22fc0bdc95901d58e08b90c68bb1fd08","first_seen":"2025-08-06T15:05:47.124828Z","last_seen":"2026-01-05T09:04:08.746828Z","times_seen":3,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/btc-t.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/btc-t.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 1242\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-4da\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s9a7%2FsIpnQzLaDnQGWfbKUiiM%2F9A5NLSf1RyGjgJAn5ZTVjO7kHF7FParWmdeOdv1Sj4UpiNRDcZJTl3xcGtlxvKnjOkwUk6Pys%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb4eebe56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1242,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 45 x 45, 8-bit/color RGBA, non-interlaced","md5":"6f4b434820c537c0c34bc57a4a407edf","sha1":"ca8fa0ee6326862294c4c31cc59f2923130b24b4","sha256":"630f69e19612e37fcefbced4f0aadb0382dee99b54470966c5558211873b1d8a","sha512":"56f9fce03768f8289e1077c671feb4e59f89fc8543a318a8c16f1139defdc695e7143d63f1e9350f5c0acb68c876af54e51df078258ed96ba550733699cbe735","ssdeep":"","tlshash":"6021e7ca8fbfe47ac27e8d5a8619108478fb09b026f16b45320695940c1a73dac3ab47","first_seen":"2025-08-06T15:05:47.168186Z","last_seen":"2026-01-05T09:04:08.747726Z","times_seen":3,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/phone.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/phone.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 37562\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-92ba\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=49Fd8MdUuScdo47FKPRITUVqKQV61f%2FVClp0w3Z1M2Hft%2Bov4KelPCfJSBC4%2BqFAuKIghs61PwWKjUnEzM9qq36RSRaRr7FWHnc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb53f1556a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37562,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 399 x 591, 8-bit/color RGBA, non-interlaced","md5":"197642a98d91845e34c8c92842803cd9","sha1":"60576ce6488379ecf63d674744bd542176430f46","sha256":"1e24e710902c1c7ef95897e9d79508cf552ffc523b272ce7c9a6f688bb0078a9","sha512":"b7bb9ab6e5182d8781a95012f0a189203f6bd5571a84cab893d96ff7161eb413d28616e468cdc19ce351afd14a6e66494191eae483553402f0055ad133638fca","ssdeep":"768:kbLNUQG5Q2zkUjG9kcNYPeUWY3ZBdAuXZlLxYyH25LoIwN:kVV4K9VNeeIJ3tZlLyyvN","tlshash":"f3f2f16e4ddc481b520b3ba669d8c27d01c6011543357e65b2c5f0e98d89ad2b6c8eae","first_seen":"2025-08-06T15:05:47.119985Z","last_seen":"2026-03-06T11:21:27.846461Z","times_seen":4,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:38.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 05 Jan 2026 09:03:38 GMT\r\ndate: Mon, 05 Jan 2026 09:03:38 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":67176,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"5f82b7d5b96a577198378ffe84f6bca8","sha1":"e8f0a55a35215b9cddc393cb2e5c34214e185b2c","sha256":"5541515e21bb5289ea0397f7cd51f3fde8fcca12cf8f052c10e36f00b8cf7563","sha512":"0d11de9cc6a0561754374121cbd263f1ed5bbcb226aafe9d6e6b073a6179369319a6b8901f3796328d7fae7d8c15025d44815703673265e114d5c31491d41182","ssdeep":"768:yDcDaDvDcDzBDFKDeDOD14KF4zLFa+OgN7wNzaFLXnnGE3GzhFUQgx8uB8zXF+aq:z5YRdvI0rAwyl","tlshash":"ae630ea1041b5040ab834ce223cfbe34fe1f92507151d0b9abfd9b6baddbc66526835c","first_seen":"2025-11-19T00:37:42.03991Z","last_seen":"2026-02-19T19:51:21.580458Z","times_seen":6121,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":190,"dns":1,"connect":7,"send":0,"wait":18,"receive":0,"ssl":184},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ipregistry.co/?key=tryout","fqdn":"api.ipregistry.co","domain":"ipregistry.co","tld":"co"},"ip":{"addr":"104.18.26.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:39.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipregistry.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 01:22:07 GMT","end":"Wed, 25 Mar 2026 02:21:54 GMT"},"fingerprint":{"sha1":"B5:43:EB:65:50:0E:33:AA:EE:13:7E:F7:FD:96:28:F7:7E:04:36:06","sha256":"7D:75:0D:F7:5F:CC:CE:A8:61:BD:0C:0C:68:D1:84:30:BD:7F:34:CD:2C:59:C5:59:FA:32:8C:DC:07:FB:A0:06"}}},"request":{"raw":"GET /?key=tryout HTTP/1.1\r\nHost: api.ipregistry.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://citrixon.com/\r\nOrigin: https://citrixon.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:39 GMT\r\ncontent-type: application/json\r\ncontent-length: 1086\r\ncf-ray: 9b91cdbe3e1e1a30-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Ipregistry-Credits-Remaining, Ipregistry-Credits-Consumed, Ipregistry-Version, Ipregistry-Pod, Ipregistry-Region, X-Rate-Limit-Limit, X-Rate-Limit-Remaining, X-Rate-Limit-Reset\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nexpires: 0\r\nipregistry-credits-consumed: 1\r\nipregistry-credits-remaining: 132858928\r\nipregistry-pod: ipregistry-api-6665d59d87-cqxxz\r\nipregistry-region: REGION\r\nipregistry-version: 1\r\npragma: no-cache\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, accept-encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-rate-limit-limit: 5\r\nx-rate-limit-remaining: 5\r\nx-rate-limit-reset: 0\r\nx-xss-protection: 0\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2437,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"cf4617a6cc399a52c9788ddd2a321bfd","sha1":"e3f9495f5156c2da2ab4e48ada2c9930757fb07d","sha256":"b24f48cf09c68fef41974e507fae3bbaaa8f845e9c103bf881c700ca6b1f7362","sha512":"0f225c6f1b3d40d0fb48c5a3fd0c06142d6167a97304e1c9ebc23ccfd143d46b42680e6df17f78349e97a138401124dd596b3fc9da4275bf12a0ae1047f51daf","ssdeep":"","tlshash":"f141236a014d9f3e569782d5519e7fc87b3e1003e1ca3e018db94f14d1d5fac621126a","first_seen":"2026-01-05T09:04:08.750002Z","last_seen":"2026-01-05T09:04:08.750002Z","times_seen":1,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":123,"dns":4,"connect":7,"send":0,"wait":195,"receive":2,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/slide5.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/slide5.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 4708\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-1264\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DlXMpjPP6IRFUyGgY6y1TDu7hWqGxEk8K8%2BUO%2BJupFOyjGtx628GxB%2FpK0DhbKrTyaEhygPHwIzBTlehSJa3Ox9EpC0ejxd0IHE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb51ee156a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4708,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 284 x 71, 8-bit/color RGBA, non-interlaced","md5":"30feadb45d1a7389a857fef4297a2c08","sha1":"f46df19dec061c9d434187f0f352dc5aef71b63d","sha256":"98af7630bf752c3b93bb5be53c582bd8865650901a9cab1e596f8cc14d4977ed","sha512":"f328954f0d9cb4519aefea114c80d84fd53089682046c7739ffe60a6a477c19060c6dbd0e912b1774837b4a38ba0d860fe6fbefaa5851d43d9c91a6b30bbfd92","ssdeep":"96:ISrZbWG/LAMxQUJD0IQDo0AzbasuqVmx76rYEUvzWdFD0WoNm/F6ro:ISrZbd/LA2bDR0AzbaO4x76rJ8WdFIW/","tlshash":"70a18de371ff085d0f47eaca262ee0cca35fe100906b29ad6dd4de03a614912d11915d","first_seen":"2025-08-06T15:05:47.245066Z","last_seen":"2026-03-06T11:21:27.794246Z","times_seen":4,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/slide6.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/slide6.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 3878\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-f26\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rm89t1uIYzv8JXp8%2Berb5flv8UDwcMZ98p0R5EzHD%2BoGGZ2mh1nZs3QlwYPo7eD%2BwFrPDPKhL7Yx6zYxjJkplLEfroyt1tp%2B5k0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb51ee356a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3878,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 227 x 71, 8-bit/color RGBA, non-interlaced","md5":"ecf3dbcb3ce41891492cacc8699f5c43","sha1":"a6343d9654bbfb05b740d41753a49c8347b457a9","sha256":"3fff2dc50876586c2c727d2b6435934211cc3db3f7c80f1b3128cb5eac479453","sha512":"81f74962a643cb870da048ccd23b25ef067534b05fa89ef378b77fd555f3f860713932e749b04533c4f0497542861be96843ba14fb78fb7bd53caf4d12039248","ssdeep":"","tlshash":"bc817def621805cb1715d06b8ac9e5a14e019ccc8d2254bd176ae3bc16772e6a49b3c5","first_seen":"2025-08-06T15:05:47.160171Z","last_seen":"2026-03-06T11:21:27.872545Z","times_seen":4,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/function1.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/function1.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 9518\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-252e\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8J8CZiqjrFG2IzeA13aFaqx2Q3EJ17M6ciCftRbigx0bLDeHw8JxaExMBlK1hFEV7yd9TgopkTawI3eJ%2FwDXXcb54CK9UM8LbHk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb52f0656a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9518,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 90 x 92, 8-bit/color RGBA, non-interlaced","md5":"732af1ac755b17b2f3fd002ef5d7b8c0","sha1":"7feec64dd577b41e21870faf7d4e3c0712ce14c9","sha256":"c21343c43f9d2848ffcf2c1336fd1b92bbff2b8ffbd3bbde8ca592dcf94ec2ed","sha512":"e0f6cd22c629603943269c722fa730b50d7d92e6c39e64a57bcda0dde87a2531ab7c00ef7db6d7a112eebd1f7a43f8378500153e2a028816733f43e1d316351b","ssdeep":"192:JSeTq/nAiuwIislUmaPqWZhV0r01nr4OIUwDUSTeD2/Ng72:weT7XislUmB670r05ewUA2","tlshash":"3c12afd23357393eafad1415cb2604f13ff12babea6b5a6903f11811624f72cb671045","first_seen":"2025-08-06T15:05:47.164188Z","last_seen":"2026-03-06T11:21:27.804169Z","times_seen":4,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/point.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/point.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 2106\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-83a\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TnJZS82UX%2BrlmV5LGeoTE0%2FKrwzD9pu25YyHFUKEyPwbSGc6QqFUJtq4tr9uzigWpRH6%2Fs69CfH9FpjOQeCFUaCDUhNcLkWyANg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb53f1256a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2106,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 30 x 31, 8-bit/color RGBA, non-interlaced","md5":"9ca9a0fb81fe2f19830a68070e12b407","sha1":"26ddd6cbc02740afc4e47e2dc500705fe4a39053","sha256":"3f36094a45572bdbcc94c68b79683b00b8666c2f6666a5a4723ed521b02e7f20","sha512":"6fe19467f163f96a2ac276f620bfe7038860cde8c9b3f51645bb780c0208bbf3ac2116715b9d0e92f193a7af32755d58893874a764afda7755935d1db684460a","ssdeep":"","tlshash":"83413ad518cca56fd0b501ba0dc8322dbd5b48d9e089716b22e83b2b984a5c45059ef8","first_seen":"2025-08-06T15:05:47.260769Z","last_seen":"2026-03-06T11:21:27.708846Z","times_seen":4,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/api-worker/balance/update","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:38.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /api-worker/balance/update HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: PHP/7.4.33\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MzdJInV2vXYdU3EkW%2BfCqIH7jQ8bCY3mR0qY9SwkuSV1644T8iNCdVKE%2F7AykOk%2FmdFTUGIXhGZym0UEzgdBMDAX9uLjVNO8lGg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9b91cdbb5ce756a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":43,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"d467a193a55dacf92de382c9f1c27149","sha1":"efeadd73a556afdc0e99b5d86ff780cd6bda4c41","sha256":"8bd1331c3fd8765db992437fc23ea915218060012263e303f722e2616dc6bbbb","sha512":"3bc5b58f66e8c1577d499e5840bac11266ac7955c7751904a56e326b05aabc068c0cecc53c5fcccc7295999fe1d4e29dfb426f5c2fda12365c26e54280067971","ssdeep":"","tlshash":"4e900415414d41f701c1f0c44414554033d445d1c334cd34c15551045710d7f544754d","first_seen":"2025-08-06T15:05:47.156752Z","last_seen":"2026-01-05T09:04:08.756653Z","times_seen":3,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:39.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://citrixon.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20408\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 20:14:59 GMT\r\nexpires: Wed, 30 Dec 2026 20:14:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 478120\r\nlast-modified: Tue, 18 Nov 2025 19:00:14 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20408,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20408, version 1.0","md5":"e8730678d4610fa908d3cba1ef0b4ddf","sha1":"1efcbee909ce74bf04878d74867f12a1e41ae7a4","sha256":"e921785496ed2d98c2257c88a6f838afa6acbee05cb8467048501bfe2a301461","sha512":"d7c3f81ad11ac5b3e6f454fbbb9be0940b3e8da93cde0b80f9a91a8259966be466b4d6a0fd5527fcc6c8f218aad8ffd0124bb29dfa08f6ca658ce49fe9e37e6c","ssdeep":"384:D+h1xN53scre+kLtT5+wpcR98ffVvdSMyNaHAUvLFNPBtn2aotFn9mTCAKDi055c:Ss/XRT5+wpM98ffxd6uZZRXnemWDj5WL","tlshash":"fa92d1cdfc0e5797a8e14ee93c0a7a4dd76f438af366a94b25e66122e67a55c040320c","first_seen":"2025-01-09T02:30:28.977279Z","last_seen":"2026-06-13T16:51:35.18154Z","times_seen":58749,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/sj8Zxds/bg-mk.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.6","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:38.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Dec 2025 07:17:47 GMT","end":"Mon, 16 Mar 2026 07:17:46 GMT"},"fingerprint":{"sha1":"DD:3D:A5:50:70:7F:39:42:46:31:C9:98:9F:15:65:82:62:1B:CB:64","sha256":"F9:9D:18:4C:82:20:26:63:14:76:0A:30:CD:96:1F:CE:F9:77:EB:76:34:EC:DF:EE:6E:54:50:88:39:05:C5:C2"}}},"request":{"raw":"GET /sj8Zxds/bg-mk.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 09:03:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 5389\r\nlast-modified: Wed, 07 Aug 2024 09:50:17 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5389,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 241 x 57, 8-bit/color RGBA, non-interlaced","md5":"7a3a2fa503938eeb6b37d5aa04e96748","sha1":"9a2bae6d3c7106184fff64e24dcde6d517853112","sha256":"837a04fdf5763b2cfc9fe8155a9bc7bf51d1bc19e4598ae41b0d5a3c6cf4e97c","sha512":"6473caab473cca15c51cf74c4bb119a464d05398a70cec6c48f8a9f493898f27c97705cad48080bb349a53cedafa39d44b0fbe2c6f6360ebbb8b6215ae20f4d2","ssdeep":"96:7SdLV03FJvzxKiBLdQb4hiPWFOfRNtqH9oayVVi1zdkJ54DQC318jqmAO:7S5V03FJvzxKipdy4WWCJqH9oq1e54MF","tlshash":"1eb17dd6b6b0d092c60b495511320101df7f3bca1a2d656bbbe0ecf9825b84cf5aae53","first_seen":"2025-08-06T15:05:47.247494Z","last_seen":"2026-03-06T11:21:27.812303Z","times_seen":4,"resource_available":false,"data":null}},"time_used":525,"timings":{"blocked":253,"dns":69,"connect":25,"send":0,"wait":24,"receive":0,"ssl":136},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:38.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://citrixon.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 31 Dec 2025 12:35:15 GMT\r\nexpires: Thu, 31 Dec 2026 12:35:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 419304\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-06-13T17:38:48.702524Z","times_seen":55495,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":6,"connect":24,"send":0,"wait":98,"receive":4,"ssl":121},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/bnb-p.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/bnb-p.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 501\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-1f5\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QqqOLGE12r8gBvJyyrpKNCF8mF7HDfogpbesW%2BJ4Nin1j8kt8Is%2BvrcKku5OfBV0el1j7aD210j82XOsWqyW528zmMP8E6O1lPc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb4eeb356a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":501,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 37 x 12, 8-bit/color RGBA, non-interlaced","md5":"4039960140e4e7d458a7a01fa7cc4e8c","sha1":"5f5ca5a37a99b5ac2f7fe1c65a57fc37c1a530a2","sha256":"b95bfb2e5cf8569c45c873c5f3e41752900036f657e38c73278951c476b0316f","sha512":"e9694b73cb59a1eacf8e4834152a08aba352e2e008e1900aec573b58186f4d6d49183c0f990a7bed48801d4551f122f9091f5e0883f38b6ed2e214e24639dd32","ssdeep":"","tlshash":"abf05cdc5f595dddf115f6f561c555c4fd9f51300154094458c1ef05acc48c5da55343","first_seen":"2025-08-06T15:05:47.155008Z","last_seen":"2026-01-05T09:04:08.762444Z","times_seen":3,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:38.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 05 Jan 2026 09:03:38 GMT\r\ndate: Mon, 05 Jan 2026 09:03:38 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4887,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3fd96ba77783845730c343cf00ac7a93","sha1":"bc4f7f4f71aeae387232155c55c4f031c5f3f769","sha256":"27b95b2fcbc857ba25f7e5a707c5c4c06c5cf93415519b7669c19f4045edca37","sha512":"20b137cf9c61842c7bad62dd6c36125833022552379ad97324dbee2c2e9cb0303b17a9aee813ea2bcdbb68541c8c6edbfecfcfb2858cf27c2cff480d756d80cd","ssdeep":"96:aYg4aMzqYg4aybFZHYg4agkYg4aUJ3vYg4aERYg4aYGJc+uTYg4aR6NDO4a3qO4L:vywfydyGy63gy/yFVyR73xpmj3U8fHN","tlshash":"37a1ed91006f9104ea431dd627cf7e32ad8e51956082e27d6ffd2dca6cdbd23122874c","first_seen":"2025-09-10T21:50:06.177565Z","last_seen":"2026-06-13T16:41:36.061556Z","times_seen":16881,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":104,"dns":1,"connect":18,"send":0,"wait":29,"receive":0,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/cubes4.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/cubes4.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 34430\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-867e\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ktp4Ti3meQNeXRCx5ccBkBrhX7KPeySOKZKYxGo8fWyPoWQ4vUes7KsPucw4hFYw02I1X0h%2FoT6mXvLPqUBGLPXKDMYp9zGOIMY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb4dea056a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34430,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 588 x 643, 8-bit/color RGBA, non-interlaced","md5":"a510eca028701d95e50c8915a59a90da","sha1":"99fa87c7ff8aa9e0987b0561a25cd8eaa16e67f8","sha256":"c4fcab44fddbf8352d97de205c178cc255e44d9b8c4695517650f5d392bbb224","sha512":"d36d835a2996ecf40cc65372ea11a9cb9722f10a2c59d96e7cfae03e42b2bcb2ce4baa60a9a5ed32ec1c7e4486d49f43e68cb63284df52a2f6b51eb67ffb0fed","ssdeep":"768:S0E/IRcE68OLQ5/D41Duz6NQKTVJWPNYvtRTNypddJ45e:SPAWsOZ6z6KKTVJWLndJh","tlshash":"0df2c041f5007a20fede660e769f822bb3bb57d45e985201b9c3481635f11a8f8c7f69","first_seen":"2025-08-06T15:05:47.167005Z","last_seen":"2026-03-06T11:21:27.75723Z","times_seen":4,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/xrp-t.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/xrp-t.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 1121\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-461\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CtucULfK8axTjhJTy2OXXO2NMxf6BkQ4wUq4f60U2j55B88Wk2xY2OPgE%2FTu%2BeAYBxh4r9xh%2BkA0%2F0EsVBtI6%2FbGzLqxrOmZUdg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb50ecf56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1121,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 45 x 45, 8-bit/color RGBA, non-interlaced","md5":"d3f8975cb95b64df6084ca26d3dcf09b","sha1":"53f2bbee3ede9bbeddc5cc8c2078f62c83d6cb8c","sha256":"12fbf60b6067639a2f6eb48be9bac29b544c84d0e4d36a95543f9700ffdaf34e","sha512":"0d688f456aae2e9935f76e1527e386bb4aa6c290ae92ec37adc6625f2d81cc72ddb82966ab232d973db1a2f4220f76b8b8ba3683c65b940608576648030c3f9c","ssdeep":"","tlshash":"972196d948e773fbdbb08069de0429b2c1279fad040147092170b85ce287780ed17f1a","first_seen":"2025-08-06T15:05:47.22942Z","last_seen":"2026-01-05T09:04:08.764844Z","times_seen":3,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Montserrat:wght@100;200;300;400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:38.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=Montserrat:wght@100;200;300;400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 05 Jan 2026 09:03:38 GMT\r\ndate: Mon, 05 Jan 2026 09:03:38 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17343,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"8099fd2908b8ff98a6fa32c13b3c27a4","sha1":"46fb2e3603399fb539bb43d472601b2c22644511","sha256":"f6ec0c0b2c87c966c56dd4a1622440388bf0da1ca5574d266d1994010a78ea10","sha512":"5d35d28aeb01a832abcf499a571a4e8e3f4e41ac214eedb2e4631e7a81352148c5a1ee172a933b22df8dacc01b0af6d1343c22a5e90506ce93e21de72671a2c2","ssdeep":"192:NpRdp7opQpOPpu9R27hpOYu+RV7y6OfuXRo7TbOmuwRv7M0OFupRS719Ocu6RB7D:Nnd1oWQIOrRPQPTzajdfMfPE","tlshash":"a872ac91105be500e6472cc923cf7e26dd4e21627494c57a7ffe2ca8adeac225325b3d","first_seen":"2025-09-05T06:25:47.318539Z","last_seen":"2026-06-13T16:27:33.164893Z","times_seen":3382,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":110,"dns":2,"connect":7,"send":0,"wait":22,"receive":0,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/btc.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/btc.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 845\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-34d\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kaWc0AyzHJou7yYhYThPGFC4lVV2OeEQErNl%2BwwYArzHuStE%2FVRfCAwG3UN7lR%2BfUi7vVDqZvis95UhxLVt3BuXn5WvtFSJWoYY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb4eea856a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":845,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"3b18c73dd8c127c9ee375c2a2cf89bec","sha1":"e8731a5e53a7d98e175cb59a436e8298cdb9a2cd","sha256":"f3218ede37f48c0f54492a510cae004645c3d782ed25ca6bf4b2b9474a5c8294","sha512":"c97013e3724891ef73e22dfc11d6f658d81c054c8d7d81468ab7eaa6d6207824f3ca9370c94db1c0285b101cefb053a32e26ce7e77683b5317e3090c21248d4b","ssdeep":"","tlshash":"8b0196fe85c3612bc70a941db83717b4a45d0832720e245c45b428238c73590d66b942","first_seen":"2025-08-06T15:05:47.189042Z","last_seen":"2026-01-05T09:04:08.766371Z","times_seen":3,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/slide9.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/slide9.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 3631\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-e2f\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eySuNjSvuo7xOY9LTEblPBxPIefUdGeAAN%2FGY4K6gjUG0RA8x3%2BQVDlAxk2rTEsEwlcOpBIPLZqc3Ekom10tQY4ssufrnF%2B1tbk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb51eeb56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3631,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 231 x 71, 8-bit/color RGBA, non-interlaced","md5":"4174af53b583355f5c18fa5d9e7155bf","sha1":"f37a8a36249433f3fe5010d5cfc3be75babd9e6f","sha256":"aff9afb353141c093bbce0da0323d6bdf78cad0bf8264aaad8559f374868cd60","sha512":"404adcada2f231c28b3d7b4fb1ae2b89a02ef3b2f79ef96f8f427be4ef9a5cf0588b6a80f9f74739247d628bc51be8d641bdd7b4eb5c39616a8261875033ee15","ssdeep":"","tlshash":"c3716de3e1e38d6d99dfc48085f862851e4fa287128b349360647947070308fa3bdd7b","first_seen":"2025-08-06T15:05:47.224301Z","last_seen":"2026-03-06T11:21:27.731419Z","times_seen":4,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/slide10.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/slide10.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 3597\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-e0d\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T%2FQpJwlsEP14h4%2FhU5zNT9Jr5MDW%2B8x7JN%2BlYFvsm15xdFQEa11oovbOp864Q90pxb6lpXb7YXaJylBYcb1lWpbB37ISF2BKJb4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb52f0256a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3597,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 243 x 71, 8-bit/color RGBA, non-interlaced","md5":"b2e725fc4949971bd08d014e8f46af29","sha1":"7649352e0cebfaa69cad48294dea251d7abe7578","sha256":"68c92093940f90e1e6479002d02a9d931212019aff257f553b5320fb285f15d5","sha512":"70f9f7d637d56e92b92b8f66ba5adb2bb0ae3e18c363b104d6c239fad7ba52181a6cd7ef0c2f82d4eb1259f0f92445e0bea6c81cb091802615c6aa71a92f52a3","ssdeep":"","tlshash":"58717e8291acaaf8c3406fe591035f7a59132e7d7c33851d2c3b3754444af48bacf650","first_seen":"2025-08-06T15:05:47.266116Z","last_seen":"2026-03-06T11:21:27.717607Z","times_seen":4,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:38.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://citrixon.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7840\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 01 Jan 2026 09:56:55 GMT\r\nexpires: Fri, 01 Jan 2027 09:56:55 GMT\r\ncache-control: public, max-age=31536000\r\nage: 342404\r\nlast-modified: Mon, 15 Sep 2025 16:35:17 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7840,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7840, version 1.0","md5":"8d91ec1ca2d8b56640a47117e313a3e9","sha1":"a9e9bafe64666f4595051a0e895b47a5fa39e67e","sha256":"78bc3aa78faec288bbb3bf26c9a0fa4eb67b1e69da94a17233c5cab60525efdb","sha512":"bd3a864bd45f39ee83ee79ba4469a156ad8ff3dd33d8aae11e3edd97b29c2ef7f610ac851726041251e34b0108f618a2f945038bf6c0de9a7982e0d643cdfcfb","ssdeep":"192:S5upwnqrBHPLA3J73KAQDPh50uFdXrnpjDS7LjvQnRb:S5ELrBvLA3J76AIPhi+vXwzQnRb","tlshash":"68f19de0200937e4f73d5feee6276b7f2e2edb05e25305aa7556014c69de39310d21a2","first_seen":"2023-04-06T21:42:41Z","last_seen":"2026-06-13T17:35:59.671366Z","times_seen":73378,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":151,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/coin-5.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/coin-5.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 11789\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-2e0d\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yd9GKu3zWXm%2By%2FcFVixgw40%2F6YcwNtWiSODY%2FeIhIBHhqTTgDar%2F6%2FLKNbEqYQ%2B5zXJYfwUdCF1r67uvkMuGAHuhk6xdc62wo4I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb50ed956a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11789,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 115 x 115, 8-bit/color RGBA, non-interlaced","md5":"0a0bcd0631bfe9b9a6da3a4e0163a828","sha1":"1121b36e44f771a6adf276d0e3df9140718f6e16","sha256":"a7e548da1cca60ce45bc98cdbfe8c2fad3f4d2d5f8cec1a4776fe9e4ff072ec6","sha512":"c7362c128989ef73512e9ccf1d0a3ff6404ebd5b900e7f55ff26cd809a81705777eac3151a3aad2d25227ee80743ed57d4cbc25913ab2aa99f1d0a1c48a50d5b","ssdeep":"192:eSI36WGrMv5ovyfEHTbcARB/M8IYpcWryUVOPT6ouhxQvKOksWurdiS5av2nSbUb:BIzY2tf4b3M8IycW7UbsQyV/S5av2Sbc","tlshash":"7f32afa6468eaf5cee658f07c17b40b9291169a11e3bc84d7bb0af4e507e3a415e03d4","first_seen":"2025-08-06T15:05:47.236348Z","last_seen":"2026-03-06T11:21:27.817159Z","times_seen":4,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/function5.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/function5.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 6793\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-1a89\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ilk5B2hvJcMzauieN93wERFQr0peZ6lttTlC%2FSXlA%2FgZKFh%2F%2B1zCOcZlKrcTgq33j8sWwiNfdKi%2Fc4A3lqjJH210fxmsoeLdvnA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb53f1056a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6793,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 90 x 91, 8-bit/color RGBA, non-interlaced","md5":"7c3a370f5f9ee7f059ee4882e18ed800","sha1":"57988e6249cab08f69ca45a8434123ea5ea5f447","sha256":"4c5419dc07633a1b0f1a57f5dfb8efafbb83e3e601b10f877135c8f9e78a467e","sha512":"6a8318943f38b7ba90ced93ad4b31a8bfb87dc8d67e95a563dd7ae255d46a9eaad102627b3af46d5a68ffcc6e164ece2b7730bbda810dade32fda44b7e6156b8","ssdeep":"192:aSP7P5leoOeVcpusU9Aw9iHDydRAuQbhkLwRbUT:VjP5goOe+uV9AwKDurjLwNUT","tlshash":"91e19e82cd839932591107be83d3e6b829135369fde375123a30f6e32764be644427dc","first_seen":"2025-08-06T15:05:47.190199Z","last_seen":"2026-03-06T11:21:27.735077Z","times_seen":4,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:38.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://citrixon.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 19:22:36 GMT\r\nexpires: Wed, 30 Dec 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 481263\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-13T17:30:15.594017Z","times_seen":880480,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":3,"connect":31,"send":0,"wait":21,"receive":4,"ssl":234},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/usdt-t.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/usdt-t.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 1091\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-443\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7vWyEUPvAFdpHO1N8khNLgOiroyJSEIer1lfvHviDQCqPPjCilMqIbHz%2FhI5nBQIWhehwrEEQICqdBXYFViXiD%2F%2FTxzMuW4ZkWk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb50ed356a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1091,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 45 x 46, 8-bit/color RGBA, non-interlaced","md5":"136a6bb2746bae627d2575d994b5d9be","sha1":"7c061e1f10cb1cb0d3b636656f88f7d4f5ff6fb5","sha256":"c2696500c616ec24ece3003002c15041e7f3fa2be90b37a31bde753361a83e75","sha512":"a9817dcb50eb95bb2e51e5b21e3e419c376f9fae6f081e83ca726651bd66b568366fcdf82e10c21f5484818201baea3843193d179c01dc2c3089386e52f9138e","ssdeep":"","tlshash":"d8112ccafb83407c494d43f463c616d9f5276cd0d378db16f04b6204d77ad504c90651","first_seen":"2025-08-06T15:05:47.183776Z","last_seen":"2026-01-05T09:04:08.774259Z","times_seen":3,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/coin-3.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/coin-3.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 40220\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-9d1c\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WRAVp1dOYKmuZxWWu9QkkQL%2Bpy%2FMsjThzhaSljCY6t8Atfyy%2Bt2C2IHr1qxIUNXPQymJj%2FF%2Bh4u3T98P5QV3lgmqzcAmCdFO8cI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb50ed756a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40220,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 246 x 246, 8-bit/color RGBA, non-interlaced","md5":"891e6a7322a50d61bdbd036389cadb84","sha1":"a7775a90a3bdb86e0900acb6770cfcb6c0197452","sha256":"727443fa19d717d560684fd5737da8c3a5f38e02baba77db8a44151829f612dc","sha512":"a216e47db1ec991e3f491e84eab3591102e34cd9e19c5373e1ad0005cc7faa6e2472150d0abff2e60d5d15aee75259ec49c658529af8e0fac3ff203e80c60840","ssdeep":"768:+5SXw2DSOgp5jDYGnhHnEuN+xPD9Ysu60U3HsTc0c4bqXB0F20mhj6iwraej:cSXBDDgXYwBWZYsu60UXsVckqXBi0jxS","tlshash":"f10302e4b5fb4e6f544d21c10436336c582a9519a83a19d8fa2036a63f3bc9db527f20","first_seen":"2025-08-06T15:05:47.170516Z","last_seen":"2026-03-06T11:21:27.831306Z","times_seen":4,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/slide4.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/slide4.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 3593\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-e09\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xTmHKNnzt1tRR%2FUaBh6sH3uiMU9QWtG9NiDzji%2FVnjKAi7bLBS3jab0drLdCWS6LjPW9E6INQqf4q77fNzjUNBmhrHQVHU7%2FqQQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb50ede56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3593,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 209 x 71, 8-bit/color RGBA, non-interlaced","md5":"84b5d25c3e66787769484e73a04fdf33","sha1":"0934f8563b9e9aad18090401847304278ff8a1d8","sha256":"c3c749e249d11844cf7369b645ce279ef0bc6e350b60730f3dd9805014b4869d","sha512":"97e8c4f69d43334db0918386a2b2b6f2d4b94326fa158bb10d4dc8daf455404095d6533b691a175a2d966717c0dacf91b132ed057e1a960b75bfa014b7de685a","ssdeep":"","tlshash":"92716d7542f18596dcc09d7b07ab4943bfa28bd0c2fb90cc25799236dc5105cb81b4a3","first_seen":"2025-08-06T15:05:47.143743Z","last_seen":"2026-03-06T11:21:27.852854Z","times_seen":4,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/link-arrow.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/link-arrow.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 858\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-35a\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sqrTY09XhgQMtUtb9%2FfkmDAY7VYqbV8kFfoPQsKfeNII%2F%2B0gnbPlyewasJ2vqh1jc%2BOUGHfmHONlT25%2FYqHjhRgQjpz2z2P8H3s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb4de9556a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":858,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 31 x 31, 8-bit/color RGBA, non-interlaced","md5":"75fce9d0d8dcd8f2f78c9d03a0b426bb","sha1":"7f1d534aca12897cb9972d8216e8b6bd24b77f3c","sha256":"b613417c479784851f630e384218b424f5a436ab24e9bde9fd1a10d5106f4c42","sha512":"27ce89b07c1ed0b01ccfe4445fef9675d61ef549d37a3c78a44265695e4c6fea468e0b57ec179b0a29e1f20fb20ea6329d87eb8fca3b1b6b83032d7101a1071a","ssdeep":"","tlshash":"e51196593705747d72616ed554aef474a8729a6e48317e3d45a54c2cf1832009540b12","first_seen":"2025-08-06T15:05:47.23432Z","last_seen":"2026-03-06T11:21:27.880398Z","times_seen":4,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/cubes2.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/cubes2.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 28950\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-7116\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fBbzbUqRYvGXb%2BIpuuweqrJkwSHFFUPNI7OGwQZLPlmeMi4%2FPwvzzmvuVmUmLb3bN3YOu3Asrb3IpWCp1EgSQ9CRwl5fnLWYD4I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb4de9856a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28950,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 588 x 643, 8-bit/color RGBA, non-interlaced","md5":"ff4e8cd7fc0daecf2e61df592bf8c435","sha1":"7df193ba195ae8ffd81867aa3efc253b9bc1b35f","sha256":"297c28999821e2a1f7926d2285c754fdd1654b041338ae4bdcad762e4678b423","sha512":"3b842d08688e644c535c8af958c542246a4cce8f9a56e55844a895ef8422818a203e22d966bc9e9a0250e2b0aff97f8abc7a898d41732ca9713c6b103c6c6766","ssdeep":"768:S0OCoZvPpsI5JE3cmmzDiwJzogKk1Qgq0:SlHPps9neD8ADq0","tlshash":"5fd29d05f1433a27c907e4418eaf15fb5a6ecda016d0bc3407af98716c73669e0e79a7","first_seen":"2025-08-06T15:05:47.135239Z","last_seen":"2026-03-06T11:21:27.80205Z","times_seen":4,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/cubes7.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/cubes7.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 36831\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-8fdf\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GfaNCaDVedGJDS4xdQY6hqCKUY0ObfXS9EX2BHTIRqR7qdDZSMGaOxLeSSr5kKvLmaatX%2F6usUyC0o7HNQGMF2Xtf0R553STnVE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb4dea356a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36831,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 588 x 643, 8-bit/color RGBA, non-interlaced","md5":"536be34ebd548b1c48384ebfe4be2828","sha1":"28eef7fa7a3cb59fbc5380c6b2d692ca38f73c40","sha256":"23897fb5fdeb15439401618d699daf20e0063f40058435a014ac7b3fac121610","sha512":"19e0d69db6f6127e99b323a2dc7f7c2ecdd8abf2918f120f990b4fd6c50d215b538aeaaf9093b3f883d7d3a3650d5093208ae1ebd1898c0b9e86d966c2af1bfc","ssdeep":"768:S0d4jHRVu2A0PiIR/+niQUJ+6MMTDgt71QgWmHeEF1yUEwN1RM:S3VuA/R/+niQQJMWDgIfmHjF1ymy","tlshash":"c5f29d0bd225e0256d1db68902fa3d4f08b3ead184f5257f7c5fec58aa276320b11b86","first_seen":"2025-08-06T15:05:47.178079Z","last_seen":"2026-03-06T11:21:27.878676Z","times_seen":4,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-05T09:03:37.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.4.33\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4; path=/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RJkZyXkXVd0WfW0txnM4IYTediDIplngWDds8wC5nN8J5Lnd33GJ5r3vH916gJ1SZ8KiSP0zdkUcUqrm7kXBBjVyrYry1RhIIEg%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9b91cdb27b52569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":29815,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (339)","md5":"b8c333e57d1d37346db52701de0f3bb4","sha1":"c4977acf8c7d1c196ad38fd9e6f01fe418edecae","sha256":"1f680b8874dfd4bfd62f07d4841af976cefbd69176b1e08cba57de615235cd56","sha512":"ed426cbb64f77fabcefae32d70f6679319d0d7abc1c6ed6eee7c1bd67ab4d29266300674c0f811aad4f9ace6cc8c3fd9aff3382500a0bb1b57310c53e667819d","ssdeep":"384:ILuLllLpLLZNnp7+R54iPl7cFAv4s2G7UkkIFv:ILuLDLdLZRk54Ol7cfs97UMFv","tlshash":"fbd2fe5153ee6d73016203c67832af8ea8eb8e02f1578495f6bf4684bbddd989d03523","first_seen":"2026-01-05T09:04:08.782444Z","last_seen":"2026-01-05T09:04:08.782444Z","times_seen":1,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":61,"dns":42,"connect":1,"send":0,"wait":118,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/ltc.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/ltc.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 824\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-338\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uBs52xLP2zMvsPGJ8%2BQRoZHii2%2BWDyQU58U6jukjE9%2FhpArsl%2F9Ge00xZDNPMWSdj4KJChbmDj4jb%2ByJ4zhpWlYjIIL15s6XrSQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb4eebb56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":824,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"32f967ee09ec11b70a31d8c984ca3375","sha1":"3e7608864efb81ce00ea7bbe1325cfc5852aa393","sha256":"8f84fb96e1766550ca037415584805dc666579748b0b2ecc7a183a86c6e3de68","sha512":"4f19e02df2d714cb654efcf58c6449e20e76148200e66996e39a816300a95335ee801c4159035c7b6caffc951db3bdd3924d366e5e211b072613d4e5d520bd35","ssdeep":"","tlshash":"c50181db9b9174b4ee3f3b3223a06250818fb6f90503bd388d64f03c28166b44479383","first_seen":"2025-08-06T15:05:47.257584Z","last_seen":"2026-01-05T09:04:08.783781Z","times_seen":3,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/slide1.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/slide1.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 3901\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-f3d\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zXJvPYTEGIbPlsPz4v2r8vo6j8665%2BxVW3THIz6f3eJFdD3s6YBatRUB6iBBH2Q8a5gXPq0WR1o75L5vc7o1%2BZaWUZeAwvLRZnc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb50eda56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3901,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 226 x 71, 8-bit/color RGBA, non-interlaced","md5":"13ec64a0fe398fd5d1782d493f59d959","sha1":"99dafb34524a20d52c94f21c265e5d646b39c322","sha256":"a9abf6edefef555637bc3d32c4e06ffc3fcb7eca1f927b844e24b18198fd2e56","sha512":"7958a082c2f718535d268d86dfbf3a5ccf2d90ca131b55b77f8c35ba5aeb249356ca97e17c783a684acadaecf60ffdea03ce1081ece8cf249eea45dc2c5420f8","ssdeep":"","tlshash":"a8815bfac3b46ff4525a5991725c93c2e3b828e802c144e46e7c6051ef16db0aca54e7","first_seen":"2025-08-06T15:05:47.192704Z","last_seen":"2026-03-06T11:21:27.860446Z","times_seen":4,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Chakra+Petch:ital,wght@0,300;0,400;0,500;0,600;0,700;1,300;1,400;1,500;1,600;1,700\u0026family=Raleway:ital,wght@0,100..900;1,100..900\u0026family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:38.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=Chakra+Petch:ital,wght@0,300;0,400;0,500;0,600;0,700;1,300;1,400;1,500;1,600;1,700\u0026family=Raleway:ital,wght@0,100..900;1,100..900\u0026family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 05 Jan 2026 09:03:38 GMT\r\ndate: Mon, 05 Jan 2026 09:03:38 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":86942,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"e2e7c23c935c48cbf77f17504e546c09","sha1":"1eaaccef55e05737177fbd51806b72fc805c458d","sha256":"c2203674ecc4941d38f7d49d67bf8c6573cea8b805d3517a87d0df895e7e79df","sha512":"32941ff8f15f01c2d11ba37d9d37e41d047cfc64ebefe5098142203b689ee2eb72320918a51086a175647e7dbed45614a871e2d62daced5f5c05b4481acd9eb8","ssdeep":"768:gDcDaDvDcDzBDFKDeDOD14KF4zLFa+OgN7wNzaFLXnnGE3GzhFUQgx8uB8zXF+aq:15YRdvI0rAwyl","tlshash":"33831da1041b5040ab835ce223cfbf35fe0f92607151d079abfd5a9baddbc62526875c","first_seen":"2026-01-05T09:04:08.786573Z","last_seen":"2026-01-05T09:04:08.786573Z","times_seen":1,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":121,"dns":2,"connect":8,"send":0,"wait":23,"receive":0,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/coin-2.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/coin-2.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 9893\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-26a5\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JrNZCy2VHdRPvjd3SOJJn%2FUQ%2FJdD5q8oc71gHDS%2BThZ30J9nknxPBiIxD4HJtB3Q%2F9j%2FeKU2XNrxMkAjUVM2cMAxh7O4rO%2BkKEw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb50ed556a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9893,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"2e600226a95aa8eaa0c30dfd7ba4bce7","sha1":"20b095fab755bdf01360bd80f7c0766bd242d76f","sha256":"2f74a29082ee5ac8654e131d89c5b6fcfb078ae127bdc032073cbab3f120d2be","sha512":"39d2c0246c77d1b34b30759e320917051ba37b6e5a636ccc6929609baefef5f1146c6f5fe92218d6e1327408bc3b723e3899be2082d10f0f5dd17fbea1cbd133","ssdeep":"192:IS2WxDHzyhkDXw9m9T2Qi5cEhLY2ti6bXfiii6UtQB4t:P2ueHc12Qi5cXibFi6dk","tlshash":"2512a0e3a695fcd223608e85865edf0fa403823d52a645bc7d507132eadd3622716ba1","first_seen":"2025-08-06T15:05:47.149555Z","last_seen":"2026-03-06T11:21:27.826175Z","times_seen":4,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/slide2.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/slide2.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 4632\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-1218\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iz5kKIL78nwJE9aEd7%2BUfPdgVJztZ%2FmtuQxErXpsGggnfG9BABJGSmr8TGRXsuMbyHELWsPA%2ByPFWxcxj4Eus1z%2FwZmjdaneejU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb50edb56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4632,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 230 x 71, 8-bit/color RGBA, non-interlaced","md5":"e0ebcf5c9086a6d77c77b3a1c720c7ea","sha1":"ae465dfb2273bbf87adc6618fc47c2dfb3a1f162","sha256":"bbaf246dfd18efdd49c39a7207d27c3dc3abe04c168929b0965f4b7584add0db","sha512":"719a22d1ff266a617e1960475d5b30fa13dbc1d4f28625b0da5135a17fbc225acb57a7dee891d3cb36fa894b755a2c78ecb2268267830409597df5c9c7e16416","ssdeep":"96:ASm9P3/xaSsQOiZjxXLLZ/8SBO1gYdX7lL15rhgXToMwXt3FFu:AS+RQijLh83mkd5gXTrwX7Fu","tlshash":"67a19e1b2079e1ee1e9fa351901382779d61223918b53de1242dcc8fc42c4dd2ab3a96","first_seen":"2025-08-06T15:05:47.15102Z","last_seen":"2026-03-06T11:21:27.715048Z","times_seen":4,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/slide12.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/slide12.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 3243\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-cab\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MFjYGFMWfWPVmymJu0juHCZbMQYJiUHBMM%2BmfDvyfpFtfFfday3EMb2dmWgLFiYGM52PwIDbor3r5yEx91JfWm7byexWJUk0uZY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb52efc56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3243,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 205 x 71, 8-bit/color RGBA, non-interlaced","md5":"d843026f77f729a69ca2250c0c5982f8","sha1":"3b451977fdfc9b110c18475c74e682d6dcdd9204","sha256":"120611761a9ce2410413444e3646b5ab859e05c30174563ebd287074c16be8b7","sha512":"b33e098d7ceeca8d79606dc6965f0d61f87aa50b49bf03577c35d3032dcf2da9794a73158b4fe7c822cf32dd986f146c733f073f1a31860620eb60bc30eaf89a","ssdeep":"","tlshash":"b0614def5f601f7a8dd08c40b1b157aad857cc2bc2f71ce8d9740077145955845c9a5e","first_seen":"2025-08-06T15:05:47.198764Z","last_seen":"2026-03-06T11:21:27.789353Z","times_seen":4,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:39.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://citrixon.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 19:22:36 GMT\r\nexpires: Wed, 30 Dec 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 481263\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-13T17:30:15.594017Z","times_seen":880480,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":111,"dns":0,"connect":0,"send":0,"wait":88,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/pantera.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/pantera.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 38338\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-95c2\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5PRikjoDOrwxigZuJlxQY5Ys6HrFOm6pRMVJg7u8Rrajfo%2BpuIMs6EMqtgHn8keDNTy3W%2Bj3mlZRujO4OSspUKG2qzD4smU5CFE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb52f0456a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38338,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 140 x 219, 8-bit/color RGBA, non-interlaced","md5":"beac7e65f226bcc92b16311637fb1139","sha1":"3f8357b38561399807b123d73e8e17f9fb8b193f","sha256":"c20752ca8fb6b5f3a30e82ec07c750018a5a42abcebd5539808edabeb76ab791","sha512":"88db7401a0b1743e9a1aac560f8afc59d2ca2ac98c1400280861e580f04c39ffad5f06b45ed5b2963df527523c677289acbc2cc1e6e7b3337b57e0a48bd8c2a7","ssdeep":"768:gFVzhR5QvuqjJdYqjfAfISv98y9eyjEubtCV2I9mTTCxbRj7eyHfk:wzLuVJCUABH9jxtkmsywk","tlshash":"0c03f1fcc36c15bf84993572af5bfa701f09a28114eae53be4b0b1e2769534a39d0606","first_seen":"2025-08-06T15:05:47.187399Z","last_seen":"2026-03-06T11:21:27.876172Z","times_seen":4,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Chakra+Petch:ital,wght@0,300;0,400;0,500;0,600;0,700;1,300;1,400;1,500;1,600;1,700\u0026family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026family=Raleway:ital,wght@0,100..900;1,100..900\u0026family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:38.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=Chakra+Petch:ital,wght@0,300;0,400;0,500;0,600;0,700;1,300;1,400;1,500;1,600;1,700\u0026family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026family=Raleway:ital,wght@0,100..900;1,100..900\u0026family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 05 Jan 2026 09:03:38 GMT\r\ndate: Mon, 05 Jan 2026 09:03:38 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":108601,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"6441dfdab53321712c65b9d6f48cd782","sha1":"51f69fed67d68f4a55dccd0e4c397accbe34be36","sha256":"ff2297c76e91eca669fd415e10061943f1ee829b3c58bb3aebf3ada8b52d3f39","sha512":"eb73c956e95c58a9536f555cc2f27fd333265d54b43c4d38899b5ed1afc0990bfed527d190dda446dd38907ae4ff1ebba5df8c25b44caae824d4f3c4d023aee6","ssdeep":"768:CEA3mkLDcDaDvDcDzBDFKDeDOD14KF4zLFa+OgN7wNzaFLXnnGE3GzhFUQgx8uBx:z5YRdvI0rAwyl","tlshash":"f6b31ea1042b9040eb835cd223cf7e36fe0ea2547051d079abfd5a9baddbc66536472c","first_seen":"2026-01-05T09:04:08.793141Z","last_seen":"2026-01-05T09:04:08.793141Z","times_seen":1,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":112,"dns":3,"connect":21,"send":0,"wait":27,"receive":0,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/3sqXnbK/bg-calc.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.6","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:38.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Dec 2025 07:17:47 GMT","end":"Mon, 16 Mar 2026 07:17:46 GMT"},"fingerprint":{"sha1":"DD:3D:A5:50:70:7F:39:42:46:31:C9:98:9F:15:65:82:62:1B:CB:64","sha256":"F9:9D:18:4C:82:20:26:63:14:76:0A:30:CD:96:1F:CE:F9:77:EB:76:34:EC:DF:EE:6E:54:50:88:39:05:C5:C2"}}},"request":{"raw":"GET /3sqXnbK/bg-calc.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 09:03:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 130101\r\nlast-modified: Thu, 15 Aug 2024 11:13:13 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":130101,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 586 x 661, 8-bit/color RGBA, non-interlaced","md5":"d9bdf81e9c5b00ffe6e6144b6302e448","sha1":"df7176f7191af5f3fa5cb866b09efbf8b83e227a","sha256":"d6ccd4b98f2093c1844d41b84c9f0f657a2c5ef8942e493274fff6bcf2003bb0","sha512":"30f5443cb81260fe7ebf594b4f1332fd630472937d64f122a6eccd3d32a19f16613b2f1d3eb8136ad42147b2fdfa7500c54edc7a3d0c2aef983a400d26e2f637","ssdeep":"3072:FeXBHk34wZKJWRWHG0jtZxSRwOrRgE6AEJ/03hnIRKN:FeEZzRWkmOEAE50xIw","tlshash":"c1d30249728540abc4e955bfa76e20320328c527cd4ae92ce4efcff74d11251ea6cdad","first_seen":"2025-08-06T15:05:47.152466Z","last_seen":"2026-03-06T11:21:27.888453Z","times_seen":4,"resource_available":false,"data":null}},"time_used":604,"timings":{"blocked":267,"dns":47,"connect":25,"send":0,"wait":46,"receive":28,"ssl":155},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/js/jquery.js","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/js/jquery.js HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=2,i=?0\r\netag: W/\"6856ee27-15d9c\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NKPBqMwybiCdmwkgI5SY6SPof5KvT3RcmUO2zM2kMmoBgPMrJecrtY42EP%2BbokAhZ8xdfb1m8ObnJ%2BwbpGYFDq%2BD6tbY3HHo8W4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb4ce8656a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89500,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"7c14a783dfeb3d238ccd3edd840d82ee","sha1":"ad886e472b3557f3dc7dfa2bc43468ab8d1cef5b","sha256":"80f04717f32ea0320c5e8618fbacedd1fee3a8775ad8292140a6113551d4b5b0","sha512":"fa3e021ca60a9adbe570c6565c7370727904c4396c23a4c519daf258d05fae3e17bfb7607a0ab6dfe2b7150a4ec1b6a95e6d49675291be5f6a4e5679ad78d858","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vN:DIh8GgP3hujzwbhd3XvSiDQ47GK/","tlshash":"6f9309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:06:20Z","last_seen":"2026-06-13T17:13:17.713149Z","times_seen":19974,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/eth-p.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/eth-p.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 571\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-23b\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8lTwAxC5nSE5oGWkpK3LKGruaXT5QCyFauOmrfRSePWhbT8AyxOlsVS8XWAiyhOdX6VmhYe%2B%2FEgJdqoReqWUKhYuvTB%2FbbWqF4M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb4eeaf56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":571,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 12, 8-bit/color RGBA, non-interlaced","md5":"10a546071073f24c56aa99b3e23178b8","sha1":"7f2b3325a76afb3f632000980a2e3871fe211228","sha256":"919f3669126c48828bd03ec09fb982dc738ad3d2258018409586d2e1bad1d2ea","sha512":"db4b250111bdb6e4e1065fcd9ebcfb04224f9aae65a136ae1c7c6915103b0f57e3d7a63f0c4cdc3c3129e89447ff428d609440f9845f215363a5781889aba2f9","ssdeep":"","tlshash":"2df096e73b41513c431a96b18036bb78c97b392e130fc0aabe56d13367a31295430235","first_seen":"2025-08-06T15:05:47.19776Z","last_seen":"2026-01-05T09:04:08.795564Z","times_seen":3,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/slide13.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/slide13.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 3246\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-cae\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=REfvqMIW9dPUV3Yd8l1YyjXub4VLZO05O4JF2P0F3eNigcfIisT20SdYyLQd2%2BuJyDyReTCXuvoO2UyVpXX8h0rdN04rod4aLmU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb52eff56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3246,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 209 x 71, 8-bit/color RGBA, non-interlaced","md5":"49eb09159fbb0dce7cb2baf7fac37cf4","sha1":"fafaa037ca0c0df3ed4198e4bc5cd19999d567f6","sha256":"acdff1a992a34d766c69f4661dbe574304571d41a1f1fd60318663ca000087c8","sha512":"fb31cf3a353133440964e635920cca8a8bcb6046eed07cbf9ff8e03230848ae67baa99bdfa3582749a45b74bfbc6133bf8ff36e5ad8d08648509315a5cdee907","ssdeep":"","tlshash":"1a617fc15d74523ebc2e54607d301915290eb09c0a78835f7781bcf6b19725f1afb6d4","first_seen":"2025-08-06T15:05:47.194948Z","last_seen":"2026-03-06T11:21:27.760507Z","times_seen":4,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/chakrapetch/v13/cIflMapbsEk7TDLdtEz1BwkeQI51R5_F.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:39.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/chakrapetch/v13/cIflMapbsEk7TDLdtEz1BwkeQI51R5_F.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://citrixon.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 9968\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 31 Dec 2025 23:47:47 GMT\r\nexpires: Thu, 31 Dec 2026 23:47:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 378952\r\nlast-modified: Tue, 16 Sep 2025 13:25:59 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9968,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9968, version 1.0","md5":"27489a49946962e82703dd093454687e","sha1":"cd2df6837df3d88d34556a59a343df6737841e17","sha256":"a5888696e9eb1b4bbbecc8eb3922b8369f49d4bddb72263e033cbd17f399be76","sha512":"03f275513139cd8c50bd580207c7df2901189a6819831d32428d946b508a40c5f32f800617f33ed455d72b0120e0833ccfb6f5ca3085369f5b406c5f3b0e6502","ssdeep":"192:KQaReCGr+Te5/TrI8NwdzZbtsfjKBGZtGJgtskLTRdRHhi2iBqMA4LKoP3G2Z:DzCi8iTEgu5SbiGGaB7chJLKoP3r","tlshash":"5622bf71e8480b7cc54f3fb8ba9a4c8fb35fd413ad4b4c5030896eb05597e1b5a4a682","first_seen":"2025-04-26T08:41:49.515892Z","last_seen":"2026-06-13T14:53:38.614852Z","times_seen":1643,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":138,"dns":0,"connect":0,"send":0,"wait":75,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/css/ohsnap.css","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/css/ohsnap.css HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=2,i=?0\r\netag: W/\"6856ee27-4d5\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=23yx57TZyZ00hQAE9WYamPhlYoKALe%2BNAXznTXLx252gDrhpBBcSyYOLPvHbD%2FZvfYb%2F63aSg68axt%2BKe7TasFYOSrz3Uy34b3E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb4ce8356a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1237,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3372a21a46cd50aa5f6dbc45e6859720","sha1":"b39407b15cb228f420ddeaf6cedc05031140fdc3","sha256":"4bfdd9fb9e587fe7c1e974619f0620649a06834502694b7dd784860a57bef5ca","sha512":"244884dadc1fe4a486fe33f0c5349a71e13a2378ef27348c975c34d07bdf4cd045e56832e74550484170984ecbb43c137f753d3639c3c87ecee6cd9d4f420fac","ssdeep":"","tlshash":"bd216066a6730d02b701530d4749fa573b9a02a7c60edf65bf90970bdfc51b0d495a48","first_seen":"2025-08-06T15:05:47.220552Z","last_seen":"2026-01-05T09:04:08.798154Z","times_seen":3,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/eth.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/eth.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 754\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-2f2\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FC6CjOVzh9EnkGt%2BL5wXbT0hgtNJ5IZvy2U5jtqyM8foXFbkpYxMTWEW9n4dhX%2FuCrkgBXBKfbkaFUOaj2MPFWLUb5U%2BOURZ3Yw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb4eead56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":754,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"e8e17b94a2af1222e699b1d6a758c199","sha1":"2cdddf28f6af47fa8dcd29f9e7d979c64a676279","sha256":"11905afa4b342c15685d9df13c0ffe161e53f9955e44ff26b18ff255c2c8b3b4","sha512":"7166833d59aaf4a0f56e20f0dea24215233eca68f88a83a2da0cdf6243853a82663e95fa5511d5575cbf3bc9967142d0c8b48af315b6bb0d7131d65bb55fa9df","ssdeep":"","tlshash":"5c01b5c7a5c5096b672c16760a07e032cca9a84c2c48360ac86ece20169ad08e71c776","first_seen":"2025-08-06T15:05:47.222852Z","last_seen":"2026-01-05T09:04:08.799188Z","times_seen":3,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/usdt-p.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/usdt-p.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 487\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-1e7\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7d2Mxs77rBtImVRLywZ%2BcxGLniUmAZ%2FjK4OkNaU%2BeL5p4u9z%2FY1iKmKSqMw41A%2BWA77T8JL8BQgkYSx32rI6KW2sMvOLrJQUWws%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb4eeb956a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":487,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 33 x 12, 8-bit/color RGBA, non-interlaced","md5":"ac48ab1e427ca65915de24f09f0b8ca5","sha1":"75bf107e1854f595859485ec5a568adbf4546667","sha256":"09ab16afafe76d3f61bdda7b8a4c3b277d8907a4c11c4f2a1fd9ce1b7074be97","sha512":"fa8f31ac0e3c2799e15e05d57aed76d8fbf53ffb3e88369af8aa10aaed8ce1508250ed73b25fef905cb7ea179c4e1599e4782c29ad732ddaac4fd9c846894b0f","ssdeep":"","tlshash":"fef00ec72ba041eacb6f4c5853aa3f66b1d6903604141c8c34c1ac5cfe0259b24dd3b0","first_seen":"2025-08-06T15:05:47.203324Z","last_seen":"2026-01-05T09:04:08.800233Z","times_seen":3,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/link-t.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/link-t.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 1204\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-4b4\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jI9zixCQkVgH5LI9ll37F6vmc%2BDWrcCnpFwvqgvY05P0i6LReJ1bohxi%2BLNQAwmK0ry%2B66%2F9r3PTDa3AEs%2F0t9yDS7ZJakE%2Fyyo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb50ed256a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1204,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 45 x 46, 8-bit/color RGBA, non-interlaced","md5":"d1dda00f575291d970c78e0be9063b54","sha1":"2a0d2da8474e5228b542c548be182d8fdf490ef7","sha256":"f9a2c2863d3e43c1e57a701f0dbd34280ffc61475f7c3428d4f3f2c069aecb78","sha512":"27dd9dbf87346795efe7080dad044cf5990425468aa89532995e10a3614f465a4b47bd5cbd5e50b9b87c4e4fcdcfaa8973f01193eed86aef1cf6342c666ff0f1","ssdeep":"","tlshash":"e12187cc5d8a05749543935c04d799ad0a8339ab56e1ab2e311888eb9468a49be73364","first_seen":"2025-08-06T15:05:47.142438Z","last_seen":"2026-01-05T09:04:08.801091Z","times_seen":3,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/doge-t.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/doge-t.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 1057\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-421\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2oVQazppkmHJiVJXimTfQVRt3G1wJ6WQys2uY9Cvr1ycc3qUhrCh5%2FSELD58WrYzyFMus6jH0jdeMJcEO%2B%2BsasoqRLrumkpXEn4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb50ed456a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1057,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 45 x 46, 8-bit/color RGBA, non-interlaced","md5":"3a2eb58e34df3fe746701a73cd327487","sha1":"398ee5ee381543fd76f1a60c8533e915c0eceb0b","sha256":"fec0a9cd7f7c8b87f550c3b8665bc7a098a3b5c364277ab4afdb1adc76c111e0","sha512":"39ecc212fe75e5638488d09713f0299d0e890cb6577fa9182f2263e073d132bfb8542a5263827b27e9698e0143fd6cc39380ca0873534d23fd5e36f1ab05c7ad","ssdeep":"","tlshash":"dc11b9dc33954c77a8bf0e8c235212e6d127375c92c5dc19bd41b2e82c1c14e292c947","first_seen":"2025-08-06T15:05:47.259141Z","last_seen":"2026-01-05T09:04:08.802083Z","times_seen":3,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/slide3.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/slide3.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 3584\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-e00\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7JY4sa2vMsgolLiqcVclxm8OfE2rtKU3Wr%2BgHOY%2B1FN%2F11xHbGkD5cLkCvZ%2FH%2FB%2BWHdM3rnQimeXowxtiN%2FiV6wzGWwPejzqaY8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb50edd56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3584,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 185 x 71, 8-bit/color RGBA, non-interlaced","md5":"131ce2bc83db9b05ab0601775580f23c","sha1":"ed55798ae22ae38bbbeeaf8219d4ca44eb720f7b","sha256":"eefa7ad8df99f45febdf228419f7d38e22f9d21e6db021a286de72a085f70668","sha512":"8420f22e579dad4c6008d361cf746c05a83307a569a3ed69c6d5f114dbeb373ee8b33a6a1ad559f6d23ef4569e13c1923b64023bc324fc505eaa4f016b1f0d89","ssdeep":"","tlshash":"8c715cd27f2db1bf8e1099fc14bc91b70415208554f062c16878983d5a702d9d27cb68","first_seen":"2025-08-06T15:05:47.264509Z","last_seen":"2026-03-06T11:21:27.746338Z","times_seen":4,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:39.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://citrixon.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 02 Jan 2026 19:29:38 GMT\r\nexpires: Sat, 02 Jan 2027 19:29:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 221641\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-06-13T17:28:05.332178Z","times_seen":512100,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":117,"dns":0,"connect":0,"send":0,"wait":105,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/function2.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/function2.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 5765\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-1685\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IzAseuH802KIU0iClXXDWYM8SAtJmNEno7RACbE0IYmMS3iEMZ3WSTLrehhYjdjtzYgt9XbIKB%2BeP8s3FngfV%2Bnim8Sh1n3lHkI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb52f0756a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5765,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 94, 8-bit/color RGBA, non-interlaced","md5":"1cfde999590cbd42b0b0197ae58c8606","sha1":"5b3f381545cd40ad93e1d94bf501a03e18ec91bd","sha256":"1d4aa0d61f7101948031786d1aaaf497857ccb236d8ab139b290b1a89917e9f3","sha512":"06cf08368050f4144d857d4e84660118b16c3b4744c2fb6f113d3c1612d5ce5f318c497ea417b28990c7eaae2738c690e16184aff329706d01ceca30f38e3f6d","ssdeep":"96:IESmOmF5JVVm2cC1SicPMhnwh0cPfBMZrPbMP3DcaeJcJSuCuw1otjg0:PSmOm7JVv1omwJ3K5CTcJUFw1oJH","tlshash":"03c18f9e89590a2ce860d3cb5427a4ef5afdc05790188fd36670714e340af6fc0ae607","first_seen":"2025-08-06T15:05:47.215717Z","last_seen":"2026-03-06T11:21:27.741194Z","times_seen":4,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/chakrapetch/v13/cIf6MapbsEk7TDLdtEz1BwkWn6pg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:38.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/chakrapetch/v13/cIf6MapbsEk7TDLdtEz1BwkWn6pg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://citrixon.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 9756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 03 Jan 2026 10:41:58 GMT\r\nexpires: Sun, 03 Jan 2027 10:41:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 166901\r\nlast-modified: Tue, 16 Sep 2025 13:25:59 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9756, version 1.0","md5":"f34dba119079e4c75db2ce3eb7f8c727","sha1":"2d40e0a7b1162c1a3bbb5dd80453a1353d86ae04","sha256":"7d75be85dd1627e27ec151e9a3701e661bc4f8c2a93611bdd92f3a05d6bbd942","sha512":"87a7969cb3ce765da319f9ca5005e98a4b9ceae99d1f2897d0a57b565782fa413e821caf833db88b3d84c1e915be6feb6e2d42507045e419496bb2d52e576e45","ssdeep":"192:i+t1ET85FWci/v73ahD3xCor6HSj4IjLvc1+r3lVKJATSBba:HE8DM/v7u1Hr6H8Xkor3lVtOg","tlshash":"5812afccca5f179dcb94daf8d5b18f34512714879e0d0ba4195b9f508a90b804bad719","first_seen":"2025-04-26T08:41:49.513983Z","last_seen":"2026-06-13T14:53:38.732283Z","times_seen":2091,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":144,"dns":0,"connect":0,"send":0,"wait":83,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/chakrapetch/v13/cIflMapbsEk7TDLdtEz1BwkebIl1R5_F.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:39.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/chakrapetch/v13/cIflMapbsEk7TDLdtEz1BwkebIl1R5_F.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://citrixon.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 9956\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 01 Jan 2026 02:01:39 GMT\r\nexpires: Fri, 01 Jan 2027 02:01:39 GMT\r\ncache-control: public, max-age=31536000\r\nage: 370920\r\nlast-modified: Tue, 16 Sep 2025 13:25:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9956,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9956, version 1.0","md5":"5423161597dcdfab1f2f5a748a06685c","sha1":"fd6f87a550d7a981ca337094ee1dd3b1248195c7","sha256":"36ad966cb653de70ba37355c41003b02de8940b2df6cbcd46480a6ad8cadd65d","sha512":"558a0a6eea3a25e40d7a60e12d5323feb8912fd7a4daa8d50fcfaf2e242ac4b3d9e5c40e0e1bf096ee9a54a9f94e869b295573a11a737b317db6cc0c6817c912","ssdeep":"192:GGTEGG7rNpkIi/flq1q/ARqFcaDbxwOEu3WoL/ZGNPylMaj51eTlWUryjyV/vWeP:GYEZ7riI1BsFRHbbYd+MCsRrd/vBP7pF","tlshash":"6c22bfb1447a8a80cd27cbfba6e38505a1b0264c098d0cf4d5c7bdd31e27fade827595","first_seen":"2025-05-02T11:00:46.815622Z","last_seen":"2026-06-13T14:53:38.732692Z","times_seen":940,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":120,"dns":0,"connect":0,"send":0,"wait":106,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:39.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://citrixon.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20408\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 20:14:59 GMT\r\nexpires: Wed, 30 Dec 2026 20:14:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 478120\r\nlast-modified: Tue, 18 Nov 2025 19:00:14 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20408,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20408, version 1.0","md5":"e8730678d4610fa908d3cba1ef0b4ddf","sha1":"1efcbee909ce74bf04878d74867f12a1e41ae7a4","sha256":"e921785496ed2d98c2257c88a6f838afa6acbee05cb8467048501bfe2a301461","sha512":"d7c3f81ad11ac5b3e6f454fbbb9be0940b3e8da93cde0b80f9a91a8259966be466b4d6a0fd5527fcc6c8f218aad8ffd0124bb29dfa08f6ca658ce49fe9e37e6c","ssdeep":"384:D+h1xN53scre+kLtT5+wpcR98ffVvdSMyNaHAUvLFNPBtn2aotFn9mTCAKDi055c:Ss/XRT5+wpM98ffxd6uZZRXnemWDj5WL","tlshash":"fa92d1cdfc0e5797a8e14ee93c0a7a4dd76f438af366a94b25e66122e67a55c040320c","first_seen":"2025-01-09T02:30:28.977279Z","last_seen":"2026-06-13T16:51:35.18154Z","times_seen":58749,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:39.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://citrixon.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20408\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 20:14:59 GMT\r\nexpires: Wed, 30 Dec 2026 20:14:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 478120\r\nlast-modified: Tue, 18 Nov 2025 19:00:14 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20408,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20408, version 1.0","md5":"e8730678d4610fa908d3cba1ef0b4ddf","sha1":"1efcbee909ce74bf04878d74867f12a1e41ae7a4","sha256":"e921785496ed2d98c2257c88a6f838afa6acbee05cb8467048501bfe2a301461","sha512":"d7c3f81ad11ac5b3e6f454fbbb9be0940b3e8da93cde0b80f9a91a8259966be466b4d6a0fd5527fcc6c8f218aad8ffd0124bb29dfa08f6ca658ce49fe9e37e6c","ssdeep":"384:D+h1xN53scre+kLtT5+wpcR98ffVvdSMyNaHAUvLFNPBtn2aotFn9mTCAKDi055c:Ss/XRT5+wpM98ffxd6uZZRXnemWDj5WL","tlshash":"fa92d1cdfc0e5797a8e14ee93c0a7a4dd76f438af366a94b25e66122e67a55c040320c","first_seen":"2025-01-09T02:30:28.977279Z","last_seen":"2026-06-13T16:51:35.18154Z","times_seen":58749,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/burger-menu.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/burger-menu.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 181\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-b5\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NFvEqoE5ePpVhu7T%2F3RR5%2FdMPAaL27pETtEsrQI5ykrrbwrWzH0k6JFoHLNoLcGIJGL9JZQOeJqJLjzNKC8kLYQMdqXZUkyLNv4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb4de9256a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":181,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 15, 8-bit/color RGBA, non-interlaced","md5":"0a8ab6524d52e897a8038c831cff2e2f","sha1":"2cef072df1f6c0b952a97c72089d444a9ee1f2d7","sha256":"182284a82ab91c11fba9b3aa982f85450d3cce477e77c414f180fd120e7c5dca","sha512":"6722883607369c2ff37e9060ee249b69e36c4f219fad44e64402ed839c007cd6e8988b031ca6006fa2fa3d311ad21ddc8eaa2ef574781c6561efdf64416cafcc","ssdeep":"","tlshash":"93c0c0e205009c75992f89fa108f13f4ac331fda0441100849cae0393c0dcc0c1943c2","first_seen":"2025-06-01T13:01:52.416085Z","last_seen":"2026-05-03T17:56:57.801378Z","times_seen":74,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/pos-t.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/pos-t.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 5938\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-1732\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GmCT%2FusWOsuuq3nJnG8l3HM0ewQm5vaSNXV6nSrwIUbTSF3xoppbZDRWL8JGMmgpSibKUzZPUWb3oMQWoS9TIDJDN75Jb0tYZdA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb4fec056a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5938,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 159 x 45, 8-bit/color RGBA, non-interlaced","md5":"55cd12d9034674180c544620f687635f","sha1":"9ab647527d3b0ec511ad1aa0eb9396601d0d5a17","sha256":"bd6bd8c053a5ea9cd5d5588fc8946613079102f8d32d5c52c21e784e5147e120","sha512":"f758ae10b920e23d3f20b76b1d5a3ede8b789ca40c8b9fb9dc8cd72f12ce9a77399ee72938b1f2e498f9b70f3b47100bea047403726fabc332a5011871f9909f","ssdeep":"96:TSaUrGUHiq0cP9fMSUDuv45K//7Yv1XaqAYJ26XsK57xex6VptCRGRSQma:TSacp2cGSnvuKkZeYJ3Xj7cESQma","tlshash":"dac19d825ee848692dc05abc61932db4e8b5899217c2b1ff3268d2d471f3d5163cf747","first_seen":"2025-08-06T15:05:47.249881Z","last_seen":"2026-03-06T11:21:27.712497Z","times_seen":4,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/calendar.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/calendar.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 19955\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-4df3\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=grxlo7XDA2e2AS0703Mw1wRsWwV8kF5XgrRIDgSVsjp8r6S1ud8Z1o0t6K3LqeSvHi4F6RCvfcKGLLuWiq8kQFgxLkc9%2FDhOeKg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb53f1856a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19955,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 295 x 225, 8-bit/color RGBA, non-interlaced","md5":"e16be58d57cac368decaf03f117acf9c","sha1":"57e95ab64c80f7ffb9a502458013428708f37d95","sha256":"56d27c1c23d46c563d5b0d032be5f73fc77671bf7af3f10030b3015d74448e41","sha512":"b4d206987f755018feb077e13187beabfc502236f9c503e2ade51dcfa974dd708e71fe9f5583bbd037ecaa5bfe6281a9a8bce97dc446e758088d086360ef0260","ssdeep":"384:ROsFt7lDZ7t60oSyBiOOdfKdqOxQvA9HEJ85UcUbIUIYr:9/hDX6hvc1KdfQEHEydUblr","tlshash":"ba92e1d96fe3a8cc5d797afc80c0e106bb6116c158b587ecbab354464e87c8c5cb8785","first_seen":"2025-08-06T15:05:47.172479Z","last_seen":"2026-03-06T11:21:27.747648Z","times_seen":4,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/logo.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:39.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/logo.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4; countryData={\"country\":\"Norway\",\"country_code\":\"NO\"}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 4544\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=6,i=?0\r\netag: \"6856ee27-11c0\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 1\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rxt0%2F%2FYEhyKs75LJ2cSLiCzPy8lpp3xbHSRYmr6Fr%2FJt9DkVxMzKlhn%2BdNrVA42AcFdlhKKk9infwFf0GqVMAZWeXF0icZqMvAg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdc18a2156a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4544,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 54 x 55, 8-bit/color RGBA, non-interlaced","md5":"285a9dc981647b6b6abe771c6491b779","sha1":"70a5c3c5afcd866e98318cb6e2eb488d4d74e9a8","sha256":"ae447e2e55a8c903e11c8e3837f17f053ea37d396ed130ae115c96c4a5c75e2e","sha512":"92f46285a9557700d067f40b9e0a7c26c5818bacef647a213fdae06958b4fd9fe2b7912f09e50fa8786b55248d1e5e425bb67f305573c606e9f996f024f818e8","ssdeep":"96:pSRlTsie8CR20xh46dizDOu1j+p6U1vnjgIRjSKtUeK2N:pSR9s18RKh4z/p+nxUp2N","tlshash":"90917dc5518f2ce2bd1b0a02e09b421979ff16fad768081c7fea4f2048cebe32545543","first_seen":"2025-08-06T15:05:47.136875Z","last_seen":"2026-01-05T09:04:08.809159Z","times_seen":3,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/logo.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/logo.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 4544\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-11c0\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yKE8prDP6GM6dKt8KtirjGdMFLfhtf%2FnvsbxG%2FjSkK%2B75JyGoQy1GaC2q6gUfWv8ML8TYRPz7ZsC86op2RJhhIoFkEQQiURFRc4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb4de9056a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4544,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 54 x 55, 8-bit/color RGBA, non-interlaced","md5":"285a9dc981647b6b6abe771c6491b779","sha1":"70a5c3c5afcd866e98318cb6e2eb488d4d74e9a8","sha256":"ae447e2e55a8c903e11c8e3837f17f053ea37d396ed130ae115c96c4a5c75e2e","sha512":"92f46285a9557700d067f40b9e0a7c26c5818bacef647a213fdae06958b4fd9fe2b7912f09e50fa8786b55248d1e5e425bb67f305573c606e9f996f024f818e8","ssdeep":"96:pSRlTsie8CR20xh46dizDOu1j+p6U1vnjgIRjSKtUeK2N:pSR9s18RKh4z/p+nxUp2N","tlshash":"90917dc5518f2ce2bd1b0a02e09b421979ff16fad768081c7fea4f2048cebe32545543","first_seen":"2025-08-06T15:05:47.136875Z","last_seen":"2026-01-05T09:04:08.809159Z","times_seen":3,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/cubes1.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/cubes1.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 30638\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-77ae\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wLor22ZJzjs7fbKsPeuo4qftKo03eSghxI1zBc3wDlneE3grYuWEuovWvlN%2BsfiZT3uz7BpsSZgYrfxw6qKlPuw8GstUJ6nOXJs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb4de9c56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30638,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 588 x 643, 8-bit/color RGBA, non-interlaced","md5":"81c21010893427e9d4e82e8055a0380e","sha1":"6fca697540520b36785c12a0e029fe43a62457eb","sha256":"7e056b0f69b63d93bc0f3f2f6acb616ad0b0bf38bca05207ddea4a6d789b49a5","sha512":"9aeb23a168475c6f0325bbe363002efd3a4989026cc75eb601b7fe3a794dbac0137f5497981f2ea7347554cd2f8a2b4db6e3dbdfefa1bceabfc7ab9c2ca7ac98","ssdeep":"768:S0x2gheh3xt5ts4qzz5YGMZuafa13XqKRj5liWato:SIhQ3xtns46z5Y/atDTaS","tlshash":"6ad2d00df2027d54e9c169026ade4044397ba8934691e498c5feb03d7c121e4dbecfdb","first_seen":"2025-08-06T15:05:47.140159Z","last_seen":"2026-03-06T11:21:27.839486Z","times_seen":4,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/btc-p.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/btc-p.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 505\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-1f9\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y0%2BM3cC4%2FwBfvyBGSzHegcZfO1ngOUv%2BuNFAUVWkIiHsGNkJKDzgFbXDwaMew5uBVZK3Lyy5XnjUU%2Bg6UzB8vaSpcg7zJXwQ4C8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb4eeaa56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":505,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 35 x 12, 8-bit/color RGBA, non-interlaced","md5":"2ef6c3381126151c628d8e001aca0284","sha1":"4da9e9852236498badd3da28a28b069cb2b64423","sha256":"28cd121905fff252ca299fadf5790c0584cebc55863d6433b117ee598384e671","sha512":"c505d904d9a55af22a57e3801cd0562f46f05c9295364568728faed32231fd9c512fc939c5a8b74b68469bdb9bb5add4a969c5607602410b3ed1ab1a25de6ef3","ssdeep":"","tlshash":"ecf00ecb838aacbbc40f122167eb39c8046a0935026382007e923a92b5449ed85b6a93","first_seen":"2025-08-06T15:05:47.158402Z","last_seen":"2026-01-05T09:04:08.811453Z","times_seen":3,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/neg-t.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/neg-t.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 6447\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-192f\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cyYRjcumhMD4pFKgh%2F40SZ6FXvFTBoZ869fWExjU0YEfjeDrzRsFaEbZ7jS9Pxltb6IKab9Lw1dkmvR1vWfN8SL3l0FCE%2FEaXqU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb4fec756a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6447,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 139 x 46, 8-bit/color RGBA, non-interlaced","md5":"a0977bd563f6c3d2ac5eadddf1ae741c","sha1":"f4a98737a04fe0d08c441003b0102a1f6cd25489","sha256":"85efbdd0bfa4d1d92bf75b0ed47e5627caa9281a74add34bb9429cceeda1a566","sha512":"5c8ac64e4d25bc2474fd2b8401022373cee4375c22bd2feda5c2e3c9df154912a285ff57c370eaf381e19b38d004af133a73b4f1103579a67dc6c603df40dfd4","ssdeep":"192:CSZYbcEwk+oy4HO5F/9PZKrbwuIsgpY3dgozXC5xEzm7+:dZYblwtoy8Oj9i3dC5xEzma","tlshash":"67d19e86416b685f5e647f3bfd6b8b8bdd8603be0814f37a2a321b74345ec290460137","first_seen":"2025-08-06T15:05:47.24292Z","last_seen":"2026-03-06T11:21:27.72388Z","times_seen":4,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/slide8.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/slide8.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 3272\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-cc8\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FlhgsWnLeOI%2F3HAh2KumQyvUZkqr09mb6qaNVcsq0fI2wkCnZFng6c%2FuiN%2FvAyU%2B2Z08%2FANwvQPJw5W%2FM%2FZVpnt%2B6kccGjwf0f8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb51eea56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3272,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 223 x 71, 8-bit/color RGBA, non-interlaced","md5":"e7833198973b91c5b64d6c150153dbef","sha1":"f513867c8240ecc6d0cb13402339adf4418ebfab","sha256":"39524eeeabc2797c7b774597b335c38ec5a59bb0f01fb0b232c34f967a50d799","sha512":"98daba037853d3d56ae1f833629cc3c0e8dbbac9807860059cd44e6692d7566b3b5633c67b6bcc68d83aa6419169f88e93fba143b208176cb0477cf60dc7e109","ssdeep":"","tlshash":"a3615cc01e0a5828fe640313155587e8933f2aefafd3a72600229827899ff880361dd4","first_seen":"2025-08-06T15:05:47.205574Z","last_seen":"2026-03-06T11:21:27.809794Z","times_seen":4,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/KL0f3Ws/bg-adv.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.6","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:38.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Dec 2025 07:17:47 GMT","end":"Mon, 16 Mar 2026 07:17:46 GMT"},"fingerprint":{"sha1":"DD:3D:A5:50:70:7F:39:42:46:31:C9:98:9F:15:65:82:62:1B:CB:64","sha256":"F9:9D:18:4C:82:20:26:63:14:76:0A:30:CD:96:1F:CE:F9:77:EB:76:34:EC:DF:EE:6E:54:50:88:39:05:C5:C2"}}},"request":{"raw":"GET /KL0f3Ws/bg-adv.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 09:03:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 71195\r\nlast-modified: Wed, 14 Aug 2024 12:21:07 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":71195,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 446 x 245, 8-bit/color RGBA, non-interlaced","md5":"29ddd0fbd2386f1f1ec97cf58164b012","sha1":"b550ebbd8117f01d4ea45337127bae4e5aef4ecd","sha256":"2ba09146a36a87d426c99c7960ff52ea77cb63a093021522518c6cec52b044e0","sha512":"6b0df05043d8288f4a5ea93a5902b4b3b4c5f960586da9aec1047511cfef5a263657a896183ab3b0ef9a19d71fc9185a973a73211c762503000b85e8c817fdce","ssdeep":"1536:9odBqyrUi0zcuAZs86aKqgaoZpma9Ba12WyK9nza4/:9gqyf0z18lhKqBonmjwWLzj/","tlshash":"0563029ee288a22ceb68a55fddda48f0473fcfdd7c419b432e8147b5a41261d28f0d58","first_seen":"2025-08-06T15:05:47.230851Z","last_seen":"2026-03-06T11:21:27.765501Z","times_seen":4,"resource_available":false,"data":null}},"time_used":585,"timings":{"blocked":267,"dns":55,"connect":25,"send":0,"wait":27,"receive":31,"ssl":154},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/chakrapetch/v13/cIflMapbsEk7TDLdtEz1BwkeJI91R5_F.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:38.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/chakrapetch/v13/cIflMapbsEk7TDLdtEz1BwkeJI91R5_F.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://citrixon.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 9900\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 03 Jan 2026 10:57:55 GMT\r\nexpires: Sun, 03 Jan 2027 10:57:55 GMT\r\ncache-control: public, max-age=31536000\r\nage: 165944\r\nlast-modified: Tue, 16 Sep 2025 13:25:59 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9900,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9900, version 1.0","md5":"56706b63a0f0391ea247202feebe2a68","sha1":"d09f6c283158a5c34a1a0fb3f1f2149989f05956","sha256":"ce5095dc1cb200aaa939e38067a0677018d10e9f26ec38cdcf1557ac524fc775","sha512":"b15d8da95c966ea4751ce32272f0dbb88c730994096cb7e1a2a5386942529e63c38ac0eba17dc4321efaf637b9b1a4b1bf9c75988e7b0ac0040b3a5bfa793774","ssdeep":"192:3jKminRc+/sXhY52YXvSTChIrFNmg8aa9FrQUJuE4MhlmY1A4NRX:3jFinGRhY52Yz4F7a9FdiY2kB","tlshash":"eb12b03042bd76a1f6bfedf611a732371007a05102a669379faf132d5e7aba01c4165b","first_seen":"2025-04-26T08:41:49.507205Z","last_seen":"2026-06-13T14:53:38.70645Z","times_seen":2070,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":89,"receive":1,"ssl":197},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:38.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://citrixon.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 19:22:36 GMT\r\nexpires: Wed, 30 Dec 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 481263\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-13T17:30:15.594017Z","times_seen":880480,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":1,"connect":33,"send":0,"wait":24,"receive":30,"ssl":155},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:39.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://citrixon.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7748\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 31 Dec 2025 20:59:17 GMT\r\nexpires: Thu, 31 Dec 2026 20:59:17 GMT\r\ncache-control: public, max-age=31536000\r\nage: 389062\r\nlast-modified: Mon, 15 Sep 2025 16:36:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7748, version 1.0","md5":"a09f2fccfee35b7247b08a1a266f0328","sha1":"0da2d17e738f46d2a09e6fb7969da451719a9820","sha256":"cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446","sha512":"5e3f9a298003b84250ec6801e08ad2a4ff8845d4c3e13ea61bec37da24d26ede13b436257882124cc0c27e9a323ba92e7d23c6ad3f48a7b75535f5ed98813a0e","ssdeep":"96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7","tlshash":"f3f19de65d1e5e8980f0102f6f6efce767950d88141dadf9a9e72f884c6ba1b04c90cd","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-06-13T17:30:15.612603Z","times_seen":244969,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":132,"dns":0,"connect":0,"send":0,"wait":69,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citrixon.com/storage/img/cache/eth-t.png","fqdn":"citrixon.com","domain":"citrixon.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citrixon.com/","date":"2026-01-05T09:03:37.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citrixon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:46:16 GMT","end":"Tue, 31 Mar 2026 14:44:40 GMT"},"fingerprint":{"sha1":"9E:72:05:5A:31:12:22:4D:E9:CD:6C:48:B7:5F:A1:47:85:F4:A6:0C","sha256":"19:C7:A6:34:DA:5F:9B:C4:E2:8C:4D:7D:11:D9:C2:DB:A3:73:2B:C8:34:84:27:11:71:48:5A:0D:7A:70:DD:2B"}}},"request":{"raw":"GET /storage/img/cache/eth-t.png HTTP/1.1\r\nHost: citrixon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://citrixon.com/\r\nCookie: PHPSESSID=824a316086660ca01dbcfa0d7ea460c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 09:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 1262\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Jun 2025 17:38:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6856ee27-4ee\"\r\nexpires: Tue, 06 Jan 2026 09:03:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KTtM84VleC3ZwDsQm7NHrohIUZaq4axsndQbcvvQLe38%2F5gVTU1z%2F5%2BMSZaHrtiaUa1oifKWWY%2B9bo1xeXpHHh2z7UZB2lUGMOg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b91cdb4fec456a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1262,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 45 x 45, 8-bit/color RGBA, non-interlaced","md5":"41eb3f4f2bcba4d8996bf2ec6c8867a5","sha1":"9741ede7c04c90cc57dc10519748dc73ec808b8e","sha256":"6e0cbada9cc2b8d94b0de6e5b8185201a1cdd963721fb85c64dbaa5c49e48e98","sha512":"62dd813abc907948e0733dfdb69b06e9a856871a884270b2aba5171b47c8892b0bb502cb45af0d870eda1c878bd46adb54f1e7ad4b976544a9a18f71c2be7fad","ssdeep":"","tlshash":"fe21ea836b1704aa845e281fe3c7061094466d38bb23582d8c812333757cc54cdcc94d","first_seen":"2025-08-06T15:05:47.209622Z","last_seen":"2026-01-05T09:04:08.817277Z","times_seen":3,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"citrixon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}