{"report_id":"972b6891-fb6b-4f06-889c-b266e4c98ddf","version":0,"status":"done","tags":[],"date":"2026-07-28T02:28:25Z","url":{"schema":"http","addr":"croxy.com","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"104.21.22.88","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"croxy.com/","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"title":"Croxy - Premium Residential Proxy \u0026 IP Solutions","dom":{"size":151211,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (45648)","md5":"a9e987a3bcbd6e4ce465e5933e9d0ff4","sha1":"2ec58443c6fbc3c2fe02c9263c1ed71c35f02e98","sha256":"3a846670af26841dcc5468e30426711b8a1dd0bac30dcccf697584ec3ae2b8ca","sha512":"c0e6d1867e371c1207557a8f0fba991212513ee0669bff142134002f4ffd5984eff544de9943abaa834433585a8382700d8e5683244b0921925ca75fc887cc0c","ssdeep":"3072:FAstvToNXhFhxhEhYh4bVn0RrfTELUjsPadaID0h0i0z0t0Z09af7ewEBG09pQRg:2stb66Vn0RrfoladIp","tlshash":"09e31a31b145b81253338fc4b1b167096d93f30bda1adcd8abd811759fc2ee2bda8895","dom_hash":"domhash11258567a09fdb166c7aeb174974b649","first_seen":"2026-07-28T02:33:04.962741Z","last_seen":"2026-07-28T02:33:04.962741Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"croxy.com","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"104.21.22.88","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-01T02:28:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"service.croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"media.croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"analytics.croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"media.croxy.com","ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2007-09-16","domain_rank":0,"first_seen":"2026-07-28T02:27:08.044769Z","last_seen":"2026-07-28T02:27:08.044769Z","alert_count":1,"request_count":1,"received_data":5196,"sent_data":600,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"analytics.croxy.com","ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2007-09-16","domain_rank":0,"first_seen":"2026-07-28T02:27:08.046218Z","last_seen":"2026-07-28T02:27:08.046218Z","alert_count":1,"request_count":1,"received_data":902,"sent_data":725,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-07-26T22:51:17.688286Z","alert_count":0,"request_count":1,"received_data":538,"sent_data":944,"comment":"","tags":null,"fingerprints":null},{"fqdn":"croxy.com","ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2007-09-16","domain_rank":4617285,"first_seen":"2026-07-09T11:59:43.625396Z","last_seen":"2026-07-28T02:27:08.818981Z","alert_count":102,"request_count":102,"received_data":5486665,"sent_data":50027,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]}]},{"fqdn":"service.croxy.com","ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":28,"request_count":29,"received_data":2065456,"sent_data":38270,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-07-26T22:31:28.839046Z","alert_count":0,"request_count":1,"received_data":442473,"sent_data":489,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"croxy.com/web-assets/jTwhxdu3.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0becccac6a372cb945e4a7a2809b1d5","sha1":"e1e69b2a7735b8a0e39f42d7efeb59fc95d01b97","sha256":"7de5d9991231e061d2f15f17842197ecd45e6349f27da1aa6ed55b912c1a3be6","sha512":"54d5436eefaea30cc13cfc881c60d7e6499c04def7c8ccc5a39bd5ffacc45ad51b4827484f464f785f70d485a449301b2c5ee9a16fb7c502327d22b818ca2ab2","ssdeep":"","tlshash":"8b11129425017076a1ab140e7860e68572120c6d2672f6c0f23e8e761a64ecf646fbbb","size":889,"data":"","first_seen":"2026-07-23T04:00:02.336304Z","last_seen":"2026-07-28T02:33:05.095456Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/D4cBFKBk.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4bca1361e100f613a25d5f141c89f869","sha1":"14100da27b6377b41a2573e97d4e7cfea44b7122","sha256":"e5f05edfc5ecc92bb3fe80b73774e75e07e6e754ec552c556eaaec71e005611b","sha512":"cd0a1852982a16b24119b92d5861d60af4f6157be2b3eec8c6b1a7e0e781c1b69a19ac259908d77fd6fde94558dc525937316742eb29c80d9b2f6497599baa7f","ssdeep":"","tlshash":"29b0129630b054f21f184ceb5f359b000e9900b523c39a80214a061706a688a022e945","size":104,"data":"","first_seen":"2026-07-28T02:31:43.325728Z","last_seen":"2026-07-28T02:33:05.118551Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/vite/assets/vue-dompurify-html-CEAHYyWB.js","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f08d3ee6338722a1dba820e7a9cb5e3d","sha1":"f829a37541edf9bac0f6e0bce1b53fbd47f337a8","sha256":"129158fd07f088317b92c1505a0e06dc97df9a1aaa566370b174f1e0bf8f3107","sha512":"b05dcd95357db2742a50fd90d55bca639800e221ffe5b776694907001f8eab41d14f892b092cea5aa58f0dc0f35981bb5203335aaa8f532311ce8990133cb20a","ssdeep":"1536:Dbc2MBsGEr8njr9Ih8zh5/Ji2zUhsrW7DDE52FfGyJjQzh9QWJRgSQGuHROZ8PKz:E2MqNqP93h5w6rWrE52FHQzcJW","tlshash":"b6d37c58a8d9543503e234ca28bbdf49a53e5529a40c8854faccddfa2c76669307ff3c","size":133850,"data":"","first_seen":"2025-06-07T12:35:30.073696Z","last_seen":"2026-07-29T19:00:53.082009Z","times_seen":773,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/vite/assets/DashboardIcon-CsDNL3eg.js","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3685120743b3640f975898bcc0c9283","sha1":"c699374144f01d62c93e84767ac331900cfe0c64","sha256":"0bc24f4e3f4c26767bc271efdb00621f835bacfa27d8ae1326e5b001cc687efb","sha512":"40a83855e05b4a00d9b4bef118ee111a8e3e63974f4b547538e8b8d0ff50ac5eca0c1664ffd1b2ef19cb27162ce75736e45905d42d405b8707bfcf6de0f21558","ssdeep":"3072:mwhSWQmJ+c285DuFkIVlN7j8ZC22kP1uWcLMNCVYL1clNOSrQHGC8S8GFRNqCFZF:1h3QmJ+c2SCkIVlNP8ZuktuSNDGQ","tlshash":"091407f463ac72ad32478b99da375024e72f58b5356dd1a0983feaf464a35c0d32bc24","size":206483,"data":"","first_seen":"2026-04-23T05:27:23.163615Z","last_seen":"2026-07-28T03:12:55.316858Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/widget?encrypted_request=eyJrZXkiOiJlWFNPVjgwZWxDRjg1TUhRaVk1NHdZWnN3TmlrSklKMUI1ZXdlWURyWGFwaEtrRDhvVTUwd0hxamVQdGRReGluSk5uZWtNNF84VndfX3BuWGFwQjhaNG9pNV9fRXdwcThvU0Z1VklEZENPcWs1VkhjWTVzV3FVdk5fOEs4WXJJNVotWnpaTjU4cVY2cVhKTlNPczJzTlJncS05QlpFamp0Z09CcjQ5Q1ZUT01URExxZ2hLZmpKNGstck5OOURsU0VwRnd0aklGbUtETzZQcDhOV1ctckU0eFdlS2VGUTZCYVBUV1h3MkNzQmJoY1gxb0Q2cldXYXFtUXFOTGV3NkEwUDVseFRyUlpBQTZCNGNHeS1ReEJmWXAtUmQ2bjdTRUJNaDluVGVMVjlLdjZKenJJdHF4SXMzSFhUUFR2QlVTRm5Mazdkdng5MHJpY1ZyVlh2V282VVEiLCJpdiI6Iml0WEExVVRfUUp2QURYb3MiLCJkYXRhIjoiWDhNWXFOQUJrdFBpZmRqak84RTJHaERBVVdWVFlKSTYzVWFzeE9fbVJVRTlIYXQ0QUpJVE9JUkJ1bzJ1RVNORy1DZmcwOGRWeGl1VC1Jalo0ZS1OUVhzSVNQY3E3VjAxZXpsT3E4QmpwaGtMNkZSazBMSGJ2QnpwSFYxM3FPQXpzNHpZdThTc2RQRkpGS3pRdVJxdjZHeGxrV0RwTmFqT2lSTElwbjlrbjA5U1ZBYU1YQSJ9#/","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0e4728eaead9cf935c46f88c88e415b6","sha1":"bbc543aec1a679403e43efa034826de1a146ffbe","sha256":"470cb91a9b7e7c9c0f756cf1c326c26b756027cffb0693ffd518123862d640d5","sha512":"0456a16d0d71fe4ea83bb47ffc437f0d2b966ea35fa37ac60ac797e2d53a88c303cfd458d3d916720c39eb1d184573dca088c7b3331e97146fea10dbd939d317","ssdeep":"","tlshash":"89c080c4a0d62d305702751559ef35d4b038902770481b429ce4dd892d130f09237ddc","size":167,"data":"","first_seen":"2024-10-25T14:46:11.990984Z","last_seen":"2026-08-01T12:37:45.271415Z","times_seen":853,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/BxwqsPLe.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f4e33ea1552ef8058f4cf8bc297de8e","sha1":"f376b622bde54ce994aca9dab2b1b1a27178b017","sha256":"905004ddb918f0fbf3ff1ac045a7637ab4b0aa1b75900408d7360f24c97d0463","sha512":"0d586e5ef81b75fde94fe39f7bde710e2b5572e2852d03fdad359d74ec5feb5a3a12573eb3e49420a2fac26526d7190414a4a9f9265f1b46bf898b4c896515ab","ssdeep":"","tlshash":"5ce0e5f75ea14529e007cdbec910f8c5151e299cdb04856066230240fed283bf8ef278","size":435,"data":"","first_seen":"2026-07-23T04:00:02.191654Z","last_seen":"2026-07-28T02:33:04.97749Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/MV9hPO5W.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"55cc40372fc7d638fa8cbb587af74939","sha1":"67e5eb1c59a62ef951d9fa1dbf40269421aaee27","sha256":"45bee8d6e9aa861139027416591f1a3ee73bcc46c5dba49d13879d0cce62ae6e","sha512":"7c3ce84247b600184e979356ac188148f22afc323f3caaf4763af99a5dceab0d711da5e49d5bbbd4d9646404e47273ac5738f2bbd72647267b9c45ce99a312e4","ssdeep":"","tlshash":"49b0124f047474b617054cc8771a5d10042c346837509bc020040d030a62487000e681","size":90,"data":"","first_seen":"2026-07-23T04:00:02.234958Z","last_seen":"2026-07-28T02:33:05.015827Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/Dxp79naF.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"933652e149c5828b0d64d9a714811835","sha1":"f35931b00c4ce8ed922d33762efafb6c8b8e3b4b","sha256":"42fb96aa85b21a2597f8c036fe0f5c775007a8a48067b104c686791b326903b4","sha512":"e36fb0babb1184b7c90ee4ba13276970679288c735da295930533ee5490e50c0681e1b374f32e1e9d1f35cddbc064344fca83ad0d908a2ee3ad4bd856c94d277","ssdeep":"","tlshash":"988153b4a67703dee37e509b80e1385c5aed36ed4b800940fbc939f89c95922570dce6","size":4032,"data":"","first_seen":"2026-07-28T02:31:43.249039Z","last_seen":"2026-07-28T02:33:05.086762Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/qzpJLEms.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"34281adcba5f6b2a1abca34ab02db642","sha1":"ce2852766b9a33ea2245b90fd3a7e99447e64cad","sha256":"fe604967feeee9922df6ed108397d2e8a2c34a0de4874010628002c609b3c9bc","sha512":"6df90bbba35938f9e25ee8f8ebffba7eda372dba486ca4c375caa76b1529c81b04fb295514155336e58370151539a0537421d4636313efacc3f156e1365859a5","ssdeep":"","tlshash":"6e71093e6c1bd0bd6b334c802508a649bc24774fe771983ff8d5492957c4959caa9724","size":3723,"data":"","first_seen":"2026-07-23T04:00:02.343292Z","last_seen":"2026-07-28T02:33:05.041402Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-17025120075","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a259a86e78af32536cc702f3722ac001","sha1":"9273d3de24a9932302dc760245bb14d88ae842ce","sha256":"97808fc055aa6d825c3d132777b135b17d26e7b83312151305897a7981d155d3","sha512":"f80a7da4b18d7383b76ee8eee6b07e860952f9f9cef4d9ebeb119832691c801d7ce0647e49055992b7480ca865e6c459f376536f7256671c73932e1d64e588c0","ssdeep":"6144:DvCz1mjGJaCQ+1nrAqzQFTcp8fjEAM3qk5ES9ZXbq:DvCpH9td/ZLq","tlshash":"c79409cdb3d670225392f478503f018ba57a29e2f448c899f189dce42e7469a8277f7d","size":441823,"data":"","first_seen":"2026-07-28T02:31:43.359441Z","last_seen":"2026-07-28T02:33:05.002444Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"058da15d03de2f5244bf7ed2928482f4","sha1":"783b21f9d83ba0239afe78e8d52742ecd889719f","sha256":"60c6939c884073ef464873e6c26c50d4d9bd9d7b8ea65613c7981a2fa40ab410","sha512":"2a2debf1998c2b4a25b0c5bd2c8dbb1c52d64055076dd915879ab762247ff3d1a8f08b8ecf275d836e5564b27378894592b5559d3f3d3b0688d47ac96ae823f1","ssdeep":"","tlshash":"f6f0dc28381d341a428580380b9fe614325b30881803c96e8a8fcc941d3df07001fddf","size":455,"data":"","first_seen":"2026-07-23T04:00:02.369247Z","last_seen":"2026-07-28T02:33:05.157114Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"483f9d755691b8448d096f632d2f0508","sha1":"f31b49fc833e3da3f94eb8c8f4037d90b5482fec","sha256":"0c7d0e4dd979cf11070d78fe7df4f3f74ea6601bae5a12be3a0d7527457adb9a","sha512":"2d64f8b1ae09a4924b6dfecd45570d8a4c9c20e092c71044f6e205b40a77e21d1c2127512d3482616e34f55b93a6d7f6865aefc1540cbee83a505dbf42a58ab6","ssdeep":"","tlshash":"8a4112a6c2656d9f1ea4564db05c3f0012c09f5a8dddbb52dfa0eb007dba2ce00b13ad","size":1975,"data":"","first_seen":"2026-07-23T04:00:02.370275Z","last_seen":"2026-07-28T02:33:05.158614Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/9hd6Ci7l.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"84e5c487bde2d485b7752596e6f1b0f6","sha1":"9bf3d8266c418b7aa612eacbd126256463040bd4","sha256":"6e0b83858a7b6ec5b02088e72b4406bb714cbf18f82c1bab29760f7a2c11ae08","sha512":"ab09d01b3a33a1ec8cea7e32b190e16c93a189a015c68b25ddad51d66949daface905973f766d97eac635d6f2f05d4c358cbe90ab5790cbef1976b777ed4bec2","ssdeep":"","tlshash":"3851b6c530aaa1978ff5d2e72426171049371908e87c73e995bc3e73234b68f13a1bb8","size":2865,"data":"","first_seen":"2026-07-28T02:31:43.2951Z","last_seen":"2026-07-28T02:33:05.146691Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/CnoLBF2t.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"72e35c2aca41ac50adcf04423cc27434","sha1":"1e70aeef012f433423c6d8c6474d83315dd0ad9c","sha256":"21b6948f456dc6e740bd4f8fc8ef8bfc775d77993802c45ba5500767d5c38331","sha512":"a128375053e5e4b685d42fe96c163a77a04135fa00e48f62f1291ce09b0d82cb21ef4af59544859a758e776ced84226d513c2f23f6bdadce412f8ca3b2960b6c","ssdeep":"","tlshash":"5c71c73ba95ad876d3328dc441448824de483393b2ff58a975ac4c22e39ec75e79ca35","size":3531,"data":"","first_seen":"2026-07-28T02:31:43.366209Z","last_seen":"2026-07-28T02:33:05.152439Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/Bcj180O2.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e79008f7f89988045f640ce161194f1","sha1":"9310118bc7455837daf5cad28d1686f756e9d1e6","sha256":"1cb0794f84ddfb82dd30fe8923c68355d03a0df32fb1dda8243f67ab993478a6","sha512":"4d2b684be69861387b9de9954c8a2b65acad72e5fe9b56e46d00550dfa610ef14cde3c5a28470c99b1f63019eb778aa25325b73844264b56701dc35ad285562c","ssdeep":"96:8XUnAfzemvH2GGzCVrbYB/cuNwss3AhVJO86h9Hrn910Is6:8EnAN2ItbYB0uiskAhKpnHr3r","tlshash":"e191c6cce058b53896afc40565583440e71a66ec9e5144b4b1fb3a3c2fe057cab8eb3c","size":4590,"data":"","first_seen":"2026-07-23T04:00:02.312823Z","last_seen":"2026-07-28T02:33:05.08832Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/vite/assets/MessageTypeHelper-BbUamdxK.js","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7a15a192c11a89f37a222a5ee609b29","sha1":"c340706fdaafb3ec11163928a5a8b451624ee9fb","sha256":"165c2c49e853fa4caf3397286993bb363a823693bd83c065f82346689d7097bb","sha512":"4f9a52bd389333cc01b7ef40a3cac3280620f835697b197bc5a8e0eea3c935565c8c3b835c6053033cd2aa76e20c697ffe8339b5865748d1d3b9aa7a4e88f295","ssdeep":"6144:hFytzTXVDZIrT3tBsQNu7psk67de0R4jLqQwql:hFCzTXVWBpN4pssjqMl","tlshash":"dd646bec62d130a0471204d6b14b2407f27e9c36626dc5e1e4aedc6538b8cd68afbf79","size":313444,"data":"","first_seen":"2026-07-23T04:00:02.241594Z","last_seen":"2026-07-28T03:12:55.264672Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/widget?encrypted_request=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#/","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"cada8fb3cc65a39eb36a4df1c90f2caf","sha1":"609ae148c4c2d63e321211f8091ec3f8e0350de9","sha256":"889322541533390498d984110d2c5183e30f68eadbdd3e26d49ff14ddcf0da68","sha512":"9b2cf6f4c703f718d9cef1fa878443517aee40771676b60ef560bfc74e96b94578c7ba9b07041d2716ce040a4c8d786ee32e31f881b9d80443d9a0671f86fa79","ssdeep":"","tlshash":"88c08cc4a0c32e001612646410af28e49034402674481b02dc94d8482e620b49237e98","size":138,"data":"","first_seen":"2023-05-02T22:44:01Z","last_seen":"2026-08-03T00:11:19.487619Z","times_seen":695,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/BYoU2SGp.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d631537aa50989d524bddc44ce2aa18","sha1":"42350b60f2b1bf4b1e8f284eabe818ed3531b1b8","sha256":"49fcd391e2c7204c283d99ee3068381239c9a61faf32cc43f2d8c8a23a66d9a5","sha512":"8973d887fdced274dc8296d9671552a10135cf6575dd08303cb7d1c3f6a5e29fc874b04a59734d1c94028d21882da87c8f4cba5ad890b7dbf8c59992a8c314b5","ssdeep":"","tlshash":"b7a024570074147413444cd44f304c350d0c4c74134001f00404014347d34c7150dc4f","size":80,"data":"","first_seen":"2026-07-23T04:00:02.293335Z","last_seen":"2026-07-28T02:33:05.110136Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/BXoBrJCK.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"74dd231979fc71701dc4a3a5009aed51","sha1":"351e40d038e472cf4160c3c23ec3b9feb73f4794","sha256":"b8c431449714a2a4e1177e6db95dcc9383b2c24bacdf6d48805c61e68d43bac4","sha512":"54567626c6197dd2e5263d1504e88c91e0544c495ae2eda0b1e9fc1746fc311da97e1bbfb782f80c43da6ebfe545b9ef56d80e10c0b222664a3b19bf0668518a","ssdeep":"","tlshash":"7c211a3b4da3441024ec4ffc3248aa900d744c0ea17e94c777d527dd8c8521089fbde1","size":1269,"data":"","first_seen":"2026-07-09T11:59:53.496994Z","last_seen":"2026-07-28T02:33:05.107854Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/vite/assets/sharedFrameEvents-8-u9VCWf.js","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"206dea6dc30e96a9600bdcda21a47210","sha1":"5be3f3d211b38d510c94a1d4ea3c007880e8725d","sha256":"2c8e93397b370de74427f2aacff2420a323b993ef5627453dfcb77af75f24f45","sha512":"7ab498194c23ac4e773e02cb8bf2f8cae84c8374642801eda40ec391e3f005c455c50012824c318200fd05fe0556831d4913502a4bcecae09d7b143e8bc16210","ssdeep":"","tlshash":"6f5186dbdc2694f347a308c706e191a2533ac94471bd87b075785c1e235ee8f468bf10","size":2770,"data":"","first_seen":"2026-07-23T04:00:02.131883Z","last_seen":"2026-07-28T03:12:55.215114Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/widget?encrypted_request=eyJrZXkiOiJlWFNPVjgwZWxDRjg1TUhRaVk1NHdZWnN3TmlrSklKMUI1ZXdlWURyWGFwaEtrRDhvVTUwd0hxamVQdGRReGluSk5uZWtNNF84VndfX3BuWGFwQjhaNG9pNV9fRXdwcThvU0Z1VklEZENPcWs1VkhjWTVzV3FVdk5fOEs4WXJJNVotWnpaTjU4cVY2cVhKTlNPczJzTlJncS05QlpFamp0Z09CcjQ5Q1ZUT01URExxZ2hLZmpKNGstck5OOURsU0VwRnd0aklGbUtETzZQcDhOV1ctckU0eFdlS2VGUTZCYVBUV1h3MkNzQmJoY1gxb0Q2cldXYXFtUXFOTGV3NkEwUDVseFRyUlpBQTZCNGNHeS1ReEJmWXAtUmQ2bjdTRUJNaDluVGVMVjlLdjZKenJJdHF4SXMzSFhUUFR2QlVTRm5Mazdkdng5MHJpY1ZyVlh2V282VVEiLCJpdiI6Iml0WEExVVRfUUp2QURYb3MiLCJkYXRhIjoiWDhNWXFOQUJrdFBpZmRqak84RTJHaERBVVdWVFlKSTYzVWFzeE9fbVJVRTlIYXQ0QUpJVE9JUkJ1bzJ1RVNORy1DZmcwOGRWeGl1VC1Jalo0ZS1OUVhzSVNQY3E3VjAxZXpsT3E4QmpwaGtMNkZSazBMSGJ2QnpwSFYxM3FPQXpzNHpZdThTc2RQRkpGS3pRdVJxdjZHeGxrV0RwTmFqT2lSTElwbjlrbjA5U1ZBYU1YQSJ9#/","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-08-03T16:44:02.501958Z","times_seen":7140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/abDZ-3PQ.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cedc2c16f60ec6c05efbea1aa9380873","sha1":"e2ce25d4b5a6b7fb617489806590bc4db68f2915","sha256":"bc7ce7ee35bdc2dc92df145436cf243ebde3e21780b9282f41e2dce4a0a89f84","sha512":"9af200a91eb40cc7726b2dac43a5e695a8e6fb03e23892d00d6a6c9c2d7bc9a68944acfc7617e26e85cce34218ba14df24c52bfed41cd8817767be356b029a94","ssdeep":"","tlshash":"31f0263230b81a63c06935df657ec3c175f221357d03914b803c3f185014b71016fda0","size":567,"data":"","first_seen":"2025-10-15T18:57:13.823416Z","last_seen":"2026-07-28T02:33:04.979666Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/Di8SmKQJ.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ecd092c173b8a581cf70bb928a4fa51","sha1":"8fd1dee916bc54c3f05c6d7cc6115cc5ec0d0e40","sha256":"a157a9f168692632de5195af65f8ba3c8777cd53c083e416fee769451ce0d671","sha512":"09fe8fd29c29cd6d76748c7e999f7f5bc1758d06b92a4162c44e4cd1762dbb1d2a0ce5825370c593f21a00c95a0c1492e635ecb764c12c90728f23066e7489fa","ssdeep":"","tlshash":"322165332d46eab6a60b0d486354196e0f14954b67d49675fdc80426f0c20e1d398d62","size":1174,"data":"","first_seen":"2026-07-09T11:59:53.538845Z","last_seen":"2026-07-28T02:33:05.139815Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/vite/assets/Home-jkI-JU6w.js","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3e454155840eb0560334d86283641d3","sha1":"bc83ed7737cf28214f1e960a2fd8d44e9b40af7f","sha256":"ef728243af5f30cafeaad9bf31d51b348c594e359bf1b3dbe838c2b87eb006bc","sha512":"2bed93942cd35ca125aaf6ea2c85e5d805503934acc4ad73ee368395bac479223878c2f7fbb3e8226d80c3ad8386bc5bfdcd563088241fe9638b108612ed8c4c","ssdeep":"192:6+Alr54cLQKe+rq6Qq9LirBsTw6r5vJVRwK57SPcJC4KSiEPyJJRW6NfqL+Wp64o:6+AZd7Jb1MBswklOK5WPcISigMJRWmS+","tlshash":"2c42e998f0538abcd2674060b249355093190f9fc9b2c075f5fd647a3b4adf85aab3d8","size":12226,"data":"","first_seen":"2026-07-23T04:00:02.147586Z","last_seen":"2026-07-28T03:12:55.257964Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/widget?encrypted_request=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#/","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9b24348d83d59147aff8f6ef5742123e","sha1":"5375d105c6da2aeb80ec38641fb634d498365f4c","sha256":"e3fcdcd8e9b92017b28b57c37535c38efdd3bdd65a0d9c8d69f56d1f10bb9d90","sha512":"cf69977ada2a1fd053eed7141aa4c454d27f5d360c11a05fb4ee02fbb19e5f6da7f7c1c8df5bd84e2932984d8d73c8e0cb4e2bb89112286e95de421436b7c2dd","ssdeep":"","tlshash":"2ac080ccf1d63e205e127494747f39e49034541670585b53ccd4d9452e130f54233e9c","size":168,"data":"","first_seen":"2025-08-23T06:46:16.763354Z","last_seen":"2026-07-30T05:40:38.668986Z","times_seen":650,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/CDHKXH3t.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"510b3ef6d73150c5c10079e9e38494fa","sha1":"a1bb4a5f16327ba87b5c19d3987eb2e6fec9605a","sha256":"8078d56653cfe837adb75c022219a9ef024d2ab7b4296d96e42784e73f67f25f","sha512":"456c292fe986a3ad6119d28707179f62d52a7158c963bd38a510577fc061002e39413c2079b266412b5b6a553a803650f471352dfec1452fb2fad4ab64ac08a5","ssdeep":"","tlshash":"3bd092a20fcfe6a0e0e4545ff8062760d909884e6370c28467fadee414449ab396d675","size":226,"data":"","first_seen":"2025-11-27T00:45:11.493215Z","last_seen":"2026-07-28T02:33:05.028515Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/vite/assets/constants-lVAyZKq6.js","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c23eb02c59275cf91b59cfd6bbcc315a","sha1":"6d75b11d40836ca533dd3c2230ebd9cc7e927c9c","sha256":"af3915fac7511beefcbb8960c26748c2ddf6a7e0f588e71261cf175455b3fb97","sha512":"94b2ab23459feb51256816f600cb4129bebf70026b8774057e059187650f92bcde7815f5d71b0be51ed10ee3bfc4663d8a9bd8c8485a7c5b3e6acb8b031bb6d5","ssdeep":"","tlshash":"f0c02b0b6db45e7556301b3fc3a2500b2e0ca08df1afdda8fc08d0e186a25c36638d24","size":157,"data":"","first_seen":"2024-10-25T14:46:11.754013Z","last_seen":"2026-08-02T07:30:10.544183Z","times_seen":1969,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/BSXe4l32.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a206f3b315a45cc964eec926955120ab","sha1":"86310dafbcf22e96d0cfc0fa60042b29d415d253","sha256":"0da65abac1ae2f71288047dfdef58f13c2d2950a9064de1ca3254fbc5c4bbf70","sha512":"ed063e5ba4acbfc184ed4ff8932ef652791adb9ae380c017b8d932cac8cf5177f9865a140797b1f5ad9c2cbad37a46b2167bb92196e4192d1b4d82979e1a7ebc","ssdeep":"","tlshash":"f2d095e85431cdb7010cc285953437184843f750c1df44f10b4142121d273cfb04dbc1","size":245,"data":"","first_seen":"2026-07-23T04:00:02.295517Z","last_seen":"2026-07-28T02:33:05.005855Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/ByW3sTpP.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"48dc250b6f6ea7e55b414dde85e86cbd","sha1":"edb08600b96bae4cbd34db9658ecc4d22bd7c049","sha256":"532f4c877956ef6699e63799ee0891661a5c15d8fc7c607ba97b3480ff18dd7b","sha512":"2590445b11aa8b7c628cd370547aeaf54ec0d35ed9e3f1f38e05acd885b0127c3a0452f59a63865c3522ecd3994796c4cf1b2800b425aa095e46f6c4992630a8","ssdeep":"96:9NipfWAD1cpSlFN7pHAHwIhuzU3cdLwCkjKLF5rl7R7+bQ47464c:9NiE01cSlFLgYVnqic","tlshash":"d0913f1dd8a9ca36da3699a6710e105471083ebbf280cdd7f0ea5d363789c38761b729","size":4500,"data":"","first_seen":"2026-07-23T04:00:02.320813Z","last_seen":"2026-07-28T02:33:05.12475Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/FAtJwDpZ.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a41751b5de2b2714aa199408714a8e1","sha1":"a782c49b231cde63bdb193a4c251652c50c3308c","sha256":"297245484ab4a21db88e9652df2935983a59c3fe273b36f6d8b33daba95a3cf7","sha512":"c6358117d27a8bb174617e93c09bcc237c106817f4c399848bdf75e0c1a5a59f05410ebcd8c80d55fe91012452ed978e1bc7d49b76d02d631aab521e3a4be38e","ssdeep":"","tlshash":"6bf09ecd74e3e6b0bb39e749ca36ca42903c1e82340de5d1f08a95453206492d33e75e","size":511,"data":"","first_seen":"2026-07-23T04:00:02.143191Z","last_seen":"2026-07-28T02:33:05.048037Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/XRnn7jL4.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d7fa383ef38765099d30d4e9c5ad7f4","sha1":"1c3d5d83fa8d492fd167dda8789ef5084bc52720","sha256":"a10a6b68e50d8a949e21f2356c405d857c9c3dfa61cd112f8088cdfd983b60ee","sha512":"47e2eef39899fc641540194bcee8a56105a93803ec622dba5f8c8b96448958aa655de7dafd15954d3114844087e9956158bf3b185938ec9e170293e7c78f955e","ssdeep":"","tlshash":"400186daf0f3839e866bbe59553620c5fc880d1811bc1c82fa27795365d4003c136eed","size":818,"data":"","first_seen":"2026-07-23T04:00:02.357938Z","last_seen":"2026-07-28T02:33:04.994278Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/widget?encrypted_request=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#/","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4fe51158f451d5bc35ea0d69585542c1","sha1":"0be26f402b32ce2dee90b4cd9b388fe0e913c630","sha256":"071727e5afe6230f3da2b62e7d3524b7d62cd2279f0f5b5f0523be42d5b8d119","sha512":"6c58c52c36291825a3b3f5ec7d29803dbc7759bf0b8cf66fe63f91416520fab51bd7a5b5a68e3f10480d862f9316429f0a59e1307e73212c6b9e5899f5566b7a","ssdeep":"","tlshash":"e8c08cc8b0c62f202606a82818af38e89025802674481b028cd4dc8b2f234f48337ed8","size":158,"data":"","first_seen":"2024-10-25T14:46:12.028978Z","last_seen":"2026-08-02T07:30:10.612571Z","times_seen":1475,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/CLsQTva9.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6cf58faae9c76b9b8f845822025d04e7","sha1":"d6bf0d7150111df0d9b00ebd2eca0c5d6afad299","sha256":"4ea2a7b8274ca5450d792b990aefc9a5d1dcde0490c213db9e2247cd6abf53dd","sha512":"3d306fd022e2c796e60d1ef70b022b4a17f58ff2846f12ab166fb91d19fe4b27e490427ae6b701aaabc18e55f906894d4571a26183af2991eb70c5a4d13ca2ae","ssdeep":"24576:yxPfcqa0uxfRda9QD/tpZdBpreAUSepWh6tzmXEV:cux5da9QlIzvV","tlshash":"a375f70d9bfcb26949ad329ab6484e3abedc117f779583524cd07fb930d0d74822a271","size":1653516,"data":"","first_seen":"2026-07-23T04:00:02.374331Z","last_seen":"2026-07-28T02:33:05.171082Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/vite/assets/utils.esm-CYAcZXQv.js","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"52ba66c6065a99f36b363e4ed6177437","sha1":"1788f694a0d456c5009016fc7c7d9d28005d8944","sha256":"b73079390db434108a03c6967f1b79ea62495b7523a1960205a576892b6a3214","sha512":"182465b8e1e029caecae7709d174b0bea8b95db40220101f7b501e582f4ab30eaa9e94293e36c38299e6a7e0706d37b56655a12339950448f7aff0b2d5778711","ssdeep":"1536:nxEfqWtLCR4hWK4Qr9ZEWf9uy12v7C9a9J9BiQM7pp+Nc5A0Ec5p:xiqHR4hWKHn/f9uy1229a9J9BBM7Z","tlshash":"5883e7c62191e5ae03b860a094b7130db1ec5948accadcdde5bcdcda7624c4971e3bdb","size":85023,"data":"","first_seen":"2025-12-04T21:59:09.654954Z","last_seen":"2026-07-28T03:12:55.25304Z","times_seen":438,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/vite/assets/module-D1JqFS8y.js","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fdd45a4cb2a775b4d6f08c42b854108","sha1":"2a52bf767d26a5d1c90f7015457272c8b2b8cffa","sha256":"7fefe15aebaa386a48b2b2a982ec35e0e0cf73b57d29d0882913c4106cf24682","sha512":"59163ff7e1f0944af95c9667228866180329e1fed961daf2207b26c0603f8b087d6e28648d0d3df08fc5e69602873559a1adf188816a2e94bbe6f73e181f1621","ssdeep":"192:A2AWbIuugGZvOlsKY/aGkoVj24tNs1FsyXuTp1GjGp+P:A25IXBWYvkotskyXuTXGjGp+P","tlshash":"da0254f50a6c76ed75474f69df33e9249b2fa8b539bca0e05a2fe5b890935c0c613410","size":8550,"data":"","first_seen":"2026-04-15T10:26:48.383152Z","last_seen":"2026-07-28T03:12:55.230818Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/vite/assets/_plugin-vue_export-helper-Db8HHeLd.js","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"416f6bcf079db15a045ea89c59aa6a71","sha1":"f9e5c7c6a4feeab446160677d35f2305301b8b89","sha256":"df90f06add304d15830d5f3ab775bfc5385b2fe8952bf449f366cd8de9fa7c53","sha512":"9ba476f96d5af2f2ee038df11cf18c668cf1a209e2ddd24bc360eefa96d38a200bff215eadac14d780650af74478d25c6602558817092f8dc524f37f5dbeebdd","ssdeep":"1536:s8VwGOdfa9ok5D0ZSIzx6ZKR8ng5xVOztZV1Zk62EkPl3EBpxEIFN/mTLW6:z6C9zs6Zxg5xUpZVnkN1Pl3q2YNy","tlshash":"6cf318e53081713653ea18e250bb1406b2296828384d84ecb57deddf3a7694950fffbe","size":172162,"data":"","first_seen":"2026-04-15T10:26:48.492931Z","last_seen":"2026-07-28T03:12:55.276265Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/CSX--SPV.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fee1860cb2cad622227dfa061ca4c2e6","sha1":"56602145f6635ccf52e0e44e635149a9dd2c5370","sha256":"7744002c494f2f89af363a42810027fef72aa7934aeed923f0d489a0112a1c69","sha512":"2ce0d94db00f5e549569af31c9957504420c90d894ebf7282f4f4d6dc302b985343b8bdd6e9aabd55d4f1819acef35c56d03b30d976040fcdb732cc35d3e9c6c","ssdeep":"","tlshash":"ac11089d7c5974f047b3499185110819562916a1693518d350dfbf6c2fefcf9634f81c","size":956,"data":"","first_seen":"2026-07-23T04:00:02.331963Z","last_seen":"2026-07-28T02:33:05.014659Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/CHQHCgSq.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5336f3725046f78d895470e0efbc0b2f","sha1":"eb7f8dd1f0357b9a4c04247db7c58d7df2767d52","sha256":"854d3d85736b5c908bf9a33c6b5d753bb0e3dbb35c05e7cbfe04a9cfc7b4fd98","sha512":"2667794db79f946918fbb333452dd9b00f2b7be5b3375ae4610a05b91dbf80a9f2092e2a6885a303c6cf72d150c95caf3d1e994796161e8af9f9e4b79fcf86d1","ssdeep":"192:4+Ss7OIYNCYfIhCdLRpn5kwib4hRkITs7OeXuuvP7O+j8L8V71Y:osaIYvIQJ5kDkAIoaefPa+jc8V7i","tlshash":"3d42c931fc2ee078e52716e96145c004bd356e4ff2856c75e4f9882e4353d24e7aaba4","size":12107,"data":"","first_seen":"2026-07-23T04:00:02.350043Z","last_seen":"2026-07-28T02:33:05.121807Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/DPeDxrDf.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"322d7c47afb434f6b71f3e4e0c54cf1a","sha1":"a7f081573639433ce9749e019193afd9e2fab50b","sha256":"2290035e4fd7bd7d67b0d26895af0ddd679bac3f3d849d0956ef0d38b97af097","sha512":"2ddbf2f4db7102a604256020c475da52b8686d53ae640947114f4bb9aad5a7a8ad1eedf6d92f643b81675f26c338bc9f332cba118317238ad941215cefe7b40a","ssdeep":"12288:vQuIYbSR+lIV/V8C22Yi2DA+MBQpM87Hmz:vQuIY+R+lIVt8C22Yi2s+MypM87HY","tlshash":"81d4fa96668864bdb6ba0ffd0737221131b04c617e4ac4b4f7267abb1f7e084d172b58","size":605404,"data":"","first_seen":"2026-07-23T04:00:02.187292Z","last_seen":"2026-07-28T02:33:05.061844Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/packs/js/sdk.js?v=1","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"447cd3922de264e35e44babdef27f20b","sha1":"5366ae24d05447777ae746842e5ea947c04bb67c","sha256":"69175bccb792d6f31c53fe5f72a5be001b158888226c6c35141a06355d03b3ff","sha512":"485075b40757e736f033a320ca14b8fcc22f4c2e4f7a517ea9c98e4b4cb6bbc3c61f3d77adbf2c988c9ebdf6a405af357e578c473d1fa7d6d23d8cd60656ea0a","ssdeep":"768:L2DI3D0h0i04Y0t0Z09af7evYvMBG0iKTpQRtAtjF060EfufYJurmhaEbxMzeJda:L6I3D0h0i0z0t0Z09af7evYvMBG0iKTc","tlshash":"e71319d25152397403a69a8b2aa7b30473388055f117c9e0facd987d2fc99cb6037fb5","size":42032,"data":"","first_seen":"2026-07-23T04:00:02.327201Z","last_seen":"2026-07-28T03:12:55.222633Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/vite/assets/widget-CvKkbkeK.js","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3330e58f62903dc2e75d95c3a66c85ac","sha1":"51beeafd0ef47d35d92702dd5ec70c0543efeaa7","sha256":"eb4364885bce8adb02ecaaf8e39f4e4b8981698eb37107b928637997ecb5b1ec","sha512":"697a2285e959d0b7e6ed396e57a945947ce2075f42c9bb3460dd916e372d0da0fb573947d12ab8f0fd1806d14d54a77b3c5c8b5b7288e8e15b8e5b5c38feb2d1","ssdeep":"1536:SH7lcPlJVaK/21UDmbvKoz7IzmfP9qBGK43UH1su78XBNdoDrYbdUyDjRt9L55Au:1abvjHU1sa8XBdRDVtx5iw","tlshash":"c9d34be0b0d3a47a47b794d0712a3000b339cf55aac9f850fa9cde92799948952b7ff4","size":138028,"data":"","first_seen":"2026-07-23T04:00:02.317143Z","last_seen":"2026-07-28T03:12:55.257367Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/CRJoaDWX.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dff88dc28e7085cb2b9a4e1ab579d383","sha1":"8b6fc5a95bacadbb4fc489c45f14bbbcf18e0d0b","sha256":"98ab0b81cd13a1c02ad1d01c5a7ac729b7de8e2ce42d986c200c9576c703e0d9","sha512":"cb39dfadb17729e392bab2160a1f19ee2fbc4007461c91df54169eebad97e6a88670dec5824fd93846d08839a549609fbd035a0ca327e9f4ce9aa23cb8faf85d","ssdeep":"","tlshash":"e1b0220208880a28223000220b80a220083220ac0faa82a0282c0e288b2a00a8f0a282","size":115,"data":"","first_seen":"2026-07-28T02:31:43.323387Z","last_seen":"2026-07-28T02:33:05.140702Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/OVkuNGXx.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03ef229cf6faf58fdad040f4e916be87","sha1":"6f897eba1579498a9a23c5e2ea0c863568a50ceb","sha256":"4d9973d3639273f1a670e8469795ac57c0cc2e0d3f5653efc22cc34d4b091a8b","sha512":"a0044f2d4592d000bffd356d713c323844eeebc5a481d19539865ca854bf90e7bcc9b2eb2936a69c68437a899c661e13ad41eb75b85d281b9f2823d5aa376c89","ssdeep":"384:B8YT8VY4cIoClkavs/tqRwtScNU+LTkPlW:B8Y4Vll1s/tqRwtSCU+olW","tlshash":"a1139971c7b64897103684cce6af961213c41ae996954f80b3adc7bb7fdc0a03c6e5e9","size":42581,"data":"","first_seen":"2026-07-28T02:31:43.289575Z","last_seen":"2026-07-28T02:33:04.99637Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/vite/assets/globalConfig-CXxIQGb7.js","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7715a583e3482c7a5cd067c6cda3586e","sha1":"a139a46237ddcec4b0101c9c29fe0c44622c6629","sha256":"c96b2402da0da5a0913afd4ac6022503559824fa3801ca6607625ca2ad78f9bb","sha512":"eff9c01b1cde4943856840c66dda1fa24d27abd9fd24b29969ecb0502f29a09bae29aa87ef0c2a8924a6c11b5d270b57767e9147121f0161afb593bb80684cd9","ssdeep":"1536:Tktm/6tegXw7MCob2N3SZMPZ8vX8Idwxf5tSswvgfD2:otmCtey2MCob2N3h8vX1jmfS","tlshash":"5783f6c570e67027877756e960bb000abb3d2a58344d9994f4ade9cb3e32c5d42b7f28","size":83402,"data":"","first_seen":"2026-04-15T10:26:48.288873Z","last_seen":"2026-07-28T03:12:55.235682Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/widget?encrypted_request=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#/","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"500f837d11f712465f14a48ff618dd89","sha1":"a91d88cddba7803f478a5affa1fe7b3d02ec16d3","sha256":"775aaf7edd5c8f81028974eac938b32dbc8dd32e86ed5482987305ec7eb4883d","sha512":"d898fe7a5927c58750e793dac84e9bf822ad3549e99dacfa8df203f37fe3090ec85dca257ab37ff27eaeb8f9a058b1dd08acb7d5ad652a5e92e5be2acd3131a6","ssdeep":"","tlshash":"63c08cc5a0ca6e001a02655610af28e8a024402a78885b528c94d8582e220b09233e98","size":145,"data":"","first_seen":"2024-10-25T14:46:12.102638Z","last_seen":"2026-08-02T07:30:10.604601Z","times_seen":1311,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/DVFi9Rwk.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"244b2c4cfa8d5f7a6896763531018b03","sha1":"ef2bdce5e64bb1ca2f6cadf22134dab5752a7fd6","sha256":"499f0fc9af2e8d3e99ca720a7bf05ebf546cea067960b14f59686b86904078a4","sha512":"3ce0485b1d860197200a29950aafcac8e0987d6565b92e2012cbb70bed2e86525a6a2c7aca99e0a0537ee1f725bc0a41c16bccccf8c02434d871e2ccd938fc54","ssdeep":"192:Qzlr0E2RBVi5tnUZFblk3lvzUtJ5LZpMfAd1lO:Qzlrb2PVi5tneFb+VvQtDZWmO","tlshash":"a4e10faab1c7b1494393e578442f404af67f5896685f596cf42ac6c3bc3484ec13bbb8","size":7141,"data":"","first_seen":"2026-07-23T04:00:02.341983Z","last_seen":"2026-07-28T02:33:05.136671Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/DNINoCox.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1b2b6978f1b1331df0ae584773bacc3","sha1":"44e89d63089b1b847dc2af626150f3cb08dd5102","sha256":"11af79967bde5e6de35d555d680dcc86f3b3e4b3b0d649cb88c85d0b37c07b7c","sha512":"ec6be615f70a042ac7c61e7d522b9908994d9e8b25fe2f65a8cd52e078aa81ab477407225e39c37ff107c32fc3c8517dfac0290f94cf75528572f6d2be03bc30","ssdeep":"384:+iApaHQY9IOaNS7jngSJpGyaXQiyW2Eg/DkMrMC6f7:+i8aHtXaNandpGyaX2h8","tlshash":"6b927c39fc1ef825a73f89c4a0895450ae1d596be39dd4f9e4d82c273391920f38bb25","size":20122,"data":"","first_seen":"2026-07-23T04:00:02.33493Z","last_seen":"2026-07-28T02:33:05.106398Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/DrHVSrkV.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8749f6b0cfe8ed4e62fe6059d4c70819","sha1":"af74c77ad5aa79ca257dd34cca9ac776985a5d01","sha256":"61da003367b62c29dcdd09e439a7769da8246e7a82c13ad9d711433c4615924f","sha512":"5efb96b40625206e506383e4b2cd348ef9a78134faff5275a7efa3ffa20b9e7a2b7c9dd84cea1d9e4eeb4f613feb195611be8faedb93809e01b5fdddcd8a2d01","ssdeep":"","tlshash":"8951c7333d43f9165f470e846591349d2d28754b76ea44bded80041ae5d4580ebf9da0","size":2765,"data":"","first_seen":"2026-07-09T11:59:53.537911Z","last_seen":"2026-07-28T02:33:05.107208Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/C8RAZiws.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d52d40299505808fdabb8a744052c713","sha1":"8c7f43b325262510a5336843634e0258df8412ea","sha256":"5d8c5726f4438fc5676590b65ea473715f8cc9c7c55d0fde54095a63b434d98a","sha512":"5937517c12e3240aea84b33d4c56aaf0c3ed9a7913371a3d16ce46c5a0b6dd16d18e732106b527236522452d25901cab20782f219558249cb40bc3ad41d98f5e","ssdeep":"","tlshash":"58314178d812d479e23248d9684a2828b61c3ee9f32048579efd4b343742d7da70eb66","size":1739,"data":"","first_seen":"2026-07-28T02:31:43.267877Z","last_seen":"2026-07-28T02:33:05.063191Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/vite/assets/index-DN3rM4CW.js","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e13d0b91f80710bb8c5a6ada5b874594","sha1":"3119aadbdc9007a5565e7856e8b882b2a2cfe4ff","sha256":"05d7fb1274805e9bad539d9eae2da84497f2f78d20db272560e59671ea62e365","sha512":"63dbae4114214ffce822575b65413e2ec74ccbacf355879ff238630ac56a4f93f851b7b6601166599d39cf460e2036d3321f478afb2551a8c61f897d3c8d858e","ssdeep":"","tlshash":"75110cc87af4a0f156570520c93a820af02ac5b498eaf370e0d4c1705cb6839ea1fb3a","size":886,"data":"","first_seen":"2024-12-30T08:55:18.480198Z","last_seen":"2026-08-02T07:30:10.57721Z","times_seen":1908,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/DlzAiHTl.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f7889e1a4edeeca1f5a9df3f31ab251","sha1":"0e134d3524af8b3ac06df060d41c51353f10cee9","sha256":"dbe8232cdf22c96ce6cdbdc415a8ebea127bb7beac7a524870e63258909fac8f","sha512":"a735a441c7924e1389712c8ac8012902eeeff703ef124546e4652bbb6e395116b89cdc3a7f8c5ce3bf8764f9943cafc4a7a083566ab773193ccd5942c7167c9e","ssdeep":"","tlshash":"853154d6e6ac8ae4c8c787f501291c05a69b3cbf70d9f09ce6930a1dfa932b08419325","size":1688,"data":"","first_seen":"2026-07-28T02:31:43.363425Z","last_seen":"2026-07-28T02:33:05.037495Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/CXHYiIjX.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"31616785d58856b2955df2b094a6bc9e","sha1":"6f037fe7336b323d5dd64d31cb9d115af1720350","sha256":"c8dab724c5f430f2889382e2a0b2541d7f852b161df282fcaa81b4b030286f7d","sha512":"bc2be2b72f8a64e8183ef1072eeedb1b91b7007aea2255db092a8a367e99d07bfbb48f6b262510c9b3329fa6affe96582c5e28be0bf65dfc45031c4a0f6e851a","ssdeep":"","tlshash":"f3f0dcc970a35031e32c48c980314de8672c069c34a882e8f346c9fa66238f6898ed3f","size":481,"data":"","first_seen":"2026-07-23T04:00:02.32256Z","last_seen":"2026-07-28T02:33:04.989304Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/DliB7-IL.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e19931f5091f0b290f32b35f3d9b89ff","sha1":"6cc0f1f9301b63af61fe7d0441b93f1b77265b65","sha256":"9bb966e50cccc9bd72a176f1bc35bf19e0223692bba7c2bc57774aa5452f2995","sha512":"794c0aac5013d04cadc21a8a9991c05c3b4673f8a53011395c15f7600d002699c30c77314c48808f5b0f76be9f26c26a3641665aaed75746af811164bd6b60c4","ssdeep":"","tlshash":"b161974424a0332562b23cb4b96dcd5aa321a5397c58c4e13f8e84377766c0b3cc5b38","size":3178,"data":"","first_seen":"2026-07-23T04:00:02.339215Z","last_seen":"2026-07-28T02:33:05.077788Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/CWtkE2dr.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0062293c14fe568fffe4c020463ff687","sha1":"ff175fd67b04551b2f5352290f6e80b95ec1b59b","sha256":"b7af1abaac19f12ebb3298b05949a6debb74c068568c00c3cb97396395ec5cab","sha512":"2227733fc0bab7051445cd548ee0f8070cc669dc9f2015f69eb173734b69caf707c3162967bf06b28c1a606070b8df88d832b20fad7f4453d2ce0b65b12f7145","ssdeep":"","tlshash":"4ea002c7166550e5596609853726eb605c25187a3392ead013488251ed57cabc40d98b","size":65,"data":"","first_seen":"2026-07-28T02:31:43.236799Z","last_seen":"2026-07-28T02:33:05.039331Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/vite/assets/_commonjsHelpers-BosuxZz1.js","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6f0cd0416cc66836b4f1e41bdc80935","sha1":"13163f25946abed1f7c58918babf79e254a7d6dc","sha256":"8ea758de5a6a30f5fef555e0c068181dd5f9e3c6d8602e78949fc8f7b5853e1d","sha512":"e17ab4f93d6a5db0395c4a600a10b380defb48514d3e6e385bda24625d51cab51bf43954fc200caf2a5f62963222d968b67c132f6088f39be97691f4b95c086b","ssdeep":"","tlshash":"7101d08938f0e5f045fb547c80377506f32928b991eca9c0b39980f566f409f5411f6a","size":745,"data":"","first_seen":"2024-08-19T19:00:37.627848Z","last_seen":"2026-08-03T16:41:36.33054Z","times_seen":2886,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/widget?encrypted_request=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#/","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6f8750d2f923679d5e85c6f603e3a864","sha1":"48b40be09964ac1fccd65c288d0ec6c7427df657","sha256":"21412991c614057963f68155696e3cd444a3660791298529215007116e79b3f3","sha512":"87b43de82ef6b8a09fc218d8b8579a2b9f14e5c8da1015f0e3fb7365f3022b5ab1be774516e18e1f12448946ef9c4e2c1a0e10687084c0fe6587d4f0b4f80602","ssdeep":"","tlshash":"d8c08cc5a0c33d116606655110af36e490244036b0481b128c94e8882e270b08233e9c","size":143,"data":"","first_seen":"2025-01-24T12:52:16.07064Z","last_seen":"2026-07-28T03:12:55.319036Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/C1RMlSs1.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"09c29c6c4431e4016d3d1eb9feb617a1","sha1":"0dc87091b904f73e0608b0acbb99a9416232d085","sha256":"b69b316c54ba687b9845033ee5a2cc0e238caeb46549c2c77c17ebb3c8973ebc","sha512":"629eb566ed30258a23dccb0a8a49166df6c34f657f4a856235d794bb9dcfcb8cfd5a3f36a6121049d3a950869117d5ecec9b381c758baced4e72f7c0cecaa367","ssdeep":"192:NWL7OsQX16TFso/Covnw2/Mq41nDb027wK37OAnH1cgljm0c3sL:oLasQF6TFZ6YwDfDb02j3aAHBGw","tlshash":"19023ab4243efab97a5209011028f50b5f592a07d0ecd4edb6d0453692daaa4df4ee3a","size":8867,"data":"","first_seen":"2026-07-23T04:00:02.352809Z","last_seen":"2026-07-28T02:33:05.012581Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/BwU26q7r.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c22b7e88f8392d98168f8462e2eafe1","sha1":"841beeb99c51fc1acf4a80e6e4a584da2b88877e","sha256":"f71e533e39fbf2db0bf12f5b8d225de2366afc27be94d92a60e656e330879d19","sha512":"762ab0c058a458ccfd81b39982f40f86e561b93437e917450ae6fe53e7982b6b11db0eb74e22639e31f8107780f2e81f9b41017cd348f7fd7ea5de7b92260400","ssdeep":"96:7yZspls5hnlpIiWqE6oU8yfXoOUEzFNoAeF9Zaq+7YlS:77OtoiI6X8yfXoOUExmiqk","tlshash":"da815b732fa0ddfcc78f4c7492d42e7c0d59c5a73992916b2bec496292d1162e862933","size":4150,"data":"","first_seen":"2026-07-28T02:31:43.400085Z","last_seen":"2026-07-28T02:33:05.053777Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/vite/assets/widget_bootstrap-DBWWKuGY.js","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"79dd66a28165c70484984d11ae0d2884","sha1":"6609faf52043fcd548201360e0f9c3380cdbeb35","sha256":"89d17d238e3037d5dcbd975ee145305ff50b2c216bb54055b94edacb170ad51a","sha512":"b712723b8b2b5757b65085739b5cbdc26c9bae1647fee76c5742b0da730fcd583de634786a4c3c2d6ceac0a16318f00c7a0a755e4062f15bb4fc0c5cf55a763e","ssdeep":"","tlshash":"c9e0c0c48c301ab7b5a42ccb505607810418aa94f4c78484a92f5ee035f22d35671375","size":344,"data":"","first_seen":"2026-07-23T04:00:02.344652Z","last_seen":"2026-07-28T03:12:55.3158Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/vite/assets/Icon-BXppxyZ1.js","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3164ab8b32f3d94154c09c7961439bee","sha1":"4451d9e3c44294daecc2afcdb080ab04d592f366","sha256":"83871cae8a99f5c7893c8ab468f25a943859ef6677e92bd8c9b11f6951a9de79","sha512":"6bc88cd7bd60eefa89355a5d54aaafceb228f05c8c927ef79868ca91379fd9e1b59129b1f8df01b60ba9a29f86d55e7b842de6af6028938dd4972885a9a7504a","ssdeep":"96:9DkA6rrv+QsrRelEQfiWyQVCANUIIBbVLTlT6M97AMN/T635SR93U/47TTPxx94L:RAv+QiRiEQKWJNUZd7/T63S3UoKir6","tlshash":"bbc10c18c4e26ddd9d36f774ec8607b0a8d81d54a44d48bbf3b1796853af828693af30","size":5900,"data":"","first_seen":"2026-04-15T10:26:48.262028Z","last_seen":"2026-07-28T03:12:55.286134Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/widget?encrypted_request=eyJrZXkiOiJlWFNPVjgwZWxDRjg1TUhRaVk1NHdZWnN3TmlrSklKMUI1ZXdlWURyWGFwaEtrRDhvVTUwd0hxamVQdGRReGluSk5uZWtNNF84VndfX3BuWGFwQjhaNG9pNV9fRXdwcThvU0Z1VklEZENPcWs1VkhjWTVzV3FVdk5fOEs4WXJJNVotWnpaTjU4cVY2cVhKTlNPczJzTlJncS05QlpFamp0Z09CcjQ5Q1ZUT01URExxZ2hLZmpKNGstck5OOURsU0VwRnd0aklGbUtETzZQcDhOV1ctckU0eFdlS2VGUTZCYVBUV1h3MkNzQmJoY1gxb0Q2cldXYXFtUXFOTGV3NkEwUDVseFRyUlpBQTZCNGNHeS1ReEJmWXAtUmQ2bjdTRUJNaDluVGVMVjlLdjZKenJJdHF4SXMzSFhUUFR2QlVTRm5Mazdkdng5MHJpY1ZyVlh2V282VVEiLCJpdiI6Iml0WEExVVRfUUp2QURYb3MiLCJkYXRhIjoiWDhNWXFOQUJrdFBpZmRqak84RTJHaERBVVdWVFlKSTYzVWFzeE9fbVJVRTlIYXQ0QUpJVE9JUkJ1bzJ1RVNORy1DZmcwOGRWeGl1VC1Jalo0ZS1OUVhzSVNQY3E3VjAxZXpsT3E4QmpwaGtMNkZSazBMSGJ2QnpwSFYxM3FPQXpzNHpZdThTc2RQRkpGS3pRdVJxdjZHeGxrV0RwTmFqT2lSTElwbjlrbjA5U1ZBYU1YQSJ9#/","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"170e719973271e679d54a2493455081d","sha1":"e74d4e94b5ad5c11d2babed0a53ba293fbd8e951","sha256":"dbff9d05c1fbd9bd1cc942bfcacace1b06a56e0ca171a9c3f4345cd07ac391b7","sha512":"d558435f044b5a69c2de2993fa2ed7280771b9958b2f036a2e04913a2c90e4b0190146d9e6594552aca4ee1a4fb0a6977540dbea183acea1cb62c1b002bf4564","ssdeep":"","tlshash":"43c08cc6b0c22d002a06646051ff34e8a034402ab04c1b028dd4e8483e224f18237eb8","size":151,"data":"","first_seen":"2026-02-16T21:09:08.326647Z","last_seen":"2026-07-28T03:12:55.322671Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/BmaSJQ14.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"42ac261456c1a25b5c7841711f274ded","sha1":"9c2fcf7aeeca003dc5c786a1e3d06c8ac58bfd10","sha256":"88998a7c9cb9807acd66507979ec3455ae765f80a3e213fec6f40b437a634ee3","sha512":"0c439963b0aa103f2406d9664d5139900147ba3bd652c650a5cef98a0de14c9405c17e0e592bce2c530b070bbe77228a5eca76a27e4dddfba56170fdd1a8ad46","ssdeep":"384:p+wEU8CbBaY6CPaQovYbNu+6HPxkoCDyO:phaCaQoAhuu7","tlshash":"4d52a63de92ef82de63248d01459c4007d2d2f7ba3cd4836e9fd2d3a5382934aa1a795","size":13435,"data":"","first_seen":"2026-07-28T02:31:43.308988Z","last_seen":"2026-07-28T02:33:05.006963Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"croxy.com/flags/4x3/in.svg","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.309Z","timestamp":1785204744309,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /flags/4x3/in.svg HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:24 GMT\r\netag: W/\"35c2534eba3a128afe301689fbeadd0e\"\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JuY4dQttHgn6iXm5ijuq49Re%2BaQSjrOXLs92%2FbyeJn%2FbBzuCAmcTLSDFR4fonInNpeWdx15fDl2OVx%2FXJz9B1iyDXFtLzRRO2BC0M5sLoBOKzWIWQKFVJWXIt3c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd3ed3bb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1090,"size_decoded":1054,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"230b82c4b877a6af4ea17b5e9d751b9a","sha1":"fa2a2b11f6d78ef7ea1aee9ae341b26a0f398dc8","sha256":"91185efa1a9b52cdc0e470712518efeefc4e4d6a6555bae9de997ba71885bb98","sha512":"f25cd28e26db6ee631118bf34a193af027f4ecc18dcdb2eb3af90d1585ce3f9f288d654984bf0efd12d781b970bda6aba5a9ea8b3c847288a0720bbebf7ade98","ssdeep":"","tlshash":"58117f54e1faa42c4524c300c7ece94cea0790c7530902abf52d3dce1779af3499628d","first_seen":"2024-02-29T10:33:07Z","last_seen":"2026-08-02T14:49:41.84386Z","times_seen":456,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/images/package/icon9.webp","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.766Z","timestamp":1785204744766,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /images/package/icon9.webp HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:24 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"a74ad7e632b6f6d6fffb573f2c613433\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bSIo31gCXRFYsfsHNeQhEdxj2jllDzvKPeFfN8I0pD9aABsQlj8fkDIwaFDMdqcGjazsHoza002Wg7LUeifGm7gN7NC18RdrheBEKwD1aOW5Gz%2BLJSn0uaYpRpA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2205bd6cd5cb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4846\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4846,"size_decoded":5494,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5d49eb549daf210d1d6740296636c094","sha1":"44d0508d45c84db0d3dcf9605da0770f825d679f","sha256":"298106bbbcde11e2c5913ebdc014f1be6abb42561d4c83eea19402fbf5f5a8ca","sha512":"51b3b68596a29d1b5501beb8498b40e486e09dbbd17f03c87fea80c429136fa7876a74a802708032eac9a21ec69b909907f20864cb5a17426a31f7f1f34ddab0","ssdeep":"96:9Elbw+iXdXAgLlFi5G7RIEVWYmbeMUopFB0F+l:wwjRAgLlFiwKEVmKropF4+l","tlshash":"3da15c600664338de8709bb18171ce93f110fd074437cb26d08cbb777caaa86669c199","first_seen":"2026-07-28T02:31:43.370993Z","last_seen":"2026-07-28T02:33:04.96983Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/bg2.tN6mWkKV.webp","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:30.731Z","timestamp":1785204750731,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/bg2.tN6mWkKV.webp HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/web-assets/default.4QL__ivq.css\r\nCookie: _gcl_au=1.1.2135620745.1785204745; croxy_sess_id=e859a10303792f7bb7980d8daed6883e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:30 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"f860f05a3e811263ecb6be3ccbbf8944\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2rKUOr%2BZDLtdlyeoxFNgK6R69iepsW7nGvqtjedDCoGlE97QpOmjJRhvSoDoe%2FuV1YCPLGCc9Kjy1ed2yseh11l6RE2sxjEKWP63rqL%2BvEU9K5f9ayTopT7uR%2FE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2205bfc1e63b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10332\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10332,"size_decoded":10987,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"869f23076a2b10eb38d9836e64830407","sha1":"aeda0cfca981a74f4913b0f1fca4ffdc53bdae4f","sha256":"4a55355e36e50fa979f77148a98b2fff98b5aba9cd6da9aaded40550b1d36431","sha512":"a1235d792a1d8b52008547a940ec03e1112b0bda1d591317214d8a384a6655c1b7abff7169a7d37639f5b4ed7e415442fd917c4f081e41db521213aef059dd4c","ssdeep":"192:TwPGv4lANo7/GtRPYP0pQyEMnA+EJvErciaLqGd9Zu4L41/BUd4nR5E/:Tw84//G7M0pnALcYOGFuW6pUd4nRa/","tlshash":"6b22bf462d545b6ff1d08bb20c19cb8ed77ecea1d3039e5841602b19af48bca260d98b","first_seen":"2026-07-09T11:59:53.508675Z","last_seen":"2026-07-28T02:33:04.972705Z","times_seen":4,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/vite/assets/constants-lVAyZKq6.js","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://service.croxy.com/widget?encrypted_request=eyJrZXkiOiJlWFNPVjgwZWxDRjg1TUhRaVk1NHdZWnN3TmlrSklKMUI1ZXdlWURyWGFwaEtrRDhvVTUwd0hxamVQdGRReGluSk5uZWtNNF84VndfX3BuWGFwQjhaNG9pNV9fRXdwcThvU0Z1VklEZENPcWs1VkhjWTVzV3FVdk5fOEs4WXJJNVotWnpaTjU4cVY2cVhKTlNPczJzTlJncS05QlpFamp0Z09CcjQ5Q1ZUT01URExxZ2hLZmpKNGstck5OOURsU0VwRnd0aklGbUtETzZQcDhOV1ctckU0eFdlS2VGUTZCYVBUV1h3MkNzQmJoY1gxb0Q2cldXYXFtUXFOTGV3NkEwUDVseFRyUlpBQTZCNGNHeS1ReEJmWXAtUmQ2bjdTRUJNaDluVGVMVjlLdjZKenJJdHF4SXMzSFhUUFR2QlVTRm5Mazdkdng5MHJpY1ZyVlh2V282VVEiLCJpdiI6Iml0WEExVVRfUUp2QURYb3MiLCJkYXRhIjoiWDhNWXFOQUJrdFBpZmRqak84RTJHaERBVVdWVFlKSTYzVWFzeE9fbVJVRTlIYXQ0QUpJVE9JUkJ1bzJ1RVNORy1DZmcwOGRWeGl1VC1Jalo0ZS1OUVhzSVNQY3E3VjAxZXpsT3E4QmpwaGtMNkZSazBMSGJ2QnpwSFYxM3FPQXpzNHpZdThTc2RQRkpGS3pRdVJxdjZHeGxrV0RwTmFqT2lSTElwbjlrbjA5U1ZBYU1YQSJ9","date":"2026-07-28T02:12:31.138Z","timestamp":1785204751138,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /vite/assets/constants-lVAyZKq6.js HTTP/1.1\r\nHost: service.croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://service.croxy.com/widget?encrypted_request=eyJrZXkiOiJlWFNPVjgwZWxDRjg1TUhRaVk1NHdZWnN3TmlrSklKMUI1ZXdlWURyWGFwaEtrRDhvVTUwd0hxamVQdGRReGluSk5uZWtNNF84VndfX3BuWGFwQjhaNG9pNV9fRXdwcThvU0Z1VklEZENPcWs1VkhjWTVzV3FVdk5fOEs4WXJJNVotWnpaTjU4cVY2cVhKTlNPczJzTlJncS05QlpFamp0Z09CcjQ5Q1ZUT01URExxZ2hLZmpKNGstck5OOURsU0VwRnd0aklGbUtETzZQcDhOV1ctckU0eFdlS2VGUTZCYVBUV1h3MkNzQmJoY1gxb0Q2cldXYXFtUXFOTGV3NkEwUDVseFRyUlpBQTZCNGNHeS1ReEJmWXAtUmQ2bjdTRUJNaDluVGVMVjlLdjZKenJJdHF4SXMzSFhUUFR2QlVTRm5Mazdkdng5MHJpY1ZyVlh2V282VVEiLCJpdiI6Iml0WEExVVRfUUp2QURYb3MiLCJkYXRhIjoiWDhNWXFOQUJrdFBpZmRqak84RTJHaERBVVdWVFlKSTYzVWFzeE9fbVJVRTlIYXQ0QUpJVE9JUkJ1bzJ1RVNORy1DZmcwOGRWeGl1VC1Jalo0ZS1OUVhzSVNQY3E3VjAxZXpsT3E4QmpwaGtMNkZSazBMSGJ2QnpwSFYxM3FPQXpzNHpZdThTc2RQRkpGS3pRdVJxdjZHeGxrV0RwTmFqT2lSTElwbjlrbjA5U1ZBYU1YQSJ9\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.2135620745.1785204745\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31556952\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fvliWJZcenSrSJMIReDPoEwACZKGmFXlMQehl%2FOLGZC0BijRI3MAc74b31nVPwG3NApjX%2FRiG%2F5ShHDuWyN37%2BDPMpvt%2FrgSg4zV7OF4Gx%2F8KXGMiOpzUeK26j9R9umGgviUAA%3D%3D\"}]}\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 23 Jul 2026 02:38:01 GMT\r\nvia: 1.1 Caddy\r\ndate: Tue, 28 Jul 2026 02:12:31 GMT\r\nage: 33\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=1,i=?0\r\ncf-ray: a2205bfe9e7ab500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157,"size_decoded":859,"mime_type":"text/javascript","magic":"ASCII text","md5":"c23eb02c59275cf91b59cfd6bbcc315a","sha1":"6d75b11d40836ca533dd3c2230ebd9cc7e927c9c","sha256":"af3915fac7511beefcbb8960c26748c2ddf6a7e0f588e71261cf175455b3fb97","sha512":"94b2ab23459feb51256816f600cb4129bebf70026b8774057e059187650f92bcde7815f5d71b0be51ed10ee3bfc4663d8a9bd8c8485a7c5b3e6acb8b031bb6d5","ssdeep":"","tlshash":"f0c02b0b6db45e7556301b3fc3a2500b2e0ca08df1afdda8fc08d0e186a25c36638d24","first_seen":"2024-10-25T14:46:11.754013Z","last_seen":"2026-08-02T07:30:10.544183Z","times_seen":1969,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"service.croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/BxwqsPLe.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:23.860Z","timestamp":1785204743860,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/BxwqsPLe.js HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\netag: W/\"b91e55a8412ebb085eee00de35ed71ca\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0fFwaC%2Fgo%2FB%2BToewLrzcvjKNAfpDiGcGmQAwq2t0KdVkVuEa2gDr%2FLVwJsbZq5XvkIslfhGeafr7FzXPNsti6dr7wMKji6niacQlNniXs28KWyzwlgHz5pm8tZc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd12cfeb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":435,"size_decoded":974,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (434)","md5":"3f4e33ea1552ef8058f4cf8bc297de8e","sha1":"f376b622bde54ce994aca9dab2b1b1a27178b017","sha256":"905004ddb918f0fbf3ff1ac045a7637ab4b0aa1b75900408d7360f24c97d0463","sha512":"0d586e5ef81b75fde94fe39f7bde710e2b5572e2852d03fdad359d74ec5feb5a3a12573eb3e49420a2fac26526d7190414a4a9f9265f1b46bf898b4c896515ab","ssdeep":"","tlshash":"5ce0e5f75ea14529e007cdbec910f8c5151e299cdb04856066230240fed283bf8ef278","first_seen":"2026-07-23T04:00:02.191654Z","last_seen":"2026-07-28T02:33:04.97749Z","times_seen":3,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/abDZ-3PQ.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:23.879Z","timestamp":1785204743879,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/abDZ-3PQ.js HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\netag: W/\"9a397ac81bfe804ab4eb95f583346b62\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=djmsoLKlzQ7fCiUlGWa5BKqgb6rau4%2BHOi8xA3WL03iWhB6BdMc05hPIfLnXWm5grU63myUCBCBt8QsDDAP6Pdx5YG5s%2BJNvX%2FKq1uA3YuiNvRbDHF3%2FToOrhVY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd13d0cb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":567,"size_decoded":1003,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (566)","md5":"cedc2c16f60ec6c05efbea1aa9380873","sha1":"e2ce25d4b5a6b7fb617489806590bc4db68f2915","sha256":"bc7ce7ee35bdc2dc92df145436cf243ebde3e21780b9282f41e2dce4a0a89f84","sha512":"9af200a91eb40cc7726b2dac43a5e695a8e6fb03e23892d00d6a6c9c2d7bc9a68944acfc7617e26e85cce34218ba14df24c52bfed41cd8817767be356b029a94","ssdeep":"","tlshash":"31f0263230b81a63c06935df657ec3c175f221357d03914b803c3f185014b71016fda0","first_seen":"2025-10-15T18:57:13.823416Z","last_seen":"2026-07-28T02:33:04.979666Z","times_seen":18,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/solutions_top.DEWScFFB.webp","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.256Z","timestamp":1785204744256,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/solutions_top.DEWScFFB.webp HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/web-assets/index.BA_rpDMS.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:24 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"222abda4b419f506a56d909c37bd62c5\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aS9CXG9dSZh%2FgYzyVFeWmeqBSlZ4yvXJE9S4f29SdEyiaqHVRJclb2BroFFr19w%2BeqJWV7o1FkqCYjk7sFiGywsmNeA5k3%2B4U5WwskOZjHhDA9u0TnTrjzvBZdY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2205bd39d28b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 179596\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":179596,"size_decoded":180250,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"be9c2bb9fb84efb324ba9aa9e65563ed","sha1":"7d9a90b5d5329a89399f28a7ccbf860313fe2cf4","sha256":"bfe36d35abb2f34fe8185d981080abf29bd308d4b617f5414501d0fc0e812d72","sha512":"5867251e5ce3e4591a0f4f548caeb429584ebc11fc8ab01d9a1e7291b874d67347763e675a3d5499556cadfa1690b92dd1b40618f692fe4b4f8d1e4f71a0ef77","ssdeep":"3072:agvAC8zBHup31t2zUcDeTXbfDXFP/vEYUdlEcTbhmwg0u5pKloiRQU2QLDu6rA1w:agYC2SFtmIXbL1P/vudlZpmKlo9GXrqu","tlshash":"25041272bbc7b0eec4d2a734ec968f01ba8bf214c194f96f614521863503df6b7162a4","first_seen":"2026-07-28T02:31:43.311469Z","last_seen":"2026-07-28T02:33:04.981381Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/flags/4x3/us.svg","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.294Z","timestamp":1785204744294,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /flags/4x3/us.svg HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:24 GMT\r\netag: W/\"45d65baed77e15aaa5a48d6aad8bb5f7\"\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jLBoJLxBSBmQPUuaNMng4MjaKm2zMyxiv0ElcjV0GGJNdMQRmrkBDULR5XFbWqj7I7WWFYtDTDmTHe5tW5aZkLMfL%2Fptk8XIEZmRMnDrMmwZJgJtuCN4p5UwFb4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd3dd35b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":648,"size_decoded":1012,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1d23b9509d0a0a828e3071096b0d2edf","sha1":"37ab729313d47d14f637326a1432ee02e62db544","sha256":"e7be4240cf57987926673708f09233be1ab6bdf35acc7b86bd32a263f197a2a7","sha512":"b658ce1342283e8c9155e9f626a9ea094bbf2c7094e59459b3bc262384bdfd65b170b6110935c9d3a2989cac6e24efdbbf06e73f9fa9fe74119e60595d8e8650","ssdeep":"","tlshash":"80f0f4f1d2ece5a8851136cd1fbdb6a823d8bea806400dbba04c3c6c2425d7667835e8","first_seen":"2023-12-20T14:16:02Z","last_seen":"2026-08-03T15:49:22.262861Z","times_seen":4320,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/flags/4x3/my.svg","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.313Z","timestamp":1785204744313,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /flags/4x3/my.svg HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:24 GMT\r\netag: W/\"34b4b4c5ba5c33c279e130b87bfe476f\"\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x3zgg3h0WmoPF%2BtKgKPWztUgamv38MMFbi%2BeBHd4qOXyffyXu%2FowzZuGD9nWNcg%2ByQKDY73Kg9nkpL7FX5cOUlzaGF0eL4NMJno%2BfYyaZHFIeXI6HvoR9igQTkc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd3fd3cb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1386,"size_decoded":1169,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"50be507f7ddce55f869e4f40773aba5a","sha1":"da45f7e13e3a1fdf2169c4025f4db2ab267b9474","sha256":"da82a094cfdfc2c4936c8aff7e8bccae928e7ab1f813c11ae4933d1ef6dfb301","sha512":"1fe6480ef621d4ddd8540251ed5bb13efe964d92e63c7f19c4eb7af18f0d8b4f917a34bc2f4c55c6e9d455f71a72258e2878628caaa4dacae082956b2387327d","ssdeep":"","tlshash":"6321f7f496b837188f1587540fbc60e79a5474cf310963cef45c0578aa5ea8b8d929e2","first_seen":"2024-05-09T16:52:27Z","last_seen":"2026-08-03T06:44:10.949245Z","times_seen":687,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/flags/4x3/vn.svg","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.320Z","timestamp":1785204744320,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /flags/4x3/vn.svg HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:24 GMT\r\netag: W/\"6c70a0a985aead9d5276f9f05c1a75e9\"\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lxd4VVIc8Od1aqc8%2BJ9vX4AOcAMwwqXrcqwiSOS8oU1k1djG7Gk4W5WofoP27%2BHDn2rK5Vb3EqO0X4D3nb03N19Adw3DaqGuPfQOBjweLAIv3tvYEQ7RqROxV6M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd40d40b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":490,"size_decoded":1003,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"076d59568fc7a8ab59bc51ee7a39f956","sha1":"a03cc2bbbaeaff6e0ce01bda5d400ba4b5050df3","sha256":"2355037201315d74581ab0ad60b5587a29a087d26b0525bdeb8676e64fae5b86","sha512":"a2b96c1228675df18073a8d11bd56b7e6bf93935e04a73d4f2fe19dd1a0c3105fadc94eea3fdbf6874cba0a4ca7afabcd02e133753b44a0abde7570f6c91bb92","ssdeep":"","tlshash":"dbf0dcb4f2fdc16d8e1d86308bfca9c987aeb0de010008deb1e429281a6c11a55a7695","first_seen":"2025-04-12T17:20:56.132057Z","last_seen":"2026-08-03T04:20:14.016615Z","times_seen":310,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/vite/assets/widget_bootstrap-DBWWKuGY.js","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://service.croxy.com/widget?encrypted_request=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","date":"2026-07-28T02:12:31.123Z","timestamp":1785204751123,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /vite/assets/widget_bootstrap-DBWWKuGY.js HTTP/1.1\r\nHost: service.croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://service.croxy.com/widget?encrypted_request=eyJrZXkiOiJlWFNPVjgwZWxDRjg1TUhRaVk1NHdZWnN3TmlrSklKMUI1ZXdlWURyWGFwaEtrRDhvVTUwd0hxamVQdGRReGluSk5uZWtNNF84VndfX3BuWGFwQjhaNG9pNV9fRXdwcThvU0Z1VklEZENPcWs1VkhjWTVzV3FVdk5fOEs4WXJJNVotWnpaTjU4cVY2cVhKTlNPczJzTlJncS05QlpFamp0Z09CcjQ5Q1ZUT01URExxZ2hLZmpKNGstck5OOURsU0VwRnd0aklGbUtETzZQcDhOV1ctckU0eFdlS2VGUTZCYVBUV1h3MkNzQmJoY1gxb0Q2cldXYXFtUXFOTGV3NkEwUDVseFRyUlpBQTZCNGNHeS1ReEJmWXAtUmQ2bjdTRUJNaDluVGVMVjlLdjZKenJJdHF4SXMzSFhUUFR2QlVTRm5Mazdkdng5MHJpY1ZyVlh2V282VVEiLCJpdiI6Iml0WEExVVRfUUp2QURYb3MiLCJkYXRhIjoiWDhNWXFOQUJrdFBpZmRqak84RTJHaERBVVdWVFlKSTYzVWFzeE9fbVJVRTlIYXQ0QUpJVE9JUkJ1bzJ1RVNORy1DZmcwOGRWeGl1VC1Jalo0ZS1OUVhzSVNQY3E3VjAxZXpsT3E4QmpwaGtMNkZSazBMSGJ2QnpwSFYxM3FPQXpzNHpZdThTc2RQRkpGS3pRdVJxdjZHeGxrV0RwTmFqT2lSTElwbjlrbjA5U1ZBYU1YQSJ9\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.2135620745.1785204745\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31556952\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uWeRLa76CmQy4XxQy%2Fs%2FhqYcWVdYlF8s2BjMTPu58g9i5IRawltTniLIx6mnlorwAG25kkAVSAV8hNyR2UU1OdJfWeqAXBf%2B1xw9ed63S3BswGrspn7G2bVFgAwxHUfJ55Ibkg%3D%3D\"}]}\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 23 Jul 2026 02:38:01 GMT\r\nvia: 1.1 Caddy\r\ndate: Tue, 28 Jul 2026 02:12:31 GMT\r\nage: 33\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=1,i=?0\r\ncf-ray: a2205bfe8e6eb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":344,"size_decoded":974,"mime_type":"text/javascript","magic":"ASCII text","md5":"79dd66a28165c70484984d11ae0d2884","sha1":"6609faf52043fcd548201360e0f9c3380cdbeb35","sha256":"89d17d238e3037d5dcbd975ee145305ff50b2c216bb54055b94edacb170ad51a","sha512":"b712723b8b2b5757b65085739b5cbdc26c9bae1647fee76c5742b0da730fcd583de634786a4c3c2d6ceac0a16318f00c7a0a755e4062f15bb4fc0c5cf55a763e","ssdeep":"","tlshash":"c9e0c0c48c301ab7b5a42ccb505607810418aa94f4c78484a92f5ee035f22d35671375","first_seen":"2026-07-23T04:00:02.344652Z","last_seen":"2026-07-28T03:12:55.3158Z","times_seen":53,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"service.croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/entry.D7BxLCLx.css","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:23.828Z","timestamp":1785204743828,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/entry.D7BxLCLx.css HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\netag: W/\"3c08f4633c6b63251d4db47f46683db1\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hn3JUAfMR8kh5dPqo2FJmu9PMsUy7jz%2BUkUfHRhx56ST8y7LX%2Fk%2BZuvp7X1sCnl%2FuJYody8fMYDvsQ8fuJctiZk1EnVyGBJh8P4Z%2FwvNh%2FJKrKRf35WRGhTra34%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd0ece8b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37207,"size_decoded":7924,"mime_type":"text/css","magic":"ASCII text, with very long lines (37206)","md5":"e1ebf58a27332540016518d016dbe9da","sha1":"97a08508ce797d07d999ea7562fd1d22c36076c6","sha256":"4e23b0d748b7212df28f66ba6dae4469efa7b6da08f33960acb02aaac81210db","sha512":"dea22ab44448093765721a75100292e14d5cff8469c59934078cca1413518b783cba3c660cd75b86362b5ee42dc0f9b476480a303d92a21418143cb460d37ff5","ssdeep":"768:hCLAzUwVuczkikP7+17+tThas8sXeMlxf+ayCZVqj6GfqhdsR+5n9uWxXwB5+ssU:x","tlshash":"7cf285722907506c613bc53f3aa0389c3877e052e422bb79d56f697ac5c225a27f778c","first_seen":"2026-07-09T11:59:53.545512Z","last_seen":"2026-07-28T02:33:04.988239Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/CXHYiIjX.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:23.872Z","timestamp":1785204743872,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/CXHYiIjX.js HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\netag: W/\"cbcc1549df11c63678f10d19434b4f36\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0F%2B1XEMRTDObROPgRe1lWcuoDqlqJTSLvI1PrbcM0RoY2YeQ5%2FYXao5EznEfnX8KKpBdJEoULDp7fkGHbB1LgDJfGxRmIR7BAPE2XRcdy%2BW%2FpHQd2ApG44Ux82Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd13d07b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":481,"size_decoded":1007,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (480)","md5":"31616785d58856b2955df2b094a6bc9e","sha1":"6f037fe7336b323d5dd64d31cb9d115af1720350","sha256":"c8dab724c5f430f2889382e2a0b2541d7f852b161df282fcaa81b4b030286f7d","sha512":"bc2be2b72f8a64e8183ef1072eeedb1b91b7007aea2255db092a8a367e99d07bfbb48f6b262510c9b3329fa6affe96582c5e28be0bf65dfc45031c4a0f6e851a","ssdeep":"","tlshash":"f3f0dcc970a35031e32c48c980314de8672c069c34a882e8f346c9fa66238f6898ed3f","first_seen":"2026-07-23T04:00:02.32256Z","last_seen":"2026-07-28T02:33:04.989304Z","times_seen":3,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/flags/4x3/ma.svg","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.304Z","timestamp":1785204744304,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /flags/4x3/ma.svg HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:24 GMT\r\netag: W/\"73e6a4398e4aa047b9b6f3f77236b085\"\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S6rh3jj6FzgPs8Pv8LAoI%2B7eKsyuMSFZDvuSZyMGenP3pi5ISHbYvEIkh%2BUS4ZQiuh%2FRjmtkWlp%2BNY%2B0CajUXxRs2uYURw7%2FLBgwW7QBFmXoCuZTGfdqME0712o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd3ed39b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":247,"size_decoded":856,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a2e6a76e5f38058fd28b706beeb6a1b7","sha1":"f0bdec701cfac27e1704304d5bb954559e4220a6","sha256":"28cfcdecf9675b0a14fbfae176324aea03711edab1a13592cfb7d58e6772b25c","sha512":"8492ff9810478af1df10fb695a1baa439269edd62c964eb1832ad998c66f72ab3c3ed55d73d9e5c0655ea27281f16a8083d20411ca6e9ec666a49d2352534bc7","ssdeep":"","tlshash":"36d0978593bcbc15969082406e7c30e0217f10c0234821eaccf1383072245cfa8e79ec","first_seen":"2023-08-04T15:07:24Z","last_seen":"2026-07-30T05:40:38.323489Z","times_seen":254,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/flags/4x3/ru.svg","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.325Z","timestamp":1785204744325,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /flags/4x3/ru.svg HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:24 GMT\r\netag: W/\"2222ea5c2b315ccc3bc7a04ff1c79c0a\"\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9pe417j%2F2cAhOKSHY5OY3OB6BxYE2VKlYzVoupZHzBQVzX8ifmgne%2BfZEnVpbbmESMYtg18dhUmIIW67MFgailVKdjVN2GfAbPQWkFZ%2B3JgZ4i4KEwloCmPLhO0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd40d42b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":225,"size_decoded":812,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8b2aa18f6e17aa2982e800c462781698","sha1":"9d973fabca9eae17df6841186a2f15c7eb334e36","sha256":"7100aaae51ff3b6a2bf0ca932b3bc518bdc760814725e7cca31d821a26c3dd7c","sha512":"c40be6bab036a59a7cf91222ae49f5a8de4a0670705c331407287d21beddf3c535f9197bc4dcbad8cc36f1fc3a85008e2af388543e24ba5cf88634ccdb107a86","ssdeep":"","tlshash":"45d0c7a9e22d75048604c6201e7c71d3d599a0c9615411cfd5611db8105d697dcca995","first_seen":"2024-08-19T16:44:24.450874Z","last_seen":"2026-08-03T02:35:38.087985Z","times_seen":690,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/vite/assets/globalConfig-aTKfDg_G.css","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://service.croxy.com/widget?encrypted_request=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","date":"2026-07-28T02:12:31.127Z","timestamp":1785204751127,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /vite/assets/globalConfig-aTKfDg_G.css HTTP/1.1\r\nHost: service.croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://service.croxy.com/widget?encrypted_request=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\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.2135620745.1785204745\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31556952\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\nlast-modified: Thu, 23 Jul 2026 02:38:01 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ndate: Tue, 28 Jul 2026 02:12:31 GMT\r\nserver-timing: cfExtPri\r\nage: 425594\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4DlwlGkb132lFffCMF5EA7Rx86bsWcoxTOUBs4m1DbkpitAzuk3KQ7ZpXAXZsqZ793etbID5k7eH8R5mvEoHLG2npYfcKFG0PmZ0QRyUb8N97WSQi%2B2rryRgp2kTdIdFFWlCKw%3D%3D\"}]}\r\ncf-ray: a2205bfe8e71b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 498\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1413,"size_decoded":1252,"mime_type":"text/css","magic":"ASCII text, with very long lines (1412)","md5":"5eaf595ee589fa1bb0c2ace5ba46cb79","sha1":"3350df1935afc679a6550dffb1dfb0fe2fde5cbf","sha256":"0c87423fd031a6d7ca63fbb5044ac74935fa39307f056538a959a9b8d7593932","sha512":"63c55eb6128ad007d34b192643917e5dd223aa2005fe04f864dfc4dac393ad2db57293d1dc08b43c492a9de8a9e1eaaacfdbf0281b0ee3cf73f3f20dd15dd896","ssdeep":"","tlshash":"1a21c23c7a0904787833e2a3d3a89acc566676c6be538b4de753791059d338828b652c","first_seen":"2025-07-03T06:16:17.813686Z","last_seen":"2026-08-01T01:59:45.010149Z","times_seen":1002,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"service.croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/XRnn7jL4.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:23.869Z","timestamp":1785204743869,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/XRnn7jL4.js HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\netag: W/\"5d5b15f48127bb09e5a6171ddf4fe1e3\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y%2FgYoQ5hU85dAgIJC0JdOYPo7%2FqrFgaZQYtgGldZjgdxp9V%2Foxn0tMAJT0cIMN0JwNDovhc8u3rl7QZ9LVCcFGLVIURSyPKcSVlkebaPFs8xL1RWHX5PaHYv30c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd12d05b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":818,"size_decoded":1019,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (817)","md5":"0d7fa383ef38765099d30d4e9c5ad7f4","sha1":"1c3d5d83fa8d492fd167dda8789ef5084bc52720","sha256":"a10a6b68e50d8a949e21f2356c405d857c9c3dfa61cd112f8088cdfd983b60ee","sha512":"47e2eef39899fc641540194bcee8a56105a93803ec622dba5f8c8b96448958aa655de7dafd15954d3114844087e9956158bf3b185938ec9e170293e7c78f955e","ssdeep":"","tlshash":"400186daf0f3839e866bbe59553620c5fc880d1811bc1c82fa27795365d4003c136eed","first_seen":"2026-07-23T04:00:02.357938Z","last_seen":"2026-07-28T02:33:04.994278Z","times_seen":3,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/OVkuNGXx.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:23.880Z","timestamp":1785204743880,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/OVkuNGXx.js HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\netag: W/\"19e9909c0986e05574ee8b28557566c4\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g5CJzVKcILMR3qK%2BL7Schphg5jVEop%2BQO6M%2FaWjmD4I2uri3TGMIh1qPjgZhTIArV4WnT%2BLGeuExdVVHvZyYnDSVqnVdbO8IPsVeyJigShXJnQt1ptn7hs4Hy1E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd13d0db500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42581,"size_decoded":7343,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1726)","md5":"03ef229cf6faf58fdad040f4e916be87","sha1":"6f897eba1579498a9a23c5e2ea0c863568a50ceb","sha256":"4d9973d3639273f1a670e8469795ac57c0cc2e0d3f5653efc22cc34d4b091a8b","sha512":"a0044f2d4592d000bffd356d713c323844eeebc5a481d19539865ca854bf90e7bcc9b2eb2936a69c68437a899c661e13ad41eb75b85d281b9f2823d5aa376c89","ssdeep":"384:B8YT8VY4cIoClkavs/tqRwtScNU+LTkPlW:B8Y4Vll1s/tqRwtSCU+olW","tlshash":"a1139971c7b64897103684cce6af961213c41ae996954f80b3adc7bb7fdc0a03c6e5e9","first_seen":"2026-07-28T02:31:43.289575Z","last_seen":"2026-07-28T02:33:04.99637Z","times_seen":2,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/flags/4x3/tw.svg","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.318Z","timestamp":1785204744318,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /flags/4x3/tw.svg HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:24 GMT\r\netag: W/\"8d0c6b256836538fb46844048edeb5a8\"\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N2WKLTRG4UTr4f9GS1YRmQ7iGWc7Yb2x0fjPTCw3UGvLn%2BRxMqk6LDcqgD1PnkrOH%2FqgKm0UNDywtJwiBDpJ8rX5%2F9rorx%2B9Xz%2FHBa%2BXYm5DM56nufplfJXjtLo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd3fd3fb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2499,"size_decoded":1624,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a4b47fff88d0596123054bb88aaa2ca2","sha1":"fa4464225aa8743553d66713d8f4ef4a206c2554","sha256":"931757f06b9ee751fd1a0cc8dd7cf862e21fdcaf894d10ed7bcc68dabcca59ad","sha512":"c29e6d081e6f86a649fbd9f7f4ad84c879fba37db78864b9ad919e1500a156fd28b6281e7c237188d90c7739fd8304a9c13ac9462cb2e404d8a1c614bad4f7a2","ssdeep":"","tlshash":"cf5147bad3e4f17249a297289b7c6135745f01ff82dd2292b6ccde541708ce5a09eec0","first_seen":"2023-05-09T16:39:08Z","last_seen":"2026-07-30T05:40:38.602397Z","times_seen":187,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/images/carousel/icon3.webp","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.335Z","timestamp":1785204744335,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /images/carousel/icon3.webp HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:24 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"de867c1627aaf885319154e4fb210d75\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gWGe%2BF7Tl56iMprzE35ise9fMIxDHJ2sWmIBBNM%2FN6T82Oenqpe9NBJQEU3K1%2BrLKatqmX4aSjJOCpSyjm%2FxE5f5nsBFCgSKuWOxYoB%2BfX%2BbL9xjw%2FMN1j81bMY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2205bd41d46b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7788\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7788,"size_decoded":8448,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7cd9cba25bb5ecafa04cd3b186a43894","sha1":"12d26ad8301254536dcbe1e38486a838c5cd2c7d","sha256":"4e39d8260f45d00d03e3e55a6a44c3057753fb6fc51b5df5c34fb203f493fa99","sha512":"71b7fc50032264f8e817900722d9fac2f3de47d84509e91bc13a6d85225d8c18e7f5ae23943b730859fa308fe6316019dde2c71227b5cd556bf66d0969de58be","ssdeep":"96:bElbw+iTINqAN2Q9Bu6AMBta9EX11XNVie2oG/sCszA7rdnokYyTlOC:mw/q66XBw9c11/IoG/sCsz6doz8","tlshash":"f6f17da13ba446cdf5e236b029c88777dee53aa0654adc434ca457b23106ae9e51af01","first_seen":"2026-07-28T02:31:43.375244Z","last_seen":"2026-07-28T02:33:05.000226Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-17025120075","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.744Z","timestamp":1785204744744,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:37:33 GMT","end":"Mon, 21 Sep 2026 08:37:32 GMT"},"fingerprint":{"sha1":"85:82:80:E9:F0:BC:08:B5:D8:5D:91:B4:E5:D3:DB:B1:A7:2F:E3:F3","sha256":"E3:94:E9:DA:2C:F1:36:09:33:63:D3:69:08:E7:E6:91:8D:F3:61:7F:0F:D0:5F:8E:B6:E9:D7:F3:DD:10:3C:DC"}}},"request":{"raw":"GET /gtag/js?id=AW-17025120075 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Tue, 28 Jul 2026 02:12:24 GMT\r\nexpires: Tue, 28 Jul 2026 02:12:24 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Tue, 28 Jul 2026 00:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 153805\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":441823,"size_decoded":154455,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5422)","md5":"a259a86e78af32536cc702f3722ac001","sha1":"9273d3de24a9932302dc760245bb14d88ae842ce","sha256":"97808fc055aa6d825c3d132777b135b17d26e7b83312151305897a7981d155d3","sha512":"f80a7da4b18d7383b76ee8eee6b07e860952f9f9cef4d9ebeb119832691c801d7ce0647e49055992b7480ca865e6c459f376536f7256671c73932e1d64e588c0","ssdeep":"6144:DvCz1mjGJaCQ+1nrAqzQFTcp8fjEAM3qk5ES9ZXbq:DvCpH9td/ZLq","tlshash":"c79409cdb3d670225392f478503f018ba57a29e2f448c899f189dce42e7469a8277f7d","first_seen":"2026-07-28T02:31:43.359441Z","last_seen":"2026-07-28T02:33:05.002444Z","times_seen":2,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":0,"dns":2,"connect":17,"send":0,"wait":41,"receive":57,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/Cookies.CXISQsXa.css","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:23.830Z","timestamp":1785204743830,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/Cookies.CXISQsXa.css HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\netag: W/\"65103efff3e2b44f54f96c6d7a5cf9ba\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0%2FVFCe%2FrT2qJ%2Bfd9%2FLfioV6UhamIuiqENdMWogFPLNb8zobf47WqnHtYgC6GXE%2FKzUwqC%2BszXnZDLPOTwVvKMo5xlaOIrGI%2Bad24JHL85GtlIYaQI8YVcAFpfuE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd0fceab500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12640,"size_decoded":3031,"mime_type":"text/css","magic":"ASCII text, with very long lines (12639)","md5":"adc04c3424afbfd1828a622d20322984","sha1":"d5163560a7023996f836ae2fb2913f2dc996ce4c","sha256":"34a363289257f98668f198b70d89ad161fdfad93b11d92fec343bf08758100be","sha512":"ba248032f2c8c3c3be7d8b464d6801a0ff99012d84ee4076da9ac3657cb081010c279207c0f6e201239cd718efdb4106f86fe6d15a5aa1fd49e194082dc198f9","ssdeep":"192:DcXjU0O1Uws+sH4U7JcCvQzXU/S129PEpk4EmOrz4kyCcC7CcIMuCUCxCgCgSg:DCjjaF6vAXaGE7By1oV9uj8xHSg","tlshash":"7242df327a6e2c1d6d3bc153b9d0314d203bea53c2125e76aa4a5b66fcc32533d9279c","first_seen":"2026-07-23T04:00:02.348698Z","last_seen":"2026-07-28T02:33:05.004582Z","times_seen":3,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/BSXe4l32.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:23.855Z","timestamp":1785204743855,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/BSXe4l32.js HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\netag: W/\"d1ad1ea95442b2b8b9277516c653a8a1\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7OANXk1VhtjP6MIb2Ibx0pGMbx9EC6xrs4%2BRyYjCMZ65318WVd0zEeTCj6YROiU7nxghGVrV7JzoP45TfspjKiprGwViKgC1SkPBbF%2BJ1TPn%2FK2NFObTdqMvH20%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd11cfab500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":245,"size_decoded":848,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"a206f3b315a45cc964eec926955120ab","sha1":"86310dafbcf22e96d0cfc0fa60042b29d415d253","sha256":"0da65abac1ae2f71288047dfdef58f13c2d2950a9064de1ca3254fbc5c4bbf70","sha512":"ed063e5ba4acbfc184ed4ff8932ef652791adb9ae380c017b8d932cac8cf5177f9865a140797b1f5ad9c2cbad37a46b2167bb92196e4192d1b4d82979e1a7ebc","ssdeep":"","tlshash":"f2d095e85431cdb7010cc285953437184843f750c1df44f10b4142121d273cfb04dbc1","first_seen":"2026-07-23T04:00:02.295517Z","last_seen":"2026-07-28T02:33:05.005855Z","times_seen":3,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/BmaSJQ14.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:23.864Z","timestamp":1785204743864,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/BmaSJQ14.js HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\netag: W/\"bce301ea4056032fe1d2ae3663dcbfc1\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AnBOgo1atfw3NYbFP%2FKrrfC0vRQWztToqwfVJA9VLiUMorIHtSArykcQACxSf4n6ynVr4f6EKXlT41Z74ZodHmAOZiFP4Dfc4itmAhG30hHkOYzRBJxKUEdfA6c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd12d01b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13435,"size_decoded":5413,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (13434)","md5":"42ac261456c1a25b5c7841711f274ded","sha1":"9c2fcf7aeeca003dc5c786a1e3d06c8ac58bfd10","sha256":"88998a7c9cb9807acd66507979ec3455ae765f80a3e213fec6f40b437a634ee3","sha512":"0c439963b0aa103f2406d9664d5139900147ba3bd652c650a5cef98a0de14c9405c17e0e592bce2c530b070bbe77228a5eca76a27e4dddfba56170fdd1a8ad46","ssdeep":"384:p+wEU8CbBaY6CPaQovYbNu+6HPxkoCDyO:phaCaQoAhuu7","tlshash":"4d52a63de92ef82de63248d01459c4007d2d2f7ba3cd4836e9fd2d3a5382934aa1a795","first_seen":"2026-07-28T02:31:43.308988Z","last_seen":"2026-07-28T02:33:05.006963Z","times_seen":2,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/header5.BcSPdOAX.webp","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.287Z","timestamp":1785204744287,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/header5.BcSPdOAX.webp HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:24 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"1f30a719adb4e2ada9fc29e7a90f4b33\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1XqaYSMrm8hik%2F3xePmKNQobRGbLiwE9WTEhH5nnweYzy4zYs0IgK8O5gTNyY0%2FB1AzmKfEdF9Pb8M%2BBnh98jAv2sLg4srOIhWawj8%2BIPfy3ziqRysZth5QEwL8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2205bd3cd31b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24456\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24456,"size_decoded":25111,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5825095e20f41beb243d5b430333574b","sha1":"8b34502e3964e8123125a225b619a09e3a546616","sha256":"d7e6a9b9ecb86dcd59cee44b4b17e11c375ea95cf0c496b96ad90aa84064488a","sha512":"0cf13bb4fa2ff47eb51845f5909a92ba99948b94b708186de7813bd6fd1166f23ded874dce8943d0eed4dee5ac13ba2bd8044da79d6d3b96ce3494174ca30fcf","ssdeep":"384:Qthzy7dmxqT5pmbPNbaOT6NkxuXaZSwvLc6izRxlKRlfqK4AAxm0W12j5ZgIttkD:AicgpYPNbaOmNkxMaZpvo6woj4AX0Wkk","tlshash":"81b2e09361e0c0fb05311a74e063be285af1e55867b31ae2886f0f921db9fc117a9537","first_seen":"2026-07-28T02:31:43.339798Z","last_seen":"2026-07-28T02:33:05.008846Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/flags/4x3/au.svg","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.302Z","timestamp":1785204744302,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /flags/4x3/au.svg HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:24 GMT\r\netag: W/\"dfbc92200e12ddbd375ba8ed59001fb8\"\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qekIZlMecgc7TCPRjOvFBpvGVcrLFfkHNzZzOeRE4MC63vMHY1xWXejZJxxvCSggbtUJ0HKyLwsoeJDkBgz53DI1jR%2F6zXrEIZb5z18WrqwYMk815%2FQ9PfUZL5E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd3ed38b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1296,"size_decoded":1356,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"26b17d670b64aafb25fdaecf3b74e934","sha1":"630d3cc1a29b86023ab331836acd7ae3791aec07","sha256":"cbb2206c5e59a25d79228306af973666a191e163f0ae337681f447977e6edb18","sha512":"2355a48e7f8d67e3b999946d84dcf566ccb71292b848315692bac01a1dde840de237c4cd3f0faaa014fbeb411e9e9cfac01a44a5bcb2376e3f236e32e8596c87","ssdeep":"","tlshash":"5721d264d3eaa334ddc683a51b3c3ee0b85a52bd92d0e29d40b480f0b2b54e4d5cd9da","first_seen":"2024-02-29T10:33:06Z","last_seen":"2026-08-03T04:14:30.765939Z","times_seen":387,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/favicon.ico","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.482Z","timestamp":1785204744482,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:24 GMT\r\netag: W/\"69eafdce74b870ae0666f0a34cc61f0d\"\r\ncontent-type: image/vnd.microsoft.icon\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5uF0XEZRydW2VTmv4LBRz9sRJ5%2F%2BP5SR%2FtSOmeuNav1enx%2BMLL66YKlwWzh235AE%2BoQX5YQPrGV0%2B1GEPs4IHfg8%2FqDWXZuuB220niBtCvLqE59hzxWE2eReBHA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd50d4db500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50820,"size_decoded":41726,"mime_type":"image/vnd.microsoft.icon","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"71054de3a91d647f9a18de77845432ea","sha1":"f833ea79d649f69e9ae61060d15e463ee1ed33b6","sha256":"f803fdfe6c09c44076d156940b69faeb4da6a2fbb77ff08e671fdab460d2a1ad","sha512":"f1d520d6390f1a8f954ead1fa2caeff855a5d63bb4792948ebeebf4adc7abfdbbba7bc579efa0d37e60e371cf8adea2d872269ba7aa7436733097b4391bffd20","ssdeep":"1536:fQewXCFjz/2KtpxEjE4JSgJkkGB7pg7pE:4ewyF3pp2JSWkkGngNE","tlshash":"7733059bb133b0b6e5a7ac9570b8701e58021d367180da17f1e2a79ef3b7b601c75e90","first_seen":"2026-07-09T11:59:53.550447Z","last_seen":"2026-07-28T02:33:05.011683Z","times_seen":4,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/C1RMlSs1.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:23.858Z","timestamp":1785204743858,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/C1RMlSs1.js HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\netag: W/\"de084d1161afa6b9e36d79cff21d2d12\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zoqfquga1fjkLB9hZ1r6cVrw7VOAgslTj54xQNXE80gkrk35mY81xeykJ6Ole42L5SrEHrAvGOmeOeFZmtA3GInn4pU95oBty6tskcXalcM%2Bh1G2BwH%2Fm1GblQE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd11cfcb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8867,"size_decoded":5554,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (8866)","md5":"09c29c6c4431e4016d3d1eb9feb617a1","sha1":"0dc87091b904f73e0608b0acbb99a9416232d085","sha256":"b69b316c54ba687b9845033ee5a2cc0e238caeb46549c2c77c17ebb3c8973ebc","sha512":"629eb566ed30258a23dccb0a8a49166df6c34f657f4a856235d794bb9dcfcb8cfd5a3f36a6121049d3a950869117d5ecec9b381c758baced4e72f7c0cecaa367","ssdeep":"192:NWL7OsQX16TFso/Covnw2/Mq41nDb027wK37OAnH1cgljm0c3sL:oLasQF6TFZ6YwDfDb02j3aAHBGw","tlshash":"19023ab4243efab97a5209011028f50b5f592a07d0ecd4edb6d0453692daaa4df4ee3a","first_seen":"2026-07-23T04:00:02.352809Z","last_seen":"2026-07-28T02:33:05.012581Z","times_seen":3,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/CSX--SPV.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:23.859Z","timestamp":1785204743859,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/CSX--SPV.js HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\netag: W/\"3b919e1fa34c21bc057f2eda29968214\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EoAMROL5zrFP6uzvBkODQFSH6x6FMn1BTXdw6N1XXwNlLc9jqL284J6EbIUmW5imK%2Fqi9xz2FAGgBK1Mkg4mO289r0Uhltru%2BMAUJa6GQ5ePs10LFlXVq78ByQU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd11cfdb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":956,"size_decoded":1220,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (955)","md5":"fee1860cb2cad622227dfa061ca4c2e6","sha1":"56602145f6635ccf52e0e44e635149a9dd2c5370","sha256":"7744002c494f2f89af363a42810027fef72aa7934aeed923f0d489a0112a1c69","sha512":"2ce0d94db00f5e549569af31c9957504420c90d894ebf7282f4f4d6dc302b985343b8bdd6e9aabd55d4f1819acef35c56d03b30d976040fcdb732cc35d3e9c6c","ssdeep":"","tlshash":"ac11089d7c5974f047b3499185110819562916a1693518d350dfbf6c2fefcf9634f81c","first_seen":"2026-07-23T04:00:02.331963Z","last_seen":"2026-07-28T02:33:05.014659Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/MV9hPO5W.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:23.868Z","timestamp":1785204743868,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/MV9hPO5W.js HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\netag: W/\"bcbb3340fda7e7a1d1edf42e95cb50f4\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CdCCZ4RMo9J52Wm116S%2Fu5aXeWAMuaF8evcHcNGOK4Aezq7dJ%2F7nxJjSONKMSolzDyz9CUoKKQusaCaSWFa4OubFg%2Bree%2BqZoXjlcPrlyeRRvrZ00Pgo78OjEA0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd12d03b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90,"size_decoded":765,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"55cc40372fc7d638fa8cbb587af74939","sha1":"67e5eb1c59a62ef951d9fa1dbf40269421aaee27","sha256":"45bee8d6e9aa861139027416591f1a3ee73bcc46c5dba49d13879d0cce62ae6e","sha512":"7c3ce84247b600184e979356ac188148f22afc323f3caaf4763af99a5dceab0d711da5e49d5bbbd4d9646404e47273ac5738f2bbd72647267b9c45ce99a312e4","ssdeep":"","tlshash":"49b0124f047474b617054cc8771a5d10042c346837509bc020040d030a62487000e681","first_seen":"2026-07-23T04:00:02.234958Z","last_seen":"2026-07-28T02:33:05.015827Z","times_seen":3,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/superior_right.DUgA-iCo.webp","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.255Z","timestamp":1785204744255,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/superior_right.DUgA-iCo.webp HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/web-assets/index.BA_rpDMS.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:24 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"c715d58bc7606e2a6240cb9b725ed49e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8QWCtvTiV1O9G8q3vnm9QfeeUOyGt53MgJe5cDkwE7HTDdtKKmefUo5vO8dkTCs3Nj9YJzcMkLxBJP97eNpK3dciOa2wB1yq7L4B%2FvTn%2BP%2FuWSSk91Oroa2Q5ok%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2205bd39d27b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 374948\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":374948,"size_decoded":375602,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ae5798a30b3f6e0e0011b997447631d6","sha1":"e28822dd171aa18fc898e572e81a1df6714c7334","sha256":"8803743931b5b0d8ea2453ce6bd7ce22d234cb6624859661a8328cdfd3f4081d","sha512":"ff4c794bcac4ceaaa4a70db87f084026fc624144b646d0ca33a5858b5bdec4819db7e4e88b4197e2feedbb4623631773ca4b3e137cf8ed82cfde7a7300f53be8","ssdeep":"6144:bJE0rjXlWxVNtLEixLb7DFXJIcVYaKIg/qwJaNAgwNCKbOmnbbWoUg43jj:bLl6VfEq/7DFXycuaFg/JqApbJbb543n","tlshash":"278423d32779aed8c7564ffb5b3012372189d989a8e11b2693be52b8e6116ccd09c870","first_seen":"2026-07-28T02:31:43.34469Z","last_seen":"2026-07-28T02:33:05.017117Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/images/package/icon11.webp","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.768Z","timestamp":1785204744768,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /images/package/icon11.webp HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:24 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"bfefec4aabc099b8077ae71a5508fb4d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lvdSJe3yiGyOVnnxVbBIOxnV5Uunj5OF8561TUTf%2B5UM8rTX99k0ItkuuHFysW2uIr4Mxxh9N%2BLLLnBE%2FpL4avVBXryTKQZo%2FWgfEUFjc3ZOu0pOLGnB%2B%2B5Nl%2F0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2205bd6cd5db500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6788\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6788,"size_decoded":7448,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"74bf66eea9e22d6cf86bacf8d8272d95","sha1":"17ae422eb0130fe844e4551830773cd11cbb3499","sha256":"1e1612b605d9d70e4c680891923455c01029d05ea9ed91ad01485c78d5b164e5","sha512":"7a16a71f929ae18f3536bbb43c4b72e84c374dc890fdd088821ce5a140ecbb2aceb108d8fa2e0641c3a5c67455be5ff5d40b480d27fadc04278a09010d1488f3","ssdeep":"192:qwzYLePS2cizDc2Kv8FP7P9T6rsnHKhU8kr0hUBYjqc:qwzYkcifEAVT6kqU8W02BYjH","tlshash":"3ae19dea279753b8e770aa7888503857d7d338bb47d85b71008ad5e9c1305078b2ceca","first_seen":"2026-07-28T02:31:43.332334Z","last_seen":"2026-07-28T02:33:05.018791Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://service.croxy.com/cable","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"104.21.22.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://service.croxy.com/widget?encrypted_request=eyJrZXkiOiJlWFNPVjgwZWxDRjg1TUhRaVk1NHdZWnN3TmlrSklKMUI1ZXdlWURyWGFwaEtrRDhvVTUwd0hxamVQdGRReGluSk5uZWtNNF84VndfX3BuWGFwQjhaNG9pNV9fRXdwcThvU0Z1VklEZENPcWs1VkhjWTVzV3FVdk5fOEs4WXJJNVotWnpaTjU4cVY2cVhKTlNPczJzTlJncS05QlpFamp0Z09CcjQ5Q1ZUT01URExxZ2hLZmpKNGstck5OOURsU0VwRnd0aklGbUtETzZQcDhOV1ctckU0eFdlS2VGUTZCYVBUV1h3MkNzQmJoY1gxb0Q2cldXYXFtUXFOTGV3NkEwUDVseFRyUlpBQTZCNGNHeS1ReEJmWXAtUmQ2bjdTRUJNaDluVGVMVjlLdjZKenJJdHF4SXMzSFhUUFR2QlVTRm5Mazdkdng5MHJpY1ZyVlh2V282VVEiLCJpdiI6Iml0WEExVVRfUUp2QURYb3MiLCJkYXRhIjoiWDhNWXFOQUJrdFBpZmRqak84RTJHaERBVVdWVFlKSTYzVWFzeE9fbVJVRTlIYXQ0QUpJVE9JUkJ1bzJ1RVNORy1DZmcwOGRWeGl1VC1Jalo0ZS1OUVhzSVNQY3E3VjAxZXpsT3E4QmpwaGtMNkZSazBMSGJ2QnpwSFYxM3FPQXpzNHpZdThTc2RQRkpGS3pRdVJxdjZHeGxrV0RwTmFqT2lSTElwbjlrbjA5U1ZBYU1YQSJ9","date":"2026-07-28T02:12:31.285Z","timestamp":1785204751285,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /cable HTTP/1.1\r\nHost: service.croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://service.croxy.com\r\nSec-WebSocket-Protocol: actioncable-v1-json, actioncable-unsupported\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: FFFnnxT7AGERoKRTfaPU8Q==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nCookie: _gcl_au=1.1.2135620745.1785204745\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 28 Jul 2026 02:12:32 GMT\r\nConnection: upgrade\r\nSec-WebSocket-Accept: usbmLS2jv1/7A8ChnZ30GXk4DBs=\r\nSec-WebSocket-Protocol: actioncable-v1-json\r\nServer: cloudflare\r\nUpgrade: websocket\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1jTPSD7ofHzDk1Mf0EpghLh%2B3BgeuVnzQx5Dr71pBMY%2FUq0nw%2FYyUaOgufYxK7Do7XwPJAc6PxPbPymoHMGMfglCUrtNgd4N8kcSakCbu3snbLOEEOhvxO4XN1VXs3XkK8fv5g%3D%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCF-RAY: a2205bffade70b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":646,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T17:30:19.662588Z","times_seen":17693622,"resource_available":true,"data":null}},"time_used":1559,"timings":{"blocked":0,"dns":13,"connect":14,"send":0,"wait":1524,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/api/v1/widget/messages?website_token=PEejQjXJH4vwpWAoxibBeAjo","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://service.croxy.com/widget?encrypted_request=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","date":"2026-07-28T02:12:31.291Z","timestamp":1785204751291,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /api/v1/widget/messages?website_token=PEejQjXJH4vwpWAoxibBeAjo HTTP/1.1\r\nHost: service.croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://service.croxy.com/widget?encrypted_request=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\r\nX-Auth-Token: eyJhbGciOiJIUzI1NiJ9.eyJzb3VyY2VfaWQiOiI4MzU1ZTdmYy0wOTQxLTQzYWEtOTgxYS0zOTM4NWMyYzUxOGEiLCJpbmJveF9pZCI6MTYsImV4cCI6MTgwMDc1Njc1MCwiaWF0IjoxNzg1MjA0NzUwfQ.ZP4De34v2neCsU8g4VSYmsxAoyCel4tzpR5iCzMrr1Q\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.2135620745.1785204745\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=0, private, must-revalidate\r\nserver-timing: cfExtPri\r\ncontent-type: application/json; charset=utf-8\r\netag: W/\"258153158e38e3291e3d48162225fcdb\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-request-id: 4c9a8c69-91bf-4941-ae19-eaafc1a09a54\r\nx-runtime: 0.039609\r\nx-xss-protection: 0\r\ndate: Tue, 28 Jul 2026 02:12:31 GMT\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n9oQVsmcrDi9B3VFeqAiObOBgDj1WWuLy6nClLbDefGs1xOztzuRdw9y8TYm%2F6aIh7ZaTgcBdkd19n2FddAL%2BmIvmNAoXzN30ONE1cJoKyhgCDAtwhVReDkAXKx3xroZvBr3pA%3D%3D\"}]}\r\ncf-ray: a2205bff9e89b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14,"size_decoded":998,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"af1fd6795b95d5be36b37d5281fdcdc3","sha1":"1bb3365ca69f2475ce5d789503180db7256dcbb6","sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","sha512":"284ea516df7e3636fb847431b6d91444a5987913985a01228395a2858954d7e654d86f099c20345e76e3a830bd3004eb19dcd4cb75a1e8f442168cb0e16103fd","ssdeep":"","tlshash":"2a6000000300c3000c0000c0c0c0cc0003c33003fcf0003c03000000c300cc03c00f00","first_seen":"2023-05-21T09:16:00Z","last_seen":"2026-08-02T10:43:32.725951Z","times_seen":2615,"resource_available":false,"data":null}},"time_used":694,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":693,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"service.croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/index.DE-a5mRO.css","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:23.834Z","timestamp":1785204743834,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/index.DE-a5mRO.css HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\netag: W/\"84d48971576c89d8f3bf051089e18d9d\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UzShEszsiggS23CtGxUl99EvNflqoV%2BTye08BY5KgnFyLBJALNKt87X3WSlD7svNx4grxkEjXsg9rxeiAHZwmfEbp1BT748uGu0KpKvPx9HR6fOTWCamsxjoAow%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd0fcecb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3902,"size_decoded":1555,"mime_type":"text/css","magic":"ASCII text, with very long lines (3901)","md5":"c03eaffdbbebc6073cebd718d72bc732","sha1":"02286675a1e978d746e3dad41cf62a8605961874","sha256":"56f5c5f6a1ec0a3eeb5eb2240c9d06ca1460e97c606f4406dc92b938f2db116c","sha512":"0e6074726dee77cc34c804f2ebcf01bbdd94222ec2628d4f57279291e44eda19c6ae45d58a9df3bef0299672b9dcfe34e59a0442290e0aec5361a119e8d9e699","ssdeep":"","tlshash":"bd81abb3ee1d004d8737c1b62190d28b653072d296921a3af6e3e239cdef1e5354ba5c","first_seen":"2026-07-09T11:59:53.546538Z","last_seen":"2026-07-28T02:33:05.022116Z","times_seen":4,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/Questions.CVuIf056.css","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:23.842Z","timestamp":1785204743842,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/Questions.CVuIf056.css HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\netag: W/\"416495de3fbd9dc5c3ec1f347e065a4a\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UkirnkUSoQ7l%2B0bKSE8vU09ULkm9zBJbpl8%2FZ9A%2FCD%2FWPvAVgwBszs%2B5MIR%2FLrQXAu8oTSNxpHtHeI84bbG144LY1T1H50Tf%2BaMqc4DSJLW5ezt9Nltlsi9Al3w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd10cf0b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3545,"size_decoded":1411,"mime_type":"text/css","magic":"ASCII text, with very long lines (3544)","md5":"57cc05f64fe3e7b8670cde48f42df55a","sha1":"7838ee83d1a21148e140fdd32544a14b5e99bd99","sha256":"de13475a4aa49f9687e9bda08620e95d19ce0645878705b6142b6454176d94b3","sha512":"676f6466a2696f501ba9a7642834137a74681eb74a03c92de7ceeea3460cf7df08e524c4251afe5376fcaac1339fb12269cf60761cbfac1344ab70fc3e6be135","ssdeep":"","tlshash":"58714cb620493125d277b15e98c2770d9d1ee332f905817e6297db2cfde628326e3728","first_seen":"2026-07-09T11:59:53.512094Z","last_seen":"2026-07-28T02:33:05.02293Z","times_seen":4,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/builds/meta/95023f30-6031-4f52-ab3b-1ba2045fac9d.json","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:23.894Z","timestamp":1785204743894,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/builds/meta/95023f30-6031-4f52-ab3b-1ba2045fac9d.json HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\netag: W/\"d90aacce3d104cde20c830c440f8941f\"\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=InDB10zcWvTF9yFUeFWDvcxz9c8yIlDmOecIVYtJH4lbIE4VZrKEZjQO5p35vkdw8G1JaM9aSPGbyNfF39Xxccwwif5Io9as6b5m%2BTXLCN20JFBUgJDAgQ0wTOg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd15d16b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":187,"size_decoded":819,"mime_type":"application/json","magic":"JSON text data","md5":"1c8fa1532ca2f1b7150167547fb31d60","sha1":"a83d8ecd24940aeac7b679163ac005616ef299c5","sha256":"9406d01043eb71fb9ddd4674df811423233c86bc697440be01daedcbce5b5ad5","sha512":"4bbeb3aca0dcdc78819e3d22dd8cf51ec72befd3c77e4932b3196b5be636d45a9887e894ddf7842b4fb6a59d7a40d832e0dac5de730010a13f10e2f28cdb70bf","ssdeep":"","tlshash":"8fc0c0314c002940b62d7ed3c0083c12917b01f251bc887cae080c3e10dc00f343c6d3","first_seen":"2026-07-23T04:00:02.347526Z","last_seen":"2026-07-28T02:33:05.024028Z","times_seen":3,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/flags/4x3/th.svg","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.316Z","timestamp":1785204744316,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /flags/4x3/th.svg HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:24 GMT\r\netag: W/\"acf682be4ec65fa52f7d509ad3070e8f\"\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S%2FcfYXdHCUzqBSam16QbeFAEX28P9Po%2BBVXGaNt8oMCxn%2FIeYtCrg1ZPLSJdHtrkF6xHwF1tVHVTkLUnemkVjUUAwtRuNbST2zkp64a4VXJljtMc6oY618tKl9Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd3fd3eb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":284,"size_decoded":849,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bcc03a3cd1a367274a2444aff71c0a68","sha1":"cc941547c987ff2a0de3c2429094e2471b003eeb","sha256":"329cc0d520536d6eb4b9304105f23650c2d02bbdba8f8696e996dbf166de6f2e","sha512":"a962596a3e7d22b5f6bd96fe44a0da33668527b503621f4a3ff00cc75125f4dbb2702279c737aaa2d9bd56eb5ccfb00c59550326f362c662c38cba50b5bf9e5e","ssdeep":"","tlshash":"a1d02bf8c37c74144d4882300eac72d29556608a115810c7b8a12da539591f39cc79d2","first_seen":"2023-08-04T15:07:25Z","last_seen":"2026-08-03T06:44:10.912017Z","times_seen":1325,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/images/carousel/icon2.webp","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.332Z","timestamp":1785204744332,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /images/carousel/icon2.webp HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:24 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"0158e586dc3535af63b2211e0fae95c6\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tp1gbnunX2dDulCdlSA9SkrHQSeZqunsP7Oay0R34uxcLacAZoxb6w%2BxTFQLeUB7j2xZmAG8GZtF0LhB67fnZLpje5vGQXvSSWW4gq5hqAgXTnNztdapGeV8GRQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2205bd41d45b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7516\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7516,"size_decoded":8164,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d6bfe89ce153f620bba5fc5442e842fd","sha1":"f6a168f38801de7c611b59e9c7b9a380a4c9496c","sha256":"be5f3f446eacf06067c447365523b0c2b085a749d330d0ff026052cab925142b","sha512":"d0c144363bff9e51282f0a98cdf6cecaeb579903d5a49fc6c070d61b9a116f9e143df0e20cbd56a3b8d250718cfcfc490a313b53133b5feec02658386ffdd474","ssdeep":"192:NwLOnRVwGi1/YfpqRS0NEocQUnelJNWksLd:NwERyGKJQ6XYnelvVsh","tlshash":"cff18f7bc9f91a04f75e237a19311633cb3d89298852b29597e001412f6c5e8f9e86fb","first_seen":"2026-07-28T02:31:43.261411Z","last_seen":"2026-07-28T02:33:05.025372Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"media.croxy.com/accounts/33/r2/28/inbox-avatar/0r4trwqwzp626dgxh7et0gsppomf","fqdn":"media.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://service.croxy.com/widget?encrypted_request=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","date":"2026-07-28T02:12:31.331Z","timestamp":1785204751331,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /accounts/33/r2/28/inbox-avatar/0r4trwqwzp626dgxh7et0gsppomf HTTP/1.1\r\nHost: media.croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://service.croxy.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.2135620745.1785204745\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\netag: \"3ec4483f40c589f6e194c8248f34e6ed\"\r\nlast-modified: Fri, 17 Jul 2026 03:02:05 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ODicBdBghIsqgFoG7GkPcmxnlDYK%2FJRRmJg%2BXrMaEXaNOsNX6zEwrO1y4X1Qx0%2FKdnKltf8yXJSSilwOn%2Fjj%2B%2B%2B9a3JTPWabeSrVQ7uFcoFC4F4VhQk8q59yLgxedbddMFg%3D\"}]}\r\ndate: Tue, 28 Jul 2026 02:12:31 GMT\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2205bffde91b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4508\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4508,"size_decoded":5196,"mime_type":"image/png","magic":"PNG image data, 60 x 72, 8-bit/color RGBA, non-interlaced","md5":"3ec4483f40c589f6e194c8248f34e6ed","sha1":"67c7d39da74e943ac28b7f5bb150ca5a4b59aa5e","sha256":"07cd5990ab9ec57c80c994644eed540f4abf223fb28f35f2a4f983a05f9527ed","sha512":"28b6a1b00f1f6ee3b510bef235a63e56dcb634636b8b6ce028264482757fec4671999d102331098cc1d522d177fde43d344172983ec8340c7bbd1e0bda20ec17","ssdeep":"96:cs3DFN5d86pGtkecIBIFqf7EPRq82MSwvj4Xl:ceN5PpGtkecyIFm7WRqFMcXl","tlshash":"40917c500aeec75ce38e10aad5054c2614c5439e7cd42a1ee809d474af56f522bae39b","first_seen":"2026-07-23T04:00:02.36207Z","last_seen":"2026-07-28T02:33:05.027229Z","times_seen":3,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":5,"dns":4,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"media.croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/CDHKXH3t.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:23.892Z","timestamp":1785204743892,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/CDHKXH3t.js HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\netag: W/\"1a278681cbede2ccbc086bb567f72c37\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=av1naZ8FO87103R%2BvzqFIGdCjQOtP9hxvHFJyScVvXeF3CeLMTwdMVONuxn6P7T0xH9X9dJklKjN497XIgS1wmQS6mYwUC9nzRW8uj2Qz8GsjjPHnuvKoB4SKKo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd15d15b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":226,"size_decoded":777,"mime_type":"text/javascript","magic":"ASCII text","md5":"510b3ef6d73150c5c10079e9e38494fa","sha1":"a1bb4a5f16327ba87b5c19d3987eb2e6fec9605a","sha256":"8078d56653cfe837adb75c022219a9ef024d2ab7b4296d96e42784e73f67f25f","sha512":"456c292fe986a3ad6119d28707179f62d52a7158c963bd38a510577fc061002e39413c2079b266412b5b6a553a803650f471352dfec1452fb2fad4ab64ac08a5","ssdeep":"","tlshash":"3bd092a20fcfe6a0e0e4545ff8062760d909884e6370c28467fadee414449ab396d675","first_seen":"2025-11-27T00:45:11.493215Z","last_seen":"2026-07-28T02:33:05.028515Z","times_seen":8,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/header1.DF8hohEL.webp","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.284Z","timestamp":1785204744284,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/header1.DF8hohEL.webp HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:24 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"d4f245b2e2ddaf9ff01a6cda798a8a04\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gShw3gzejrys%2FN%2BFUuv8QXtXv1ku1llecTvKsjVAhsWx2gjQekDJ53Zcm0v3Ky8XLCgmieD9f9xW%2BbzCqz9rq%2B3IU%2B5qZ4QvEZ54t3YzlnEN42447YS4NaeOxS4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2205bd3cd2fb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5754\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5754,"size_decoded":6410,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f867b861bb8495726079629bb744c225","sha1":"30f528e146170987a9218f6e19d026166ad75981","sha256":"05ed64ea8a167e3dd020adf3903d1cc8b55913efcf09ef9b80b08adc1072f460","sha512":"ab1f8a4bce39dfe25c447b74d7a69f65dba893b8b61683b8fcf4c7f7505e21ac457e827672bde147b2ec976d9652877689c581f079a6fd3840e356d0886a717c","ssdeep":"96:7Elbw+iRj2GRncpKLgrZIKe9yY3pG//U32Hg/w9dhzRMf+VW8N1oBH949LXMVPWz:GwlVRc8LgrZIKeJpgCAg/w9pC+VWLBH2","tlshash":"63c16e7f6721065cd5ac6eb316901a0169783ffac48eab72c2404f2539449d3adf9bcb","first_seen":"2026-07-28T02:31:43.305751Z","last_seen":"2026-07-28T02:33:05.029669Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/flags/4x3/de.svg","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.296Z","timestamp":1785204744296,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /flags/4x3/de.svg HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:24 GMT\r\netag: W/\"180f2d5fc8669da0c0f8d7eda3a51ddc\"\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FKNLB6pNVnBSc8gYUskuEToJRs3FStgynlZy3sQYV9fhDP2wB0ZYP%2Fb8vPYTt3y6yQunEh6K0QqDDnMM4JQmKrGQ3Fr4pLaYW7xa1fI3USqOfFTy2yZhWOggks0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd3dd36b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":221,"size_decoded":801,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e88d88604d655d0bd7059cf1fbd59ec2","sha1":"f46bdcf00fbd79c764b116ef8250e678e4b71c8b","sha256":"efd480af5a154a7651f29da23ee0d09dbc892410fb4041898ddf8face336c575","sha512":"b4cd0ac36c019b56dfa1cecdd694a12401639ed47eedb5981ba4df1bccbfbd84f86febf330c96a3e7d4a7cadc1b5c92d91c314622dc764cf8c546802f8b1f836","ssdeep":"","tlshash":"3ed012a9d22e7a05da44cb301e7c75d7d1dab0ca618811dfe8701dad206e4a7dccfea4","first_seen":"2024-02-03T16:27:29Z","last_seen":"2026-08-03T06:44:10.938409Z","times_seen":2344,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/packs/js/sdk.js?v=1","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:30.709Z","timestamp":1785204750709,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /packs/js/sdk.js?v=1 HTTP/1.1\r\nHost: service.croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nCookie: _gcl_au=1.1.2135620745.1785204745\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31556952\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 23 Jul 2026 02:37:14 GMT\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\ndate: Tue, 28 Jul 2026 02:12:30 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PNE3acIDeh69zpwvbRorhsIjiUkkr7X878DvMwUsONppq6dp%2BfrZ0SmRrp3N1xoWYkIiKTbq8KAOu6EbvY4kOFwFYNmdw0PAOgvPWnzNp3zkEduSF9Bip3XDLwoi1kvYf5v6zg%3D%3D\"}]}\r\nage: 425595\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a2205bfbfe60b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42032,"size_decoded":14124,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14298)","md5":"447cd3922de264e35e44babdef27f20b","sha1":"5366ae24d05447777ae746842e5ea947c04bb67c","sha256":"69175bccb792d6f31c53fe5f72a5be001b158888226c6c35141a06355d03b3ff","sha512":"485075b40757e736f033a320ca14b8fcc22f4c2e4f7a517ea9c98e4b4cb6bbc3c61f3d77adbf2c988c9ebdf6a405af357e578c473d1fa7d6d23d8cd60656ea0a","ssdeep":"768:L2DI3D0h0i04Y0t0Z09af7evYvMBG0iKTpQRtAtjF060EfufYJurmhaEbxMzeJda:L6I3D0h0i0z0t0Z09af7evYvMBG0iKTc","tlshash":"e71319d25152397403a69a8b2aa7b30473388055f117c9e0facd987d2fc99cb6037fb5","first_seen":"2026-07-23T04:00:02.327201Z","last_seen":"2026-07-28T03:12:55.222633Z","times_seen":56,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":2,"connect":1,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"service.croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/api/v1/widget/campaigns?website_token=PEejQjXJH4vwpWAoxibBeAjo","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://service.croxy.com/widget?encrypted_request=eyJrZXkiOiJlWFNPVjgwZWxDRjg1TUhRaVk1NHdZWnN3TmlrSklKMUI1ZXdlWURyWGFwaEtrRDhvVTUwd0hxamVQdGRReGluSk5uZWtNNF84VndfX3BuWGFwQjhaNG9pNV9fRXdwcThvU0Z1VklEZENPcWs1VkhjWTVzV3FVdk5fOEs4WXJJNVotWnpaTjU4cVY2cVhKTlNPczJzTlJncS05QlpFamp0Z09CcjQ5Q1ZUT01URExxZ2hLZmpKNGstck5OOURsU0VwRnd0aklGbUtETzZQcDhOV1ctckU0eFdlS2VGUTZCYVBUV1h3MkNzQmJoY1gxb0Q2cldXYXFtUXFOTGV3NkEwUDVseFRyUlpBQTZCNGNHeS1ReEJmWXAtUmQ2bjdTRUJNaDluVGVMVjlLdjZKenJJdHF4SXMzSFhUUFR2QlVTRm5Mazdkdng5MHJpY1ZyVlh2V282VVEiLCJpdiI6Iml0WEExVVRfUUp2QURYb3MiLCJkYXRhIjoiWDhNWXFOQUJrdFBpZmRqak84RTJHaERBVVdWVFlKSTYzVWFzeE9fbVJVRTlIYXQ0QUpJVE9JUkJ1bzJ1RVNORy1DZmcwOGRWeGl1VC1Jalo0ZS1OUVhzSVNQY3E3VjAxZXpsT3E4QmpwaGtMNkZSazBMSGJ2QnpwSFYxM3FPQXpzNHpZdThTc2RQRkpGS3pRdVJxdjZHeGxrV0RwTmFqT2lSTElwbjlrbjA5U1ZBYU1YQSJ9","date":"2026-07-28T02:12:31.307Z","timestamp":1785204751307,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /api/v1/widget/campaigns?website_token=PEejQjXJH4vwpWAoxibBeAjo HTTP/1.1\r\nHost: service.croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://service.croxy.com/widget?encrypted_request=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\r\nX-Auth-Token: eyJhbGciOiJIUzI1NiJ9.eyJzb3VyY2VfaWQiOiI4MzU1ZTdmYy0wOTQxLTQzYWEtOTgxYS0zOTM4NWMyYzUxOGEiLCJpbmJveF9pZCI6MTYsImV4cCI6MTgwMDc1Njc1MCwiaWF0IjoxNzg1MjA0NzUwfQ.ZP4De34v2neCsU8g4VSYmsxAoyCel4tzpR5iCzMrr1Q\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.2135620745.1785204745\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=0, private, must-revalidate\r\nserver-timing: cfExtPri\r\ncontent-type: application/json; charset=utf-8\r\netag: W/\"4f53cda18c2baa0c0354bb5f9a3ecbe5\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-request-id: 667cf706-817e-4c39-961a-62f4cb5025a2\r\nx-runtime: 0.010594\r\nx-xss-protection: 0\r\ndate: Tue, 28 Jul 2026 02:12:32 GMT\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3YAbJC5RhGIkM00a6KWRIq6RZ%2ByUxksn6Ss9sdEcw3rOCxCFr3W3LJdaiBPjFglCjQEnhTVV4%2Bof4VOpxqAvtnYPnQE8URC6SML3QP9J2KYJcDiNdnLzQB2nGb6dejtIULywWw%3D%3D\"}]}\r\ncf-ray: a2205bffae8eb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":985,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-08-03T17:30:16.714747Z","times_seen":313518,"resource_available":true,"data":null}},"time_used":1538,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1538,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"service.croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/api/v1/widget/campaigns?website_token=PEejQjXJH4vwpWAoxibBeAjo","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://service.croxy.com/widget?encrypted_request=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","date":"2026-07-28T02:12:31.308Z","timestamp":1785204751308,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /api/v1/widget/campaigns?website_token=PEejQjXJH4vwpWAoxibBeAjo HTTP/1.1\r\nHost: service.croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://service.croxy.com/widget?encrypted_request=eyJrZXkiOiJlWFNPVjgwZWxDRjg1TUhRaVk1NHdZWnN3TmlrSklKMUI1ZXdlWURyWGFwaEtrRDhvVTUwd0hxamVQdGRReGluSk5uZWtNNF84VndfX3BuWGFwQjhaNG9pNV9fRXdwcThvU0Z1VklEZENPcWs1VkhjWTVzV3FVdk5fOEs4WXJJNVotWnpaTjU4cVY2cVhKTlNPczJzTlJncS05QlpFamp0Z09CcjQ5Q1ZUT01URExxZ2hLZmpKNGstck5OOURsU0VwRnd0aklGbUtETzZQcDhOV1ctckU0eFdlS2VGUTZCYVBUV1h3MkNzQmJoY1gxb0Q2cldXYXFtUXFOTGV3NkEwUDVseFRyUlpBQTZCNGNHeS1ReEJmWXAtUmQ2bjdTRUJNaDluVGVMVjlLdjZKenJJdHF4SXMzSFhUUFR2QlVTRm5Mazdkdng5MHJpY1ZyVlh2V282VVEiLCJpdiI6Iml0WEExVVRfUUp2QURYb3MiLCJkYXRhIjoiWDhNWXFOQUJrdFBpZmRqak84RTJHaERBVVdWVFlKSTYzVWFzeE9fbVJVRTlIYXQ0QUpJVE9JUkJ1bzJ1RVNORy1DZmcwOGRWeGl1VC1Jalo0ZS1OUVhzSVNQY3E3VjAxZXpsT3E4QmpwaGtMNkZSazBMSGJ2QnpwSFYxM3FPQXpzNHpZdThTc2RQRkpGS3pRdVJxdjZHeGxrV0RwTmFqT2lSTElwbjlrbjA5U1ZBYU1YQSJ9\r\nX-Auth-Token: eyJhbGciOiJIUzI1NiJ9.eyJzb3VyY2VfaWQiOiI4MzU1ZTdmYy0wOTQxLTQzYWEtOTgxYS0zOTM4NWMyYzUxOGEiLCJpbmJveF9pZCI6MTYsImV4cCI6MTgwMDc1Njc1MCwiaWF0IjoxNzg1MjA0NzUwfQ.ZP4De34v2neCsU8g4VSYmsxAoyCel4tzpR5iCzMrr1Q\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.2135620745.1785204745\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=0, private, must-revalidate\r\nserver-timing: cfExtPri\r\ncontent-type: application/json; charset=utf-8\r\netag: W/\"4f53cda18c2baa0c0354bb5f9a3ecbe5\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-request-id: 47425638-f483-477b-b367-b6b2ca5b267f\r\nx-runtime: 0.008915\r\nx-xss-protection: 0\r\ndate: Tue, 28 Jul 2026 02:12:32 GMT\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BXoz9fTgAmmwzEHtIuGzbZpHL3ESfdMgiJy16ED30cOT7Siqohie0hKjOAublc%2FmonuFt%2Bp5g2SuGbw6nCxxE%2F0hXuzeRTLDd1gdbvxNmb6CHsEQIPkkk7lWqLYCgFZuGvFeZQ%3D%3D\"}]}\r\ncf-ray: a2205bffae8fb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":987,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-08-03T17:30:16.714747Z","times_seen":313518,"resource_available":true,"data":null}},"time_used":1537,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1537,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"service.croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/api/v1/widget/contact?website_token=PEejQjXJH4vwpWAoxibBeAjo","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://service.croxy.com/widget?encrypted_request=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","date":"2026-07-28T02:12:31.297Z","timestamp":1785204751297,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /api/v1/widget/contact?website_token=PEejQjXJH4vwpWAoxibBeAjo HTTP/1.1\r\nHost: service.croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://service.croxy.com/widget?encrypted_request=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\r\nX-Auth-Token: eyJhbGciOiJIUzI1NiJ9.eyJzb3VyY2VfaWQiOiI4MzU1ZTdmYy0wOTQxLTQzYWEtOTgxYS0zOTM4NWMyYzUxOGEiLCJpbmJveF9pZCI6MTYsImV4cCI6MTgwMDc1Njc1MCwiaWF0IjoxNzg1MjA0NzUwfQ.ZP4De34v2neCsU8g4VSYmsxAoyCel4tzpR5iCzMrr1Q\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.2135620745.1785204745\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=0, private, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/json; charset=utf-8\r\netag: W/\"5278c07d8b5d100b9accc11dfb669b4b\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-request-id: 7d4b8cc9-3d9f-468a-965b-201d5b047599\r\nx-runtime: 0.012189\r\nx-xss-protection: 0\r\ndate: Tue, 28 Jul 2026 02:12:32 GMT\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kn0IUodaGB1lrpNmgnZ5hI7dpnNXtIongDxULlL0nEI5yxfP1sD9yoAPrgwxpMa0q1y6t2XltNqCnziYz29f5N8D90XNkDMltpt68KR1stePAn77i%2FezRMLWCYbMxI79g1Fftw%3D%3D\"}]}\r\ncf-ray: a2205bff9e8bb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91,"size_decoded":1072,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a5d9997f0f996a42fd6b770160d02b33","sha1":"adcbc9114ba163fd839bf6247da963d9ef03d721","sha256":"5278c07d8b5d100b9accc11dfb669b4b3a6438108e114b94940c7e450c3519a9","sha512":"5f2137980ef6dbe9a6dab5487ff31bad75d3279f3bb2ee8593b5f2589e71da4761d49d840dac45b06f4fc83753e9dbb6cf5bf3c899cd41f48f3615ea9a226949","ssdeep":"","tlshash":"0eb01244ef1001dc45001504f180210a6308005377083c04b900562613934a325700b3","first_seen":"2026-07-28T02:33:05.033579Z","last_seen":"2026-07-28T02:33:05.033579Z","times_seen":1,"resource_available":false,"data":null}},"time_used":901,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":901,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"service.croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/default.4QL__ivq.css","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:23.829Z","timestamp":1785204743829,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/default.4QL__ivq.css HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\netag: W/\"4c3f4e673f951eb9eaae24e1ed9e856b\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ssULsKauaav7l9v%2BHUArVG%2B3NF22GPvzVGOif5zQuO1b7EXaCPQNPJdQQD0ssh9mAbmWg7Y8qWYA1bNEgGDh4Aphn7gHG6KQwKiKy8Vm6dRt3erKnxgoVEGjgKY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd0ece9b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12140,"size_decoded":2896,"mime_type":"text/css","magic":"ASCII text, with very long lines (12139)","md5":"22a1ba1f853e016391ace67d012a4a00","sha1":"e59c75c21963586449fc5d5a64a8b518dc0dce1a","sha256":"0c1ab6093ccc5ede9d46f1fa97cb57ebbf9e12551a8a576f0df503e4af89a033","sha512":"1a789830dd567fbdceb946ef6793bb9cdb777e7d0dfe82341864ccc6e0dedb1d1735709ad140e5d75604b77228ee573172f72b80b0c1779f7d59a7ffcb47be64","ssdeep":"192:D5dmPhborEUaVnUoNvYCYKYI/GDQ5RLdmPh+6yxV1ZRDN2YVY/YIlUCZRFZI69wb:D5dm5bo4UaVnUoNvZthGDQ5RLdm5+6yZ","tlshash":"3242e133780cb029f47fc597a5a032892001d1c3e313dff89e9e59a794876932665fae","first_seen":"2026-07-09T11:59:53.551369Z","last_seen":"2026-07-28T02:33:05.036251Z","times_seen":4,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/DlzAiHTl.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:23.878Z","timestamp":1785204743878,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/DlzAiHTl.js HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\netag: W/\"26b2434d5657ec7b41cb24ffe6aea391\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M0FCajNHAyd7OJ1jwlLy9oEqznHXsW4VEMLSjugr4w%2Fwg%2BiL9WesuwxWk%2FepIVI9DIa%2BeC5ps%2BmCWvEmrhzbkARqAcGoBXfIxg7Ah%2BdfoMa37ZTZW8K%2ByjoG88M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd13d0bb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1688,"size_decoded":1519,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1687)","md5":"5f7889e1a4edeeca1f5a9df3f31ab251","sha1":"0e134d3524af8b3ac06df060d41c51353f10cee9","sha256":"dbe8232cdf22c96ce6cdbdc415a8ebea127bb7beac7a524870e63258909fac8f","sha512":"a735a441c7924e1389712c8ac8012902eeeff703ef124546e4652bbb6e395116b89cdc3a7f8c5ce3bf8764f9943cafc4a7a083566ab773193ccd5942c7167c9e","ssdeep":"","tlshash":"853154d6e6ac8ae4c8c787f501291c05a69b3cbf70d9f09ce6930a1dfa932b08419325","first_seen":"2026-07-28T02:31:43.363425Z","last_seen":"2026-07-28T02:33:05.037495Z","times_seen":2,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/CWtkE2dr.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:23.883Z","timestamp":1785204743883,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/CWtkE2dr.js HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\netag: W/\"c930c1ba9ac649bfde4cb4a7dedf1114\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zgFt1viZ6ZHgiiyYNGDj3papOA2RIyHs5DMbxZO62f7iUK751P6y%2B%2F2sRQjmnGtPJX7HiWuw2%2BpypaVuc3LcsZlt8VI0uK3HscH%2B8yo6BZRNyewnQz0AH0pzYr4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd14d0fb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65,"size_decoded":740,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"0062293c14fe568fffe4c020463ff687","sha1":"ff175fd67b04551b2f5352290f6e80b95ec1b59b","sha256":"b7af1abaac19f12ebb3298b05949a6debb74c068568c00c3cb97396395ec5cab","sha512":"2227733fc0bab7051445cd548ee0f8070cc669dc9f2015f69eb173734b69caf707c3162967bf06b28c1a606070b8df88d832b20fad7f4453d2ce0b65b12f7145","ssdeep":"","tlshash":"4ea002c7166550e5596609853726eb605c25187a3392ead013488251ed57cabc40d98b","first_seen":"2026-07-28T02:31:43.236799Z","last_seen":"2026-07-28T02:33:05.039331Z","times_seen":2,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/qzpJLEms.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:23.884Z","timestamp":1785204743884,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/qzpJLEms.js HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\netag: W/\"9ed84b5edbc5f7bb878368dd30c43916\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eUQwj%2F9R0RigchTXDDE0a3M6TVJVN77hQkOrDZGdyAX6BLZ5ARXEZUuC6w7DeFdNTimzt9wylJQ%2FWVSuzuarXmicUOLElnq1UNiUgOzL%2FpE6bTj%2FQBeUGDyHXuY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd14d10b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3723,"size_decoded":2931,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (3722)","md5":"34281adcba5f6b2a1abca34ab02db642","sha1":"ce2852766b9a33ea2245b90fd3a7e99447e64cad","sha256":"fe604967feeee9922df6ed108397d2e8a2c34a0de4874010628002c609b3c9bc","sha512":"6df90bbba35938f9e25ee8f8ebffba7eda372dba486ca4c375caa76b1529c81b04fb295514155336e58370151539a0537421d4636313efacc3f156e1365859a5","ssdeep":"","tlshash":"6e71093e6c1bd0bd6b334c802508a649bc24774fe771983ff8d5492957c4959caa9724","first_seen":"2026-07-23T04:00:02.343292Z","last_seen":"2026-07-28T02:33:05.041402Z","times_seen":3,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/header2.CdYeEw7L.webp","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.288Z","timestamp":1785204744288,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/header2.CdYeEw7L.webp HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:24 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"382037e3b39b1769360eaa068ed144e3\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H0%2Fu1Caj57Wg3jH%2FTUFh8RDXuXZ5HAfHFamTUKiizaig4uHhQnmeIkwVjyJhEADZAOhGbdrNj8VVu9HGqa1iW95xWcariSgM6bVSxjWkiWIA4XS9dV9JCvSaxZ4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2205bd3cd32b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18562\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18562,"size_decoded":19213,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f6c5b6079da15d2b29258597b90e876b","sha1":"239fd9f72a0408cc9adfb26ff0ca14785e92becf","sha256":"33d9f5c7edd4d343373a2e5961ed29572cf82d8fcf5d446762a063d840fd0069","sha512":"4cbb5ef4be7948340cd9e3e7d9ae6e93e80c70e6dde43d8030f85a5542db37b455be80e1d5083e67f8949afcf35af63ffbf6c5332dfbe25f29a5c6e12a8f1f28","ssdeep":"384:jhkcCbXuIsDidtPzPSR/sEyLQGhQonzRREq+07k23uQcZgsp4Gkip:jGvbXuIVdNPSesGhQonlRt+07k2ebdh","tlshash":"3182cfb66b782761633c960e7594a26fff232094f9d221ee854b0291c1d71de0868f69","first_seen":"2026-07-28T02:31:43.373251Z","last_seen":"2026-07-28T02:33:05.042721Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/flags/4x3/fr.svg","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.299Z","timestamp":1785204744299,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /flags/4x3/fr.svg HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:24 GMT\r\netag: W/\"0c2f310c5f0009e6d6c75eb0e639caea\"\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NsVyPa385TvUiEa7wLAthibf%2BiZ714per4HRwnK51yUHOPbbFQ66nLYxDzBQZXAOduCnG6xDKVUu83%2Ba9byq%2BErlWp7mVkPg6FTnkZeQnb1QLOtXLVv5EyXWVwM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd3ed37b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231,"size_decoded":820,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bf4cae9b80cd98ef576670139bdb167d","sha1":"a761902c65cfdca4058ce0c9d5f8eac667cd6118","sha256":"8cdacc8d79bcf210cdca2777a2c0de1f9e5862526877bd3026c9d59ecdcd4578","sha512":"bb6b5de936dfdb7f7aea85e15d22ef5a15bbf020dd055d9d0423cd59972ab6aef642db2c522435b14cf92535432fa9ea1f7c31ee4eb5f01543dcda89d4292d83","ssdeep":"","tlshash":"5cd0a7a9d32da410c74447200a7c75c254a5f0c9a48411cbe890049522190f69cc39a5","first_seen":"2023-12-06T12:02:13Z","last_seen":"2026-08-03T06:44:10.939094Z","times_seen":2361,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/images/carousel/icon6.webp","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.338Z","timestamp":1785204744338,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /images/carousel/icon6.webp HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:24 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"ab949111e0b43919178e13113aeef70c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VD2SW8aMubTHPC3SoH8T8ssgtIjCCDyLOzO3%2BK2OuOGk%2FZocUdJaWMQywLpPMYk%2BYP7Wom7lWKr7j8gWH1hMCxlWuCQvtSy%2FbdBparfCj7tM%2ByjQsliUhsx2bNQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2205bd41d49b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1004\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1004,"size_decoded":1660,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a1db77ec319847a50e7ca297a5f70425","sha1":"98702812a5a92010ca109aa3eecfb5d4fd839230","sha256":"f5de789f75c7a53cac624b5861f443c25049f334d171935f792c0f2a93915186","sha512":"48e8eff2adeafaa4ba8fdbf84cca31bf7d7305692d74d0e68d2a459b832e7e5acd28a76eda449c65ccece938299f0e22df40f3ded24f6fe1a3a8912c934b7690","ssdeep":"","tlshash":"8c11c8164242d8c1de04763a381cd716a00c9dc128fe19bae7980cf082b20b5151220e","first_seen":"2026-07-28T02:31:43.285253Z","last_seen":"2026-07-28T02:33:05.046172Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/FAtJwDpZ.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:23.867Z","timestamp":1785204743867,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/FAtJwDpZ.js HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\netag: W/\"6e27976cb6dcb6151876e510f83d3d30\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6dTGwSfmSwZgqr3lwycpZk4DemxCPPQVUp5nKvywvManKLnkDOEoz5OhzUCf%2B4zweFFGA9eCuucLKrBgZyMUZqUsIOtxGYb7dgmJls0n%2BavwHbL5JkcWI9x%2ByO4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd12d04b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":511,"size_decoded":1001,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (510)","md5":"3a41751b5de2b2714aa199408714a8e1","sha1":"a782c49b231cde63bdb193a4c251652c50c3308c","sha256":"297245484ab4a21db88e9652df2935983a59c3fe273b36f6d8b33daba95a3cf7","sha512":"c6358117d27a8bb174617e93c09bcc237c106817f4c399848bdf75e0c1a5a59f05410ebcd8c80d55fe91012452ed978e1bc7d49b76d02d631aab521e3a4be38e","ssdeep":"","tlshash":"6bf09ecd74e3e6b0bb39e749ca36ca42903c1e82340de5d1f08a95453206492d33e75e","first_seen":"2026-07-23T04:00:02.143191Z","last_seen":"2026-07-28T02:33:05.048037Z","times_seen":3,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/images/package/icon12.webp","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.769Z","timestamp":1785204744769,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /images/package/icon12.webp HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:24 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"6879ab3ef011f58fa5c2f02bf876bbd5\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nvg3vESFOsmdTyWVXu1ZWl8ucUP%2Fx8pTEwI7%2BBsMWW%2F19GPtgIapdL4T3Db4QfiNUz0%2Bqx74lQ0pMGtuGBbwogsinybTEcNrLvW8Lr9Q8yMlzsnSpoS5F4Dnin0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2205bd6cd5eb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5394\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5394,"size_decoded":6048,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f727fe074f871d5a2a32de76935eea09","sha1":"e96773fe0311defef26a242c251740cefcb6171d","sha256":"1efd319d4782e05123c51cafdb0bb3545b22da90512788f246e790562b38ac2b","sha512":"89a421540c5341ea0210e38d5ff2005294a3abe39ce5c6b487c73c03e1f8c8101923bf7b7804992a256ac1920a6cc1456e755ee8a0a3229a71ccb646ab01d30b","ssdeep":"96:bSElbw+iwLEd3pWDh/QdclFHCVnfHVXgzRByCa2bU6/1mI:rwsLapWDNetXgVBu8U6/1f","tlshash":"feb18d5027b4e3e4f00beb3948606a02b3483d1f9270cbb79adb066263906d46f0db93","first_seen":"2026-07-28T02:31:43.355055Z","last_seen":"2026-07-28T02:33:05.049486Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/CodeView.C60I3zQC.css","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:23.847Z","timestamp":1785204743847,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/CodeView.C60I3zQC.css HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\netag: W/\"9d9910e7da1daf6a04adb75f7d54fdd5\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9WSirSvSvy2Vs3AaEqIA%2FJ03XOwXwJolrc8F%2FFumbywgKfMxG2pQc3jyTb%2FfaVsG43EvNoPABgOOy%2BLSbVPpfo9Nll5Q6Rpu1eDYgBRciPIhIhE2aF8zIsL0a%2FQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd10cf3b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2713,"size_decoded":1284,"mime_type":"text/css","magic":"ASCII text, with very long lines (2712)","md5":"0a156c7a1bfa91c5b294457fa2f1bf30","sha1":"f8c275c8844723dd048d2d8d55b705f990338626","sha256":"1d70b89bb4fb97e5ec0888e95e115ad0f316b8690436b67d8713c5a1157454b8","sha512":"ed47ebbab6ca6eb557cc6609f0b4278a0d32fdaae9a46079baa3c1144a656662d62c454b8054a4fc63fc5b9185ab16e85390f75daaeae2b4149d50023dc2a708","ssdeep":"","tlshash":"12519a67f50e4a2a713b9c502b94678d390ab172806613a7cdc3afb0cdcb0eb7522a44","first_seen":"2026-07-28T02:31:43.382397Z","last_seen":"2026-07-28T02:33:05.051747Z","times_seen":2,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/BwU26q7r.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:23.887Z","timestamp":1785204743887,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/BwU26q7r.js HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\netag: W/\"919fa8f67b72566876c82f384e9482fb\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MHpE6j4nM%2FL859Ulu51%2B9CVysZhIZn8bKLinNcaTvGO%2FqHmYxabQ%2BPFFzoif0kL2ROFAPxm7tFurVO5lKn%2BrDuNYcFd14eYEMZqNnqxh2YgRT1M5fEhys909iks%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd14d12b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4150,"size_decoded":3620,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (4149)","md5":"7c22b7e88f8392d98168f8462e2eafe1","sha1":"841beeb99c51fc1acf4a80e6e4a584da2b88877e","sha256":"f71e533e39fbf2db0bf12f5b8d225de2366afc27be94d92a60e656e330879d19","sha512":"762ab0c058a458ccfd81b39982f40f86e561b93437e917450ae6fe53e7982b6b11db0eb74e22639e31f8107780f2e81f9b41017cd348f7fd7ea5de7b92260400","ssdeep":"96:7yZspls5hnlpIiWqE6oU8yfXoOUEzFNoAeF9Zaq+7YlS:77OtoiI6X8yfXoOUExmiqk","tlshash":"da815b732fa0ddfcc78f4c7492d42e7c0d59c5a73992916b2bec496292d1162e862933","first_seen":"2026-07-28T02:31:43.400085Z","last_seen":"2026-07-28T02:33:05.053777Z","times_seen":2,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/header6.DVU3kVEo.webp","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.291Z","timestamp":1785204744291,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/header6.DVU3kVEo.webp HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:24 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"5364cdfb40358ccd7b0187c6d8a6c45b\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r6Dvg3kYQtH%2BsCmYr%2FPyR%2Bj8Qe%2FhR%2FuY%2Ba0XSVk78JMRzuT%2FJF47aHL0U0wRWKja1mIWK%2Bqhzkj1GrH9saohM%2FhexwUFU18bt%2Be1KaPKyHZyaowBLt%2BBTy7AxPc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2205bd3dd34b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6578\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6578,"size_decoded":7246,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6014da87f8f3dd902641d39087f5f9d8","sha1":"1b7669d96acee155a6469cbe78af23ce3443eceb","sha256":"2f7f6dabb438c80877fe896e256b596bd22e30be08573bc101e10647db0c0c07","sha512":"f37f134419b6bd51c730a421c090dff3fd3b8ead2701af52ebaa2af5e362517bd02f839f95a67eb17a9d5215538035286cf69bfef9acdf6a3b21fd3f63b37962","ssdeep":"192:AwZdVxxKXmCINeF1t4cp/YMpAznc7xu+R19l:AwZ3bNeFr1YMpAzcF9l","tlshash":"dcd16e0a6313d3e1f05a60b9d1f758a7aeb71d02b94d12f9418819fa0aae4cb95cf806","first_seen":"2026-07-28T02:31:43.320862Z","last_seen":"2026-07-28T02:33:05.056606Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/flags/4x3/it.svg","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.324Z","timestamp":1785204744324,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /flags/4x3/it.svg HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:24 GMT\r\netag: W/\"0bec8cd132d5af55a4eaafa2c2612757\"\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UMADSENjCmEHdHZduVYo7NYx0Hpd0BHVZLSw4HC%2BMwhwyS%2B3D46QJH1Hfe4x8BUB0PX%2BYrLe3czDHnyjv90lcMDD7jarov7ELAppFpvXi0XzVELNBorIpiCj79g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd40d41b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":289,"size_decoded":854,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1d72a5dec3acd073763570e3e5fdf784","sha1":"25ecff80eb26ef79709ab7278eb3991ac8cc2734","sha256":"9fa88118818d9b64838f578e2babcca3d0630aed21b5c33b34aff7ac5ce506bc","sha512":"dee0b0cae09b07705091cd7371f40650d09fb1fbd736e60fa2716679a660b515a0c74bdfcdb5a9d32a178870a14697010b018c417ce30402f5ffa42c8b8384a2","ssdeep":"","tlshash":"33d02bf487bda414060843344b3c35d259b660ca614420caf4d018a0250d1a75cc39e9","first_seen":"2023-05-05T00:41:36Z","last_seen":"2026-08-03T06:44:10.948557Z","times_seen":2954,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/vite/assets/Home-jkI-JU6w.js","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://service.croxy.com/widget?encrypted_request=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","date":"2026-07-28T02:12:31.270Z","timestamp":1785204751270,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /vite/assets/Home-jkI-JU6w.js HTTP/1.1\r\nHost: service.croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://service.croxy.com/widget?encrypted_request=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\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.2135620745.1785204745\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31556952\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 23 Jul 2026 02:38:01 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ndate: Tue, 28 Jul 2026 02:12:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZkxYoEvsWhkFCEMTUc%2B%2FMo92TIicHJvCU8xaQV4CVWRvhWR6pfaNcCyLq6PfYWlywPF77AJ4525vTa5WZtSVZyNtJzF51u2diOyDvPqn67CjX7y7k3eTk0MBG18CnpMHC%2FPHrQ%3D%3D\"}]}\r\nage: 32\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a2205bff6e85b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12226,"size_decoded":5204,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (12183)","md5":"c3e454155840eb0560334d86283641d3","sha1":"bc83ed7737cf28214f1e960a2fd8d44e9b40af7f","sha256":"ef728243af5f30cafeaad9bf31d51b348c594e359bf1b3dbe838c2b87eb006bc","sha512":"2bed93942cd35ca125aaf6ea2c85e5d805503934acc4ad73ee368395bac479223878c2f7fbb3e8226d80c3ad8386bc5bfdcd563088241fe9638b108612ed8c4c","ssdeep":"192:6+Alr54cLQKe+rq6Qq9LirBsTw6r5vJVRwK57SPcJC4KSiEPyJJRW6NfqL+Wp64o:6+AZd7Jb1MBswklOK5WPcISigMJRWmS+","tlshash":"2c42e998f0538abcd2674060b249355093190f9fc9b2c075f5fd647a3b4adf85aab3d8","first_seen":"2026-07-23T04:00:02.147586Z","last_seen":"2026-07-28T03:12:55.257964Z","times_seen":53,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"service.croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/DPeDxrDf.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:23.848Z","timestamp":1785204743848,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/DPeDxrDf.js HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\netag: W/\"1a2e4f6634489e856faf5c7f43de65b2\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KyTRS4BOZgtc%2BFxF5y0uOKtDPNKl5g%2BX%2B9AEHZlLYbOw2X1lwzmcXg66D3bw%2FY8KOxmDzmJcAD0fe%2Byc9o54YZPvBmsHF5vR8bSJSnFyVV0jTX7FMzn3QajvwiA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd10cf4b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":605404,"size_decoded":152571,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (24015)","md5":"322d7c47afb434f6b71f3e4e0c54cf1a","sha1":"a7f081573639433ce9749e019193afd9e2fab50b","sha256":"2290035e4fd7bd7d67b0d26895af0ddd679bac3f3d849d0956ef0d38b97af097","sha512":"2ddbf2f4db7102a604256020c475da52b8686d53ae640947114f4bb9aad5a7a8ad1eedf6d92f643b81675f26c338bc9f332cba118317238ad941215cefe7b40a","ssdeep":"12288:vQuIYbSR+lIV/V8C22Yi2DA+MBQpM87Hmz:vQuIY+R+lIVt8C22Yi2s+MypM87HY","tlshash":"81d4fa96668864bdb6ba0ffd0737221131b04c617e4ac4b4f7267abb1f7e084d172b58","first_seen":"2026-07-23T04:00:02.187292Z","last_seen":"2026-07-28T02:33:05.061844Z","times_seen":3,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/C8RAZiws.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:23.875Z","timestamp":1785204743875,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/C8RAZiws.js HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\netag: W/\"265de1e12611788d5178be415ff12f26\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ml31a8NtgXx5tMAyzYoOOy0BWR4xz%2B8TrH8t3HHVOQKMh5djsykS%2BsFPA%2BWV3CI8sNhgFlkhKhCSWHTEXx1NB6%2BpSU%2FhW0i57TFbAacJ3MAGDAa9KVctD9lAtto%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd13d09b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1739,"size_decoded":1626,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1738)","md5":"d52d40299505808fdabb8a744052c713","sha1":"8c7f43b325262510a5336843634e0258df8412ea","sha256":"5d8c5726f4438fc5676590b65ea473715f8cc9c7c55d0fde54095a63b434d98a","sha512":"5937517c12e3240aea84b33d4c56aaf0c3ed9a7913371a3d16ce46c5a0b6dd16d18e732106b527236522452d25901cab20782f219558249cb40bc3ad41d98f5e","ssdeep":"","tlshash":"58314178d812d479e23248d9684a2828b61c3ee9f32048579efd4b343742d7da70eb66","first_seen":"2026-07-28T02:31:43.267877Z","last_seen":"2026-07-28T02:33:05.063191Z","times_seen":2,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/format.CqVfyHV-.webp","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.253Z","timestamp":1785204744253,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/format.CqVfyHV-.webp HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/web-assets/Highlight.BBzqt80y.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:24 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"44ae6fa0e82eb27299f6e33d17fc9cc2\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=otRYeFM1EYwRmmYTnv7b6zTsErc3FJicWflDM3mu%2F2teZnDnFQCBs51sfCHMOpy3jVdAJdONzdeO4l4Khe4zlCxrcL7znAcJBJkHwMRAuaTVj68EkGYNFb8Q5Eg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2205bd39d26b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13210\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13210,"size_decoded":13859,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e494d50b19d6d9dc296b75a506258600","sha1":"a3f9e88171ac0df0cbd37635838e45392e0a3786","sha256":"b4851d823996d41454f9828db8c146ba1f7d86c4dc161fa4f959278cc7c89d2a","sha512":"a7b12eb894d910ae0a9ff55e380c5594469dc6299492e3ac89f3d4d39737eae762bf5e7da6c3474dbf8dc5729bf0c3018d4dafefd8c06bf30120569eda860dc9","ssdeep":"384:MwYR7NyyANnNEz+mMWofyXNzOkC0wntDnTVvc1W8Tj0z:5Yye+n9fydykmDnTVuTQ","tlshash":"c752c082cf5d53deec24da3561ac2a8933e4ffb1be2b68121d0f1b9180a18d54691872","first_seen":"2026-07-28T02:31:43.314129Z","last_seen":"2026-07-28T02:33:05.066703Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/CLsQTva9.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.427Z","timestamp":1785204744427,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/CLsQTva9.js HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/web-assets/DPeDxrDf.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:24 GMT\r\netag: W/\"885466179b73e905d296cd289ae3783a\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ia%2Bvu8G1dpWuDrMruxPK2uFozrjLySUS0e9gGDRDyvxSbPYJUhAvluigHGjFU57%2FUzTVMJoIwA8A9wA2yGxCLWE%2BxkGah5O1LY8%2FhZij1dqsYHxR1lfy91d%2Bkuw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd4ad4ab500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1653528,"size_decoded":431269,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (64685), with no line terminators","md5":"29e829707862737a65a584e5098336ef","sha1":"60abc42509b26fb7e8c9165d1374934780dbad75","sha256":"47fe99568952cfcb60eabd619d32d05c4209ffbbf24ced06fc56c575cd43f197","sha512":"12d9b1424e68807e328bc69684cff389e108777a5e52f85ba1032cac9ef231c40f29acd5577c8a256719ad05e05c0f02a4407faf31e64f20a206ecbb22505fc2","ssdeep":"12288:yi6PfUZFI8OaH+2eTpDdtabVOqUbBhLqXiQfDDvLCUvIWPKOPdyV7I:yxPfcqa0uxf5","tlshash":"f735f90ddbfcb3644dfd36da72490d3bba9c213a63d592578cd4bba92084d74821b2b1","first_seen":"2026-07-23T04:00:02.267649Z","last_seen":"2026-07-28T02:33:05.069988Z","times_seen":3,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/vite/assets/utils.esm-CYAcZXQv.js","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://service.croxy.com/widget?encrypted_request=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","date":"2026-07-28T02:12:31.137Z","timestamp":1785204751137,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /vite/assets/utils.esm-CYAcZXQv.js HTTP/1.1\r\nHost: service.croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://service.croxy.com/widget?encrypted_request=eyJrZXkiOiJlWFNPVjgwZWxDRjg1TUhRaVk1NHdZWnN3TmlrSklKMUI1ZXdlWURyWGFwaEtrRDhvVTUwd0hxamVQdGRReGluSk5uZWtNNF84VndfX3BuWGFwQjhaNG9pNV9fRXdwcThvU0Z1VklEZENPcWs1VkhjWTVzV3FVdk5fOEs4WXJJNVotWnpaTjU4cVY2cVhKTlNPczJzTlJncS05QlpFamp0Z09CcjQ5Q1ZUT01URExxZ2hLZmpKNGstck5OOURsU0VwRnd0aklGbUtETzZQcDhOV1ctckU0eFdlS2VGUTZCYVBUV1h3MkNzQmJoY1gxb0Q2cldXYXFtUXFOTGV3NkEwUDVseFRyUlpBQTZCNGNHeS1ReEJmWXAtUmQ2bjdTRUJNaDluVGVMVjlLdjZKenJJdHF4SXMzSFhUUFR2QlVTRm5Mazdkdng5MHJpY1ZyVlh2V282VVEiLCJpdiI6Iml0WEExVVRfUUp2QURYb3MiLCJkYXRhIjoiWDhNWXFOQUJrdFBpZmRqak84RTJHaERBVVdWVFlKSTYzVWFzeE9fbVJVRTlIYXQ0QUpJVE9JUkJ1bzJ1RVNORy1DZmcwOGRWeGl1VC1Jalo0ZS1OUVhzSVNQY3E3VjAxZXpsT3E4QmpwaGtMNkZSazBMSGJ2QnpwSFYxM3FPQXpzNHpZdThTc2RQRkpGS3pRdVJxdjZHeGxrV0RwTmFqT2lSTElwbjlrbjA5U1ZBYU1YQSJ9\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.2135620745.1785204745\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31556952\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 23 Jul 2026 02:38:01 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ndate: Tue, 28 Jul 2026 02:12:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UESaCY8t1cmyZmaO0oXevwsxuaggy1KDbs68knqtBqr2TIo8Ox6bxpHA436Zow%2F1S0YgM1%2F1iex8UkT78HGffHRfaabUVNGfb6UiBdD7f1cYkLQHfGrF0lferI0Xy%2FDfUFBcZg%3D%3D\"}]}\r\nage: 33\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a2205bfe9e77b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85023,"size_decoded":27805,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (34537)","md5":"52ba66c6065a99f36b363e4ed6177437","sha1":"1788f694a0d456c5009016fc7c7d9d28005d8944","sha256":"b73079390db434108a03c6967f1b79ea62495b7523a1960205a576892b6a3214","sha512":"182465b8e1e029caecae7709d174b0bea8b95db40220101f7b501e582f4ab30eaa9e94293e36c38299e6a7e0706d37b56655a12339950448f7aff0b2d5778711","ssdeep":"1536:nxEfqWtLCR4hWK4Qr9ZEWf9uy12v7C9a9J9BiQM7pp+Nc5A0Ec5p:xiqHR4hWKHn/f9uy1229a9J9BBM7Z","tlshash":"5883e7c62191e5ae03b860a094b7130db1ec5948accadcdde5bcdcda7624c4971e3bdb","first_seen":"2025-12-04T21:59:09.654954Z","last_seen":"2026-07-28T03:12:55.25304Z","times_seen":438,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"service.croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/kQ1hy/D2IJWhheZQVRQQplV1BIDmBTC09eMAEK/","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.734Z","timestamp":1785204744734,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"POST /kQ1hy/D2IJWhheZQVRQQplV1BIDmBTC09eMAEK/ HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nua-sec: https://croxy.com/\r\nhash: dd645417771c2469455120921ac0f0f0\r\nx-api-request-encrypted: 1\r\nContent-Length: 86\r\nOrigin: https://croxy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":86,"data":"{\"p\":\"EHNdCRcMJFAPHElrEw0XRiRCSlVJJUgYHBhzC0pKR2gdWUhHYANESF99AFFVWWQdWUFHYwZES1NzTA\"}"}},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ndate: Tue, 28 Jul 2026 02:12:25 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd69d5bb500-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://api.croxy.com\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\nx-api-encrypted: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IfZ7FB20abJruH56UkUFTFR%2FZjZ1ZEVr4cLZLxKw%2BXmSSjf%2BnwUI8ERc%2B4gNm9PanViK%2BseFpYH73vxntj38R59hwKL%2F9EGedBiSJs%2FiusANQ%2B7s8OLiHAPi5j4%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57211,"size_decoded":12361,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (57211), with no line terminators","md5":"d936d9d71e101298e49218e16f382293","sha1":"3242085f1a0242c2ff233cbd2e2c4700c1b4a588","sha256":"e7a1c6262f943813788cd83d40a0356948236dd33c4eb748a715cb8dc7caa7f5","sha512":"0438ec812b715b75b201ccf446c713e3d369485131bc403eb5b7fdaac74253587c9f117cde15f0bde5d131941ae1083cf2bc05a9c123d0e09fdc4cad6772bf9c","ssdeep":"768:P0h1ppjhQlPsRgQaCacEtpkhNBnpgVoPqAUcX2bd3Pj2VXiqKhIdbjbZEYRPbdeK:8TQBQaCPEsumSNyYnel3","tlshash":"e8434e85c90c94764478f67cc4d85db68ca89eecd6dc8a59827fef5ed00ab00d2712f9","first_seen":"2026-07-28T02:33:05.073717Z","last_seen":"2026-07-28T02:33:05.073717Z","times_seen":1,"resource_available":false,"data":null}},"time_used":713,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":713,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/DliB7-IL.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:23.857Z","timestamp":1785204743857,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/DliB7-IL.js HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\netag: W/\"8340d5811643e35a6715e10eddda7fcd\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FNR%2FmYNnIh18%2FTB%2BEsUZF6G1poTjcR8RqLizgCZNIXLfSOC1thsdzx462HgSkm0Dy1CC6EboXcRugpWn7kY%2BQ6aUZwRtyYeaU1098oGCJlPQELygCLRglbWPgno%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd11cfbb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3178,"size_decoded":2026,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3177)","md5":"e19931f5091f0b290f32b35f3d9b89ff","sha1":"6cc0f1f9301b63af61fe7d0441b93f1b77265b65","sha256":"9bb966e50cccc9bd72a176f1bc35bf19e0223692bba7c2bc57774aa5452f2995","sha512":"794c0aac5013d04cadc21a8a9991c05c3b4673f8a53011395c15f7600d002699c30c77314c48808f5b0f76be9f26c26a3641665aaed75746af811164bd6b60c4","ssdeep":"","tlshash":"b161974424a0332562b23cb4b96dcd5aa321a5397c58c4e13f8e84377766c0b3cc5b38","first_seen":"2026-07-23T04:00:02.339215Z","last_seen":"2026-07-28T02:33:05.077788Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/images/navigation/icon-language.webp","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.281Z","timestamp":1785204744281,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /images/navigation/icon-language.webp HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:24 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"df110b39386ee975447896bae2d58305\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W9curdUE7OJLrfI1rrYvu706vbOjMAQjPe0CeTv2pylKHh5S82PEzaXOgRZr8g5LYye2DqiGF3MqtPIo9sJWqYRnZasBYDpdalYYiqJ5z0zT45EdyItGX6cpjMA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2205bd3cd2db500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2576\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2576,"size_decoded":3222,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"255a08b029ce584c68926b307534523c","sha1":"391c9372fd8a531caca84730d51b47265fe6b0df","sha256":"4c030d1a69763329db1299105b414c698f6ad6d301a6a74b9767ffb7d5c28a74","sha512":"f7901c75fead76866a0866a101a2206475ecafd3fe16b2c82e9e9c9533a6ddae0a81c1833f7cb2e30b832ec63f48159c67ddc70f879a073b581f212cfbbad357","ssdeep":"","tlshash":"d3515bbce372939ad583ea381f620b012910ff35a2db25df47410516592ceed2eda45a","first_seen":"2026-07-09T11:59:53.528515Z","last_seen":"2026-07-28T02:33:05.079398Z","times_seen":4,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/header_icon1.DrOvz23G.webp","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.282Z","timestamp":1785204744282,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/header_icon1.DrOvz23G.webp HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:24 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"1da824b15ae4bfb2aaac520ac855bdc0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3PKNB%2Fa2rQpQBMdOaZ%2BsGcOZfuD%2FmlOWVliUd4eLB67PG%2B88E%2B0eLiJRH3N8R6xCws%2FKLdL0ziHxEsCk%2FsBhsklQoXi%2B9VI8A2H%2Bzy7zS4A0tyeQdBJeOxh6lpo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2205bd3cd2eb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 45668\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45668,"size_decoded":46333,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b803db5fdf2a439ad2d38fc2c7fa2c31","sha1":"2f59d671c20d05f2c3b7af0052015835e5da2c2c","sha256":"193e587fb9f4ebec81ae2c4e4055aeaa43777ee8ee46c0e5ae60e40e70f900d7","sha512":"e01ae6eec8c5e342bc178e0a0381381b8b103c654670c7084aa45ae148eec52693393772823c60272eb463a5907daad987815e6fa3bd5af93eb75f249863bfce","ssdeep":"768:k74LWmRGrZvXuK9/YMGnqvDgToe+uBMmhBcaNajY2G8KeqOIyI4k7Wni6l7VhJlh:RLWmC99DgToSfHxeqOI/4/niQxzRf6/G","tlshash":"8f23f27117694028fe3bc9b355be89a37f29fc621af94c56e701d4f0ab517112e2f160","first_seen":"2026-07-28T02:31:43.346864Z","last_seen":"2026-07-28T02:33:05.080691Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/kQ1hy/UjNQCU8OZlIKGgk3CVxPXGYDXE1YaQRQ/?p=BzBfDwwKNlRVHAV8RBs","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.727Z","timestamp":1785204744727,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /kQ1hy/UjNQCU8OZlIKGgk3CVxPXGYDXE1YaQRQ/?p=BzBfDwwKNlRVHAV8RBs HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nua-sec: https://croxy.com/\r\nhash: dd645417771c2469455120921ac0f0f0\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ndate: Tue, 28 Jul 2026 02:12:25 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd68d57b500-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://api.croxy.com\r\ncache-control: no-store, no-cache, must-revalidate\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nserver: cloudflare\r\nset-cookie: croxy_sess_id=e859a10303792f7bb7980d8daed6883e; path=/; secure; HttpOnly; SameSite=none\r\nvary: Accept-Encoding\r\npragma: no-cache\r\naccess-control-allow-credentials: true\r\nx-api-encrypted: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lYcReP8FXad5WJIYnmGXZzIkByYO1ojrA1zTo2K4cEye7oWfs2sAFCAjvvY7GTv5ngxA3kvncHKnU4P6Eb1JODRS%2BkRwkC4zXqEDnWc%2FjfsOpY2OgrHl6kluHqw%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":579,"size_decoded":1383,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (579), with no line terminators","md5":"1ae7201cbe79ca3e1cca4414223d0084","sha1":"531ec6fa7040847cdff5f7f28d997ba8e1761ff7","sha256":"b489ccd8a2b541c4f44c9dd8c9c900d0970af21bcf1d143ffc2e099af370f0e0","sha512":"9a28a39a836586fb28aa6e41b90d1338d830072f8543b459a53bc2b3b1d614912daf37cf5a2dec69a31897f9e73479bf276bd355828635dfc227ea8f261d67a8","ssdeep":"","tlshash":"c1f041a819ca4ae8881ac228603848c745719997bd91a9906839480ea701709e09d273","first_seen":"2026-07-28T02:33:05.08256Z","last_seen":"2026-07-28T02:33:05.08256Z","times_seen":1,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/vite/assets/sharedFrameEvents-8-u9VCWf.js","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://service.croxy.com/widget?encrypted_request=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","date":"2026-07-28T02:12:31.136Z","timestamp":1785204751136,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /vite/assets/sharedFrameEvents-8-u9VCWf.js HTTP/1.1\r\nHost: service.croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://service.croxy.com/widget?encrypted_request=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\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.2135620745.1785204745\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31556952\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 23 Jul 2026 02:38:01 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ndate: Tue, 28 Jul 2026 02:12:31 GMT\r\nserver-timing: cfExtPri\r\nage: 33\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TX9kG%2FWWm8WwzfS%2Bx5V7KgiKghEjReztiYRXLQnQEJxUU5TaaJIERcGqxaMpKFxSCmYno%2BJXYNMSX9Y81Lig0JVBG38Oa1QlIqq2TCkaQ8Eb6VV1fhuEtObrXaoS%2FPRxBxRSCw%3D%3D\"}]}\r\ncf-ray: a2205bfe9e76b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1349\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2770,"size_decoded":2113,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (2356)","md5":"206dea6dc30e96a9600bdcda21a47210","sha1":"5be3f3d211b38d510c94a1d4ea3c007880e8725d","sha256":"2c8e93397b370de74427f2aacff2420a323b993ef5627453dfcb77af75f24f45","sha512":"7ab498194c23ac4e773e02cb8bf2f8cae84c8374642801eda40ec391e3f005c455c50012824c318200fd05fe0556831d4913502a4bcecae09d7b143e8bc16210","ssdeep":"","tlshash":"6f5186dbdc2694f347a308c706e191a2533ac94471bd87b075785c1e235ee8f468bf10","first_seen":"2026-07-23T04:00:02.131883Z","last_seen":"2026-07-28T03:12:55.215114Z","times_seen":53,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"service.croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/Dxp79naF.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:23.876Z","timestamp":1785204743876,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/Dxp79naF.js HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\netag: W/\"c601b34b02a5132bcfe1c4d4be6dae10\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mkNXabAdNT4o9sPbstEcf1tFWVFKbncrzo4udgJ%2B5tQPFvTnO9GNWNhGY8DaSKkhqNehXWQTHYfAJEC0TVBgEr4UR1co2qL%2FjGCebGmQX9mb2wUR4AN7hXYt90M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd13d0ab500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4032,"size_decoded":2479,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (2962)","md5":"933652e149c5828b0d64d9a714811835","sha1":"f35931b00c4ce8ed922d33762efafb6c8b8e3b4b","sha256":"42fb96aa85b21a2597f8c036fe0f5c775007a8a48067b104c686791b326903b4","sha512":"e36fb0babb1184b7c90ee4ba13276970679288c735da295930533ee5490e50c0681e1b374f32e1e9d1f35cddbc064344fca83ad0d908a2ee3ad4bd856c94d277","ssdeep":"","tlshash":"988153b4a67703dee37e509b80e1385c5aed36ed4b800940fbc939f89c95922570dce6","first_seen":"2026-07-28T02:31:43.249039Z","last_seen":"2026-07-28T02:33:05.086762Z","times_seen":2,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/Bcj180O2.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:23.885Z","timestamp":1785204743885,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/Bcj180O2.js HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\netag: W/\"6b720821608524d606a08047c359b8b4\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=efJYNFYeNEma1YvIqICgtgqChDdsR0P7NpCtARftx7dxhQX6uFsC4cK%2BCdt%2F20VbZanrHCpDsapWeCTLo8vTMk2S6VoWtQVorRzHxHIdSvs3vAh83mwYqsqExdE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd14d11b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4590,"size_decoded":2688,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (4589)","md5":"7e79008f7f89988045f640ce161194f1","sha1":"9310118bc7455837daf5cad28d1686f756e9d1e6","sha256":"1cb0794f84ddfb82dd30fe8923c68355d03a0df32fb1dda8243f67ab993478a6","sha512":"4d2b684be69861387b9de9954c8a2b65acad72e5fe9b56e46d00550dfa610ef14cde3c5a28470c99b1f63019eb778aa25325b73844264b56701dc35ad285562c","ssdeep":"96:8XUnAfzemvH2GGzCVrbYB/cuNwss3AhVJO86h9Hrn910Is6:8EnAN2ItbYB0uiskAhKpnHr3r","tlshash":"e191c6cce058b53896afc40565583440e71a66ec9e5144b4b1fb3a3c2fe057cab8eb3c","first_seen":"2026-07-23T04:00:02.312823Z","last_seen":"2026-07-28T02:33:05.08832Z","times_seen":3,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"analytics.croxy.com/Ztv9s.gif?bj=eyJmcCI6IjhmZGIwMGZjNzZhMmIzMDYwZjI4YWU5OTg5NmExNTY2IiwidHMiOjE3ODUyMDQ3NDQsImxuIjoiZW4iLCJ1ZCI6IiIsInBmIjoiY3JveHkiLCJybiI6IjE3ODUyMDQ3NDQ1NjgiLCJ2biI6IjEuMCIsImN1IjoiLyIsInNyIjoiMTI4MCoxMDI0IiwiZXQiOiJwYWdlX3Zpc2l0IiwidGciOiIvIiwicmYiOiIifQ%3D%3D","fqdn":"analytics.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.591Z","timestamp":1785204744591,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /Ztv9s.gif?bj=eyJmcCI6IjhmZGIwMGZjNzZhMmIzMDYwZjI4YWU5OTg5NmExNTY2IiwidHMiOjE3ODUyMDQ3NDQsImxuIjoiZW4iLCJ1ZCI6IiIsInBmIjoiY3JveHkiLCJybiI6IjE3ODUyMDQ3NDQ1NjgiLCJ2biI6IjEuMCIsImN1IjoiLyIsInNyIjoiMTI4MCoxMDI0IiwiZXQiOiJwYWdlX3Zpc2l0IiwidGciOiIvIiwicmYiOiIifQ%3D%3D HTTP/1.1\r\nHost: analytics.croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://croxy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 02:12:25 GMT\r\ncontent-type: image/gif\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nlast-modified: Sun, 17 May 1998 03:00:00 GMT\r\npragma: no-cache\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BXd2PIPsx88UPvAhSTufbfsh2Zt0T%2FyCJDbIS9mKemTvgoG8Gb6cUYs5i%2B%2FZ%2FLT%2BfDg1dtrwDsyrBY8M86PxtLv69qyMLMNP67%2FDVZLmjp7h0MomyPgBBXIBbWcINrS%2BcjFW4iL9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2205bd5ccdedfec-OSL\r\ncontent-length: 35\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35,"size_decoded":902,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"28d6814f309ea289f847c69cf91194c6","sha1":"0f4e929dd5bb2564f7ab9c76338e04e292a42ace","sha256":"8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015","sha512":"1d68b92e8d822fe82dc7563edd7b37f3418a02a89f1a9f0454cca664c2fc2565235e0d85540ff9be0b20175be3f5b7b4eae1175067465d5cca13486aab4c582c","ssdeep":"","tlshash":"be800003c280c002c2a2c0308e08ca802a8ab0a08a28030fb0ec3baafc2a2a20c00000","first_seen":"2023-04-05T07:36:27Z","last_seen":"2026-08-03T16:43:48.162891Z","times_seen":53976,"resource_available":false,"data":null}},"time_used":461,"timings":{"blocked":-1,"dns":4,"connect":11,"send":0,"wait":446,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"analytics.croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/vite/assets/globalConfig-CXxIQGb7.js","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://service.croxy.com/widget?encrypted_request=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","date":"2026-07-28T02:12:31.133Z","timestamp":1785204751133,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /vite/assets/globalConfig-CXxIQGb7.js HTTP/1.1\r\nHost: service.croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://service.croxy.com/widget?encrypted_request=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\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.2135620745.1785204745\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31556952\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 23 Jul 2026 02:38:01 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ndate: Tue, 28 Jul 2026 02:12:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x6r3VLcyZxtuqHq9A%2FFp%2Ft%2F3Ky3FjLXfsAbbN3E0LpykL6BuSA5vUowcs5qfkRA6mIORxve9CCxteN3e%2BAMFpACNvnIyeCp%2Bg4xcMJ3dnYzDHznFMMqiGpntLelul7fPdn4DJg%3D%3D\"}]}\r\nage: 33\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a2205bfe9e73b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83402,"size_decoded":28959,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27932)","md5":"7715a583e3482c7a5cd067c6cda3586e","sha1":"a139a46237ddcec4b0101c9c29fe0c44622c6629","sha256":"c96b2402da0da5a0913afd4ac6022503559824fa3801ca6607625ca2ad78f9bb","sha512":"eff9c01b1cde4943856840c66dda1fa24d27abd9fd24b29969ecb0502f29a09bae29aa87ef0c2a8924a6c11b5d270b57767e9147121f0161afb593bb80684cd9","ssdeep":"1536:Tktm/6tegXw7MCob2N3SZMPZ8vX8Idwxf5tSswvgfD2:otmCtey2MCob2N3h8vX1jmfS","tlshash":"5783f6c570e67027877756e960bb000abb3d2a58344d9994f4ade9cb3e32c5d42b7f28","first_seen":"2026-04-15T10:26:48.288873Z","last_seen":"2026-07-28T03:12:55.235682Z","times_seen":67,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"service.croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/index.Ddk-YjXd.css","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:23.838Z","timestamp":1785204743838,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/index.Ddk-YjXd.css HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\netag: W/\"0c5a5b29a0e52e8a08dc6ccfe03d20b4\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B6xk%2BYL%2B37mMYm0a13O98aCKM9gaEn1qs5k45%2BovHLZ9H3xQO6C37qLZMDoUtuPTP3hil0ZX7CR45xDYvQqbhLnACMSnY%2Fhpng7e94fEJhiAAcvQQsSFyqNLLQI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd0fcefb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2742,"size_decoded":1360,"mime_type":"text/css","magic":"ASCII text, with very long lines (2741)","md5":"1aa60b004e1cf4eeb19c333fbf46d571","sha1":"356af85453cc64c8670d6838b8bf2a2a10f372d0","sha256":"833e3e8b02d11939d33e6a510c77dadf09e0f1223d58cb14c90352b12a8b4e90","sha512":"cad82edc9023964d8709b195019d2a6e6c30963affc385550f5ddf972d24fe46242332c4ae5fd926d0248fa124116cca418a25b6236ab97eb158584bf3cee26b","ssdeep":"","tlshash":"d651b2ee628a360664f2b51ca4c06456ee9fe232cc60097e7903631fffb631291e5674","first_seen":"2026-07-09T11:59:53.490496Z","last_seen":"2026-07-28T02:33:05.091073Z","times_seen":4,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/bg2.CmNcfA2R.webp","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.252Z","timestamp":1785204744252,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/bg2.CmNcfA2R.webp HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/web-assets/index.BA_rpDMS.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:24 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"da540dd78ae095a6e5bccbf376f8d2ac\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iQNjREoh1DBlaMRsnGCE%2FUitkQWyP8%2F9dktlUdrC3yjU%2FZHO3TX9%2BtajpfTH3%2F8Ats84KrUE%2BDP5laa1OBhGklrXm6PdOyoFjVQVWxVGavOyqdyIFTNX3JsIJ1Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2205bd39d25b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 49114\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49114,"size_decoded":49773,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0b912fee89e2c28663b1d43d7e6f06af","sha1":"66888db585cd15d32c2f95457cb8b95a7d650804","sha256":"4141bb9afc105e1f46a8a463330648372762c6aef0fd7a541d136190ee8c4f48","sha512":"9c15bd7db822625bf5d7ace083351df1b7f3ea4d479fa3b4b90320e0669d34c0bc3c70ba850dfc2c490584b09aef4c8c9e5b0767697ebe721e399a9797f877f8","ssdeep":"768:YJskK9wkrVDMu57VjrJ/oYAHdeoc9aSL11USZcNrvabOng5MEN4S2QECu+oxsuKi:KnqwSNlLyYM8RL16SSyCngedQE9+gtzZ","tlshash":"a023f13239da093836a2e5d2ec5591a730c6313e44ae1f444f871fd2f5a635a7c4b7c6","first_seen":"2026-07-28T02:31:43.250785Z","last_seen":"2026-07-28T02:33:05.092438Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/vite/assets/widget-BBOcYX8M.css","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://service.croxy.com/widget?encrypted_request=eyJrZXkiOiJlWFNPVjgwZWxDRjg1TUhRaVk1NHdZWnN3TmlrSklKMUI1ZXdlWURyWGFwaEtrRDhvVTUwd0hxamVQdGRReGluSk5uZWtNNF84VndfX3BuWGFwQjhaNG9pNV9fRXdwcThvU0Z1VklEZENPcWs1VkhjWTVzV3FVdk5fOEs4WXJJNVotWnpaTjU4cVY2cVhKTlNPczJzTlJncS05QlpFamp0Z09CcjQ5Q1ZUT01URExxZ2hLZmpKNGstck5OOURsU0VwRnd0aklGbUtETzZQcDhOV1ctckU0eFdlS2VGUTZCYVBUV1h3MkNzQmJoY1gxb0Q2cldXYXFtUXFOTGV3NkEwUDVseFRyUlpBQTZCNGNHeS1ReEJmWXAtUmQ2bjdTRUJNaDluVGVMVjlLdjZKenJJdHF4SXMzSFhUUFR2QlVTRm5Mazdkdng5MHJpY1ZyVlh2V282VVEiLCJpdiI6Iml0WEExVVRfUUp2QURYb3MiLCJkYXRhIjoiWDhNWXFOQUJrdFBpZmRqak84RTJHaERBVVdWVFlKSTYzVWFzeE9fbVJVRTlIYXQ0QUpJVE9JUkJ1bzJ1RVNORy1DZmcwOGRWeGl1VC1Jalo0ZS1OUVhzSVNQY3E3VjAxZXpsT3E4QmpwaGtMNkZSazBMSGJ2QnpwSFYxM3FPQXpzNHpZdThTc2RQRkpGS3pRdVJxdjZHeGxrV0RwTmFqT2lSTElwbjlrbjA5U1ZBYU1YQSJ9","date":"2026-07-28T02:12:31.125Z","timestamp":1785204751125,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /vite/assets/widget-BBOcYX8M.css HTTP/1.1\r\nHost: service.croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://service.croxy.com/widget?encrypted_request=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\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.2135620745.1785204745\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31556952\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\nlast-modified: Thu, 23 Jul 2026 02:38:01 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ndate: Tue, 28 Jul 2026 02:12:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mFgJgPGUJMHn5%2FkUSLtgErM%2BZS4zv9VYIEqzxTeBTac4Bs7K3SDAinTkWZ8oNG1qRPdSfDF4%2FdVXUYL2fUm%2BvgGZMVX97pkwVOsU8pS%2FVfVXCpcyZ0%2BZGnnQhjhSQuTLaKCRLg%3D%3D\"}]}\r\nage: 425594\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i=?0\r\ncf-ray: a2205bfe8e70b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":824104,"size_decoded":92401,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"9b386cd3fe907352af5facd6a784c155","sha1":"07cc3a1c7a6a09946af49cd36d4b3e0331704fc4","sha256":"1dd16aa2ea57a7bc193207871f8444b2eacd0185d78c3981474cd1fe20463e72","sha512":"4b3e02ee7ab5b6a4adca8472d1dede586c82ad494c6cdd23664f7c0da80acbc16dc65fdcab453b5306ce86dade754a4addf1d66f95037229c633f51dd8c84416","ssdeep":"6144:uw82OIUyhozjURMXTwBEAhBW7dLHUvQTZcqnguONFbqPM0W/9guccwSnncR2hnXB:NFh","tlshash":"3505c7bdf788913e6c0b8662d73d7918631ef2e0bb4947a45c5e1330538637abda7824","first_seen":"2026-07-23T04:00:02.238591Z","last_seen":"2026-07-28T03:12:55.298198Z","times_seen":53,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"service.croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/api/v1/widget/conversations?website_token=PEejQjXJH4vwpWAoxibBeAjo","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://service.croxy.com/widget?encrypted_request=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","date":"2026-07-28T02:12:31.996Z","timestamp":1785204751996,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /api/v1/widget/conversations?website_token=PEejQjXJH4vwpWAoxibBeAjo HTTP/1.1\r\nHost: service.croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://service.croxy.com/widget?encrypted_request=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\r\nX-Auth-Token: eyJhbGciOiJIUzI1NiJ9.eyJzb3VyY2VfaWQiOiI4MzU1ZTdmYy0wOTQxLTQzYWEtOTgxYS0zOTM4NWMyYzUxOGEiLCJpbmJveF9pZCI6MTYsImV4cCI6MTgwMDc1Njc1MCwiaWF0IjoxNzg1MjA0NzUwfQ.ZP4De34v2neCsU8g4VSYmsxAoyCel4tzpR5iCzMrr1Q\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.2135620745.1785204745\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=0, private, must-revalidate\r\nserver-timing: cfExtPri\r\ncontent-type: application/json; charset=utf-8\r\netag: W/\"258153158e38e3291e3d48162225fcdb\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-request-id: 996e739b-1d77-4267-9554-0751a92f7ee1\r\nx-runtime: 0.011327\r\nx-xss-protection: 0\r\ndate: Tue, 28 Jul 2026 02:12:32 GMT\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RH463ALzyBywnQsfaqOfPfkXnsJvCI%2FD%2B9Ei6WxXqLIR17wzKzw7rD1ZWGeeIGbtLr5n48BT7NtOHuKM57De0WU8b0Mrwcl%2BOHqlNZIArF3NWBmS9Zb1qHgXIGOlzJUM3g7NNw%3D%3D\"}]}\r\ncf-ray: a2205c03fe98b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14,"size_decoded":1000,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"af1fd6795b95d5be36b37d5281fdcdc3","sha1":"1bb3365ca69f2475ce5d789503180db7256dcbb6","sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","sha512":"284ea516df7e3636fb847431b6d91444a5987913985a01228395a2858954d7e654d86f099c20345e76e3a830bd3004eb19dcd4cb75a1e8f442168cb0e16103fd","ssdeep":"","tlshash":"2a6000000300c3000c0000c0c0c0cc0003c33003fcf0003c03000000c300cc03c00f00","first_seen":"2023-05-21T09:16:00Z","last_seen":"2026-08-02T10:43:32.725951Z","times_seen":2615,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"service.croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/jTwhxdu3.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:23.871Z","timestamp":1785204743871,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/jTwhxdu3.js HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\netag: W/\"3f6dd7ae5b83238a8ca53a30c139ff3a\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=McTHhqLDovkGKoUA5TYoxl8VEfDOWBzyVSUa6P3ffDwkJopf8cxaW4eHxz99RWdqseQRPyAOsACegrcNAloSzfZNiCfJKpqI2NRY0yRx%2FWdXmdM2qUeQ1ahaTzY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd13d06b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":889,"size_decoded":1171,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (888)","md5":"e0becccac6a372cb945e4a7a2809b1d5","sha1":"e1e69b2a7735b8a0e39f42d7efeb59fc95d01b97","sha256":"7de5d9991231e061d2f15f17842197ecd45e6349f27da1aa6ed55b912c1a3be6","sha512":"54d5436eefaea30cc13cfc881c60d7e6499c04def7c8ccc5a39bd5ffacc45ad51b4827484f464f785f70d485a449301b2c5ee9a16fb7c502327d22b818ca2ab2","ssdeep":"","tlshash":"8b11129425017076a1ab140e7860e68572120c6d2672f6c0f23e8e761a64ecf646fbbb","first_seen":"2026-07-23T04:00:02.336304Z","last_seen":"2026-07-28T02:33:05.095456Z","times_seen":3,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/kQ1hy/XmhXXkBaYQhbGg83AApJWjBQUE9aaQVZ/?p=BzBfDwwKNlRVHAV8RBs","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.729Z","timestamp":1785204744729,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /kQ1hy/XmhXXkBaYQhbGg83AApJWjBQUE9aaQVZ/?p=BzBfDwwKNlRVHAV8RBs HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nua-sec: https://croxy.com/\r\nhash: dd645417771c2469455120921ac0f0f0\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ndate: Tue, 28 Jul 2026 02:12:25 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd68d58b500-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://api.croxy.com\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\nx-api-encrypted: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KzuhJ2EklcwTo6HFwlaynvgg5y5tVc45E1qRzbxLFQqbJsDTq6x9hj856KnI0ZQ%2FzvrjTMFlUe5yP9i%2FuNN4OatjZKBqPgzm8qpjFr0LIO9%2BFSeuWh0sO0hpldk%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":139,"size_decoded":857,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"16127040eed28c3f03fb1b155ca90ab2","sha1":"4842ca65a047d5631c328bdc003aee2fe36ed331","sha256":"070b128e7ded53f7cbfb2b09b5055aa5d11d9584e04d835567e19de0019eb9fe","sha512":"ce5ce5f9cb6e02428da38219ffd341c55d51dc9e0e6266fbe2463a8369b867fdcfe93d5c22d92ba51db38d4506637363256bd828244977091f614e6377bd97f1","ssdeep":"","tlshash":"6dc02bf40415041c84138280b1641eca31b18d9361312e230c34400ead1834c3401605","first_seen":"2026-07-28T02:33:05.096818Z","last_seen":"2026-07-28T02:33:05.096818Z","times_seen":1,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/kQ1hy/D2IJWhheZQVRQQplV1BIDmBTC09eMAEK/","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.730Z","timestamp":1785204744730,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"POST /kQ1hy/D2IJWhheZQVRQQplV1BIDmBTC09eMAEK/ HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nua-sec: https://croxy.com/\r\nhash: dd645417771c2469455120921ac0f0f0\r\nx-api-request-encrypted: 1\r\nContent-Length: 86\r\nOrigin: https://croxy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":86,"data":"{\"p\":\"EHNdCRcMJFAPHElrEw0XRiRCSlVJJUgYHBhzC0pKR2gdWUhHYANESF99AFFVWWQdWUFHYwZES1NzTA\"}"}},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ndate: Tue, 28 Jul 2026 02:12:25 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd69d59b500-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://api.croxy.com\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\nx-api-encrypted: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y5qOReWkjx1P%2BTxVK7MuvDl0OKJb%2B2iMGVqXKBRn%2BP5InIewfy5wRekgkX7zcL6vS8eMHEMnWt%2BfYcSceuTMl4G024hRYROm7byYv45QuAtAt35NLy0LlZXMCDM%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57211,"size_decoded":12355,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (57211), with no line terminators","md5":"cc5ddc9d93f7a5603e1f7513dbdc92f0","sha1":"6f225f5477aff36a17c18d7475260cdda7829847","sha256":"f7675f2cba72dc28e4ce6d9243e34c613029403dd8230f9874951dacef0e7907","sha512":"12cc955b81c1cd773b3c5f47d031e4fa15c222f9ef0b6bb9a2f58908e5a8b61225a0cda7a1cce5634215e146236e899ee252fc97f364a0b0ce5668a8e298de3c","ssdeep":"768:P0h1ppjhQlPsRgQaCacEtpkhNBnpgVoPqAUcX2bd3Pj2VXiqKhIdbjbZEYRPbdeB:8TQBQaCPEsumSNyYnelE","tlshash":"aa434e85c90c98764478f67cc4d85db68ca89eecd6dc8a59827fef5ed00ab00d2712f9","first_seen":"2026-07-28T02:33:05.099383Z","last_seen":"2026-07-28T02:33:05.099383Z","times_seen":1,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":441,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/vite/assets/widget-CvKkbkeK.js","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://service.croxy.com/widget?encrypted_request=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","date":"2026-07-28T02:12:31.124Z","timestamp":1785204751124,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /vite/assets/widget-CvKkbkeK.js HTTP/1.1\r\nHost: service.croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://service.croxy.com/widget?encrypted_request=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\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.2135620745.1785204745\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31556952\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 23 Jul 2026 02:38:01 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ndate: Tue, 28 Jul 2026 02:12:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TZUyeqbyUFRSqRyyWRJ4dL3bPPU7RDjlkkQHBxlPU9zd0bPL6MxjEExlWu0X3R23aW5PiWgd858V%2BhBsIjhbZPexYvCmd7h9fwyF%2BkFrX1WsVkaKUuX8icDkb3%2F1tJdOSYFltw%3D%3D\"}]}\r\nage: 33\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a2205bfe8e6fb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138028,"size_decoded":40971,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (64100)","md5":"3330e58f62903dc2e75d95c3a66c85ac","sha1":"51beeafd0ef47d35d92702dd5ec70c0543efeaa7","sha256":"eb4364885bce8adb02ecaaf8e39f4e4b8981698eb37107b928637997ecb5b1ec","sha512":"697a2285e959d0b7e6ed396e57a945947ce2075f42c9bb3460dd916e372d0da0fb573947d12ab8f0fd1806d14d54a77b3c5c8b5b7288e8e15b8e5b5c38feb2d1","ssdeep":"1536:SH7lcPlJVaK/21UDmbvKoz7IzmfP9qBGK43UH1su78XBNdoDrYbdUyDjRt9L55Au:1abvjHU1sa8XBdRDVtx5iw","tlshash":"c9d34be0b0d3a47a47b794d0712a3000b339cf55aac9f850fa9cde92799948952b7ff4","first_seen":"2026-07-23T04:00:02.317143Z","last_seen":"2026-07-28T03:12:55.257367Z","times_seen":53,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"service.croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/index.BA_rpDMS.css","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:23.836Z","timestamp":1785204743836,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/index.BA_rpDMS.css HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\netag: W/\"1d18b17f2af62f682060b3052554c02a\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y2T8NZEhDtBKhiASngh0e%2BEajvfEqAjmykYW2PrYwlTBLhAlGKXMwr5yyHSZwoC8KDgjLvbk%2B%2BudmzZFNgnAeB95E2VlWSP4Wv4mCgqftsEJ%2F31a2XDKW5TqNBA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd0fcedb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27366,"size_decoded":5428,"mime_type":"text/css","magic":"ASCII text, with very long lines (27365)","md5":"86d79723ab401c899053b604ae6fd949","sha1":"2efde9d805dcf5fcc1a98cdaafa175eaf09ba1c0","sha256":"61b4fcdf5e39b3ba0658676c6a2c20ea5935e94e08c496e9863d5478ae088fbf","sha512":"8a63758d3bcf62f8593e41027497fe96a246ca19125be23f274fdfad5d168b126ec469777ae5faeefa39cd4a56bce61ed19d7bc6c4e8d4f3b9b1733356ca7b52","ssdeep":"384:DddySU/mKRUvht5CBUNExjNIVcGrrzOSDdv:rSmKRUJtiUNgjNIVcGrfOSDdv","tlshash":"8dc2116233989d14b537ca1a94d03b4d281af633c14642e8b5f3ac5989d7bd322f7a4e","first_seen":"2026-07-28T02:31:43.378398Z","last_seen":"2026-07-28T02:33:05.102018Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/Swiper.By18FkDj.css","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:23.837Z","timestamp":1785204743837,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/Swiper.By18FkDj.css HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\netag: W/\"6b44b40460cc597847319f323ce26af0\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=77hC2gmUNXgqvwLG1ujanBLAhHVtciOLPN%2FNMu68TB3c8oadZuYOqqJbquDJjIjBiYODrkulDerPKPhxUklpUSumk8DyihdkIAoLbm1%2FNL47Q8bTp4KP7JNXYwk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd0fceeb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10046,"size_decoded":2577,"mime_type":"text/css","magic":"ASCII text, with very long lines (10045)","md5":"23bd5f7cb88dfdd21c4c6755d3c809a9","sha1":"87153a9dcdde2ca7066fc290109d6f979df1c164","sha256":"2771a44877c2bdb740a1be8861369fa2dddfbc6fb89ede3042498c059517afc2","sha512":"47f58c6e086d3289afb6d18d9c361a97bea294ab36a8a4bd2ebe9804754c32d7118fc0d2731f1c18fe0741475d0855e970f4ceb32d3882ec3a26e33da29c9be1","ssdeep":"96:DZQGZgEGbyZspls5SeZTsQu0byZspls5+X3WloMtM4jO5byZspls5SeZTsQu0byx:DqGZgJ7OFZAq7OqmmM24u7OFZAq7Oqa","tlshash":"b422763a74ce6407b6a3cf2031943a872d15630727c7927edba11d27c0576eda7fa680","first_seen":"2026-07-28T02:31:43.244967Z","last_seen":"2026-07-28T02:33:05.10297Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/Highlight.BBzqt80y.css","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:23.845Z","timestamp":1785204743845,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/Highlight.BBzqt80y.css HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\netag: W/\"267d4ebdadf2c1f0f018b2f761e7b968\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n2vlSGVgF646UGqS3lev%2FpmyzyotOoqpG8bS5g0pYBzxGQkfYamrPijUWx0qx1Qxfu0wNqKMr42JDK5Mleht8ELdkH6wd%2FTZiYvGhOS3fy%2FMeNDCZ0R3%2BTcsuAg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd10cf2b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6413,"size_decoded":1921,"mime_type":"text/css","magic":"ASCII text, with very long lines (6412)","md5":"ed387a211d59e30c58a41e97ca484813","sha1":"271962e45cbf4e4d5da000c7c8b96b50b8c69d60","sha256":"3b43e946d1e472630c94eeb90adf9d4405d8fb76df68bfb8f19844a77a715453","sha512":"32d756f9ad80179079ad83f8ba7a00c49a804f2ef3d7184c504f5ad7c2a03dc7531695bad7e51bd4e8dac77f5c5745e80f4eed5e8372360be7092eff6fb32c00","ssdeep":"96:D21sX7ZlahrWKSDb5cX2Xcd1tlahVKSSOU+s:D2WX7ZlahrTSDb+XuC1tlahVKSSTV","tlshash":"90d18e21af6c0254f137c0939d80b29df949a9f2a08171d189eee529b8cb76235df74f","first_seen":"2026-07-28T02:31:43.302499Z","last_seen":"2026-07-28T02:33:05.103988Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/widget?encrypted_request=eyJrZXkiOiJlWFNPVjgwZWxDRjg1TUhRaVk1NHdZWnN3TmlrSklKMUI1ZXdlWURyWGFwaEtrRDhvVTUwd0hxamVQdGRReGluSk5uZWtNNF84VndfX3BuWGFwQjhaNG9pNV9fRXdwcThvU0Z1VklEZENPcWs1VkhjWTVzV3FVdk5fOEs4WXJJNVotWnpaTjU4cVY2cVhKTlNPczJzTlJncS05QlpFamp0Z09CcjQ5Q1ZUT01URExxZ2hLZmpKNGstck5OOURsU0VwRnd0aklGbUtETzZQcDhOV1ctckU0eFdlS2VGUTZCYVBUV1h3MkNzQmJoY1gxb0Q2cldXYXFtUXFOTGV3NkEwUDVseFRyUlpBQTZCNGNHeS1ReEJmWXAtUmQ2bjdTRUJNaDluVGVMVjlLdjZKenJJdHF4SXMzSFhUUFR2QlVTRm5Mazdkdng5MHJpY1ZyVlh2V282VVEiLCJpdiI6Iml0WEExVVRfUUp2QURYb3MiLCJkYXRhIjoiWDhNWXFOQUJrdFBpZmRqak84RTJHaERBVVdWVFlKSTYzVWFzeE9fbVJVRTlIYXQ0QUpJVE9JUkJ1bzJ1RVNORy1DZmcwOGRWeGl1VC1Jalo0ZS1OUVhzSVNQY3E3VjAxZXpsT3E4QmpwaGtMNkZSazBMSGJ2QnpwSFYxM3FPQXpzNHpZdThTc2RQRkpGS3pRdVJxdjZHeGxrV0RwTmFqT2lSTElwbjlrbjA5U1ZBYU1YQSJ9","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:30.776Z","timestamp":1785204750776,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /widget?encrypted_request=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 HTTP/1.1\r\nHost: service.croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nCookie: _gcl_au=1.1.2135620745.1785204745\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=0, private, must-revalidate\r\npriority: u=4,i=?0\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlink: \u003c/vite/assets/widget_bootstrap-DBWWKuGY.js\u003e; rel=modulepreload; as=script; crossorigin=anonymous; nopush,\u003c/vite/assets/widget-CvKkbkeK.js\u003e; rel=modulepreload; as=script; crossorigin=anonymous; nopush,\u003c/vite/assets/widget-BBOcYX8M.css\u003e; rel=preload; as=style; nopush,\u003c/vite/assets/globalConfig-aTKfDg_G.css\u003e; rel=preload; as=style; nopush\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-request-id: e750fe54-3ac7-4574-9e2c-6cb19a65fa7f\r\nx-runtime: 0.073420\r\nx-xss-protection: 0\r\ndate: Tue, 28 Jul 2026 02:12:31 GMT\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YDAQGLtRaJEQvjExXKh16%2BsQpvpQ9%2FUzjYu4UIJ8tMVX5y8wGdy5EplQeHpExc696bhxvMKovECJXwRSZNHGcaL6YBENN%2BCC%2BEkNJg%2BCfJCNng2rnUsdrcCdoBMI5QJdJ14twg%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bfc5e65b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9699,"size_decoded":5096,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (7795)","md5":"902777b664f3fe37b7c9f9dedba65516","sha1":"7b31bb572f97eb9a6ff9d80ce39f214afcc7a6f0","sha256":"5d0404b21c88c2627e8910902cc3fdab90d8e51013f9b74d810eaeb31c55a9f1","sha512":"abb1f309bce312bf562ece777cbfbb1a8cb151f472a66fa9662aff53730f6a91aa2f7ed5a76193ee3bb5821f7cce4b87843cafdd6f3dd036d10585bbadff2b3f","ssdeep":"192:jjEppTKf3TAumjbdXr8NjpA52Y6M63EC/l7YdcPazr:jgpFKfU9sNh+eEC/l7Y/r","tlshash":"801208902a354d8cc0229f1377e85f951680f05238828c6dd2d77a9f69d3b6b54acefe","first_seen":"2026-07-28T02:33:05.104956Z","last_seen":"2026-07-28T02:33:05.104956Z","times_seen":1,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":329,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"service.croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/DNINoCox.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:23.849Z","timestamp":1785204743849,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/DNINoCox.js HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\netag: W/\"36b6e8b3c97f241af7c2caecf72c2067\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xy%2BJZ8HyGXPXBjWjlPF7PAsZoe88%2FwLpTNdWExMqevqVh3%2BpeRS1SeB9LSVyQPkk1m4oVtUXJhbQ5aw61u91%2BUmcjZYnZxmvPrWiBDxIiT%2BfhZmDDlWEEfzzugI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd10cf5b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20122,"size_decoded":13120,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (20121)","md5":"e1b2b6978f1b1331df0ae584773bacc3","sha1":"44e89d63089b1b847dc2af626150f3cb08dd5102","sha256":"11af79967bde5e6de35d555d680dcc86f3b3e4b3b0d649cb88c85d0b37c07b7c","sha512":"ec6be615f70a042ac7c61e7d522b9908994d9e8b25fe2f65a8cd52e078aa81ab477407225e39c37ff107c32fc3c8517dfac0290f94cf75528572f6d2be03bc30","ssdeep":"384:+iApaHQY9IOaNS7jngSJpGyaXQiyW2Eg/DkMrMC6f7:+i8aHtXaNandpGyaX2h8","tlshash":"6b927c39fc1ef825a73f89c4a0895450ae1d596be39dd4f9e4d82c273391920f38bb25","first_seen":"2026-07-23T04:00:02.33493Z","last_seen":"2026-07-28T02:33:05.106398Z","times_seen":3,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/DrHVSrkV.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:23.853Z","timestamp":1785204743853,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/DrHVSrkV.js HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\netag: W/\"6e22d3bff42b9807849805877a14b08c\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e01vf%2FbdzuOkfjAqhHZpQ7CzRKb4EzdqmIrRVADsut%2BNTLqfLXXsdycLwY3KiQCi0DcO5SzVEHqseD%2FdH3utWCgjIEs5K5zo8vevHskMGKiWpk6j5lQp8jbEIOI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd11cf8b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2765,"size_decoded":2053,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (2764)","md5":"8749f6b0cfe8ed4e62fe6059d4c70819","sha1":"af74c77ad5aa79ca257dd34cca9ac776985a5d01","sha256":"61da003367b62c29dcdd09e439a7769da8246e7a82c13ad9d711433c4615924f","sha512":"5efb96b40625206e506383e4b2cd348ef9a78134faff5275a7efa3ffa20b9e7a2b7c9dd84cea1d9e4eeb4f613feb195611be8faedb93809e01b5fdddcd8a2d01","ssdeep":"","tlshash":"8951c7333d43f9165f470e846591349d2d28754b76ea44bded80041ae5d4580ebf9da0","first_seen":"2026-07-09T11:59:53.537911Z","last_seen":"2026-07-28T02:33:05.107208Z","times_seen":4,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/BXoBrJCK.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:23.863Z","timestamp":1785204743863,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/BXoBrJCK.js HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\netag: W/\"3a98901912fb8d01eaada7b61b5e6998\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DuYtCq299AGTFwkIWwVoM%2BpgdUQcEKO1XPQLc93%2BlMwsoDoUjWPq9h61olgs8KHXMRPcsys7m7kFw1eWPRlMlHr9oWUdMIoBjbPscOSmJAGdVbaU1jwb97F2dVI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd12d00b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1269,"size_decoded":1676,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1268)","md5":"74dd231979fc71701dc4a3a5009aed51","sha1":"351e40d038e472cf4160c3c23ec3b9feb73f4794","sha256":"b8c431449714a2a4e1177e6db95dcc9383b2c24bacdf6d48805c61e68d43bac4","sha512":"54567626c6197dd2e5263d1504e88c91e0544c495ae2eda0b1e9fc1746fc311da97e1bbfb782f80c43da6ebfe545b9ef56d80e10c0b222664a3b19bf0668518a","ssdeep":"","tlshash":"7c211a3b4da3441024ec4ffc3248aa900d744c0ea17e94c777d527dd8c8521089fbde1","first_seen":"2026-07-09T11:59:53.496994Z","last_seen":"2026-07-28T02:33:05.107854Z","times_seen":4,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/images/carousel/icon4.webp","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.336Z","timestamp":1785204744336,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /images/carousel/icon4.webp HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:24 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"e34a4acf91e24a1910dff02893c6cab0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qeTash%2Fxf29%2BBmjejJ6nNNtzesS9p9dtqR8OiotpHZiQtdrBwpsKOmfKMwtVYwlsHipBqBLMktg6%2Bjx%2FbhE8%2B47njTcUdCfNTJhr84yDlYNEYu59H5NVIaBdpJQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2205bd41d47b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7016\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7016,"size_decoded":7672,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"024c4c12749a282f0c250166561a9667","sha1":"fd56fba4ed9d77600c6e736ad5db03b872556437","sha256":"d384353042ac918b318da6dd85d6f1d37d0a67f55b56373d663fd79cc88df781","sha512":"7a5ac0aaf4cfa5e7f386d0d74fc6d6d56107b7d2c0db34e7a15e8402e963b79f0bf7b56380ced36b5b84713d927d11ac5a49b373dcb856a49601383a90d7778a","ssdeep":"96:eElbw+iJrDqIdjqidSwvgAblfd+5JcSmkkVVGtdAQ9UtY0AxO04R55hzHDGKPMui:rwNrD/kidxvxl+5XkAAVtkU5p1zhEVV","tlshash":"5ce17e70837ad749e5200f382581af42577ee828b7d6dbaa4ac46105a3b3861e898986","first_seen":"2026-07-28T02:31:43.292985Z","last_seen":"2026-07-28T02:33:05.108484Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/Service.CmWkriEM.css","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:23.832Z","timestamp":1785204743832,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/Service.CmWkriEM.css HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\netag: W/\"2e0e3dce9a0e8722608f43e4d96706c5\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q8Qp7EEPB2O2qT2qmB70yR6WQBsrFW4IQ7c6hJnqEQTuG6srO9%2Bgxw3NO7hEBxgVpfVmyGHKiY3LF36WrjxEmDl6ZLRdaZA2BQSCSIbvlGL80rsWkCYRtjeY32c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd0fcebb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17141,"size_decoded":4149,"mime_type":"text/css","magic":"ASCII text, with very long lines (17140)","md5":"b05a389fc5f97639df0d1d0ff90b8c9d","sha1":"a649661dc73e0f315abf9a4d072fd8f1641514a6","sha256":"38904bf3a9cdde5c6e878de6718d17b97c71762597b85f58b1ec88d46a910036","sha512":"b1d4b9def753bea4fb138ca061ed26a17a984a51fef7fe27432be61e1ea53b4bd441381e08fd17e9272382bbd509f056af9f5aeb86198ef6a7713903fd787a05","ssdeep":"384:D1aivePo+irat9agQvwaivePo+irat9agY:BaiveP1aat9agWwaiveP1aat9agY","tlshash":"f1720a73290df466661b4d183b41285f2e595a0b92f2e834beb33473e4c2550fb7e9ac","first_seen":"2026-07-09T11:59:53.510992Z","last_seen":"2026-07-28T02:33:05.109456Z","times_seen":4,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/BYoU2SGp.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:23.852Z","timestamp":1785204743852,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/BYoU2SGp.js HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\netag: W/\"2d2004d057065d9c99a2a86d4897ec83\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mbDHGoP3VhVUIs5Aa62WV85tBluiT4p1baRS7oFHlQdm6Icj%2BD4UuTPj%2FAZG5TWKOl4cm%2Fr%2FfOklpP4TpGerwv9TgFBMc3PW6qRia7z97UrjoRqQC5ZY6Nx75lw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd11cf7b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80,"size_decoded":755,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"7d631537aa50989d524bddc44ce2aa18","sha1":"42350b60f2b1bf4b1e8f284eabe818ed3531b1b8","sha256":"49fcd391e2c7204c283d99ee3068381239c9a61faf32cc43f2d8c8a23a66d9a5","sha512":"8973d887fdced274dc8296d9671552a10135cf6575dd08303cb7d1c3f6a5e29fc874b04a59734d1c94028d21882da87c8f4cba5ad890b7dbf8c59992a8c314b5","ssdeep":"","tlshash":"b7a024570074147413444cd44f304c350d0c4c74134001f00404014347d34c7150dc4f","first_seen":"2026-07-23T04:00:02.293335Z","last_seen":"2026-07-28T02:33:05.110136Z","times_seen":3,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/images/navigation/icon-arrow-down.webp","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.279Z","timestamp":1785204744279,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /images/navigation/icon-arrow-down.webp HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:24 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"03a830b5f8e5b79986f1ffb16842c658\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qnDIHONKfeJLbePhsRLUapuLOLXhMMaOKHJwXhbJFMXtAiciWQ1oTTigbyYiAw4cQ6fGHXEhtoVE3am9v%2BNhv77JfgSOrMDj3cj3%2FdVEYiuQTMid26Tn5bBZ8i0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2205bd3cd2cb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 760\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":760,"size_decoded":1409,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9275bff6e98aadd8eab79ebf2c3f4062","sha1":"0f0283501d41546692d4a3774a9d150d5aef6888","sha256":"ab1a913a652bd7bd5505bc28e022071343ff558b09b923031b0cad6e6ce023b3","sha512":"2d8ef40c4c58a9b8cb34220be2361a088c998c97a49dc69f81811e20e2d1cc690fa969097d04b627068559d081e5ef0b3b943a4885b1348652bba3c6c12b7267","ssdeep":"","tlshash":"3d01e1246334275df1003bb0a0915f42f3747e16474a6716928442361b104cf7c6c38a","first_seen":"2026-07-09T11:59:53.540823Z","last_seen":"2026-07-28T02:33:05.110908Z","times_seen":4,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/vite/assets/vue-dompurify-html-CEAHYyWB.js","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://service.croxy.com/widget?encrypted_request=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","date":"2026-07-28T02:12:31.134Z","timestamp":1785204751134,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /vite/assets/vue-dompurify-html-CEAHYyWB.js HTTP/1.1\r\nHost: service.croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://service.croxy.com/widget?encrypted_request=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\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.2135620745.1785204745\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31556952\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 23 Jul 2026 02:38:01 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ndate: Tue, 28 Jul 2026 02:12:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dbud%2BxU6iUjkvXqJwkcg34kYlZxk46dgE1ypQhDW0iOfxtxmjKOB127axRcAaTEmaF%2FZp6lcHaY7ErAU6ysBDxjRARN12OewsCKQu39AhnhaydGGgj1B4UjjVO48qcTkSNMwNw%3D%3D\"}]}\r\nage: 33\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a2205bfe9e75b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":133850,"size_decoded":55516,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32250)","md5":"f08d3ee6338722a1dba820e7a9cb5e3d","sha1":"f829a37541edf9bac0f6e0bce1b53fbd47f337a8","sha256":"129158fd07f088317b92c1505a0e06dc97df9a1aaa566370b174f1e0bf8f3107","sha512":"b05dcd95357db2742a50fd90d55bca639800e221ffe5b776694907001f8eab41d14f892b092cea5aa58f0dc0f35981bb5203335aaa8f532311ce8990133cb20a","ssdeep":"1536:Dbc2MBsGEr8njr9Ih8zh5/Ji2zUhsrW7DDE52FfGyJjQzh9QWJRgSQGuHROZ8PKz:E2MqNqP93h5w6rWrE52FHQzcJW","tlshash":"b6d37c58a8d9543503e234ca28bbdf49a53e5529a40c8854faccddfa2c76669307ff3c","first_seen":"2025-06-07T12:35:30.073696Z","last_seen":"2026-07-29T19:00:53.082009Z","times_seen":773,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"service.croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/vite/assets/_commonjsHelpers-BosuxZz1.js","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://service.croxy.com/widget?encrypted_request=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","date":"2026-07-28T02:12:31.148Z","timestamp":1785204751148,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /vite/assets/_commonjsHelpers-BosuxZz1.js HTTP/1.1\r\nHost: service.croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://service.croxy.com/widget?encrypted_request=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\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.2135620745.1785204745\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31556952\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 23 Jul 2026 02:38:01 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ndate: Tue, 28 Jul 2026 02:12:31 GMT\r\nserver-timing: cfExtPri\r\nage: 33\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xc6JgKK45uWxFHhTeUUctnnITb9L3rmmCEKQX5ivELVj6lZve5K%2F%2FBtdFWvq2oR6a7oWVIaZa061xSG2quBMelLH%2F7U4qUiZG%2F4kwfUOovhYo6UcZ0vpO1oQF9slXmacb52MaQ%3D%3D\"}]}\r\ncf-ray: a2205bfeae7fb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 430\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":745,"size_decoded":1193,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (690)","md5":"e6f0cd0416cc66836b4f1e41bdc80935","sha1":"13163f25946abed1f7c58918babf79e254a7d6dc","sha256":"8ea758de5a6a30f5fef555e0c068181dd5f9e3c6d8602e78949fc8f7b5853e1d","sha512":"e17ab4f93d6a5db0395c4a600a10b380defb48514d3e6e385bda24625d51cab51bf43954fc200caf2a5f62963222d968b67c132f6088f39be97691f4b95c086b","ssdeep":"","tlshash":"7101d08938f0e5f045fb547c80377506f32928b991eca9c0b39980f566f409f5411f6a","first_seen":"2024-08-19T19:00:37.627848Z","last_seen":"2026-08-03T16:41:36.33054Z","times_seen":2886,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"service.croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/banner.Bm2euVpn.gif","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.248Z","timestamp":1785204744248,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/banner.Bm2euVpn.gif HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/web-assets/default.4QL__ivq.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:24 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/gif\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"d8fa46e2627192ef5c68ea26fe5082bc\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fgCQ4uMV9nIFbJ4SBy7o%2BoBkYFhR4c%2BPbBiH9P%2BPSi4Wobd6Fa7WUkWvsU7%2F3O3RAziOfh2ohv9Fr7tZFh6RzXnu%2B%2BT827HEWJqC5c3Sv2oOZsGLGx412vX3gaA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2205bd38d23b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 101054\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101054,"size_decoded":101713,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1920 x 60","md5":"c0c004f1b2b0384cb37ddb5b4f46e7bd","sha1":"3966d4f48b2943d04882cfd322ea358713f2e2ac","sha256":"bc253a2bc077784977f347a6827c557a9842e22a29ccf42adc15ca878f90fd78","sha512":"63e6a37665ca3b921d551d7e830d69029cb218fa5e5164aab8375641fd0de28aa4131facab514a56b2827907c311b1e09efef7258392f37dfac44e7bfcbebb7d","ssdeep":"3072:MKtLclLsPw05m0C57XqticSnQ10APpzH6Hb:TcJ00oicd10IVHob","tlshash":"ffa3f12f812c0c5bb56b72f025238af13f6e5972b592c2b3dd88ba80151771da0e4f36","first_seen":"2026-07-09T11:59:53.513507Z","last_seen":"2026-07-28T02:33:05.113816Z","times_seen":4,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/images/carousel/icon1.webp","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.330Z","timestamp":1785204744330,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /images/carousel/icon1.webp HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:24 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"1f135db1adb09d0ab37c3717c0a5f2fb\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TMXnFO7ueQfcMargjX4E%2BiSap6%2B3Yhr6p41WfPkNsUmVQ%2F8bO%2BiGpyBqBFVukvPleRkYjSYyYDivqqiEQE%2Fy2F7Pxl%2BUUg534lfa9%2FdgSwUkIWVBciOsXmzjBHk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2205bd41d44b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8790\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8790,"size_decoded":9450,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e2bbe3884726c83e3217a17a2517858b","sha1":"01758d90460d81c10ee59c8f53e26b94b60e0f3e","sha256":"3789e13853a54a3e19d4c89f413759a69d4c77eadcffe29db2dae760d80fbc65","sha512":"dbc163d141795c0cb4d7eb069e84d624896854dde1135c3dd0670af650346fd0413629ea29c67bab5887d5930c5b1da54dfc13bc16d3d4d9944ff895c5cb561f","ssdeep":"192:5ww/Hns+OlXlun9/ShpPBagmzp6mzv4Uxd:5ww/0lXlu9cpPBaqmz7","tlshash":"4a02af51cf865666fd232eb4f4f027b5412cac9e461cc60fc2515b69f020b628cb37e6","first_seen":"2026-07-28T02:31:43.272499Z","last_seen":"2026-07-28T02:33:05.114562Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/vite/assets/module-D1JqFS8y.js","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://service.croxy.com/widget?encrypted_request=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","date":"2026-07-28T02:12:31.146Z","timestamp":1785204751146,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /vite/assets/module-D1JqFS8y.js HTTP/1.1\r\nHost: service.croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://service.croxy.com/widget?encrypted_request=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\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.2135620745.1785204745\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31556952\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 23 Jul 2026 02:38:01 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ndate: Tue, 28 Jul 2026 02:12:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tGSXauZmllR4l7tXabcLCB3caE3K05FqK%2BUR5Jj60SzKU%2BDbWG5XHc1U%2BbOGBt68RRQc4rZn0D0Q8a4BpcY0oizPVsAzuqVj30HG5lsyjRwwHL4ok2KZZPJra%2Fv9jdZ5TxaEYg%3D%3D\"}]}\r\nage: 33\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a2205bfeae7eb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8550,"size_decoded":4434,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8505)","md5":"1fdd45a4cb2a775b4d6f08c42b854108","sha1":"2a52bf767d26a5d1c90f7015457272c8b2b8cffa","sha256":"7fefe15aebaa386a48b2b2a982ec35e0e0cf73b57d29d0882913c4106cf24682","sha512":"59163ff7e1f0944af95c9667228866180329e1fed961daf2207b26c0603f8b087d6e28648d0d3df08fc5e69602873559a1adf188816a2e94bbe6f73e181f1621","ssdeep":"192:A2AWbIuugGZvOlsKY/aGkoVj24tNs1FsyXuTp1GjGp+P:A25IXBWYvkotskyXuTXGjGp+P","tlshash":"da0254f50a6c76ed75474f69df33e9249b2fa8b539bca0e05a2fe5b890935c0c613410","first_seen":"2026-04-15T10:26:48.383152Z","last_seen":"2026-07-28T03:12:55.230818Z","times_seen":67,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"service.croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/api/v1/widget/inbox_members?website_token=PEejQjXJH4vwpWAoxibBeAjo","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://service.croxy.com/widget?encrypted_request=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","date":"2026-07-28T02:12:31.294Z","timestamp":1785204751294,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /api/v1/widget/inbox_members?website_token=PEejQjXJH4vwpWAoxibBeAjo HTTP/1.1\r\nHost: service.croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://service.croxy.com/widget?encrypted_request=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\r\nX-Auth-Token: eyJhbGciOiJIUzI1NiJ9.eyJzb3VyY2VfaWQiOiI4MzU1ZTdmYy0wOTQxLTQzYWEtOTgxYS0zOTM4NWMyYzUxOGEiLCJpbmJveF9pZCI6MTYsImV4cCI6MTgwMDc1Njc1MCwiaWF0IjoxNzg1MjA0NzUwfQ.ZP4De34v2neCsU8g4VSYmsxAoyCel4tzpR5iCzMrr1Q\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.2135620745.1785204745\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=0, private, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/json; charset=utf-8\r\netag: W/\"5b6d661c2ac1c50b7b7539d52821e80f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-request-id: f39b2caf-2d02-42dd-af07-f46314063e09\r\nx-runtime: 0.016609\r\nx-xss-protection: 0\r\ndate: Tue, 28 Jul 2026 02:12:32 GMT\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NIaRWG8ZyCd2H7aGunnHl84feMmMI9XEfMyGDQckhzcAK%2BQyvFRvVKQ8Jz1Zx7ADGYTmfmlmJxt9gFiUeOzfzTkW8F%2F%2F8dU4Hv1pn%2BjSrtSMZVmBzWpk5Ql64FzFwuy2crH6yg%3D%3D\"}]}\r\ncf-ray: a2205bff9e8ab500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200,"size_decoded":1164,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ef1e14cd9b1b4f16e0e728c77d91c1c2","sha1":"0560507c913bcc79b826e0db978a2e15361fc6fc","sha256":"5b6d661c2ac1c50b7b7539d52821e80fd11cb38825271090afa166ab368390e7","sha512":"6f11bc6345ee5c5c8c6061e410a2ae99d5ca3cd3565a505d17566f6a0c7e254c2b22471d2950627bfec051a8d503f96cdc0191744089de22a8d4f077b489c577","ssdeep":"","tlshash":"56d0c04311016156ce880bd1b4207fa856c114c36dce7c0ddf040d043b800d53006faa","first_seen":"2026-07-23T04:00:02.271709Z","last_seen":"2026-07-28T02:33:05.116599Z","times_seen":3,"resource_available":false,"data":null}},"time_used":929,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":927,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"service.croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/Package.CoZQ7d_V.css","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:23.844Z","timestamp":1785204743844,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/Package.CoZQ7d_V.css HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\netag: W/\"41401495a6f71de6258e2bc865191238\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7v611Cc2t%2BpsqaMcwFpHzjoLVcJc4u19%2FwjltLfqVzOjApQNga9IbOs2wZEwexrkiyugG9WXujWpBv6T6AvFD2X8%2BxhINFGSt7pAcDfW74QAWXMGMXOIZZ3dqTo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd10cf1b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9777,"size_decoded":2627,"mime_type":"text/css","magic":"ASCII text, with very long lines (9776)","md5":"3bd39859f9d4f4a189f3316c8e6ff16a","sha1":"7d4d6c6a515185348b360008fc61480f3848b1ce","sha256":"7d12a6a0ced6cedbd3282444bfad0f9631b711c986546808d0d3460acbec7866","sha512":"e7efc1d93b0f5e5e3af4d1b308791a9ba5aaa88548d00c17295c2c63ebe667e732f7d3ec482d7b70247ee1921e7b34ad675f3a1b278e9d79c60650b6eb672f3b","ssdeep":"192:DvAglQ4pxorOAk2v1tJM7fOsgettglbGofgz3QVKU34zl/LB5Mb:DvNQ47orOAeRgetebGofg7QVKU3uC","tlshash":"cb121e65e13c9319b137ce75320037993c7bb236b94206b9bca7b954cdc3aa32623359","first_seen":"2026-07-23T04:00:02.193766Z","last_seen":"2026-07-28T02:33:05.117794Z","times_seen":3,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/D4cBFKBk.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:23.891Z","timestamp":1785204743891,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/D4cBFKBk.js HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\netag: W/\"31de5b44afe85a09f591dd74332d2dbc\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3IP6QX%2F0%2F%2Bh5gad4wd3VBxs7eVs2Q0cbqQ0nOrLoz%2B1sxA4hIuwf0r%2FL4%2BxWIoLz8IU%2BeAyGa1SXZxuZR%2FbE3Scx9wdozmZoJviQ4964ndnv4h2YMKqKfY6zdto%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd15d14b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":104,"size_decoded":781,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"4bca1361e100f613a25d5f141c89f869","sha1":"14100da27b6377b41a2573e97d4e7cfea44b7122","sha256":"e5f05edfc5ecc92bb3fe80b73774e75e07e6e754ec552c556eaaec71e005611b","sha512":"cd0a1852982a16b24119b92d5861d60af4f6157be2b3eec8c6b1a7e0e781c1b69a19ac259908d77fd6fde94558dc525937316742eb29c80d9b2f6497599baa7f","ssdeep":"","tlshash":"29b0129630b054f21f184ceb5f359b000e9900b523c39a80214a061706a688a022e945","first_seen":"2026-07-28T02:31:43.325728Z","last_seen":"2026-07-28T02:33:05.118551Z","times_seen":2,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/header4.BYh5PmGD.webp","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.285Z","timestamp":1785204744285,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/header4.BYh5PmGD.webp HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:24 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"5059af959db1d5ea88ee567685c52487\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OjBFZ4NpqCMBUbLUMqWxmhmC4dPYJT62rKwLsRb%2FUDkpUTdWANMrkNVRF6RBhxhx9YWU7y5YOhwymXz8%2FAUiq1iIwKXlB%2FEZr5XPwKFRBbSxPc%2FBqlP77G5TCFw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2205bd3cd30b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23422\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23422,"size_decoded":24077,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"14a0dced39529c06874738fd5e7f3d2e","sha1":"7270bf076b9770ec7a39359c4e96889842e6f3b9","sha256":"522fb74465834aff0490d780fb79c9d2769bf43a1cf2dfbdf2df16e649c00322","sha512":"9165acdb74868b2cb7886da89fe840129ce32de30db36dc65531887e0589770ac27c16c48f81da8de77d3659e0a0f83fe70c84b0f6d62b070cbf3efd651fe64a","ssdeep":"384:HwWtxRXn0DSwNQsPcPr2eHZjpuxiRtiTqACZde:QANn0DSwNBcLHRpu0RtpACe","tlshash":"e5b2d053ad0301bdd2362639845db7c0e6762b7e1839b9622fee0325ab0914b74cfd03","first_seen":"2026-07-28T02:31:43.258753Z","last_seen":"2026-07-28T02:33:05.119729Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/vite/assets/_plugin-vue_export-helper-Db8HHeLd.js","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://service.croxy.com/widget?encrypted_request=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","date":"2026-07-28T02:12:31.132Z","timestamp":1785204751132,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /vite/assets/_plugin-vue_export-helper-Db8HHeLd.js HTTP/1.1\r\nHost: service.croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://service.croxy.com/widget?encrypted_request=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\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.2135620745.1785204745\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31556952\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 23 Jul 2026 02:38:01 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ndate: Tue, 28 Jul 2026 02:12:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nBjOYoem%2FHMRNG%2FvM3HvTKmKnkj6S7QkGd98yLegTHvNrozhE7tpXRfR%2BhWzWczc8p05O8gvfCHfR81lsisjquTU0UXUzwvfRPiFw6%2BAZn9KMgbn%2F99lEimETIssbgx%2Fer1aMg%3D%3D\"}]}\r\nage: 33\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a2205bfe9e72b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172162,"size_decoded":67886,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (28896)","md5":"416f6bcf079db15a045ea89c59aa6a71","sha1":"f9e5c7c6a4feeab446160677d35f2305301b8b89","sha256":"df90f06add304d15830d5f3ab775bfc5385b2fe8952bf449f366cd8de9fa7c53","sha512":"9ba476f96d5af2f2ee038df11cf18c668cf1a209e2ddd24bc360eefa96d38a200bff215eadac14d780650af74478d25c6602558817092f8dc524f37f5dbeebdd","ssdeep":"1536:s8VwGOdfa9ok5D0ZSIzx6ZKR8ng5xVOztZV1Zk62EkPl3EBpxEIFN/mTLW6:z6C9zs6Zxg5xUpZVnkN1Pl3q2YNy","tlshash":"6cf318e53081713653ea18e250bb1406b2296828384d84ecb57deddf3a7694950fffbe","first_seen":"2026-04-15T10:26:48.492931Z","last_seen":"2026-07-28T03:12:55.276265Z","times_seen":67,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"service.croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/CHQHCgSq.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:23.850Z","timestamp":1785204743850,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/CHQHCgSq.js HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\netag: W/\"5bcfabdb0d71316cc130f7d90570e3cc\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=welUH8hdS41tlcHh5pwOem8uVeCwg0PFJmAD%2FPJ5ndqj2zxfb8iaxYGnW16cBgpktA%2BkWYkRsvrmT1YKP8R2GmcZbuoE%2FR2gSoYF3Cx5nuxCe%2BkOjxT1qdlIi%2Fo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd11cf6b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12107,"size_decoded":5562,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (12106)","md5":"5336f3725046f78d895470e0efbc0b2f","sha1":"eb7f8dd1f0357b9a4c04247db7c58d7df2767d52","sha256":"854d3d85736b5c908bf9a33c6b5d753bb0e3dbb35c05e7cbfe04a9cfc7b4fd98","sha512":"2667794db79f946918fbb333452dd9b00f2b7be5b3375ae4610a05b91dbf80a9f2092e2a6885a303c6cf72d150c95caf3d1e994796161e8af9f9e4b79fcf86d1","ssdeep":"192:4+Ss7OIYNCYfIhCdLRpn5kwib4hRkITs7OeXuuvP7O+j8L8V71Y:osaIYvIQJ5kDkAIoaefPa+jc8V7i","tlshash":"3d42c931fc2ee078e52716e96145c004bd356e4ff2856c75e4f9882e4353d24e7aaba4","first_seen":"2026-07-23T04:00:02.350043Z","last_seen":"2026-07-28T02:33:05.121807Z","times_seen":3,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/bg1.B6ZF5IOA.webp","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.250Z","timestamp":1785204744250,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/bg1.B6ZF5IOA.webp HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/web-assets/index.BA_rpDMS.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:24 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"5681fe4f0bacc7d76746ab0fb7337fbb\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M%2BQp3i5KBVY8Rg%2BYl9Sd6uEXZc7qoxvUJinT7Lkr3kVvk7ChJ4GZWXPrd1D6o2a7NuP3COsycxVhuUpkn8eoodgpVPjqdJztb1BSV0mFdaJqaMdgwQ0bU%2FsmixE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2205bd39d24b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 39002\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39002,"size_decoded":39655,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a129e298ad5933ea9738725ba2a9776b","sha1":"c3270d9e09d9fe7863bcb269c11d59d8136905c9","sha256":"d4e52444b56495b38cf064edb64b16508c0c652bf46cc686e4d3c1ee5b905e43","sha512":"944bf8e088ac06276dc990d1a3fb06ae42b929b3a8a46f60a5bc7a838872657522a67486d40ae4129b1b7d2bc59f88aec0774fb9481e4af88d7e21e52fd08723","ssdeep":"768:DDkAk/v2TXDs9h7pPEUGT/gckBSOxoC7V8BGhG8jZrlTeDAaMj19W+j2:DDk9vk8h7CGNoC7VEUNZrJe47W+i","tlshash":"cb03f152ac5609e2f687c6b718f2101993fd0c12be609567e274cfc0b69a056fee198b","first_seen":"2026-07-28T02:31:43.269758Z","last_seen":"2026-07-28T02:33:05.122591Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/vite/assets/index-DN3rM4CW.js","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://service.croxy.com/widget?encrypted_request=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","date":"2026-07-28T02:12:31.149Z","timestamp":1785204751149,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /vite/assets/index-DN3rM4CW.js HTTP/1.1\r\nHost: service.croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://service.croxy.com/widget?encrypted_request=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\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.2135620745.1785204745\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31556952\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 23 Jul 2026 02:38:01 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ndate: Tue, 28 Jul 2026 02:12:31 GMT\r\nserver-timing: cfExtPri\r\nage: 33\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=75Aj%2BVtwa3pBYMDi0zEwaAf%2FFb5jeTntxjK%2FU6v42P%2Ba8tr424MDcsmHF9sDL3xfrskLtkW2aHz27WCffA%2BWYuKzCnm%2FBHnBBWu0RWd%2B7Lcz7FWjxCeY7pnl2c3%2BlWVtzRUf6g%3D%3D\"}]}\r\ncf-ray: a2205bfeae80b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 532\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":886,"size_decoded":1303,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (842)","md5":"e13d0b91f80710bb8c5a6ada5b874594","sha1":"3119aadbdc9007a5565e7856e8b882b2a2cfe4ff","sha256":"05d7fb1274805e9bad539d9eae2da84497f2f78d20db272560e59671ea62e365","sha512":"63dbae4114214ffce822575b65413e2ec74ccbacf355879ff238630ac56a4f93f851b7b6601166599d39cf460e2036d3321f478afb2551a8c61f897d3c8d858e","ssdeep":"","tlshash":"75110cc87af4a0f156570520c93a820af02ac5b498eaf370e0d4c1705cb6839ea1fb3a","first_seen":"2024-12-30T08:55:18.480198Z","last_seen":"2026-08-02T07:30:10.57721Z","times_seen":1908,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"service.croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/ByW3sTpP.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:23.865Z","timestamp":1785204743865,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/ByW3sTpP.js HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\netag: W/\"96997e5c763cf32c255b40522959a7e9\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FXFjG3Ae2yhhP3qlTWhJZyBDGzUfq%2F6JIaW3vsF17TBa8rCTMzCHbNytOcFAxVYY3J7bGNsKdjjok16Z%2Fbn3nKApyZRJ0xRtD9zVfAj3UXUfIh1P8ctTe0fgdl4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd12d02b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4500,"size_decoded":2426,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (4499)","md5":"48dc250b6f6ea7e55b414dde85e86cbd","sha1":"edb08600b96bae4cbd34db9658ecc4d22bd7c049","sha256":"532f4c877956ef6699e63799ee0891661a5c15d8fc7c607ba97b3480ff18dd7b","sha512":"2590445b11aa8b7c628cd370547aeaf54ec0d35ed9e3f1f38e05acd885b0127c3a0452f59a63865c3522ecd3994796c4cf1b2800b425aa095e46f6c4992630a8","ssdeep":"96:9NipfWAD1cpSlFN7pHAHwIhuzU3cdLwCkjKLF5rl7R7+bQ47464c:9NiE01cSlFLgYVnqic","tlshash":"d0913f1dd8a9ca36da3699a6710e105471083ebbf280cdd7f0ea5d363789c38761b729","first_seen":"2026-07-23T04:00:02.320813Z","last_seen":"2026-07-28T02:33:05.12475Z","times_seen":3,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/flags/4x3/id.svg","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.307Z","timestamp":1785204744307,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /flags/4x3/id.svg HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:24 GMT\r\netag: W/\"fbbe9f797b9360aa02d6ccbdab918672\"\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Tw8usUk8Ctf%2BQPaM8IwffqXtvm4Kdg8xaxt56pDwO0nlDdunh%2Bz%2FaK6iYgLpUtb0elqcu%2BIkuPDagT6ELRM5WwdNLm6W0IJryy1Lf4xNfREJp%2BAtcrOuhUu9Oo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd3ed3ab500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":178,"size_decoded":800,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f5aa812145ee85fa05e5f2b62bdf030e","sha1":"3ce40942dbc41556fd6f97f7f5b3524579d47392","sha256":"5cd3acc4939dd7eae6318c8d75df8c0d1733f650e2504a2635b0dbf3dfabb040","sha512":"2b1302f34f070a50e26a700950cc653aef24c4bab565f6fdd085e50ffdff9aae7ce2f9f0ac9532b57260a51edd112fa3795792cd7791ce744910bcb77de177ca","ssdeep":"","tlshash":"46c08caee03d9c04874887211f6cb9c241eaa08fa08401ebe8b1082121aa4a3acc2db5","first_seen":"2023-07-14T16:19:57Z","last_seen":"2026-08-03T04:20:13.982217Z","times_seen":556,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/flags/4x3/ua.svg","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.326Z","timestamp":1785204744326,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /flags/4x3/ua.svg HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:24 GMT\r\netag: W/\"782c15dfb417a908dee040dfe128e1d7\"\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UabH2Ui%2FDqZcKH2K5a70F8CngltDA7maGPGEXsA8pJu77n9iyjmNIQOVsPmXj%2Bvgtbhergh0oyFCdXexgqeMhACzN4wqC6ESV26dCigg2Xq9D70c%2FWc9TB5PVqA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd40d43b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232,"size_decoded":835,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6d944bf795f95c09b2f78819af42db89","sha1":"a957f8e2c5803d3f5f41ce7adc30aa3ddc628d1b","sha256":"2d869c23ebfefb2ae0a633297c11dee06fcb666ce7b3ca75eba09b7a1a3a03ac","sha512":"a93b3404ad947c12167aaed04fd00bd47c9818e07d266d6d36c64460bf572c2c65962c416c1c9421ab89dccd6ecde564d261ce519fddfa7287f5d98e9761a24f","ssdeep":"","tlshash":"7fd023bcc23c5c10090881304a7c3bd3c076b047224401c3f0b01820250d0f35cd39e8","first_seen":"2023-05-23T14:13:44Z","last_seen":"2026-08-02T11:51:26.862057Z","times_seen":779,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/images/carousel/icon5.webp","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.337Z","timestamp":1785204744337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /images/carousel/icon5.webp HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:24 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"bb9ecfd913e5660b6181e9943ea71662\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ENf6fC%2FKxhhmpMhRw5uXjrnukLKJXLb68D7yrCkdz2WnbwV6S2SEbbTV%2B%2FY9w0B4KYNt2dqhhXpYCtctrGZBZKv8TAlObsNys0WtRxiwpixIuaFXxzTf1PruKpE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2205bd41d48b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7078\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7078,"size_decoded":7730,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c4bea346d5b306ed9cc58f1748c53a08","sha1":"a4493209604837938a7a891efd09a557cf6a450e","sha256":"a38c333d87cccf9274ad164f4011b7e9ba2a35250ddd28d23d308a3a2878976c","sha512":"9854da634e3364263eec120f431b2902e62536262fbf9e9eaa0af8e4fd62d618d74f4b79175cad4cbbec346940922628584983d9f9029d26feef20fa2a189e10","ssdeep":"96:wElbw+iRzsdqJn3Onr5ijL+YBVciuSrhVM3B4e+6v85Eow16RiKgkvQbwlbwS:VwRKqJ+nr5i/+Y9HHMRXWeygKB8Ed","tlshash":"22e17d50f33c9394ede63bf8e168ea5be9bb2d1c876001a4c4c4462206f9ed31405276","first_seen":"2026-07-28T02:31:43.273882Z","last_seen":"2026-07-28T02:33:05.127152Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/kQ1hy/X2UAX04IMFINQAoyA1tKCmRUWU9YNwde/","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.594Z","timestamp":1785204744594,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"POST /kQ1hy/X2UAX04IMFINQAoyA1tKCmRUWU9YNwde/ HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nua-sec: https://croxy.com/\r\nhash: dd645417771c2469455120921ac0f0f0\r\nx-api-request-encrypted: 1\r\nContent-Length: 624\r\nOrigin: https://croxy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":624,"data":"{\"p\":\"EHNdCRcMJFAPHElrEw0XRgRiSlVJNV4FGAI_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\"}"}},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ndate: Tue, 28 Jul 2026 02:12:24 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd5bd55b500-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://api.croxy.com\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\nx-api-encrypted: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gbFiIvfexqXAvk%2BaOPwY5cPamc16TZw0GA2MFfSohtgjHz9yDynlUxJIJUf662bJ0bIvhHeJIySm0gbcCJIkg7bCRd%2FHVM4s5wzkD%2FOUZPuT2v4M245riL815zI%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118,"size_decoded":840,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"d72525f788eb1a77893b8d1c3f1e7829","sha1":"bae6694a63e4f22b3817faa679e69a402398364b","sha256":"0e809586e52c40b1b65a292d368a65ddf710e00f526d38d3da93b3711811531a","sha512":"409e9c5e098f006f9501f352a3cad97db08d9e6bd1c5483850d405f69f942963fc68ee6a8fee85952f18b291759a38eea6faea1c47f1de4fab9fd42d2fdf2f28","ssdeep":"","tlshash":"52b092ad42a90455852341a4a7189fd76a6106ab292109ae462448acca76a4e288122a","first_seen":"2026-07-28T02:33:05.128705Z","last_seen":"2026-07-28T02:33:05.128705Z","times_seen":1,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/icon1.DcVHhoCS.webp","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:30.744Z","timestamp":1785204750744,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/icon1.DcVHhoCS.webp HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nCookie: _gcl_au=1.1.2135620745.1785204745; croxy_sess_id=e859a10303792f7bb7980d8daed6883e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:30 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"1225ba9d8b40eeeb38219f9ccfad0f00\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rnu4RmOCjK9U1bfXN0c6k9nvTiOfUoB4Kh6fnEeeECRul7YERJoeWleYPWBxhPH1p6azsd7M6z1QSd4IiCeMruG8mGDgU3glbyvGf9azzqC8t7%2Bn%2FUg1zX9CfUg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2205bfc2e64b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4206\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4206,"size_decoded":4856,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e20d14bee1379458e8e183520dbabda4","sha1":"b8f9d97ff669a596076aeef70edafeaeebee610f","sha256":"9c17bd06d5958ff4cbfafed9f5d3822d04ba7af0d45a85ddc2ce0b9a83176a46","sha512":"a77b8cb0353af52283a1328971bb63f770d94c6053176559802fe85d5b187ad9a6eeda35399a50408b37893c0579b22236567eb81238bcece6a3391392569e44","ssdeep":"96:DElbw+ix5gPAm+1wscBco1DX+lN/E18/yxK1Di:+wbgPAXVcSo1DOz/E1Cm","tlshash":"e5916d1347009b27d5ef46b034f0cb02ea5c634921d29b75d3e2af4a8f76cdd0a44756","first_seen":"2026-07-09T11:59:53.509863Z","last_seen":"2026-07-28T02:33:05.130772Z","times_seen":4,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/vite/assets/DashboardIcon-CsDNL3eg.js","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://service.croxy.com/widget?encrypted_request=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","date":"2026-07-28T02:12:31.140Z","timestamp":1785204751140,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /vite/assets/DashboardIcon-CsDNL3eg.js HTTP/1.1\r\nHost: service.croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://service.croxy.com/widget?encrypted_request=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\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.2135620745.1785204745\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31556952\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 23 Jul 2026 02:38:01 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ndate: Tue, 28 Jul 2026 02:12:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N7SV4EICwuinXTL20ZIjDk0it6mGtJJDpguf4NJNg%2BOVAeBzk3MgeEiq0QET17YRF4w0eJjfWqEY0yfDg%2B8G%2FUyfjIMibpNobPYiWXUgQoMW4RhxB0rKgqShdH7aF3nckXqwRw%3D%3D\"}]}\r\nage: 33\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a2205bfeae7bb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":206483,"size_decoded":75004,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (57051)","md5":"d3685120743b3640f975898bcc0c9283","sha1":"c699374144f01d62c93e84767ac331900cfe0c64","sha256":"0bc24f4e3f4c26767bc271efdb00621f835bacfa27d8ae1326e5b001cc687efb","sha512":"40a83855e05b4a00d9b4bef118ee111a8e3e63974f4b547538e8b8d0ff50ac5eca0c1664ffd1b2ef19cb27162ce75736e45905d42d405b8707bfcf6de0f21558","ssdeep":"3072:mwhSWQmJ+c285DuFkIVlN7j8ZC22kP1uWcLMNCVYL1clNOSrQHGC8S8GFRNqCFZF:1h3QmJ+c2SCkIVlNP8ZuktuSNDGQ","tlshash":"091407f463ac72ad32478b99da375024e72f58b5356dd1a0983feaf464a35c0d32bc24","first_seen":"2026-04-23T05:27:23.163615Z","last_seen":"2026-07-28T03:12:55.316858Z","times_seen":65,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"service.croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/api/v1/widget/conversations?website_token=PEejQjXJH4vwpWAoxibBeAjo","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://service.croxy.com/widget?encrypted_request=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","date":"2026-07-28T02:12:31.278Z","timestamp":1785204751278,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /api/v1/widget/conversations?website_token=PEejQjXJH4vwpWAoxibBeAjo HTTP/1.1\r\nHost: service.croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://service.croxy.com/widget?encrypted_request=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\r\nX-Auth-Token: eyJhbGciOiJIUzI1NiJ9.eyJzb3VyY2VfaWQiOiI4MzU1ZTdmYy0wOTQxLTQzYWEtOTgxYS0zOTM4NWMyYzUxOGEiLCJpbmJveF9pZCI6MTYsImV4cCI6MTgwMDc1Njc1MCwiaWF0IjoxNzg1MjA0NzUwfQ.ZP4De34v2neCsU8g4VSYmsxAoyCel4tzpR5iCzMrr1Q\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.2135620745.1785204745\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=0, private, must-revalidate\r\nserver-timing: cfExtPri\r\ncontent-type: application/json; charset=utf-8\r\netag: W/\"258153158e38e3291e3d48162225fcdb\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-request-id: cfa074ae-644b-4d62-b4ea-331262e42142\r\nx-runtime: 0.015488\r\nx-xss-protection: 0\r\ndate: Tue, 28 Jul 2026 02:12:31 GMT\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FZs4E1Wr8xVzzx1ouTmyrXh059Oa%2F6N7R0MCTQ2pYPZOMssqgx8rPcADezNJVWtZJ0uKBtyamA%2F2RiQGwNDUJYntFmZiWiDRh4%2Fo0G%2BQ4HS%2FgmKjj8CT3aDUyl4nTFOcQm6stw%3D%3D\"}]}\r\ncf-ray: a2205bff7e86b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14,"size_decoded":1004,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"af1fd6795b95d5be36b37d5281fdcdc3","sha1":"1bb3365ca69f2475ce5d789503180db7256dcbb6","sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","sha512":"284ea516df7e3636fb847431b6d91444a5987913985a01228395a2858954d7e654d86f099c20345e76e3a830bd3004eb19dcd4cb75a1e8f442168cb0e16103fd","ssdeep":"","tlshash":"2a6000000300c3000c0000c0c0c0cc0003c33003fcf0003c03000000c300cc03c00f00","first_seen":"2023-05-21T09:16:00Z","last_seen":"2026-08-02T10:43:32.725951Z","times_seen":2615,"resource_available":false,"data":null}},"time_used":494,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":494,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"service.croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/Rubik-VariableFont_wght.DAFAXoY0.ttf","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.229Z","timestamp":1785204744229,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/Rubik-VariableFont_wght.DAFAXoY0.ttf HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/web-assets/entry.D7BxLCLx.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:24 GMT\r\netag: W/\"74b3e6d2517d131e3a912c4675ff3834\"\r\ncontent-type: font/ttf\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kw1tpEsPFJrsqrFeUdP61wKyf88rB1sE9bkEDpi%2Bqg8gtzA4dBaaOLIfGtsoZmOblAej5bbjs%2BU07xOx7ZhNSV4CiKfNr6YElg8%2F6yogS9jVZ%2B3Zk7GCKQ89M6w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd36d22b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":356080,"size_decoded":147526,"mime_type":"font/ttf","magic":"TrueType Font data, 21 tables, 1st \"GDEF\", 26 names, Microsoft, language 0x409","md5":"6d3102fa33194bef395536d580f91b56","sha1":"80fbecd6d6cb21096b3e0277222e696c77ceb7eb","sha256":"7604615c681d3594432cb7f1b592657d1cac98acdb60c7e95619cddda19b265f","sha512":"b26625640703e224be3a1cf2fc7434a715708872fbbaef7097bf1940b03ab43b68e048622bbdf9e8e5192c23a8ee1136921e9721aaf497fdbf885e05eae8cb5e","ssdeep":"6144:h6aSubKqNKIDtOIup/bRXwajmnYX5gYOHHr23VzFsvtRU6ua8:hcudDtOPNXsYHFslC","tlshash":"0d749d07f6a3ea81d44a5ffc4336d3904835be01e765166f231b6629ecab3b1bc54ac1","first_seen":"2023-11-30T23:35:09Z","last_seen":"2026-08-03T06:43:02.648461Z","times_seen":156,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/ccpa.Cvp9VZUM.webp","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.259Z","timestamp":1785204744259,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/ccpa.Cvp9VZUM.webp HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/web-assets/Cookies.CXISQsXa.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:24 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"952eaf7a773bc3073a5e8c082013926a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oSqihXxI9MXOUj%2FM5Yl9siFHP8cXEeodQClY%2B0SvELmfWZ3i2T17TUJkESi0quhJWaZs2m2BwP1fSJJKwSEqbrU2d1Q48q8dKfkf065nmIODZdeoDoz1WAb89j4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2205bd39d2ab500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13872\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13872,"size_decoded":14523,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fa3e7af2a153b8a0da2858b9e4b560d2","sha1":"0d76aa1a92218a67015a63a0ba2cde6f319556ba","sha256":"61fd03f58fb61d73e1f7bac0e03b64a5eeaeb2e9bba09d9f1a0db8ccba979018","sha512":"fc60a2f8d585d03cf0a4feb9ef4131a3c45351a0e9317b381df42065852b904f2f49063327fc1dad3ca9aed4db4dfaf12f470495a4a8d61c95a12111649b7150","ssdeep":"192:ywRSkWg1J7+TUzMEfc9GzAwEH7Uymuq7nVFbUn6dkzWeLzFO0zRiAdC2eGXV47Ic:ywR/7NocUwI0HFdC1LzQ0zPgnGFdc","tlshash":"ec52cf4993614f92f9d26abe1087ce3bb730e9085e5b044543b77e8d1f149c2a494dfb","first_seen":"2026-07-09T11:59:53.549532Z","last_seen":"2026-07-28T02:33:05.134697Z","times_seen":4,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/bg1.4JnnpMsg.webp","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:30.729Z","timestamp":1785204750729,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/bg1.4JnnpMsg.webp HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/web-assets/default.4QL__ivq.css\r\nCookie: _gcl_au=1.1.2135620745.1785204745; croxy_sess_id=e859a10303792f7bb7980d8daed6883e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:30 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"e458bec7f4946e4ceae7401ef95df904\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wy%2BE4lA6Il5K2cEqd5ak8Q29lWXc9qhgqAILCXeaM5XyYFj8%2FELSO6Am1NUQQDW%2FbPgLnS0V3kR%2BZuC2QVBsmI9ihtOBFXIU0LT2f4MxSzS78ROb%2BFZps51pvFI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2205bfc0e62b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 164228\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":164228,"size_decoded":164886,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6248b0d2263fc3fc45b9b863a3ff8da6","sha1":"b9076f94f7498e4dc39e60e38c10b587c5dd05d5","sha256":"cd63663afebdac4650b0f5c736de34dd4b03099d8d4b8229f8d6bdab3677068f","sha512":"e8fd36490e09f98437f8a45b048cacfd211d38772c8e5421174de3d6d459d964866d82278263afb753860c5ff2bddd8fb5e6f960b9cea39a5fe9cf2c2f88e439","ssdeep":"3072:Mzi1NjvZ4OlaIsBc9nZzJRCCWNEnUmdro62E67IRmb/8Wg2hA0taS/vsp79W:MuvZPaI6c9Z3ZWCf2E67zhPaW279W","tlshash":"cdf3125a27e49332ef7be2308f21141dab2502d925a3748235e60f6b14feb72780586e","first_seen":"2026-07-09T11:59:53.489192Z","last_seen":"2026-07-28T02:33:05.135792Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/api/v1/widget/campaigns?website_token=PEejQjXJH4vwpWAoxibBeAjo","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://service.croxy.com/widget?encrypted_request=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","date":"2026-07-28T02:12:31.301Z","timestamp":1785204751301,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /api/v1/widget/campaigns?website_token=PEejQjXJH4vwpWAoxibBeAjo HTTP/1.1\r\nHost: service.croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://service.croxy.com/widget?encrypted_request=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\r\nX-Auth-Token: eyJhbGciOiJIUzI1NiJ9.eyJzb3VyY2VfaWQiOiI4MzU1ZTdmYy0wOTQxLTQzYWEtOTgxYS0zOTM4NWMyYzUxOGEiLCJpbmJveF9pZCI6MTYsImV4cCI6MTgwMDc1Njc1MCwiaWF0IjoxNzg1MjA0NzUwfQ.ZP4De34v2neCsU8g4VSYmsxAoyCel4tzpR5iCzMrr1Q\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.2135620745.1785204745\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=0, private, must-revalidate\r\nserver-timing: cfExtPri\r\ncontent-type: application/json; charset=utf-8\r\netag: W/\"4f53cda18c2baa0c0354bb5f9a3ecbe5\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-request-id: 61c7e4e2-f17d-4e37-8f06-b38ddb920204\r\nx-runtime: 0.008619\r\nx-xss-protection: 0\r\ndate: Tue, 28 Jul 2026 02:12:32 GMT\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1muADDBp1jRcjEPespgcT67guzLAT2S%2B9mL%2BOn71wFemCuuA%2BNGef3HHkNvPhiwAvX%2Bfpe2uYTVEtmUC1y%2BPUB5zFTXTfHwTisQE6sPuS7S3paoUPEC726WYHLf%2FlsXmPZ51Yw%3D%3D\"}]}\r\ncf-ray: a2205bffae8cb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":993,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-08-03T17:30:16.714747Z","times_seen":313518,"resource_available":true,"data":null}},"time_used":1242,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"service.croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/DVFi9Rwk.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:23.862Z","timestamp":1785204743862,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/DVFi9Rwk.js HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\netag: W/\"9f7118e6c792e6153ebc911e1580b960\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wU2yhHTcBA%2BUw73DcJjZMiY%2FF7qUI%2BelyVc6KmCnTZ8FkIHs94ZP1WTm%2Bgo0op66W3A0fsFlyJwthl6%2FCldhfL3RhntaCNSGHXFJOd1DiQiT5jIKPh77MaSbF6E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd12cffb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7141,"size_decoded":3924,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7140)","md5":"244b2c4cfa8d5f7a6896763531018b03","sha1":"ef2bdce5e64bb1ca2f6cadf22134dab5752a7fd6","sha256":"499f0fc9af2e8d3e99ca720a7bf05ebf546cea067960b14f59686b86904078a4","sha512":"3ce0485b1d860197200a29950aafcac8e0987d6565b92e2012cbb70bed2e86525a6a2c7aca99e0a0537ee1f725bc0a41c16bccccf8c02434d871e2ccd938fc54","ssdeep":"192:Qzlr0E2RBVi5tnUZFblk3lvzUtJ5LZpMfAd1lO:Qzlrb2PVi5tneFb+VvQtDZWmO","tlshash":"a4e10faab1c7b1494393e578442f404af67f5896685f596cf42ac6c3bc3484ec13bbb8","first_seen":"2026-07-23T04:00:02.341983Z","last_seen":"2026-07-28T02:33:05.136671Z","times_seen":3,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/kQ1hy/U2MGCkFYaAULTl1pVV5PCGBUDUhaYghe/?p=BzBfDwwKNlRVHAV8RBtfGzBWDURad0IBAw5sCFFATSNUCR1WYQ","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.732Z","timestamp":1785204744732,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /kQ1hy/U2MGCkFYaAULTl1pVV5PCGBUDUhaYghe/?p=BzBfDwwKNlRVHAV8RBtfGzBWDURad0IBAw5sCFFATSNUCR1WYQ HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nua-sec: https://croxy.com/\r\nhash: dd645417771c2469455120921ac0f0f0\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ndate: Tue, 28 Jul 2026 02:12:25 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd69d5ab500-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://api.croxy.com\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\nx-api-encrypted: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dbB3O88iD5UydhMkXzrz3Ip3nVJfLNA7XOijL%2FrS%2Bt%2F2aubRarqmuFS%2F1SSgXRNGuy%2FF5pXJYXk1grTqfm31HvCjpRJ42sw8Jy4kBW%2BoenuXVpSeZbngbB5bZVg%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":166,"size_decoded":881,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"0cd1a816c824ca3f3b3407bcb5f9451f","sha1":"6eb4b68a9dfc243baace5b3612df7f25e53d6dfd","sha256":"2a26e10817eda57eebb598c0df6645227f2e2218a41b14be0c0c8bb1f7b58649","sha512":"be5930053208913550f62579f5cba218abee397a5c07797c4287cd63fc2750816522009d421db919188307519a2d575c3ebd74dbeaeb7ce0ad913041de4549c4","ssdeep":"","tlshash":"bbc08c2f864a001ad903a6dab8da62dbaba880cc2cb9903019290765e2217d6e5f5035","first_seen":"2026-07-28T02:33:05.137527Z","last_seen":"2026-07-28T02:33:05.137527Z","times_seen":1,"resource_available":false,"data":null}},"time_used":493,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":493,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/Di8SmKQJ.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:23.854Z","timestamp":1785204743854,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/Di8SmKQJ.js HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\netag: W/\"a92012bff4923acfe4a8057f96e6a488\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BjqOT6ExHNZtByYlfL5GZHb80dy1Ttftp5WM4Koim3JG%2F4DMeGWiSMDwMgqI0JPjGFdZRmePdqSMBly%2BSqcZkKCVtqsBPJaugGvg%2FD1N3zzXu80eG4pXt%2F%2FT6Fs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd11cf9b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1174,"size_decoded":1392,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1173)","md5":"3ecd092c173b8a581cf70bb928a4fa51","sha1":"8fd1dee916bc54c3f05c6d7cc6115cc5ec0d0e40","sha256":"a157a9f168692632de5195af65f8ba3c8777cd53c083e416fee769451ce0d671","sha512":"09fe8fd29c29cd6d76748c7e999f7f5bc1758d06b92a4162c44e4cd1762dbb1d2a0ce5825370c593f21a00c95a0c1492e635ecb764c12c90728f23066e7489fa","ssdeep":"","tlshash":"322165332d46eab6a60b0d486354196e0f14954b67d49675fdc80426f0c20e1d398d62","first_seen":"2026-07-09T11:59:53.538845Z","last_seen":"2026-07-28T02:33:05.139815Z","times_seen":4,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/CRJoaDWX.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:23.888Z","timestamp":1785204743888,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/CRJoaDWX.js HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\netag: W/\"94d96ddf2f5d6180a5f9c10f56ef6fb8\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dwPKcHB3Xiw6RUIxGnuTFfVrnzPERUXE5Kfk2X3c5ujSCl4OiTWZYLPjwO8f0aaWXtKsoiZ9fcbmksvvvSQZM2Njs4MhqYFBFOE3bCp6e3I2iYYSuskWPCLcWX8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd15d13b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":115,"size_decoded":774,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"dff88dc28e7085cb2b9a4e1ab579d383","sha1":"8b6fc5a95bacadbb4fc489c45f14bbbcf18e0d0b","sha256":"98ab0b81cd13a1c02ad1d01c5a7ac729b7de8e2ce42d986c200c9576c703e0d9","sha512":"cb39dfadb17729e392bab2160a1f19ee2fbc4007461c91df54169eebad97e6a88670dec5824fd93846d08839a549609fbd035a0ca327e9f4ce9aa23cb8faf85d","ssdeep":"","tlshash":"e1b0220208880a28223000220b80a220083220ac0faa82a0282c0e288b2a00a8f0a282","first_seen":"2026-07-28T02:31:43.323387Z","last_seen":"2026-07-28T02:33:05.140702Z","times_seen":2,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/solutions_left.BKbwfHFH.webp","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.257Z","timestamp":1785204744257,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/solutions_left.BKbwfHFH.webp HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/web-assets/index.BA_rpDMS.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:24 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"486d74e3537bb0383c5e4353858a541f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V65yDqd%2BaeGHe3wevj4zYPIhxvUqFbTGiRq24xnGT7RkXX0ascWMJFNUhM21mHJwPChFd0%2F60bvyPE7KtNH2bKrSs4OZ3rtLOPKDpFkhjB0qI3vuqcUPKaBGDUo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2205bd39d29b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1034312\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1034312,"size_decoded":1034965,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2cd440f918a67818acb6c389282a400d","sha1":"522408e673f5c7ec98978ceaf0f57b1d40739aa6","sha256":"0be596ed3d4b48b6a42c9e0b440173ad82ce901b55aeae14680a036f1328892c","sha512":"9b3ee4e49fda77de73868a5619801e9e3c16eb677af7437c4fd7adbf1ce674d026c5506d304a082dec774caeb689427ec11f9cbbedbf1b1e92808381bdbe32c9","ssdeep":"24576:Aq1nMz/mAY+uFJ5L3L83+RRPHVLRo1bsgxqJ/3wyTRZyqC3QlGA:AqnlN/L3LBR9+Sgg3f9MqC3Ql1","tlshash":"832533e72c9b50f3d13f2c3920f511e1387a0b9e9a645b50c8af2016d0ee96e85f86f5","first_seen":"2026-07-28T02:31:43.276615Z","last_seen":"2026-07-28T02:33:05.141951Z","times_seen":2,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/header3.DsaOAqfJ.webp","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.289Z","timestamp":1785204744289,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/header3.DsaOAqfJ.webp HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:24 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"ae517c50bd53c37dcfb18a844356d85a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HcEMTLS0%2F4cLehp4T0WB18awp8ZquU2oIJTe0%2Fu4b4iYyymyhNNHt0wYmO9Lju8p2YdLJ%2Ff55hPwLx0F8te2tGsdU5CibxpeEOqqKUNZ%2BRi6mo%2BXNe9auAlAheU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2205bd3cd33b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 44524\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44524,"size_decoded":45181,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"18cc046c0ec94350b6035b629444973a","sha1":"f4f7750ad0b1a42fa86756a8822674d9f007cf5c","sha256":"69ea291526a1b338554304bbd943e127689af82b6f17a5f995ca1e3e23f929d4","sha512":"dd02860bf61a0895e7a1dfbbe2b4a07ce15c9003a9f693550e465663f3ff306661f918fa9f76fc541117930b70af9293064af9603500a7af01a6c619bba28ab4","ssdeep":"768:+9WQQzIXOik1Y7IRWfKYMVkVPXkq2lt9GYECplhjug0emgt2IL9mPi:boHD7I2MFPltOCN7D9Mi","tlshash":"7e130288a394b2d5c92811b3ccc3371ccb7df7af894a019f47874a9f0245e56e897997","first_seen":"2026-07-28T02:31:43.27783Z","last_seen":"2026-07-28T02:33:05.143249Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/api/v1/widget/campaigns?website_token=PEejQjXJH4vwpWAoxibBeAjo","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://service.croxy.com/widget?encrypted_request=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","date":"2026-07-28T02:12:31.314Z","timestamp":1785204751314,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /api/v1/widget/campaigns?website_token=PEejQjXJH4vwpWAoxibBeAjo HTTP/1.1\r\nHost: service.croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://service.croxy.com/widget?encrypted_request=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\r\nX-Auth-Token: eyJhbGciOiJIUzI1NiJ9.eyJzb3VyY2VfaWQiOiI4MzU1ZTdmYy0wOTQxLTQzYWEtOTgxYS0zOTM4NWMyYzUxOGEiLCJpbmJveF9pZCI6MTYsImV4cCI6MTgwMDc1Njc1MCwiaWF0IjoxNzg1MjA0NzUwfQ.ZP4De34v2neCsU8g4VSYmsxAoyCel4tzpR5iCzMrr1Q\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.2135620745.1785204745\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=0, private, must-revalidate\r\nserver-timing: cfExtPri\r\ncontent-type: application/json; charset=utf-8\r\netag: W/\"4f53cda18c2baa0c0354bb5f9a3ecbe5\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-request-id: 77afb4b0-c190-426e-a061-40ab3f49bb77\r\nx-runtime: 0.007387\r\nx-xss-protection: 0\r\ndate: Tue, 28 Jul 2026 02:12:32 GMT\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4hyhaeL5lOeYrxrpZrSWBCXGNd1dx%2BYN%2FGylgKtUKa9hSV6btcTcd2D%2BCZ0si90XTQSLPWjwiXNUwuGywQP09F02GmWL5OuWYn9wdOqO7fVnz0m%2Fxy0XEn5eIa21EBaDY008%2FQ%3D%3D\"}]}\r\ncf-ray: a2205bffbe90b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":991,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-08-03T17:30:16.714747Z","times_seen":313518,"resource_available":true,"data":null}},"time_used":1659,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1659,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"service.croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-28T02:12:22.966Z","timestamp":1785204742966,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\npriority: u=0,i\r\ncontent-type: text/html;charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Nuxt\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x4kt2G10ckJ71KT2qFAGy0t%2BVHkuHhG7UPoEN7DCvveOrcY0JAcEzVL%2F3DWjbgsGLPd8IgAG%2BWdBhnGRvqrHpoGoEilqyEw%2F5HLLaOUA3iEPRjKMMI2g9KRZ4Nw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bcbacd6b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]}],"data":{"size":111350,"size_decoded":27460,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (37862), with CR, LF line terminators","md5":"11ae8b72c7df7c5aa23c080e0103de08","sha1":"ae99cd7d88cbd060cd04155795b3d0fd6fb12151","sha256":"4b748d6885b7f53bccea7f9eb868a5b53a767c67e24085d7307030c753d1f07d","sha512":"c5e3ef4c276a0ef9dcee5cd780fb005a973fc7796ad670b1343382a804f1b71fd29140e0491e3f7081b2d973ca70f5d5a530dad7265e6dea416e5dd9fcc6bf42","ssdeep":"3072:s8AN5OZoqbhvhRh+h+h5/ISPAIlDgLUc2:GN5OJXISPAIlUc","tlshash":"adb3c635b195b82312378fc4b260630a6d93f713d65bc8c8a7e811758ec6ee4bdf8496","first_seen":"2026-07-28T02:31:43.372041Z","last_seen":"2026-07-28T02:33:05.145045Z","times_seen":2,"resource_available":false,"data":null}},"time_used":644,"timings":{"blocked":-1,"dns":3,"connect":16,"send":0,"wait":622,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/9hd6Ci7l.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:23.873Z","timestamp":1785204743873,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/9hd6Ci7l.js HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\netag: W/\"83eff947b2f9825e5c1474dac1dfaad6\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HBhIzrUj41qIg7XuQAhy1VLEis7Q2MmexN92VSp%2Fz34zE8KhAoQXKqe02%2FL8lzrBCUAflDwU6E9RkoBvFUCiAl%2BxbBlIQ3W0QAe93LtoaD%2BjF6sAhW%2BJWxkBEhI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd13d08b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2865,"size_decoded":1972,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (2864)","md5":"84e5c487bde2d485b7752596e6f1b0f6","sha1":"9bf3d8266c418b7aa612eacbd126256463040bd4","sha256":"6e0b83858a7b6ec5b02088e72b4406bb714cbf18f82c1bab29760f7a2c11ae08","sha512":"ab09d01b3a33a1ec8cea7e32b190e16c93a189a015c68b25ddad51d66949daface905973f766d97eac635d6f2f05d4c358cbe90ab5790cbef1976b777ed4bec2","ssdeep":"","tlshash":"3851b6c530aaa1978ff5d2e72426171049371908e87c73e995bc3e73234b68f13a1bb8","first_seen":"2026-07-28T02:31:43.2951Z","last_seen":"2026-07-28T02:33:05.146691Z","times_seen":2,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/flags/4x3/ph.svg","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.314Z","timestamp":1785204744314,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /flags/4x3/ph.svg HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:24 GMT\r\netag: W/\"bd37f9b4558869920fcc95ec2357ac95\"\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uaXwdwqKdWHXeUC%2B%2FvK%2BNK1%2F0uHQ8wDDUH5RF0ctcX1MkyjbNg5I0KevBVBcfctlhxVZl4ZxuMusZDyB67QFtpHRF8eWN3CkVxkHZPZO2zG7X8f2wyZriG7fo%2B0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd3fd3db500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1501,"size_decoded":1400,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"64c3d8b03bf21d10661c2384ebf3247f","sha1":"583d556247393cfe465b3e56e333f95b3ac94bc5","sha256":"4cccf4036c36fb246bbebe74ae61ef367f7c9033c78e01e2d4744884d9609d66","sha512":"a8f952187efbc331638727114366ba8e66ccdd832e9cb38ff04debe9d66d0c6601cc0f4cd27dbf3aa5bdcb285abb5e3bb9c73002963ec30a5019ba933a23d2fc","ssdeep":"","tlshash":"d231deadd364837cd482cb680f3ae0a157ad65ff30b0d0c1947ec1b224608e592eb5db","first_seen":"2023-08-04T15:07:24Z","last_seen":"2026-07-30T05:40:38.612788Z","times_seen":222,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=8\u0026frm=0\u0026auid=2135620745.1785204745\u0026dt=Croxy%20-%20Premium%20Residential%20Proxy%20%26%20IP%20Solutions\u0026en=page_view\u0026dl=https%3A%2F%2Fcroxy.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1077235730.1785204745\u0026navt=n\u0026npa=1\u0026gtm=45be67o1v9218569110za200zd9218569110xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115616985~115938466~115938468~118897920~118897930~119527020~119896802~120084215\u0026apvc=1\u0026tids=AW-17025120075\u0026tid=AW-17025120075\u0026tft=1785204745019\u0026tfd=2082\u0026fmt=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:25.024Z","timestamp":1785204745024,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:37:25 GMT","end":"Mon, 21 Sep 2026 08:37:24 GMT"},"fingerprint":{"sha1":"D9:DA:81:30:78:3E:9C:6B:5F:9D:18:52:0E:BE:6D:52:2F:FB:33:E0","sha256":"EA:E2:2D:87:EC:9C:D6:51:9D:59:E4:13:35:3B:97:14:E3:DA:58:2D:1C:69:19:41:54:94:25:C3:94:17:F3:0C"}}},"request":{"raw":"POST /ccm/collect?rcb=8\u0026frm=0\u0026auid=2135620745.1785204745\u0026dt=Croxy%20-%20Premium%20Residential%20Proxy%20%26%20IP%20Solutions\u0026en=page_view\u0026dl=https%3A%2F%2Fcroxy.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1077235730.1785204745\u0026navt=n\u0026npa=1\u0026gtm=45be67o1v9218569110za200zd9218569110xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115616985~115938466~115938468~118897920~118897930~119527020~119896802~120084215\u0026apvc=1\u0026tids=AW-17025120075\u0026tid=AW-17025120075\u0026tft=1785204745019\u0026tfd=2082\u0026fmt=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://croxy.com/\r\nOrigin: https://croxy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:25 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncontent-type: text/plain\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://croxy.com\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":538,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T17:30:19.662588Z","times_seen":17693622,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":2,"connect":24,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/vite/assets/MessageTypeHelper-BbUamdxK.js","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://service.croxy.com/widget?encrypted_request=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","date":"2026-07-28T02:12:31.141Z","timestamp":1785204751141,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /vite/assets/MessageTypeHelper-BbUamdxK.js HTTP/1.1\r\nHost: service.croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://service.croxy.com/widget?encrypted_request=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\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.2135620745.1785204745\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31556952\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 23 Jul 2026 02:38:01 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ndate: Tue, 28 Jul 2026 02:12:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VtZQHSTVGSOpz9rbCau2WHzY%2FWZaQJ4JMCkFtIXO1TAkPARZLYGPrcK3wNHni8DKMFGAdhkHgPESotVs4OdeV6qiw6MKHUfcauRnnROzh1bjwgaZY7ttlExL9j91RHUCYpWewg%3D%3D\"}]}\r\nage: 33\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a2205bfeae7cb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":313444,"size_decoded":98189,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65524), with no line terminators","md5":"e7a15a192c11a89f37a222a5ee609b29","sha1":"c340706fdaafb3ec11163928a5a8b451624ee9fb","sha256":"165c2c49e853fa4caf3397286993bb363a823693bd83c065f82346689d7097bb","sha512":"4f9a52bd389333cc01b7ef40a3cac3280620f835697b197bc5a8e0eea3c935565c8c3b835c6053033cd2aa76e20c697ffe8339b5865748d1d3b9aa7a4e88f295","ssdeep":"6144:hFytzTXVDZIrT3tBsQNu7psk67de0R4jLqQwql:hFCzTXVWBpN4pssjqMl","tlshash":"dd646bec62d130a0471204d6b14b2407f27e9c36626dc5e1e4aedc6538b8cd68afbf79","first_seen":"2026-07-23T04:00:02.241594Z","last_seen":"2026-07-28T03:12:55.264672Z","times_seen":53,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"service.croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service.croxy.com/vite/assets/Icon-BXppxyZ1.js","fqdn":"service.croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://service.croxy.com/widget?encrypted_request=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","date":"2026-07-28T02:12:31.144Z","timestamp":1785204751144,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /vite/assets/Icon-BXppxyZ1.js HTTP/1.1\r\nHost: service.croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://service.croxy.com/widget?encrypted_request=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\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.2135620745.1785204745\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31556952\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 23 Jul 2026 02:38:01 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ndate: Tue, 28 Jul 2026 02:12:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ty0wklZQsRX5juEEIv18Lp%2BRlITjMrdV8Eyn9a%2F9%2BnxDeiY8p9JxXCNb9Ulj5B%2BmtrMdYBZhcTQ0xsW3C4BQQvivpTIeqX55LQDTyllQGwGIgDHlBr96gwxRn4ux40WkEpGNGQ%3D%3D\"}]}\r\nage: 33\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a2205bfeae7db500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5900,"size_decoded":2884,"mime_type":"text/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (5855)","md5":"3164ab8b32f3d94154c09c7961439bee","sha1":"4451d9e3c44294daecc2afcdb080ab04d592f366","sha256":"83871cae8a99f5c7893c8ab468f25a943859ef6677e92bd8c9b11f6951a9de79","sha512":"6bc88cd7bd60eefa89355a5d54aaafceb228f05c8c927ef79868ca91379fd9e1b59129b1f8df01b60ba9a29f86d55e7b842de6af6028938dd4972885a9a7504a","ssdeep":"96:9DkA6rrv+QsrRelEQfiWyQVCANUIIBbVLTlT6M97AMN/T635SR93U/47TTPxx94L:RAv+QiRiEQKWJNUZd7/T63S3UoKir6","tlshash":"bbc10c18c4e26ddd9d36f774ec8607b0a8d81d54a44d48bbf3b1796853af828693af30","first_seen":"2026-04-15T10:26:48.262028Z","last_seen":"2026-07-28T03:12:55.286134Z","times_seen":67,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"service.croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/web-assets/CnoLBF2t.js","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:23.881Z","timestamp":1785204743881,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /web-assets/CnoLBF2t.js HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:23 GMT\r\netag: W/\"07c7a6872d43e2ebb8ad5ed3bbe0618b\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=whVunZefunQvI2%2BnuNRQG29eL4J0%2FsDn9w2cdEAxO7i6y5WvjvuPF7sdDFkbXQhxOINoxIrA2wqR254Js4TtCo82AkeX9UZxU8QTR4X9%2F8h%2BFE4RgRWQSI4vh5A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2205bd14d0eb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3531,"size_decoded":2829,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (3530)","md5":"72e35c2aca41ac50adcf04423cc27434","sha1":"1e70aeef012f433423c6d8c6474d83315dd0ad9c","sha256":"21b6948f456dc6e740bd4f8fc8ef8bfc775d77993802c45ba5500767d5c38331","sha512":"a128375053e5e4b685d42fe96c163a77a04135fa00e48f62f1291ce09b0d82cb21ef4af59544859a758e776ced84226d513c2f23f6bdadce412f8ca3b2960b6c","ssdeep":"","tlshash":"5c71c73ba95ad876d3328dc441448824de483393b2ff58a975ac4c22e39ec75e79ca35","first_seen":"2026-07-28T02:31:43.366209Z","last_seen":"2026-07-28T02:33:05.152439Z","times_seen":2,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"croxy.com/black-logo.webp","fqdn":"croxy.com","domain":"croxy.com","tld":"com"},"ip":{"addr":"172.67.203.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://croxy.com/","date":"2026-07-28T02:12:24.277Z","timestamp":1785204744277,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:36:23 GMT","end":"Tue, 06 Oct 2026 08:36:20 GMT"},"fingerprint":{"sha1":"8D:CD:79:01:1D:DE:2C:56:AD:82:03:C8:A4:22:3F:2B:D2:36:9C:DB","sha256":"B5:15:24:74:18:3D:5D:85:0D:C5:2F:D5:F4:13:E4:7D:E7:DD:16:4C:93:44:CC:1C:C7:2A:9F:DC:B2:35:64:B2"}}},"request":{"raw":"GET /black-logo.webp HTTP/1.1\r\nHost: croxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://croxy.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 02:12:24 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"987d212bf6b2f77ff76037febe67e71b\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9ZY1s9RLehA%2ByVuzl4Ts67GVwNm%2BOkn2g6uXpwxhidauTKaz7LPXWtPHtVltZmzV6FEBCDOjh566DuJDdUzM%2Fm%2BLw8DMpfXuwuVDcNiVu72%2FYo3L9Lo%2BuYKgPzs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2205bd3bd2bb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8140\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8140,"size_decoded":8798,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e0327a1516ef855c2eb42b8a88088be2","sha1":"dead8372d0a4a1d5897a893aeb7045a7921149c2","sha256":"a798eaf92cc10c35acc5f7d3a99cd281fd40a6edc714847ac9614a36050bfccf","sha512":"ed28205347936c17f7978f295b4659ce6dda82ee2ae8a30ac14819b6bb2a7a700188ab5362646b2eaa629ac824eab1fc84e0add35e1f58f5564ed94c12ebee1e","ssdeep":"192:vw+2dRlnHbOFhh//KP/3Y+LfHoEcHtovVrblc1pT38Y0C:vwHXlnHYd/qY4fIEGt0G1pT30C","tlshash":"66f19f15521813eaff115bb1906b1b03738f09fea1ab86189f44c13163e1ada7fd499b","first_seen":"2026-07-09T11:59:53.500182Z","last_seen":"2026-07-28T02:33:05.154611Z","times_seen":4,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"croxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}