{"report_id":"a38e105d-47f5-49a6-bb42-78f48b4cb5e2","version":0,"status":"done","tags":[],"date":"2026-09-09T19:11:30Z","url":{"schema":"http","addr":"estrax.net/","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"172.67.185.210","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"estrax.net/","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"title":"Estrax | Plataforma de trading com IA no Brasil [2026]","dom":{"size":6677110,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (28555)","md5":"917319cc333dcaae4033586d7ae71136","sha1":"1527f9f4fda9c521957cec0510ce9a540d46bf5e","sha256":"ac99b2056a24c7b1d5a55af47e9b22b4092a12eca3666f60bd1425b7f8bc42ef","sha512":"25f540ac58bca6af36181b298f350138f6031121a51c773d80cbd60ef27406dee81dd45cc44e3ba98edcc6d9fe34097865b09b923d8954ffc51f41b51908b8b8","ssdeep":"49152:vupVhTFYuMfhPYyuMjhlfIuPrh9bZuhQh/jpucKhLtrufvhFdjuPBhd1gucuhbyN:g9qZ7qii413v/","tlshash":"49669e17022524364233c1e430ab8736f76aae1bb5864e847fdcc7da2fd9c90b567369","dom_hash":"domhash26856e32f7b9a844e1f4b3b10eae6b9d","first_seen":"2026-09-09T19:11:38.97185Z","last_seen":"2026-09-09T19:11:38.97185Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"estrax.net/","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"172.67.185.210","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-14T19:11:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"estrax.net","ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-25","domain_rank":0,"first_seen":"2026-09-09T19:11:33.131877Z","last_seen":"2026-09-09T19:11:33.131877Z","alert_count":270,"request_count":54,"received_data":7059697,"sent_data":26396,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"UIKit","description":"UIKit is the framework used for developing iOS applications.","website":"https://getuikit.com","common_platform_enumeration":"","icon":"UIKit.svg","categories":["UI frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"estrax.net/","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0dbeea9b6d77994d8538ce666e91f8e3","sha1":"f418c4cccbd6cfb6ea15881372d1168510057200","sha256":"b53e0f018d6be3d9fcd1d4396ea55d08efa045056bfc18a4453e05b0701dec35","sha512":"1621c890c0f42bd44fe374d44c75aa849ddcbfddb5d2ddc4c349921facae9c814b98bb3c36b234c13cf133e69a802833356c82ae4c2e308c167c6a203bb89caf","ssdeep":"","tlshash":"2cb09218ab526c120ec0802255abad48715954a32e487a74778da61d3b0cc2b05a66cd","size":121,"data":"","first_seen":"2026-09-09T19:11:39.027345Z","last_seen":"2026-09-09T19:11:39.027345Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4175f29887455708b083784afe7f5f4b","sha1":"db9f8471e117f669b40183df177f7de9e7179608","sha256":"c2d0965ef0831a010c368eb7cdefc857e4a89ffb2003558475aa3b53547b4b6c","sha512":"d575fe49e829f0ad6d9d9cff5be1daf0313cab00c5748c8e994f0e2a20e403965c3104e114f25760faa82c8d37429b0e4b54f9d507642d52dea9035113123a77","ssdeep":"","tlshash":"d661ad047eb39033453b809e2bef924a376060433589d9847e8c95291f9cadad8f3edd","size":3363,"data":"","first_seen":"2026-08-25T03:41:53.721458Z","last_seen":"2026-09-09T19:11:39.028275Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a39815e02959c14f0d4dc2e6ecd2af83","sha1":"df4a36e041d16ced7bd103322ba855ae3475570a","sha256":"bad6fc3a92a52c18577d4bb49c8310e13a64f4d45894159b2111cd49a1512704","sha512":"fd3b43892615e1d14a4e84e2503090fe359f12a050c38853f1f0be83759f48cdc6ad0eee15c3686dd6ba2c9d41157e5b9243c512205f5f7171148901210c440b","ssdeep":"","tlshash":"e741ef6ff9b124b244b322a943dfca9437910457a0c2c8173eaddfc60f52a645de6ed4","size":2263,"data":"","first_seen":"2026-08-25T03:41:53.7241Z","last_seen":"2026-09-09T19:11:39.028817Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1ecfb961585476d8116174f0a1a80199","sha1":"76d1c654b0a5e35733d00490708d75e87a267ce7","sha256":"942889992077c5b448147cc5a1b9f3bdd58729f52f5556a8b65e040268fe7903","sha512":"aac635fc439e119f45c628ff449e9d98a49e93b389247247f1201562e9b1d7486dded2ce232553127188615f5a5334fdda5091d1113ae23ccf1483c1a6bd448c","ssdeep":"192:aTsRUH70aWha1VKB6cru0cltXOxYSxARp:1UF+cXV","tlshash":"f4d1dfcc35e72015825370a94baf90467138f4171b8aed057e1c43da7f89639bbb2bda","size":6229,"data":"","first_seen":"2026-09-09T19:11:39.029837Z","last_seen":"2026-09-09T19:11:39.029837Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ac313660730eb2e32ad1590f08e69add","sha1":"28f67e783052bc57d1c444440efe1eb063f0e78f","sha256":"86e5cc75d6b0b7f068beb4cfd3d12b692dd2538d0ca3e4a30979ff57f27c7964","sha512":"5bdf2074732a42e6b0b6c62bb890177e65c15002d61f7a4cd13057136e869db5861667e12e2020b6b754bda2546e7d7c9554fe219774935c8b75947a2648d81d","ssdeep":"768:l603Xlqn/kiIzNT9tSR1Mi2SouFGUh4O/tb6VNw4O:5iIzCMi2SourGOr","tlshash":"28f2c86e9354973ba5fec3a6b0e04587ae5e76440e80046c397ccfce1289ad379e2731","size":37061,"data":"","first_seen":"2026-06-19T01:43:14.45103Z","last_seen":"2026-09-09T19:11:39.03096Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3b87f9aa5d3a035503ca7f2d2b610d24","sha1":"5bc53bd36818cb713b6fe97ee76ed5f6a16d18ff","sha256":"7804ee8ef8edf495fc6c01f28e89483c1389349268fbd8068a3c9e31abb1505b","sha512":"94c62356d3c32ac891977c1cc5e02da09f7f1882fb53a4ee10437712e9c71ce797be36301c8ab616454f67b5b13c8d05b0a6a21f8b59d7c0932ec9daa8e5311c","ssdeep":"192:vaZzs6ARz6GNwLc3yUDsWrKh2hI7VKYE4Kr2V1XDW7F86rxkggbeGFWA8YQlYb0h:va5pmzCiu6rkg70F8e0Dt4pygKUoPDsY","tlshash":"663209cc7b68b8a61a926974540b3503f33751e0441ed1a4b534eee3fca5e48b9b2bf4","size":11084,"data":"","first_seen":"2026-06-19T01:43:14.452722Z","last_seen":"2026-09-09T19:11:39.032206Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f30b0ec2c5f5e429e326f524670d01e1","sha1":"bf0427eb9a7a8f688ac6dcd8662f7e054efba2ae","sha256":"3f36bb4c0b75957ba26657e93e13b53dc2da219afe57bb0b0770a37c225c45cd","sha512":"3efd224fd33f362f9261c97f1dcf064fc1f93e92190939136d8eae9cd1a6a55654306e59cc6daa0ef5af39f5c4e4415b31f4d9a7a92fef600a222dbec9805ac6","ssdeep":"192:9WihiHfjQm1TvFvF0jDMA/REd4Z4N4H6dIMHRQEIrEmOJJSLBJn6m:ofjHb4Z04H6dRHRQEIrBZZ","tlshash":"c33286966533313685a250fa739f92206372312b3486e8d4fb9c82012f5ba16d77f7dd","size":11280,"data":"","first_seen":"2026-06-19T01:43:14.454109Z","last_seen":"2026-09-09T19:11:39.032776Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b312d5fce2366e446b31ab6ce7fa764c","sha1":"e3d34a97332424be507da61ea7b02e771579a8f2","sha256":"b18d0175d2f86dc9220b1c180a59c04eacfcd9a063014cd301bc000057bad31f","sha512":"e00d1c0ba9131467b495ec050b3be22776a6609afb0fcd91a3f5d3976067652e726193da37ab35176ed7c2b53f72fd3851fcabd73cb371d12dd305081c52cc7f","ssdeep":"192:AmmkNAbEzcNgesXFco8/5XjJ4yBv5pjhVec6eauRc3FfgYRLEyTVYhys+04S6vqi:AmmkNdpFC/5XjJ/DtTg3fRVY1p48Mh","tlshash":"bd52660a17b32411661374f9b2cb6205f2749407354adc857eac4305bf7ef26faa6be8","size":13584,"data":"","first_seen":"2026-09-09T19:11:39.033832Z","last_seen":"2026-09-09T19:11:39.033832Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"92c81105b6bb366ca5151cabaec74dd5","sha1":"f4b870569feb1ff4aceeb4732b2d738f6420d59e","sha256":"3274d3b49a8dcd98276446936f81f8f85fc629bb511d6c22bee36307a269d752","sha512":"7e1aee30674a8b0602f7ef1e02cf387172cb750fcb817882cf860f958be7fd16d506da770ff63e461fc5b6fc80aed2a96a49eed696e5f34a71601bdba2744c7f","ssdeep":"1536:ww/RH0qIeZlORvqIuKUsXiRphglw/RhhpO:p/eO8KhThLO","tlshash":"8643d90612fb18360793b0b952879515726c10631285cde6beacc704bf99e1af3ab7fd","size":59673,"data":"","first_seen":"2026-09-09T19:11:39.034878Z","last_seen":"2026-09-09T19:11:39.034878Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7f6a91b1fabe295c2c317d8207f11215","sha1":"8c6282eb1f30e97cbfa9182b364f21bebba59ff0","sha256":"a91d38e93b67c8880de4540f09bb90b2236fb44b0a92799190deb7670a1e4ef4","sha512":"32a3680c980721d2a5605734066a4cb14ee887a5f519c37992fa0803a21683b519b5bdbac60e262b9095f899ece4ab785a930bbffe52f870594c7aad3c209d6d","ssdeep":"","tlshash":"dba002e24371c071c4b43c65ab337b4537224634bec141950e9cc81f7a1ec43d5065da","size":65,"data":"","first_seen":"2026-09-09T19:11:39.035858Z","last_seen":"2026-09-09T19:11:39.035858Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2f1a47a8858a61c016c47029712c9303","sha1":"04952da6c73346c7eb07d73cb68b721845315da1","sha256":"8efb57eeed818ba43788a01f70a4f5c9052cf8fceed8e83ccb10cc5c2629ebde","sha512":"b58a2d3980cd66c8f69e7a4ac61385b50869a0dbb66ed2237317abd12d2e3e1cf94fd275716f9a353ca7e3537a23af9dd59bfede90db5620d99b1bf6d0efebaa","ssdeep":"","tlshash":"6ca001704e72056a40e126214a6bfe59326542390e80869867878a4f7fa2403582a996","size":73,"data":"","first_seen":"2026-09-09T19:11:39.036726Z","last_seen":"2026-09-09T19:11:39.036726Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"31ea529617c10da0848245534e29b3af","sha1":"bbd63506c3593bf8284e7ef7216ef6beb2f1a015","sha256":"8007a45243f8af56576ca2531aa88cc4411bc024889412f7edf63caee2c9b1b6","sha512":"fce22f2c0084d36fefda9a26cb3b19e6fd6753e6e6449971ba338191e117806d2d108b5f22cf415231ff80f592d26d196b816d63803fc761fdb48cd3cf87d082","ssdeep":"","tlshash":"403146594db2257e5433025a0a8747863b2d5087218fce123f1c53060fc9b285da1be0","size":1566,"data":"","first_seen":"2026-08-25T03:41:53.747781Z","last_seen":"2026-09-09T19:11:39.037543Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f9dc70b41b1e3a57549059a06fd45cfa","sha1":"90b17a144b52ae3ccdae4f7ff6164a21158757ac","sha256":"eda208675730e5ae403251d6847e4152f565de6cce28294563da75b229bd7e8c","sha512":"54e64b22dd90ef8149f15f7a031fbc01ae5938d294d89e0a7df2775dbb7700303897414d730b5ad7f7fbcafaf4bb7563429e55924c05ed34d9ac5fef754a7e7d","ssdeep":"192:AzQkNAbEzcNgesXFco8/5XjJ4yBv5pjhVec6eauRc3FfgYRLEyTVYhys+04S6vqi:AzQkNdpFC/5XjJ/DtTg3fRVY1p48Mh","tlshash":"7c52760a17b32411661374f9b28b6205f2749407354adc857eac4305bf7ef26faa6be8","size":13580,"data":"","first_seen":"2026-09-09T19:11:39.038466Z","last_seen":"2026-09-09T19:11:39.038466Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5cfd3cb778f810bf7da9809447f01863","sha1":"e73b548c11074d13c38ea38fd2eae401ad31041c","sha256":"e99739501d4d65c059997d2da0646abf809f43dd86ac95f439cdaf851d84603a","sha512":"b32dcb1182aa0ea0f4f18365d8dabbaee00bd7cdacb0294953cb0235f7b53174e111cd3a28fd9fb1f213d467fe86db7282bbcf9edf58b6fc40e2c3dc4a3d1294","ssdeep":"1536:xw/0H0qIeZlORvqIuKUsXivphODw/R3epO:R/eO80hP3oO","tlshash":"8543d90612fb18360793b0b952875515726c10631285cdeabeacc704bf9de1af3ab7f9","size":59662,"data":"","first_seen":"2026-09-09T19:11:39.039465Z","last_seen":"2026-09-09T19:11:39.039465Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"aa8481895aeaa32c46d9f28457b9ab81","sha1":"07f675679f55452dd5cbbdbc113495e999c5f4f8","sha256":"c89f12e1a41517358008ee10da71bdda4db6baac0921058f64a51d610d929309","sha512":"7e20ab29722cb467617847523c9ad864e9e145017166065dc9ac939e4bd56cd1e2ccfd8959977141679edfa16072fbf7850e0eee6313f8c82534a1216136b788","ssdeep":"192:AXEkNAbEzcNgesXFco8/5XjJ4yBv5pjhVec6eauRc3FfgYRLEyTVYhys+04S6vqi:AXEkNdpFC/5XjJ/DtTg3fRVY1p48Mh","tlshash":"8d52660a17b32411661374f9b2cb6205f2749407354adc857eac4305bf7ef26faa6be8","size":13580,"data":"","first_seen":"2026-09-09T19:11:39.040756Z","last_seen":"2026-09-09T19:11:39.040756Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8468f9d1d38d19fbde61c40fe63dbe77","sha1":"533b9ee9d8e405c9b7dffd5514d3aa51d09bf11e","sha256":"918f735739e0d21984e5b42da9dc74d821c5dca268645d1082f7fa1975bf1fbb","sha512":"62bc1a5a163ef187a07eab9d62f5722845dcc5ca4f1cd6911fea52ea8030ff66036508bb550a45cf8d5ffe85d7c8f7b115fbe9d08deb6e989c22798627a28d8e","ssdeep":"1536:Nw/AH0qIeZlORvqIuKUsXi3phj8w/RzBpO:t/eO8QhlzrO","tlshash":"cf43d90612fb18360793b0b952875515726c10631281cde6beacc704bf99e1af3ab7fd","size":59664,"data":"","first_seen":"2026-09-09T19:11:39.041811Z","last_seen":"2026-09-09T19:11:39.041811Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"68aa9e45f721fcabc0678c4a17071662","sha1":"2970814dfcb2b4531a2a27c9735a103e16b1b455","sha256":"d3c9dc059519876a5b7c0ff75a28b7b34d5b51a7476be430e51dc1aa423b599b","sha512":"98219b67ab7aa5d3d1cd2c7419b08af9ec39eae3fe9c84e03cfb98a0eaa7e2d81c4a9c71bd1c0f4a3191a476cbc5edee251429d123f6554aaa0f4f9a8fea6ccc","ssdeep":"192:AB7kNAbEzcNgesXFco8/5XjJ4yBv5pjhVec6eauRc3FfgYRLEyTVYhys+04S6vqi:AB7kNdpFC/5XjJ/DtTg3fRVY1p48Mh","tlshash":"c352670a17b32411661374f9b38b6205f2749407354adc857e6c4305bf7ef26faa6be8","size":13583,"data":"","first_seen":"2026-09-09T19:11:39.0428Z","last_seen":"2026-09-09T19:11:39.0428Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"56ae13750792d5e9133427a4b12513b8","sha1":"62c25e0c2f1f1d207bcf99a2e081077e035301e9","sha256":"1b76a9e61ce81b40aa27d73ce0e6338f2309e25d19d3ab9f1a8b5a5a13d8b79a","sha512":"3075faee64f7268305dbaa999232c787a1363f81422f8ea6cfbe477d2299f3c7847320cb60134a9c22e6a010cc06e3216683a82bde2cbf08d74f1a926aeda2d9","ssdeep":"1536:aw/PH0qIeZlORvqIuKUsXivph7cw/RRLpO:5/eO8+h9R1O","tlshash":"a543d90612fb18360793b0b952879515726c10631285cde6beacc704bf99e1af3ab7f9","size":59666,"data":"","first_seen":"2026-09-09T19:11:39.043991Z","last_seen":"2026-09-09T19:11:39.043991Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4f3ed5de4e8ee49b772450932f9c6d41","sha1":"9286f9f8d33277825a59f5d260f7bbfee7fc015f","sha256":"8819773f4645dc90bc30bba747719b61988cdeda07f1653617c680173202a0ba","sha512":"1634fb8e410e10bba5a28c42b07fbe04761b79f7adf316694628708bc69cc096f1a8f9531995f40489ee4fb42c39daae4d9165c9459cf6ffe9aca4b0c36fb908","ssdeep":"192:A8akNAbEzcNgesXFco8/5XjJ4yBv5pjhVec6eauRc3FfgYRLEyTVYhys+04S6vqi:A8akNdpFC/5XjJ/DtTg3fRVY1p48Mh","tlshash":"d452670a17b32411661374f9b2cb6205f2749407354adc857eac4305bf7ef26faa6be8","size":13585,"data":"","first_seen":"2026-09-09T19:11:39.046852Z","last_seen":"2026-09-09T19:11:39.046852Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0336a703836d617504b2d0ca14209e58","sha1":"f38f5a2fa9db9eb36b9404995741a3325370168a","sha256":"a9e5c3a15d12df863ff57a795a62ea67ab9872e1ea28d9f8e9b9c9b84cd814ca","sha512":"3c4aec78e2d4b32347b5c861c1299f3ff961ff05f373fa2b397a192804001ea8dcdb074bcb92ffa63db1267e1be8342f8322a5fcdf0206bd568a07f5c8de2bcb","ssdeep":"1536:yw/FNH0qIeZlORvqIuKUsXiWphmpw/R6kpO:DJ/eO85h/6mO","tlshash":"3b43d90612fb18360793b0b952879515726c10631285cde6beacc704bf99e1af3ab7fd","size":59661,"data":"","first_seen":"2026-09-09T19:11:39.048487Z","last_seen":"2026-09-09T19:11:39.048487Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8b24fb13796291f3cc77d4d7adae2f39","sha1":"02432c3dbf730f3cc79a02fc599e4723c0a503d1","sha256":"0afb31ac5ccdcd8da25d1e884fd1f4265654c5883ff81b1b535db9d201bb192f","sha512":"e8b49534c033afb747ccb6ab139a499b5ba45d53151c4175853a6d03cab018f3c724e1e6e3d38d3629a147844621bf95a93eea254a0683012567b35cef7ded79","ssdeep":"192:ANukNAbEzcNgesXFco8/5XjJ4yBv5pjhVec6eauRc3FfgYRLEyTVYhys+04S6vqi:ANukNdpFC/5XjJ/DtTg3fRVY1p48Mh","tlshash":"6c52660a17b32411661374f9b28b6205f2749407354adc857eac4305bf7ef26faa6be8","size":13584,"data":"","first_seen":"2026-09-09T19:11:39.051288Z","last_seen":"2026-09-09T19:11:39.051288Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6ca7b779afdbaa5a291fb11126395c0f","sha1":"7dd62d25246dc1a9611ee6e727c224e3c057de96","sha256":"78cdf5e3005b5bb26da035ba055f3832d2ef53cacd7dc878da42d60907c2d2f7","sha512":"b14d576e81a8eaef6e170e99222abf9c334073cf170404d0ee736f80abd558016fcb68ef2f1ba2c21757c9fc91859a539f5456b3be4afeb4f63f2b31819290fa","ssdeep":"1536:1w/wH0qIeZlORvqIuKUsXicphjaw/Rs2pO:N/eO8BhLsQO","tlshash":"0d43d90612fb18360793b0b952879515726c10631285cde6beacc704bf99e1af3ab7f9","size":59669,"data":"","first_seen":"2026-09-09T19:11:39.052783Z","last_seen":"2026-09-09T19:11:39.052783Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"279b554ad51e89a8cce0e2e5b2e7531a","sha1":"1014b4075d3e6e67d9dcfc094a8227b86d170144","sha256":"26127ea4c9af730737c758cb7d8a58146a8130b36b14597f8e99a2394a873efd","sha512":"8c928b8a9a1c431e9b8f71a4324669005adbfd8816a96ad33fff05d3190b1afb19c3f6afe9f25a6458d5c3076c01a66c5cf9d688c2adec289cb43dd5858b3016","ssdeep":"192:A+skNAbEzcNgesXFco8/5XjJ4yBv5pjhVec6eauRc3FfgYRLEyTVYhys+04S6vqi:A+skNdpFC/5XjJ/DtTg3fRVY1p48Mh","tlshash":"7e52760a17b32411661374f9b2cb6205f2749407354adc857eac4305bf7ef26faa6be8","size":13584,"data":"","first_seen":"2026-09-09T19:11:39.054193Z","last_seen":"2026-09-09T19:11:39.054193Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"656545e997a2f6cff96407e19a97038f","sha1":"5c1b255e893cfdbf2f0365334bf223e67334c1eb","sha256":"eddc20408677ceaf37567f070ecbcde8cb3854d2559b7f0d4a70450f1ef4cf2b","sha512":"1faf758723e31d64abc2b45b74da1788381497417d18d5c197d1d42e1c136705f6c33c55e0e50e0c4d750a6ae52279a00f1f2d55d786d0edcd9d1a764a6d5618","ssdeep":"1536:qw/DH0qIeZlORvqIuKUsXivphJ2w/REGpO:l/eO8AhFEgO","tlshash":"4243d90612fb18360793b0b952879515726c10631285cde6beacc704bf99e1af3ab7fd","size":59665,"data":"","first_seen":"2026-09-09T19:11:39.056604Z","last_seen":"2026-09-09T19:11:39.056604Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5b78b22598fbe4c4d1d1e10683203f67","sha1":"bfdcb8eaf7f00a5861c3952423711f49a9e2d407","sha256":"ec22fbd4827058d0438463e889e93b99b3a5e809e0dfe05295acb2b080c69a32","sha512":"6daa0b4670aec47df714c537936eb4f46aa5f167c42ec4753c842456b7c00f1a0266da76147e9a37f313641ac5179f10d5a1b43f1a0b0ffd815b5bc0552f5cd1","ssdeep":"192:A/JkNAbEzcNgesXFco8/5XjJ4yBv5pjhVec6eauRc3FfgYRLEyTVYhys+04S6vqi:A/JkNdpFC/5XjJ/DtTg3fRVY1p48Mh","tlshash":"b552670b17b32411662374f9b28b6205f2749407354adc857e6c4305bf7ef26faa6be8","size":13581,"data":"","first_seen":"2026-09-09T19:11:39.058316Z","last_seen":"2026-09-09T19:11:39.058316Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b8141ce403ff51496e0602750b600a63","sha1":"3f4dc36a09f9d877cbc7c23ab54e6e3920850c80","sha256":"506306ed0f56f4f00f08f48dc967a8ddea3bbd8c7c0c829a91a2854918ded09a","sha512":"8c21377b2c209dda30bd4b342c25cf724cfe3eed0a3283730f7f00b72fee71c770e05735bf7fc465387ac1d102dc33c7378615b933aee2a2ecd2da3662e87599","ssdeep":"1536:yw/XH0qIeZlORvqIuKUsXipphxmw/REApO:B/eO8whdE6O","tlshash":"4d43d90612fb18360793b0b952879511726c10631285cde6beacc704bf9de1af3ab7f9","size":59645,"data":"","first_seen":"2026-09-09T19:11:39.061153Z","last_seen":"2026-09-09T19:11:39.061153Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"21a413ef92bc965d78cc563baa5181b5","sha1":"512c3cb47c862db7a5bcb3ee34b70a5054de071b","sha256":"d65003c717689d94e2e520e17f7c927d2e3385f84db901dcb484f32f5ba4928a","sha512":"346370c125923ca3345cfd6b32ab1401028ed1c188d909efeba62ce1f1fc7dd526c10a4e2b569f3ab7328f64cf99f8a82454dc0217bfe8d6d5bddaaf1b4dbe69","ssdeep":"192:A6VkNAbEzcNgesXFco8/5XjJ4yBv5pjhVec6eauRc3FfgYRLEyTVYhys+04S6vqi:A6VkNdpFC/5XjJ/DtTg3fRVY1p48Mh","tlshash":"1d52670a17b32411661374f9b28b6205f2749407354adc857e6c4305bf7ef26faaabe8","size":13585,"data":"","first_seen":"2026-09-09T19:11:39.06276Z","last_seen":"2026-09-09T19:11:39.06276Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3c356cc1a17908ac81326bb8d8b06f4e","sha1":"0ea3723627be9a7d53db0877b527562aafed55f4","sha256":"c3a7e565b4d8b3ee18cf0a1e1c4744a4c2622a2318a9fe3a0ab08ea9936b4146","sha512":"037846ac5e94fc53dc559f5858201bd76cf102a71659f3740bfcc9a089e14a9ee280734542a0e5aa45c55b38efd98d62c1258998d63df5290d199c250d2ca85e","ssdeep":"1536:zw/6H0qIeZlORvqIuKUsXi0phSXw/RZSpO://eO8PhbZUO","tlshash":"dd43c90612fb18360793b0b952875511726c10671285cde6beacc704bf99e1af3ab7fd","size":59658,"data":"","first_seen":"2026-09-09T19:11:39.064117Z","last_seen":"2026-09-09T19:11:39.064117Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"47602d90807d0746e9f68df80ff38afc","sha1":"34e89fd52a2820c44ef96294b17256a75dff7578","sha256":"da108ac642562a93bbf76fd3550b7c844e469c4975b023a00d649c1eea3618ce","sha512":"de24d9c806b377030332c9388092659bd6b3b48012e08979268b1e66ed92eba79ee489be52b62b77f147981e01eade40f98e37c7679e7fbd121910391ef13f83","ssdeep":"192:A8wkNAbEzcNgesXFco8/5XjJ4yBv5pjhVec6eauRc3FfgYRLEyTVYhys+04S6vqi:A8wkNdpFC/5XjJ/DtTg3fRVY1p48Mh","tlshash":"f852770b17b32411661374f9b28b6205f2749407354adc857e6c4305bf7ef26faa6be8","size":13578,"data":"","first_seen":"2026-09-09T19:11:39.065522Z","last_seen":"2026-09-09T19:11:39.065522Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b3874173f267424aba037ad4db09a187","sha1":"641826285c3240867cc4ecbbc5aa9184eff1b866","sha256":"0f28e76da0468bb34bfd98131d89c663151f0a21405ed597742853e78efcd40a","sha512":"c2cafa55da11efea5a87ced67b315324932efd57665037842d66efbe788b703901e16eb8754aa6d35a6aec5542eff1b01aa1097b68240ec347450d781448610c","ssdeep":"1536:qw/bH0qIeZlORvqIuKUsXiGphLow/RvbpO:F/eO8zhpvFO","tlshash":"0343d90612fb18360793b0b952875515726c10631285cde6beacc704bf99e1af3ab7f9","size":59652,"data":"","first_seen":"2026-09-09T19:11:39.06658Z","last_seen":"2026-09-09T19:11:39.06658Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"67dce83759f95c2fa9e8c84251d94f1e","sha1":"b5517298ec0ce6cf7b6ec40391288bc7fc5c1e38","sha256":"78682e9e40fcef30b442d8bb268e189f3c3992c7ab7a5da3cc0d4483247f2712","sha512":"a22c419b73122a35938738a7a745375716ce02cb201990a9333ec92bcdd9b50a82c3cb15e4964840c866c9776d49a491be5740aaec93958628cbfe8710643ae7","ssdeep":"","tlshash":"25f055261873283001bb21bf77eab2893aa5503b204ac40a3cac885c5fc099567f5f6c","size":586,"data":"","first_seen":"2026-06-19T01:43:14.481867Z","last_seen":"2026-09-09T19:11:39.067737Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e1af31be03aa266bdc52543c5e65d412","sha1":"fe658bc6049231e542282ff1cfd2f3ddfbb1da1f","sha256":"39a4d87a3cdc58b8a2ffa5b2531062ccadc34ae228c780d0a4e73364c2da1d12","sha512":"6639b44ab2cf6b7e59eaa4cb550867642bdafe90f17e49564f4e7d36998b7944ba2743497b18aedbe0a80bc5ebaba3fda6756ac14e4e6f8ae3c25e90a064d2c0","ssdeep":"","tlshash":"1711122966db3029a017113561dab9823c17d1030a0bc402be9cf105efc04b65768f7d","size":1094,"data":"","first_seen":"2026-09-09T19:11:39.068321Z","last_seen":"2026-09-09T19:11:39.068321Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7e35c50e267d1fd47049016130770b2c","sha1":"10ebff52e9c54923fb841bebd0b69c78dbe7dd27","sha256":"356b1b28046eb650fb874a1bc9ad7086f940dd683668dd4afebf72ba0c1084cc","sha512":"b41e58a67f69030a888e93f68dbd60e245df5fc82c9ca9a3495402c980f621709e73c027902071f22f331e6c3a2ab026ab403717bca33178de7cbff0762f7f22","ssdeep":"","tlshash":"3f5123296ce3306a64132165a5df0a0939af9113460bcc013ebcb1261fd5d6c8bb5ff8","size":3141,"data":"","first_seen":"2026-09-09T19:11:39.069493Z","last_seen":"2026-09-09T19:11:39.069493Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a6a432c30b269bb9c32e45e64eaec3b1","sha1":"e4f6f8e3b813ad557696006fb4568fb9e6655fcf","sha256":"ab0da57e8672058a55fac6973f59835b3e6bce725da8639396f97a061fa587ac","sha512":"d03c21535ee65fcbcc4aba5e258ebaa981746195780ae1d4368ccd43b16da0d61b80404fbd0ae5cae33aa9d52c375f1b8af19827c76cb37d4a2d564f6676510d","ssdeep":"","tlshash":"bef0a7df16f0047506e3b2b2cfbf1504357a529f144bea427cbc53409f9861d6786e88","size":636,"data":"","first_seen":"2026-08-25T03:41:53.769022Z","last_seen":"2026-09-09T19:11:39.071099Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bb2870635c61f4e488874d9452b4f425","sha1":"e20f6b7b6527f30b90697cebb02d138f16e717c4","sha256":"a75d422872a4ea533754579de88c248c2476c1b4063cbd5a93a164720b725391","sha512":"66eb09007003742164310320bcb8d118ee58f23761446db8ebcd8caa6c34ef096d70b21527acbf6de64a0e01deed598f9cde1f98274e1c3ea2d8b9176902c81a","ssdeep":"","tlshash":"71c08c6662a208704297a529526ae6483aa0450326098d023d2c10214f90f90c4fa6c5","size":168,"data":"","first_seen":"2026-08-25T03:41:53.770829Z","last_seen":"2026-09-09T19:11:39.072014Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"460e7485422a9b99d24e7466280ac72c","sha1":"89914df611e3e2a68596712993f29fb624b779fc","sha256":"eb1712476566ca26210e951a98ad5e34286a32a15dd11ab118b4435fedbb3bcb","sha512":"63d2aa82c75ab43c2625d63bd7b0d4c52caff5a8ad27a5cd3c407632aee4d5be421dbf320083db57d58f873002a0308cd6b580a8d2bd2bdf9453b255aab2191a","ssdeep":"192:Aj3kNAbEzcNgesXFco8/5XjJ4yBv5pjhVec6eauRc3FfgYRLEyTVYhys+04S6vqi:Aj3kNdpFC/5XjJ/DtTg3fRVY1p48Mh","tlshash":"7a52670a17b32411661374f9b2cb6205f2749407354adc857e6c4305bf7ef26faa6be8","size":13585,"data":"","first_seen":"2026-09-09T19:11:39.073038Z","last_seen":"2026-09-09T19:11:39.073038Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"152c7f1169d8465487ea29559387e72c","sha1":"40b554a0691b65cbfa0be8c986778d75ff9306a7","sha256":"137b7ab975b060fb5bc0868c731eddab6bdf2d1fe144f9cc301e33fbe79d49a4","sha512":"e63383fb26a62e049b667c409f6d719ed365397795969b39e05a4765cb70f51045b1bdab22ea7b161d0e940627a52ed159c18ac1fe52d1c2b23de6d33e5a73c2","ssdeep":"1536:Mw/RH0qIeZlORvqIuKUsXitphpSw/RwjpO:1/eO82hNwdO","tlshash":"7e43d81612fb18360793b0b952879511726c10631285cde6beacc704bf99e1af3ab7f9","size":59681,"data":"","first_seen":"2026-09-09T19:11:39.074659Z","last_seen":"2026-09-09T19:11:39.074659Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dacdac80fbd242ebe01eacc2842a9cc1","sha1":"3b75cb397dc8a4c2881e0f6d8d498aedb09ccae1","sha256":"25f27e45dc33a09eaa6b7ca6d82385c57ecac53f12a716c8946a32542c4c9936","sha512":"696835ba364fef488e84ecd736d371fc3e75c09ebeb939420161075c50f70c0fcffc168948f3a94da99d44f1f32648c4f30931a2677b37e388c92eaee9f374ca","ssdeep":"","tlshash":"8381c9193ae32123416fb67e678b024c7634810b3109cdd83e5d6b66afa0f1416f1bec","size":3825,"data":"","first_seen":"2026-01-07T04:34:38.346065Z","last_seen":"2026-09-09T19:11:39.0759Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4a63b6e45a6888384076c6dd88d2ef51","sha1":"bc18d8992343380e97f5e36219623317a7453b47","sha256":"41e29c3c6de2cbc7631027a8fd42278bfd4bb7e13953d9e2f202feee8cec2d19","sha512":"726d5a28fb841c10c933f0458960713c872f33aba0bb646d5934bc7e0c2ff088c7dfbd168144e527a5a2a3d9fc333cd4cf78fce58b2515708c0b2312bec602db","ssdeep":"384:9MjRaIURONierljFBvVl9QaTUz3ikWcpJac55T:ijRVZHVl9NxcpJ5L","tlshash":"6b92ef8d20e3911bd42b736966af194c32359067220add457f4f9b00afc6d7e96e2f8c","size":19669,"data":"","first_seen":"2026-09-09T19:11:39.077951Z","last_seen":"2026-09-09T19:11:39.077951Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-09-09T21:20:50.35061Z","times_seen":200089,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-09T21:24:24.369989Z","times_seen":432575,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"estrax.net/shared/js/main.js","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.097Z","timestamp":1788981052097,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /shared/js/main.js HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 11 Aug 2026 05:37:36 GMT\r\netag: W/\"6a7ab520-5e5\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aEriR61u8hy83%2FfpO2dv1vK5mQZwGEVy5C%2Fg7guxsFlW0WUI8PbAtJAZXyNE%2FcE%2B%2F8DHnttAj4nIfPsYvYb0mOJVt7J44AzCP8dKvPIPraNkMyszD8UVyjejy29x\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3887ed7aa6a3f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1509,"size_decoded":1359,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"6e97c33e3977867f6cce3a575efb79cc","sha1":"202dd19036905d3ab521f3265dac7eeb3bd21012","sha256":"9843cb4e8bd3b56db36e9b269e39f65fa1ca788fa1d6000ac0ceda78e6276d79","sha512":"38599c1f81bc978842afc18675b19755e2a94d501dffdaab0d5c6b56cbe692ae5d149059d541413661ad6f3abee182f5abc2e4036976ee0cf010e54fba7d3ab4","ssdeep":"","tlshash":"3a315e6ef5bd293204fba7b622dfd678766100436448ce013fad86c04f919b499e3cd9","first_seen":"2026-07-05T04:52:57.889989Z","last_seen":"2026-09-09T19:11:38.973032Z","times_seen":6,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/module/calculator/calc-modal.css","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.100Z","timestamp":1788981052100,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /module/calculator/calc-modal.css HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 11 Aug 2026 05:37:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fFCIBQPgbFNVf34otnEqALKWBqL%2FO9fLongUGG%2F3Y6cYZ1xSDIQx8sQMwoA1RVERWUnR7FXud0nPscKABA4iRwYH15aYUqnmniLaOI3YR%2BsyOrtGC7Rf0QxLNhgI\"}]}\r\nstrict-transport-security: max-age=31536000;\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a7ab51c-31d\"\r\ncf-ray: a3887ed7aa6d3f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":797,"size_decoded":1153,"mime_type":"text/css","magic":"ASCII text","md5":"b46ae53759cc89c121a6962c5469295b","sha1":"be91b3a0a5bd88dfb3ae691c1a0cbefba725c1ed","sha256":"c14b1907dfe9e7386809bedc2c046cbbbf227dc32dd3163f0cb2cf9c8ecf1858","sha512":"5d4c3734674c76167fd0e37932c065482ae9a71847d9b6f652e15d9fd44f7ffc0defb86b0fffa93deb57211004f1c519c67761b47760974ab790dc0f086b6b63","ssdeep":"","tlshash":"49016b9f6efd0804740fe1d938510f53637812066529ecae0af5345dafcd294913b3b4","first_seen":"2026-07-05T04:52:57.84024Z","last_seen":"2026-09-09T19:11:38.9736Z","times_seen":5,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/images/background-4.webp","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.248Z","timestamp":1788981052248,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /images/background-4.webp HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/css/main.css?v=1787048851\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-09T21:24:33.702286Z","times_seen":18370361,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/css/main.css?v=1787048851","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.013Z","timestamp":1788981052013,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /css/main.css?v=1787048851 HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 18 Aug 2026 10:27:31 GMT\r\netag: W/\"6a843393-8961\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YHyNcOfWuFjMNdiGx2buaQalkgIhSNH%2BdC3RAnJ99Y9PCYR87w2LohSoW%2FvWTzhiuguXECEwmlqjPpjWC9U1iCo7NXxoX1LjMstDWpwZg8jzM0Om6q1C6jaZ6q94\"}]}\r\npriority: u=0,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3887ed72a223f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35169,"size_decoded":7785,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"cd6c86d503c682e3d945c1e21c531b4e","sha1":"8c12eda9286cff3c9b5905dd9a42e4002fed47ae","sha256":"010a3d5d9cc0d16f4e3cd2f8706b63f4064c119617047d6b38d98371e76903c0","sha512":"d931f379c039cc7f072c5175df520f8f46f9486349a1350c9c53c97cc3c2dbecc75111b64ed6a3dc604a4e756be2259dfdcecae86528faf417435acc8e6e9a77","ssdeep":"768:enYN6tdFNsgF3ibH29ka96OadFDEYZETeJarRtZZrw2AAH80aFDjITj:WgglibH29ka9gdZbWTecrRtrw2ABXtjA","tlshash":"04f264a727712904700b98652a577b65732c8003970fcebd7ff5605cef891e1a5a3b8e","first_seen":"2026-09-09T19:11:38.974855Z","last_seen":"2026-09-09T19:11:38.974855Z","times_seen":1,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/shared/images/flags/ar.svg","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.060Z","timestamp":1788981052060,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /shared/images/flags/ar.svg HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 11 Aug 2026 05:37:36 GMT\r\netag: W/\"6a7ab520-50bf\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Aq1tcF4ZtwF%2B9lF2CSUtW0kCMh%2FK7VLYACVL5GQZ%2F9OfTYCYQ5jzwIK4g9wyf3BD1Cr2N3kTszEGWC3GuPsn%2FQyeZVcdDY2ajCoPHEfJ87LO%2FRURsKVm03Gjb%2FPA\"}]}\r\npriority: u=5,i\r\nvary: accept-encoding\r\ncf-ray: a3887ed76a463f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20671,"size_decoded":9234,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"943cf6263106fc466d3288777a0625f2","sha1":"47dd4e94013129b22457fc5e9b5517c9c595c0c0","sha256":"e07786f2d467b66cae6e9bc096ebd887fa35daa4bc5a8dced89f0f6d7a2efaf3","sha512":"44a153af3abfb235a16844680ebcb00e9eb983c41e67f74e1d6123b5515cefef0673e09fa2e7e186b931f6b892b54464ee9180f11e449c5c6b6a7b209a5e8913","ssdeep":"384:pvVc3AEs8OEB3KeGVNeHu8DM5xsbiB2UmRQvvKJwPHXcz/CIWgO9v1Xg:pvVcQEtOEBIgtDS34iH711Xg","tlshash":"519297eb2770e1ec99c74b9dff3298996b4d90ff7ab185d0867eae6454835c4d206c00","first_seen":"2023-05-12T00:28:41Z","last_seen":"2026-09-09T19:11:38.975817Z","times_seen":74,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/images/background-2.jpeg","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.255Z","timestamp":1788981052255,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /images/background-2.jpeg HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/css/main.css?v=1787048851\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-09T21:24:33.702286Z","times_seen":18370361,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/css/custom-en5.css?v=1786426632","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.017Z","timestamp":1788981052017,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /css/custom-en5.css?v=1786426632 HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 11 Aug 2026 05:37:12 GMT\r\netag: W/\"6a7ab508-d02\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PY7vQC%2F23fXziafAeGcpwSiPF9p%2BfhCppM4C4bBSVoPj33QbKHhVwDEojwNmZul%2FEuXEVi4PBiPsnzRT3XsFpcdMiLPMH3mT8wmQ6nHQ7YfaLz4eECQwgM%2Fa0IYj\"}]}\r\npriority: u=0,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3887ed72a253f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3330,"size_decoded":1818,"mime_type":"text/css","magic":"ASCII text","md5":"d19cf3141928d7be8cf3169887bac0cb","sha1":"017c96cba6f9900fd874f7810870ebbf9bd5691a","sha256":"34c209d56057a410b034c4370f9d5dc6c69f9c85338175732baab3d804f2f265","sha512":"7e1ab80ee4e40772d4bfa007452debae3e92de566eaa1eff26804e14d08f20b2b8713d1092a3fa22158f747f459c5ad5056dfab6cc340b481a0bf4df03d15417","ssdeep":"","tlshash":"5b610e8226632404b40b54b837daa729213dc043961ece9c7a6d72bc9f5d9f16b73bcd","first_seen":"2026-09-09T19:11:38.976353Z","last_seen":"2026-09-09T19:11:38.976353Z","times_seen":1,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/shared/layout/css/main-unified.css?v=1786426656","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.028Z","timestamp":1788981052028,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /shared/layout/css/main-unified.css?v=1786426656 HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 11 Aug 2026 05:37:36 GMT\r\netag: W/\"6a7ab520-3736\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RH6TuoVg1GZ8Pr%2BBRyL34HYNQ7o2uTJTyN6GSHTkNdXHm0qz5U%2FzdnvklnL%2BCePsdkX0Hp6DI0B9DnfVZEx%2FdJln8KQDFu0arjiOSuGvKIZux6Q1yfmN7b0A%2BaKP\"}]}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3887ed73a2b3f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14134,"size_decoded":3494,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"6f9e5a30c0f957da9c7385b0c69a53b6","sha1":"7a47aa1c512e18a2224144c686039377d9088ec0","sha256":"26b19947ba8009e5d8ba1ca90860e71d53f17380d441171084434c74902d8427","sha512":"c4f5dc27ea8274d13468c44c0580f7c6105887d71aee4351ab3d4a5f8e76c6de6b91001476d3089a9ad5ab6f3dd641b1c8391a973441d75ae2ea4cd02fa3b77e","ssdeep":"192:P4OBwMikJk95PoFUYu/SZJsPcBYF1fb93+e8EV1rvL/dlX7J78rDG1eFWniXAbin:P4O/FDEF35VXu","tlshash":"f352eeb3a7430508b516c21c67ab8b49637d710bb208f9687d9931588fce38dd856ff8","first_seen":"2026-07-18T04:13:48.586354Z","last_seen":"2026-09-09T19:11:38.977248Z","times_seen":5,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/module/calculator/calculator.js","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.041Z","timestamp":1788981052041,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /module/calculator/calculator.js HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 11 Aug 2026 05:37:32 GMT\r\netag: W/\"6a7ab51c-128c\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fgH4fpwKzRNmfXmncvXymAZPMGWw%2BPNl%2B7ORXF6dL8X6X1ubLxMjMSBnmlaC8yko0pTMQO3DhSuTCxc0%2FG3i2y1XiYuRColB%2FVudKP%2B55SWTweOldu%2F0lZLL9cv6\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3887ed74a363f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4748,"size_decoded":2365,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"5701c10f5745a3089a2e54d2f081c735","sha1":"5ee8e779aa78e9af55790261074e4f4b28195b55","sha256":"fc96c62bfd013b87a2c8fa54422fcac733602b0d7849c0c3ed80a58815ec152c","sha512":"9f06d59f86be5832eee1a5d1915353f17da26b69febd6cae57d5e85775411b47143520944c64d4533a23f640b54a8d503e1459f846697699b70f8e7948cda240","ssdeep":"96:6hNeK6rObBJdDdBwkf37CIcoUhFeAece+5eSem3ePseBvefjWw+qKNOReSe0eKeQ:6h0Ob7dDTwk/9Hr+sFtPbB2iw+qKNO0k","tlshash":"37a1114a3e9241f1e15ba37a73ef4a4d24e200579801e5413b9cd1980fecd2692fa7fd","first_seen":"2026-07-05T04:52:57.79761Z","last_seen":"2026-09-09T19:11:38.978566Z","times_seen":5,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/shared/images/flags/br.svg","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.059Z","timestamp":1788981052059,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /shared/images/flags/br.svg HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 11 Aug 2026 05:37:36 GMT\r\netag: W/\"6a7ab520-13ae\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O2nyLoTk2Vdvb8xjq3Besd3%2BWuvJzFfdCbmVbOP9mnfzNag%2FMR1BavhRB0MB%2FPLyQNOsav8JXoJUT%2F3ms63CIa7OMxsxObaiRcL%2BDhaXQyjh6S2fQDKelYnOJjbO\"}]}\r\npriority: u=5,i\r\nvary: accept-encoding\r\ncf-ray: a3887ed76a443f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5038,"size_decoded":2224,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"aa1e61dad0a31deba6b118583bcbfbbd","sha1":"9c5b1347557dd57f308fbd4495b1935a89aeefd8","sha256":"6379aeeb756c0b62f4d676e74821b6e4a97652f51fc690ede2a77c7dd48c96e5","sha512":"44380a2f94d762471184e808018ce7050c96b3974f2bdc504d312eba16fd92a650e730da2a51e2602bc7ed2f156d3609008d2e98882ab41f85f849746cf1b826","ssdeep":"48:cg7m1DF+vSogV8XhxbCzD9iW2TLzLaLtLbLHsuNTZTWgUXgJQpO+uPz1QRF4:T7m1Dkvl+9B2TLzLaLtLbLvTEiz1R","tlshash":"d0a1ca21e02e153f592973ccf1edafcf970b8a637203195fa1369dda837ae12c14a184","first_seen":"2023-04-05T13:19:11Z","last_seen":"2026-09-09T19:11:38.979175Z","times_seen":24,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/shared/images/flags/my.svg","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.066Z","timestamp":1788981052066,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /shared/images/flags/my.svg HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 11 Aug 2026 05:37:36 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mgkJXKrWYfrtvTGus0i5im8ZnS07CIgKw9oyR0HARTJk7reN2wzN9Dyc4NOA8G9qIe7612WrGGhFYtPoUUy56cK7f4Z6YaQrbzi5X6WZxRf25E%2FJxbvoNPci0yTj\"}]}\r\nstrict-transport-security: max-age=31536000;\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a7ab520-242\"\r\ncf-ray: a3887ed77a4b3f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":578,"size_decoded":1106,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"537daaa3ec108f311bc5f0d0bfb3ba70","sha1":"fbf9f505ca6d227a8e08aa30a6217a89e9cfbac2","sha256":"9fa2004394439d9537440b5962f19116523f787bbb9814e242cb5f2b6d176535","sha512":"145ae969541e2340121418982a91c0bf0afb22c3427e67852a86123a8ad1126109753c1e2c61a4c3bad68447da72cea2d01e70603bfc46bf6d77a350d7110d88","ssdeep":"","tlshash":"bcf0785c90326a25089247bcbfb8bdda465ab15e140106f9b68ca2305055b1fbe1fc22","first_seen":"2024-04-08T22:36:40Z","last_seen":"2026-09-09T19:11:38.980646Z","times_seen":53,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/shared/images/flags/hr.svg","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.074Z","timestamp":1788981052074,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /shared/images/flags/hr.svg HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 11 Aug 2026 05:37:36 GMT\r\netag: W/\"6a7ab520-dc0a\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cKlr8oi6iKoyBleTmUaZR4IYX1O2dHoHj5HpJROOtWCEFS2fouA8LEKYnM13lNOmhUWZfi2J4ZrHqGnJmVPdAXYb99ETqFXOaw%2FnxgnkmO5qNi6DMhZbeMgBaARS\"}]}\r\npriority: u=5,i\r\nvary: accept-encoding\r\ncf-ray: a3887ed78a523f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56330,"size_decoded":36413,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4f2d6a01e6484d4a56335187d802f957","sha1":"1bba652beaea5493033e9fcd7035f4196f6499b8","sha256":"e3ade1edd7a8e12d0720f44984473f91007891fe9ae39c85457749f8a0e612d1","sha512":"cc2849c96299b1c1c08d46982bedf102d90487a2824826658165646b61b11a9e4c5c46ba4ee31b3aab45d1a3cbfe5e7810aaf172403c0f2fa85055e2d7287644","ssdeep":"768:dU3BB/dxVkvqkeZM9QpYEYoUuUmi56+CMkMw//mYaylsP+ihMPpG227+:q3jdnGP9AYEW0+CMkD/ay4MPp6+","tlshash":"21436a39688ead2e3376098ecf12117d9dda65dff24486cf688f31edc33a4154a21c91","first_seen":"2026-07-05T04:52:57.902436Z","last_seen":"2026-09-09T19:11:38.981233Z","times_seen":8,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/shared/images/flags/jp.svg","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.076Z","timestamp":1788981052076,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /shared/images/flags/jp.svg HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 11 Aug 2026 05:37:36 GMT\r\netag: W/\"6a7ab520-901b\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BUW3QMFHsBbQ2XAaiOXjWSkDvYfQfaQLdnxbuarcxe5T4%2BOayPH7PE7qh4umnBHQI3FE%2BXjt9w2%2BWoYStKFXWC%2FCOIw7mUgBLo9w9xvzypLnAKUzdiSHplyZ8ptX\"}]}\r\npriority: u=5,i\r\nvary: accept-encoding\r\ncf-ray: a3887ed78a553f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36891,"size_decoded":22771,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f9c5d0ee149b9697233a5b43dc7d5979","sha1":"b1416f3100db98b6ab12aaeb4046f570be1ceb85","sha256":"479c75516e07475b26c2969163ab7918284e95601a1c453b0fbfaf867a51d02e","sha512":"6cb6cce62de2255385bf8260ba19d5abf45808d6a34032ea66923e05d263a2a231d76a3eebea387013481a9a48c9d7e00893e47fb20700f643051eee8634f89b","ssdeep":"768:G8PP5jE9ZLrbellksEdmPN5zWt+2S9raY6EtR:0FrbeljNE+z9Gho","tlshash":"0af218295c0c6f0e33321c6ecb17157e3e9aa9ed734991cf60cf75dec26a450aa20da1","first_seen":"2026-07-05T04:52:57.884902Z","last_seen":"2026-09-09T19:11:38.98248Z","times_seen":6,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/shared/images/icons/ssl-security.svg","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.085Z","timestamp":1788981052085,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /shared/images/icons/ssl-security.svg HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 18 Aug 2026 10:28:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hJEzF0Jk3IGXFm83RzFg2YaVWr4ftXq2bXsfssJzE9mWjWgSuwtpon8xwdixzmbsu6OByD%2BewGokQ0ZPC8fjBiFINDU6WbwhEkYzWsAqZcnn8zCvClOyddSb83CL\"}]}\r\nstrict-transport-security: max-age=31536000;\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a8433e8-159\"\r\ncf-ray: a3887ed79a5f3f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":345,"size_decoded":1002,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bf79a7aad2a222b301ab3ef582186eb5","sha1":"89595a9407830b81c9a3de792c4c7b5401bc3540","sha256":"66e65dcaded98d709af7432d845e987d03a008ca9c8d3b1909c5644d46b32034","sha512":"e41bcda471688352825b105d38360a1cb70df71b350a2c44dea4408990e065fbb6c491df3da3050a1843603185d78d0be2c1d5f921fc8cc2f8d3c15a0f7a834e","ssdeep":"","tlshash":"54e026359208082ce2504e18e63e70a4327a9992a36c8216a89829321918a9b7d7f1fe","first_seen":"2026-09-09T19:11:38.983118Z","last_seen":"2026-09-09T19:11:38.983118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/module/reg-form/reg-form.css","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.036Z","timestamp":1788981052036,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /module/reg-form/reg-form.css HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 11 Aug 2026 05:37:32 GMT\r\netag: W/\"6a7ab51c-790\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FFk17GC5yRHxEZvs8pNjcX4ceeDM6%2Fz47ZI%2BS29KUczxG2bpudaAe7w3xwF8cqb5bEUxrrT0TkaAm%2Fvfq8nkqhYlGysJ0X9pLDIBzkh5SW7SriJqhrkle0C0acXa\"}]}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3887ed74a343f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1936,"size_decoded":1544,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"63fa3816b55563b3add8ff7279775a7c","sha1":"7c882c0287f5a3289e433b10c4453e7cf17beb74","sha256":"5e14f9312126b7b1685896b1343565c531be9e5dff18eaabe7d8fce3623f024b","sha512":"e1740b640e7c91bb6fca84573ae102daad7368051f68113b40cf4c1eb84f9a7e0ca989ab2338264a6f9d632a2bdc54c37554b73da53a3080ebddbdea7b39f219","ssdeep":"","tlshash":"79413fa2c5b30d54305341a967f693793b8d45039b8bea74bf9473588f893e1a2607dc","first_seen":"2026-07-18T04:13:48.559954Z","last_seen":"2026-09-09T19:11:38.984043Z","times_seen":5,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/module/calculator/calculator.css","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.038Z","timestamp":1788981052038,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /module/calculator/calculator.css HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 11 Aug 2026 11:15:52 GMT\r\netag: W/\"6a7b0468-1b7b\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F1cUJqJFIBQ%2BW0iVZMqw3AXq6wAkiuw7bykEzLcZGyEStE8ZXdvLbFb9Zch32p5dmT11gW%2FRYyZ9iy8P0EQoECHtWVAIMU9hQ3zB1M4U%2Btyp5O3bo7lU1G1DgULI\"}]}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3887ed74a353f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7035,"size_decoded":2367,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"f92ece1a24867e6418c4d9b4ed5bdf6d","sha1":"91c2df3d883c6625ed6fc2edaabf5c25e310d3f7","sha256":"0fa34450cd5f77516ae01c346bd8e9cae934dd702e35e8f7057296ceffce8c97","sha512":"f0d6f3cba8f4148895a17440ae2adb8e03382167aa64f22a0ed5b5349034c075f0d6f6ed70c5ed065e0030f9e70a19000ec13431c8bfdd9ba1d6da8566187c7f","ssdeep":"96:aCWJCnC7kmexfJdC6+0NXbNX2EvgvEvgxqM9qMmxGGx0hJCQSxRFJrG4d2VoIChW:oCCgjOedwlvlx3WgClTRq+G9","tlshash":"e6e1118726b409247c27b56625d78f9973a88283c00eeb7936d4241deecc3e947d3f19","first_seen":"2026-09-09T19:11:38.984975Z","last_seen":"2026-09-09T19:11:38.984975Z","times_seen":1,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/module/scale-chatbot/assets/chatbot-styles.css","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.048Z","timestamp":1788981052048,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /module/scale-chatbot/assets/chatbot-styles.css HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 21 Aug 2026 10:04:37 GMT\r\netag: W/\"6a8822b5-2106\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wxag6PLhmNLf2nTTOey57%2BaLQbCInBB%2Bxvjrb79Zc6B%2F6smrV8LOoWUDMcvLUwYR%2BZZmpf1M1rmEW%2BDGSK%2Bj7zcaKNaeRGtJqVY11O9tx6jLjFtVCCyqdo0NymfI\"}]}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3887ed75a3a3f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8454,"size_decoded":2962,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"164991b1bc1b55fb01d3ad557f09646d","sha1":"9584ab10d9a53cbfc9055fe52013516bef1f63fc","sha256":"2f56363e2aeced7b1f3c1dfd9f39848d4c44b886549f0236c2f57d33184c615f","sha512":"724c4b01a4e6c2622591917918c6f8c950529d1895f35728a1faa3db5eba94749a11d8cbecb2359e525569f8a060b4a1f46d904825643e5ebc4c11e7e80f72d1","ssdeep":"192:GE4cUNESEdsgn1SXfb2eh8LixCagnCXZc/44Nf/:GtcMESEJOhVxaEOnd","tlshash":"f60202d227662108b65b455379d2bbad731c8082910fdcbd67e1906c9fc62ec24f6f4d","first_seen":"2026-09-09T19:11:38.985898Z","last_seen":"2026-09-09T19:11:38.985898Z","times_seen":1,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/module/scale-chatbot/assets/chatbot-script.js","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.050Z","timestamp":1788981052050,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /module/scale-chatbot/assets/chatbot-script.js HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 21 Aug 2026 10:12:24 GMT\r\netag: W/\"6a882488-18a9\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9FHRpKjQEWFlpA6QN2hCq%2FMoo96F6wGNQbYq5aOed9Nfy%2BVwxPneEcw5C0szPPPuc44nym4BuwiocEO%2FrUA5NqhSc%2FL%2FWhTY%2BOUhf7XR52ZNrlPEIns959K5tpI%2B\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3887ed75a3b3f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6313,"size_decoded":2636,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"85fa2b421df18ba7a568145a770ce885","sha1":"bca5de249199388336e6961fd819b7f564664dda","sha256":"5a7d4cc598131cc922a36d638e84692480377f0e792fc392ab2a81b986f56c8c","sha512":"602668c62a29150ba30aef21d7a1a3aaa83cab2f451ea234738c8ae346b64095c682326937addb240fffa54a024088142f79a2d91d473eb254d6712f9f04ed9a","ssdeep":"192:b71p9cDnWoiwJBidL6iGigipioqcQ6xHBCipiZipiUiGiOe+i+iHXYx:bhraHieBidL6iGigipioEipiZipiUiGH","tlshash":"e9d1539661e3223b019f082b59c6b7997674404f180fd9263cacc2f41feaee456b1be5","first_seen":"2026-09-09T19:11:38.990408Z","last_seen":"2026-09-09T19:11:38.990408Z","times_seen":1,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/shared/data/geo-reviews.js","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.099Z","timestamp":1788981052099,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /shared/data/geo-reviews.js HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 11 Aug 2026 05:37:36 GMT\r\netag: W/\"6a7ab520-3302\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2pzc3BLmzdXU0h2Yqtil1ZZOc5nyYO0zaW8WZNQjCWDL6CnEiDViLpcuafl%2FEaw5pyJc1B%2FAYeWvQtJQ8V8fG9Q03MDTTeOLFJJQ6BxTK%2B2ivQqGpL5BH7K3FrXB\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3887ed7aa6c3f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13058,"size_decoded":4812,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"daa3864c907877c090df13d80f968cbd","sha1":"56c56bd07bd9c1c424ba97f172845b5211161b23","sha256":"055fccde2bedabb2abec77185b8cc29bd4db114163baed8d2c152a66cf7216f9","sha512":"909342b2d85db3d903cc3b5fcd7fe2c1312e1255f56fc2dcc91c2c23016f6e6dd0ee0badbdb62992af1d08c3067658c49f98810f7fb6664e2613a9ab5533dedf","ssdeep":"192:1FJiU8hVkOXmD8rbJRZhJ/Mcy6spHDFhd9x4LFCc0/rCRZcxh/Z4sk52:TJiUSkOWD8HnaHD/9+LEcCmZi4G","tlshash":"c242942ba19412074cb3d0742d1e9a86f36923af5d94ed69be4f412e7f2d42c92b9dc0","first_seen":"2026-09-09T19:11:38.991959Z","last_seen":"2026-09-09T19:11:38.991959Z","times_seen":1,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/module/scale-chatbot/assets/ai-chatbot.webp","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.326Z","timestamp":1788981052326,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /module/scale-chatbot/assets/ai-chatbot.webp HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/module/scale-chatbot/assets/chatbot-styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-09T21:24:33.702286Z","times_seen":18370361,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/script-top.js?v=1786426664","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.009Z","timestamp":1788981052009,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /script-top.js?v=1786426664 HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 11 Aug 2026 05:37:44 GMT\r\netag: W/\"6a7ab528-1748\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bxu59ZpQkKYPLlv9VvIuv5IFZx6qH9%2BZjAX4V616gTFZ1%2F4zb%2FEaqTNBijQHrUcxPZ2H8addiwqxvngaz%2FZILEQbjRc8hErFto1meggGLBDmU2y4qAsETA7c2Kbo\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3887ed71a1f3f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5960,"size_decoded":2559,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"ff9de0a537f4370a36e90bcd10c38883","sha1":"dfc082f41110018c4f519b70cc753e4e457b5ec0","sha256":"51d2ac650d126800a65ca5671d2551e51fdcdb6e2e7759b65b7c59171d4dd1e9","sha512":"6a35bea85cd99232674c4efc94cb9e0030cb7420ced82f7b5a626279530f653db447374e3a8d4fe1455bafe14335c34f309b9b307ebe7ea929c9be7c69c3c48e","ssdeep":"96:ikRO4HzxYresL7YI6wNvBo1v8HCGiGxHLG+84CSkfkVuvaatTaP1Ro/0KbF3wrIY:BzClL7H6eH9jnESk8VuCatTe0bF31A62","tlshash":"02c1fd0925b370728653209d5edb528cb631a0173249eb4a7e1ccb805fe657b86e3f8a","first_seen":"2026-07-05T04:52:57.857195Z","last_seen":"2026-09-09T19:11:38.993046Z","times_seen":7,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/shared/vendor/css/uikit.min.css?v=1786426656","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.011Z","timestamp":1788981052011,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /shared/vendor/css/uikit.min.css?v=1786426656 HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 11 Aug 2026 05:37:36 GMT\r\netag: W/\"6a7ab520-4235b\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eIbEGJ%2FxB3W3qgDwFVK%2BWyzj5SMyFuLQV7CLlf67fdkW%2FyzRUIZQGmWIhXp%2B8FA%2BOL7NdVjBNEqyeQ5NdDzaNzgPyeEMHoj431CxGhcRKdSgXdSvB%2B%2B5gR%2FGGHzw\"}]}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3887ed71a203f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":271195,"size_decoded":30996,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"069dab2087cfe449dfab0443912c3427","sha1":"8de1ba9ba591cccbdcc89e4a3b909ba94493a03f","sha256":"14aad0bfb03b7a363818478e72ed1ae18a1f4e9ce89a4a4ffdc7e9c0b6e753ea","sha512":"ea30982d4bd17d1f189ed8d5a5abe5a4b215d5fbd401c0b64ad87d02434c171d0c8a1ea3c7c405983ac066a007920fcfb5860cfddbc8ce75dd124f336689c4a2","ssdeep":"1536:2OJ9WL6OOSnCEirktQ/22n9s6kxhoCror9ACQgv6:2MSnCEiC2nS6kLog","tlshash":"1d442094a24479fe8d37059b90a8b5fdf7998d01b23a2ef7b6ee82c14e457430135c8e","first_seen":"2025-04-08T10:05:49.34209Z","last_seen":"2026-09-09T19:11:38.994316Z","times_seen":2899,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/shared/vendor/css/flag-icon.min.css?v=1786426656","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.018Z","timestamp":1788981052018,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /shared/vendor/css/flag-icon.min.css?v=1786426656 HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 11 Aug 2026 05:37:36 GMT\r\netag: W/\"6a7ab520-7e34\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EZaZCNODJnAZ0ubot%2BGOioziQ62GZa5SmTaOWBC1%2FHh2WqxduCly3LuCc2SAcXw9FMMUJPwvYXKGNkBZQHgriI6GNHGqWCLIsk3pKUjQ0rRcEF7uAg3W%2B7NLMC0X\"}]}\r\npriority: u=0,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3887ed72a263f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32308,"size_decoded":4041,"mime_type":"text/css","magic":"ASCII text, with very long lines (32308), with no line terminators","md5":"c2d430726aa37ee31208421f7f842b9a","sha1":"4fea60dd95385b9eeca5803a59ba0e503fc15024","sha256":"4b16ac67cea474949eeae632d6762640fca93e106a18a04f5a3c1f8b996eb7be","sha512":"fe9e3b9dff151aee1c8aef29b58832c67d69b292c902ddf6257a09043f2d1d3ccbbe95157dd00244a67b9042756e1badda8157d56965ef87c1a30549221d8a37","ssdeep":"192:s1m67y/Ffi/UWOsWwK0Un6+PTl10N9bgU8Qm6Qe4jSLW5b1Di:smJi/UWOsWwK0U6+PgN9EU8sQe4EWZZi","tlshash":"89e2ea12da83e21f36074a737a36252da70f2495fb855f3b24af56f161b82483436fb1","first_seen":"2025-08-05T12:36:31.298367Z","last_seen":"2026-09-09T19:11:38.995362Z","times_seen":11,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/shared/vendor/js/png.js?v=1786426662","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.023Z","timestamp":1788981052023,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /shared/vendor/js/png.js?v=1786426662 HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 11 Aug 2026 05:37:42 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p0Ekan8ANapELG4ZGYl4Ax2sZB6Si4p14S1ElJ2lXTY7zz8yQG3IMatCc4wjVtlAaiHMm%2BLKEqKXD0BysCNiyo69YbBEFl6cHbx7oupQS31kk1gKIvvzsMLxBs95\"}]}\r\nstrict-transport-security: max-age=31536000;\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a7ab526-166\"\r\ncf-ray: a3887ed73a293f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":358,"size_decoded":923,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"54ab5c4cfcfe16c2e795964de121a0d8","sha1":"19556801cc6b68f0e11081a07c6781924bc0bc65","sha256":"30625e824b8626a4aeac6ebcd2ea16de8353a851054e7d522edd590e7a531835","sha512":"4e6700c168994ca42148b7b76c05a612a025db7baab9b6700e02232a839ddf97f5c164b4834f83280e90aa7f257e891e30296db0f57f7f45863af34529909453","ssdeep":"","tlshash":"24e04f610085801f5ed00cb931ba1ba4c792620e8060c2ad38ea8e69fea0ce0303aca0","first_seen":"2023-03-10T00:04:39Z","last_seen":"2026-09-09T19:11:38.996795Z","times_seen":914,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/shared/images/flags/hu.svg","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.075Z","timestamp":1788981052075,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /shared/images/flags/hu.svg HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 11 Aug 2026 05:37:36 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zmr0D4MlD%2FdhTqZOkFRq1lr6Ba1qly%2BmSDs4X3g6FtlFaT3d%2BjjjQ1lXIaQs1U66j9GToFKRjSM7afKy3qUp2iRoD4oLUq%2FdJTrhupWIs59jzb5y3jeVV5Nf7yhK\"}]}\r\nstrict-transport-security: max-age=31536000;\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a7ab520-167\"\r\ncf-ray: a3887ed78a533f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":359,"size_decoded":1012,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3621c5eb449691cbe1d3bc8757c831a1","sha1":"e7e3674fe42359cc9a376e543d7548418071aea0","sha256":"2c1380bd6fb1a88cabcae439eaf960d4dffa929a74cfe3d44f7552084fc1150b","sha512":"7c66bd80019b994685400d020e37d38ba3c45ee3cec449b83bf8a2e8d08d346e03d6245e81f9b868eab42325782107cbf837f3c057efb2c83a5151b22b1104c7","ssdeep":"","tlshash":"61e0d8caa9e9c90e9a1947694eed71da416270cd21cc01fd71843528fd4d3ef2411764","first_seen":"2023-05-29T23:05:28Z","last_seen":"2026-09-09T19:11:38.997701Z","times_seen":5274,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/shared/data/geo-leaderboard.js","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.098Z","timestamp":1788981052098,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /shared/data/geo-leaderboard.js HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 11 Aug 2026 05:37:36 GMT\r\netag: W/\"6a7ab520-2a7b\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9S7Oq9mAsAxoiX392UwMB9VC2VSUGPmKKm5GpsBdXvnDZBK4o%2BdkgV5SBUKlnuhK9MqWNkEIiWqfxiXPYPpEuxRVchz0d9rviqDymiB8kFve8nvLu5ktXj%2BkwZfk\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3887ed7aa6b3f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10875,"size_decoded":3094,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"05769b815234d8341d08014f54aa32cd","sha1":"479cc98195f7000aed1e3b50e7493a3763b79385","sha256":"0303cff23bc2411575b5b2238e83c72bd9625545dc86d4302c628b6701ea8a3c","sha512":"061c86dee9242897f6eac96b28d948b0ae1e8c91dbcd96a06e5c81766eed5f478a19a3dd2d5f151de9bfdc8b8a4aca3061ab2bba822fa5908153da39611a6c09","ssdeep":"192:nbDUJ/iQhpeGO2iySLSm38jcRpuXCJBXii:bDUpiypbO2+LSmsjuuyJ9v","tlshash":"c52276f27042f4e3d034c4752dab14b692bd0b9724e6979a3bce013e7b0c85e91b6d96","first_seen":"2026-07-05T04:52:57.92269Z","last_seen":"2026-09-09T19:11:38.998289Z","times_seen":7,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-09T19:10:51.603Z","timestamp":1788981051603,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:51 GMT\r\ncontent-type: text/html; charset=UTF-8\r\npragma: no-cache\r\npriority: u=0,i\r\nstrict-transport-security: max-age=31536000;\r\ncache-control: public, max-age=3600, s-maxage=3600, stale-while-revalidate=3600\r\nx-cache-status: HIT\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HSz8EcURFp1tYCxiVCJNAyP3t3SLlHvHcLZsa0Z5Po4%2Fs1IsEdZWDfW%2FkSH8aIyg3dpLMapC2Go4bQBjVsZ%2F21ns5tVWKWrpP0gZNGoiPr555%2FwD3MjB6TjykSnk\"}]}\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\ncf-ray: a3887ed4e9b63f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"UIKit","description":"UIKit is the framework used for developing iOS applications.","website":"https://getuikit.com","common_platform_enumeration":"","icon":"UIKit.svg","categories":["UI frameworks"]}],"data":{"size":5830884,"size_decoded":359484,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9838)","md5":"fe2370efbcd3c49033b1a7a9f2d27b93","sha1":"05676b56cbd88d92fb53f2cf4647caf878035238","sha256":"0ad0e6eb219c153a6c17c85059d0e501e5b4cdd0638600f71fdb47e5c653a209","sha512":"4a38bec9a49ac69f1ebe25281396fd80d3871653fd7ca0dcdff0035d18063f86c945ae04bc95ac63f6e36625e29e452c4b29c38585092693ade21342ebc24e8b","ssdeep":"24576:qUbC6YtP9TLGhj6VhTFeUbC6YtP9TLGhjl:XujVhTFjuY","tlshash":"5925d00b13b6013f8363c0753297861a3b6e66236585cdd4b7ec4b895f86d81e9b37b8","first_seen":"2026-09-09T19:11:38.999297Z","last_seen":"2026-09-09T19:11:38.999297Z","times_seen":1,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":14,"connect":38,"send":0,"wait":125,"receive":154,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/css/header-banner-top.css?v=1786426632","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.014Z","timestamp":1788981052014,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /css/header-banner-top.css?v=1786426632 HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 11 Aug 2026 05:37:12 GMT\r\netag: W/\"6a7ab508-4f9\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vdVf%2FgB8cOaAj51bhIQ%2BpHeHCB1hQZQ70auOWPJfE8qk10fUbK51uzradv%2BLvgNv8kGNFp85uh%2BwSMP2p3%2FVLpvd1Egw20WEGfJHQDsMjJ6NQ2XFrOJRWc4zQlay\"}]}\r\npriority: u=0,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3887ed72a233f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1273,"size_decoded":1276,"mime_type":"text/css","magic":"ASCII text","md5":"d26cbf932bca4869426dad7f9faed726","sha1":"4e3dba1d1c006630dc8b71d6316e72001fdc3a52","sha256":"297fd1945b4ef7b56e20108bb4cf64c06a12dd9c0ac56e758711f475e196027e","sha512":"22594b5876ae8c0e3b92e2a7aed65fd37bb8bee875199464b28f3cf22f769b135efa0ea0bc4c503fafe40606110e1260238e4877312d05ffd80e991de8d836ca","ssdeep":"","tlshash":"3c2108338f18a144711855f8ada23fe2621e8007e6586ef8af90812df348555ee607ec","first_seen":"2026-07-05T04:52:57.79447Z","last_seen":"2026-09-09T19:11:39.000846Z","times_seen":7,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/shared/images/flags/ch.svg","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.064Z","timestamp":1788981052064,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /shared/images/flags/ch.svg HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 11 Aug 2026 05:37:36 GMT\r\netag: W/\"6a7ab520-14466\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pFhemTC%2BfC921CYZja83drfMAmWssYRmyRO6%2FucL8YV1O6MEBzdXW9onYj0drcakiGhJGxWH7d9ZGUsP%2FIc7PAmfsPM%2FM5ixzCpd5T7fmO1hbepyE6ieM773Vul0\"}]}\r\npriority: u=5,i\r\nvary: accept-encoding\r\ncf-ray: a3887ed77a493f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83046,"size_decoded":4046,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fc0a75295cf31768787fb267ac590167","sha1":"4120b02953956c141dc9ab6d3062914fbaaf226d","sha256":"a06b0fef95c11010ccbcf40ed08c635db3a40dc91b3970245426961840e2a38f","sha512":"ee1cc9b7bb437c94fddd1c3c69abca703f28edb2bf4413cf2792ebd699340f1cc4a509e6fd989aac4a17caf4bd5e1c4c180a1e3810f48d6935ebfcc67586c415","ssdeep":"768:jZZZZZZZZZZZZZZZZZZZZZZZCDDDDDDDDDDDDDDDDDD7flflRAAAAAt1111117N:EDDDDDDDDDDDDDDDDDD7NNU111111R","tlshash":"cc83822e1c4daf5e37361d6ecb03207e6e8664ecb20985cf3a8f35edc3224519661da5","first_seen":"2026-07-19T04:12:11.624021Z","last_seen":"2026-09-09T19:11:39.002738Z","times_seen":6,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/shared/images/flags/co.svg","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.071Z","timestamp":1788981052071,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /shared/images/flags/co.svg HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 11 Aug 2026 05:37:36 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hA98I7ejQtAf4QRWXAJ6d9MMTd5uY21oxtSkC%2F%2Fhz4jyQcgIMV7ZZ8nB5pj1E%2B44yXGjpvh5HACvDJ25QHNbdQ%2BvfDobwlMljV9DrKn8EyRQkpscu2Y9%2B%2FsSseAT\"}]}\r\nstrict-transport-security: max-age=31536000;\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a7ab520-121\"\r\ncf-ray: a3887ed77a503f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":289,"size_decoded":969,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3b252a1a91262604a52801ec3dda088d","sha1":"cc3651f28fefa78366469787a35c1abbfccd0ae4","sha256":"bc15eabb8dc37b36d7be228c68a2f7a62957a3ba9e4d8c35db50b919c9d150da","sha512":"df47209ee2f78174ed9d3a0372ac0f6bc568badd27f95466dd9ee8568f24ceb81c0ec369b9c79226563f642e5060240f2736926f0649cbd415a60c9773b228df","ssdeep":"","tlshash":"2bd02bf8927c68245519c2304b2c76d6d56a608f624420c7f87008b5650e59f4cd39d8","first_seen":"2023-04-08T22:54:23Z","last_seen":"2026-09-09T19:11:39.004259Z","times_seen":406,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/shared/images/icons/regulatory-compliance.svg","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.084Z","timestamp":1788981052084,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /shared/images/icons/regulatory-compliance.svg HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 18 Aug 2026 10:28:58 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QqdHp661O%2FWt1JP96bwOb0gslCDG%2BtyfAWuMzZRuu8JLtk%2Ffyorru9xZaeIHx7zk988hHVcsNdkw3sLnuKMTBAOqtjd3hGVEa8JSUzlA0%2BSsCe%2BsuwrYPElOQun7\"}]}\r\nstrict-transport-security: max-age=31536000;\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a8433ea-10a\"\r\ncf-ray: a3887ed79a5e3f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":266,"size_decoded":979,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6f776f7f32284bfb906b89f4e0ddb0d6","sha1":"7950bf70fff2dbfbb94ded716ee59a24a272e803","sha256":"6f8cbd9730c3092ec7b34adabe8d3ec0c3e5355cbac9a6a6d2c7a325860a1343","sha512":"633c3b81322a6b808a56ba072b0915665124668d9d168963eb579165b7bd81ca0b87327b83b8f52f581060c6ec499901c2d2434dffb16727e2414eacc81aba87","ssdeep":"","tlshash":"15d02e2f12081e3cb4128b00ea383d3050a240d31c5cd02e85bb0230224246da8271ad","first_seen":"2026-09-09T19:11:39.005657Z","last_seen":"2026-09-09T19:11:39.005657Z","times_seen":1,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/images/background-5.jpeg","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.249Z","timestamp":1788981052249,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /images/background-5.jpeg HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/css/main.css?v=1787048851\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-09T21:24:33.702286Z","times_seen":18370361,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/images/shape-02.png","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.251Z","timestamp":1788981052251,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /images/shape-02.png HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/css/main.css?v=1787048851\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-09T21:24:33.702286Z","times_seen":18370361,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/global.css","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.030Z","timestamp":1788981052030,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /global.css HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 11 Aug 2026 05:37:44 GMT\r\netag: W/\"6a7ab528-1e2c\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=utk1nx9gHPeTz%2BbrFz6LAkPp7qipTZl0thCjti1%2FRrm3L034H4eW3IUPRffA1iw2H34y7oghFTUSA2C%2F2nUYZv%2BqSeTS2on5L%2FdwWPHfs8XxHkkK6PHjU4gYoWkE\"}]}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3887ed73a2c3f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7724,"size_decoded":2396,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"a88608ef6b9e05ca571a550a530865e3","sha1":"9b727dc38374927eff9b0e68a75777327c0d7541","sha256":"506bca4be8d8a74f887eda650782272818bbd5f59f2315f7937f4b6f086a7ba7","sha512":"a7c33d11dc5b7e8c38ed69a98e4876375eb4c937018e33abfa6ade570d4a8bb91ff9d8e573eae50444f58720bfca4264a87a591784c0e11b4b6c43f4e9ba81ff","ssdeep":"96:onj/yGIyNf4WJ42XMPPDIyWqW8SO+qo0M6Cnzqdtdt9s5WVFQd9OnCARgF:onLgShXGPDIynPR5XM6CnzOr9uWVs","tlshash":"16f1ef53fdd20585b052835926ab3bfcfe7d88224b09ae397b5933745f8b3e38960548","first_seen":"2026-07-05T04:52:57.827843Z","last_seen":"2026-09-09T19:11:39.01031Z","times_seen":8,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.044Z","timestamp":1788981052044,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Fri, 11 Sep 2026 19:10:52 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BDbZ5mq6CnzgOGRUqAKJTkg3P703eQxdCJtRj2w1grg2jxfRwtj737fuuB1BUDfFj4KF%2BFNyGU0TlHMxWtSq1WjicvrHBCpOBcjXJ7%2B79Tr%2BN%2BgKVzgcjUrNL15%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\nserver: cloudflare\r\ncf-ray: a3887ed75a383f14-CPH\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1286,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-09T21:24:24.369989Z","times_seen":432575,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/shared/images/flags/en.svg","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.065Z","timestamp":1788981052065,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /shared/images/flags/en.svg HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 11 Aug 2026 05:37:36 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RqG6DDfc4V3BxRQyfIbu3ewr%2BItET4SY7Q173qIiVzRSsXKO7au3dXZ%2F7Hztv41J5p%2Bh0keaEANAmz%2FY6QindQnKw5dIw7YrA%2Bh9pDipv4yrhOTGaZm5fc48OEGE\"}]}\r\nstrict-transport-security: max-age=31536000;\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a7ab520-20f\"\r\ncf-ray: a3887ed77a4a3f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":527,"size_decoded":1028,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c39480d514fe1af4c7e5f62a3ac53b67","sha1":"80a3f070bc7a8b0a8edafa1927ee65b2a3a30b42","sha256":"910e4fa63fb7a23d30d59dee2feb08da51a405eb06b38a7e12d18d9b504d13b5","sha512":"353e7893f13756905ec7612d0c2411231450b2d11781131794c45668f281a7c092acb8cdbfaf8e5809cb5bdfe89860ccdc339a54cad35544ce58e28403abb479","ssdeep":"","tlshash":"4af0b45d22695966e21b8364dfbc74b4013f24dd2288204db8453378c51a37f79bbae8","first_seen":"2023-09-12T12:51:11Z","last_seen":"2026-09-09T19:28:33.681275Z","times_seen":2685,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/shared/images/flags/mx.svg","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.072Z","timestamp":1788981052072,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /shared/images/flags/mx.svg HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 11 Aug 2026 05:37:36 GMT\r\netag: W/\"6a7ab520-26ffa\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DlEqxNdsfl1l379%2BNx2Za37Nhftg3Q3T%2BDrwgIuysbAjRDWgQSTX8xyODEFyMI13Nl3Shk%2BVWBKB%2B27y45FluIJZfN38kQW6mwDTzD0scqp3ufDn%2BGXiHFgqSXps\"}]}\r\npriority: u=5,i\r\nvary: accept-encoding\r\ncf-ray: a3887ed78a513f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":159738,"size_decoded":67206,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"216d2ed600701aa4e417b8a169fb09e1","sha1":"ab0f7258e3d585ba8cb6b376e25195ff5ecbe83a","sha256":"0c57c70b48c496060fdf81230870a860011901720c0788f1e838b320c8f13f47","sha512":"ad3835662563ad38d5fe45fce70e2c17bddb8615c320f042b965a6ea542d79e4b7cf9b76cda1f9b7d2c0b637bd0b49dd3d2e334353a3a506dd23e0e610236a1f","ssdeep":"1536:bzLSQQkqW040Tvy5glVb2dxUFhFpLbg1G0oIe3W4tmGG6/D96LC8nqqrMzQwmy6U:YxdkzZnOsu","tlshash":"d2f3d6d61730f3c469cbc98eef26bca8251eb0fd9e7b91c451aa870855c7ac6fa05c50","first_seen":"2023-09-15T16:58:32Z","last_seen":"2026-09-09T19:11:39.011911Z","times_seen":103,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/shared/images/flags/sl.svg","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.078Z","timestamp":1788981052078,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /shared/images/flags/sl.svg HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 11 Aug 2026 05:37:36 GMT\r\netag: W/\"6a7ab520-651\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N%2FQSpxZI8Dz6wC%2FbaJiYJ2XCuRy3oZPV29D0D8L%2BPdfVNa9nw5Valsf2saakXelLFGkdprpCUybueBizxXkFX3agKR6uhLQ28vSx2HXAyDh4%2FKt%2BqAgqGWK9yEXM\"}]}\r\npriority: u=5,i\r\nvary: accept-encoding\r\ncf-ray: a3887ed78a573f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1617,"size_decoded":1456,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9b4bb3b189e8285e10fc2637df225958","sha1":"e303bd704bf87d97b874f4c34e1877aafa7eda33","sha256":"aa4fda18694f1e60c937933eebd752cc3ed0701652f0dfca84677c3267b26db9","sha512":"c49b5bd7f995ed7610e4290785f8e53552991cfee1d04db7b60180f93de9f3c51a67739024c539f78e2809128f46bdc6f0a1d2bcde129bca788c2007d3695ddd","ssdeep":"","tlshash":"6d319bb0719d104f662f8b4746a8aca0c76e24fa711100566e1d33baaea3fd2df43960","first_seen":"2025-06-21T07:33:55.796421Z","last_seen":"2026-09-09T19:11:39.013226Z","times_seen":21,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/shared/images/flags/sv.svg","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.080Z","timestamp":1788981052080,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /shared/images/flags/sv.svg HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 11 Aug 2026 05:37:36 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bPda8tZzjSfcVJ7uN5a9Cdmqo%2BpWnR8GbT08278iuozc%2Fxs7LeO2Cv2RuoDHJ9tQcp6cOf1BXcpTnz3nJ6m0Ea%2BqRfEQazObYF%2B4GHOqwadHe3wq9B3JDpfobTDz\"}]}\r\nstrict-transport-security: max-age=31536000;\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a7ab520-d8\"\r\ncf-ray: a3887ed78a583f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":216,"size_decoded":911,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1f642770ccba1a8f5948ac69923c15ba","sha1":"2ccce0709119188a1cc30358bcf197415c812abd","sha256":"1d7c3fc0594c8fb856d9fd0a13a752dfaf8643c8b073582909c88be24e7e416f","sha512":"a590463aca1346a92e76bca94237dcb8b5b636aa4ffc87d5d109f7eb752b7c6231e9e095c7f901f58d5ff248b9f1924071cc66707924bfc40cddbd3b547a5540","ssdeep":"","tlshash":"f4d0a764718dc10886004642061414c51287d0ca531d0110fecc3925b04e9fbfc702ad","first_seen":"2023-06-02T00:03:05Z","last_seen":"2026-09-09T19:11:39.013714Z","times_seen":160,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/shared/images/flags/au.svg","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.082Z","timestamp":1788981052082,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /shared/images/flags/au.svg HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 11 Aug 2026 05:37:36 GMT\r\netag: W/\"6a7ab520-51d\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UPWnIyzO8%2BAGZinHhD0j6HSkPfF1BGvt1r4g5BZKNNu7OUS71SG%2BPHSayGbJnXPj1QDJ1TAfQgj889cgLZPR2A5edSMy7ZqFsTQ4cVV0UYPCTjmrCxk1HsKUHgtl\"}]}\r\npriority: u=5,i\r\nvary: accept-encoding\r\ncf-ray: a3887ed79a5c3f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1309,"size_decoded":1369,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e875a51ef2beb891fd6f4b9e117a243e","sha1":"05cb38963205e49302ac3fd2da65a7bc241db521","sha256":"bd6f1a9373e02ac0f0ae46622e60e752b408a2183d7ea40dd575f901e869aed5","sha512":"2b4a86a573e4858d0b3a4527c4a666323e5b97acc84942e519a1d3c13367748eaba4e1571bd7d89f20c4c1e62d855d0b6897aaee328de7e5a8758ae6eb0ac3e9","ssdeep":"","tlshash":"2121015481394658464983f8d3f9f4e5813f7097b10b29aeb0003775803e35a29e6286","first_seen":"2023-07-17T08:17:34Z","last_seen":"2026-09-09T19:11:39.014217Z","times_seen":2383,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/module/scale-chatbot/assets/scale-chatbot-cta.svg","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.092Z","timestamp":1788981052092,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /module/scale-chatbot/assets/scale-chatbot-cta.svg HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 11 Aug 2026 05:37:32 GMT\r\netag: W/\"6a7ab51c-7dd\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=flf438mujRy4XRSig5UUtDDS%2B0u%2BK4DhZ6oCGlPudyU%2F0TkLOetLcIseppOw%2B4n6AUnUHlQ5Y%2BMHhD92OcmGYTzxLl38YpwHEa%2Fzn2NpngqsuRGxJ0tvL%2BYrEPft\"}]}\r\npriority: u=5,i\r\nvary: accept-encoding\r\ncf-ray: a3887ed7aa643f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2013,"size_decoded":1766,"mime_type":"image/svg+xml","magic":"SVG XML document","md5":"46f9b8736779116e6770f696f02a1b36","sha1":"6ecfcb800c16bf9345d63253146745d997c700ec","sha256":"9f0de41afcea5b90f60208613a2c3a29c9dab802260e93c3b596f8ff0d6dc03d","sha512":"a6da97a4f55627938d4b8796f1068297e203c8e7d501332708574eac14ab613e0de383ce29899c4b8327ce3233daf3d8ccca2ff9dac0f59148a939bea039208d","ssdeep":"","tlshash":"f94124985b8124f8624143e0db11a2703fbb543f2b6bdb45c061d770f20989dc97bcd8","first_seen":"2026-02-27T20:54:03.329765Z","last_seen":"2026-09-09T19:11:39.014668Z","times_seen":24,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/shared/js/lazy-analytics.js","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.026Z","timestamp":1788981052026,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /shared/js/lazy-analytics.js HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 11 Aug 2026 05:37:36 GMT\r\netag: W/\"6a7ab520-9ac\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nJCVkMSUZY%2BUxMdSd2uRfXQonViLsIOQOGQZs%2BvvVSrtF9f%2Fw5ufvkWbHN4aUSQreDaPBnCzQhPh9zDLp0Ns8tjy5Ju1yTQjf4DV3eWo8dl4N%2FIJHIu%2BgmydFOXy\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3887ed73a2a3f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2476,"size_decoded":1813,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"d27f3444071fb33d54a108a52e956af9","sha1":"f301401e1203543f7f85f2685389f52f2ea2beb3","sha256":"a4bccfde5a153a7ec568ab723a792a97d9bf2dff76429a7a0cc2cf3509025f9c","sha512":"f919fb7cccc4a9f34929d03da8ccc9a302a17d822b79da3352e18fe82f7742bbb08f79a4448893a0a136e2551d63b87c3ad7cf9587b00775fa3293c61ab2e0af","ssdeep":"","tlshash":"3b51bc096cbb643301b7e13dabafb109f5311607190598603d4d8309af68baf95aebcc","first_seen":"2026-07-05T04:52:57.876973Z","last_seen":"2026-09-09T19:11:39.015663Z","times_seen":8,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/module/geo/geo-ui.js","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.042Z","timestamp":1788981052042,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /module/geo/geo-ui.js HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 11 Aug 2026 05:37:32 GMT\r\netag: W/\"6a7ab51c-94e\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A%2FsQPEE4fq2gXTvEYktnbTaQZpFSFySe9oH%2FjG%2BH5yQlGQdby3xdynp34sHyTS%2FxcJOIUiwqQa%2F%2BidhYeXTC3lP4zZqS%2FZ%2BWMcXXefCtfDlGjDYgEGJ86IOh5SDi\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3887ed75a373f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2382,"size_decoded":1870,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"e142db64dbbcad95397fd35f58bbc147","sha1":"210cd1466174963714945a32fb74107ad34b9126","sha256":"7a18ff50b54c6772c1725069f56b4b3ba83dbad4592362fe24a8b860efac822e","sha512":"ec3a8671aeed193e0d41f283b7cf8bf6bfc0d3d3b5e24311a4275839609db9fd0f90b2cfc0594ee05487986998a6e09a109e814f753b029bf187604a042f9390","ssdeep":"","tlshash":"c741201da97224668d63213d53eb960c73b260036602da083d0dc74a7f98c3396acffe","first_seen":"2026-07-18T04:13:48.60616Z","last_seen":"2026-09-09T19:11:39.016586Z","times_seen":5,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/shared/images/flags/za.svg","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.067Z","timestamp":1788981052067,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /shared/images/flags/za.svg HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 11 Aug 2026 05:37:36 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1QJ8R3A%2F61y9o7hyeqZB%2BsqBMRINWT0jcDRf9%2B1hFZT%2B2W8wIqDjc1PWgL5ZP4Wd6Nmck1S%2BHse23QWFoc3qqCkmNZOcRRJ4KJ65McJJVGdE29QhWn4VfCSqLvS1\"}]}\r\nstrict-transport-security: max-age=31536000;\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a7ab520-368\"\r\ncf-ray: a3887ed77a4c3f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":872,"size_decoded":1252,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"67ff2e108ce38abcf3f68b4e1ba3c7af","sha1":"3d3b8c63889144bf65668f1360d5bdf9df878c91","sha256":"3985889b8382293dbb3ae27353e864661415afa0ef66d291591b447df8bf8693","sha512":"d3b8bf1299ecce2220ce020dd8c8e22991e91272339dff3af4bc4db690d90379e8511728fe2b17a93d2e7576e2d9c0c7e7412fc02c30c760ebb94358b75c2dfe","ssdeep":"","tlshash":"a411c2e033f85984dd484b90cb7c74c6266d90de42601199f00c4aa1efb40aac98bee9","first_seen":"2023-05-19T22:46:11Z","last_seen":"2026-09-09T19:11:39.017192Z","times_seen":43,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/shared/images/flags/es.svg","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.068Z","timestamp":1788981052068,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /shared/images/flags/es.svg HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 11 Aug 2026 05:37:36 GMT\r\netag: W/\"6a7ab520-1b6bf\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CJ45vwBBxx2NwTmccrCFO0O3ToLHOcq4dd%2Fb4Q%2FFOmXj0jHi6NxnsmAnIZ%2Fw5CysMcMywJsTFuRbqgv1tPa9y80Lv7YfFsVyvOOc7MZeOK9x3NBSGY2l%2FpTlOa2W\"}]}\r\npriority: u=5,i\r\nvary: accept-encoding\r\ncf-ray: a3887ed77a4d3f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":112319,"size_decoded":74839,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e00ce59428927284366e58e96c8cbb11","sha1":"b8c9416c9539405dac43f1f84dcce1d6ffc1684b","sha256":"8144a4ab1822dca70e28d9dcf496a12beaf292cbeb009d37208c4ed15f14554f","sha512":"854003116025b2f29e4bab106fede048b7535d0006ea352bf57b6e078898bb5dcf28817b28f15e21dce4444db2b7301ead096b707d8336d7f715aa2ecbde0f96","ssdeep":"1536:tz7F/oiKGLFL/DWApNvWmHUvsHifhbOI1FnX1J3WIZtMfav3wYXiXq4/+SYqyfJY:t3FTxLyApNaUCb3HlAILlwWi5x8J4Lr7","tlshash":"4fb39eb1c28e77f9ec75fcaced489d034c094882a15ac5cea949d3b2177b8a94c0ed75","first_seen":"2026-07-05T04:52:57.843594Z","last_seen":"2026-09-09T19:11:39.018284Z","times_seen":9,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/shared/images/flags/sk.svg","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.077Z","timestamp":1788981052077,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /shared/images/flags/sk.svg HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 11 Aug 2026 05:37:36 GMT\r\netag: W/\"6a7ab520-665\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J7NG8flzLpJwN2EocVC8kQt9gpb3HkSfszm4fKvkmUJivgLnL2SXo0bJfnpgNPrs4EgQ%2FPc%2BG7XPLwJFy40WlPh7bjKaMxRo34ADZGi2CtjhV14f9kXiY8v6J0UY\"}]}\r\npriority: u=5,i\r\nvary: accept-encoding\r\ncf-ray: a3887ed78a563f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1637,"size_decoded":1569,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6ed3cf547a2f8579e45330fde3095537","sha1":"dfc6023844bb5a110c3d9219c82dd326940ae055","sha256":"c1b338efd99956c2ae0c62fcf559b2d956fa11f71751985d62c9942b061dad6a","sha512":"4ed0e6912bfa55a7bee5b4f6318c3878bff3bf23d5a220225b5e19d207d7f55bd816f06dfb8daf8a5eb4c2e266d0fcce8f40d0f797c81d97a2517e5eba2a3be4","ssdeep":"","tlshash":"193176c55178aa4849c7a76fde7cb8959015a0fd21f940fd7a4a470c956caceaf00cb4","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-09-09T19:11:39.019813Z","times_seen":5275,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/shared/images/flags/zh-TW.svg","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.081Z","timestamp":1788981052081,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /shared/images/flags/zh-TW.svg HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 11 Aug 2026 05:37:36 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QyN%2B9PNrkrn36bifnDwMe4NouT7bd9g6lxZk9KEbufVjG01Yq4mjVzmJogFU0shIfUFNPzgV7zD5mIrQaSWESEbDyzyvfXwnyBpi70%2BfxDnROFMTnOexXfp3XSGf\"}]}\r\nstrict-transport-security: max-age=31536000;\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a7ab520-1a0\"\r\ncf-ray: a3887ed78a5a3f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":416,"size_decoded":1039,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c3088980d12a3e9e5253e803cf348095","sha1":"54aaf5c117de313a17930d3b0f14c12d1b6aa776","sha256":"ea364b17f2d75dc89cbbf3ed7739639bb26971258462684c2344f7016ed3f353","sha512":"c8747bef4ed3aedd00e39fb3b01881fdc2dc15b89a9ce2249ff65bd3ef1b190c33020504fa34ff2d97d940b37d3a0e35bed50d5d97458044b3582cd7467ca00e","ssdeep":"","tlshash":"b1e0e5ac19081c19cf80d370d68ef8ca129bb18ea25302baf2057427124396f29ca215","first_seen":"2025-07-24T14:35:25.12448Z","last_seen":"2026-09-09T19:11:39.020315Z","times_seen":25,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/shared/vendor/js/uikit.min.js","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.095Z","timestamp":1788981052095,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /shared/vendor/js/uikit.min.js HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 11 Aug 2026 05:37:42 GMT\r\netag: W/\"6a7ab526-23d1c\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qaO0bhQ3va3ikKeclMOKSjJyAY0PhDHEugEn%2F8fJ3umuv7TsDC3RdA0rBZepyOLnuKizErqtQW7BGe3NUmOJ7TcdWiu13jV7DTGin9CfLMkII5McxR%2FrTClRiX4r\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3887ed7aa673f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146716,"size_decoded":51587,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"749a2dd79038dfbb16587c3067fb9291","sha1":"d1ab89b4fdace3c084baa45bc031ee29ca84a788","sha256":"9523eead7091f1929fd1c309a8df06cf02821bc7ca282f5d086d5ca2cdc164e5","sha512":"72b90e5809fba9e10b4cbfcf29656ed41a37ebcc674cd7b96748d84814a589ff1d64021a52d2928f8bf5a7c6a41041044606a1729a4b50b33e8170a93dc66d1d","ssdeep":"3072:NFR0qgTMS7E2qsR+0HWH83vagarqnlXN8O:NT0t4So2q4+MLabrW","tlshash":"0ae30a9733a5b02543e742f510ab4606f3395984b80b84dcf67caada3869849727ff7c","first_seen":"2025-04-08T10:05:49.344419Z","last_seen":"2026-09-09T19:11:39.021227Z","times_seen":2900,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/shared/vendor/js/jquery-3.1.1.min.js","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.096Z","timestamp":1788981052096,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /shared/vendor/js/jquery-3.1.1.min.js HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 11 Aug 2026 05:37:42 GMT\r\netag: W/\"6a7ab526-152b5\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mg2BLrcs%2FEuPFjyHxzyKdxtwoLfkDt%2BTxUeFr3MYLZqMWmbi5WEBz62t8Vhg6L4zGVAoHqMp6ymx2XaJcE8G8i%2BmVGBpbbRSCY3hV9llqTAAfYCyCnC3R6iVU4Qi\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3887ed7aa693f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86709,"size_decoded":30943,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32030)","md5":"e071abda8fe61194711cfc2ab99fe104","sha1":"f647a6d37dc4ca055ced3cf64bbc1f490070acba","sha256":"85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf","sha512":"53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65","ssdeep":"1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5","tlshash":"3183d5d9b2c670529b7730b850bf450bb17a98dab44c8d60f058c5d57eb8a8e507bf2c","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-09-09T21:17:04.660646Z","times_seen":167325,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/script-bottom.js","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.047Z","timestamp":1788981052047,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /script-bottom.js HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 11 Aug 2026 05:37:44 GMT\r\netag: W/\"6a7ab528-5bd\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=If24ZVm%2BxppnYddm5j7KtuYrReObmWz7arC8peKfBKdsLRi1TiqUm%2Bu4DLb3TLBQLU0eVpvx02oz%2BIPBdPw%2BOk53GILXp0UfyjMb7xGi7WLJDQlmfllhE1O22k5%2F\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3887ed75a393f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1469,"size_decoded":1403,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"ccd6dc7549fed0a2f80a1bab70fac36b","sha1":"bf66d96ab89cee891c809c24c46595f549414d25","sha256":"9c7f2b0007eeca5197ef0328287d323b93c041e7a121315faa9936fb74e89d2a","sha512":"08319451276d65dfe20c89417d3789900f856bd4fa0cf3d45ecd6e091c9a02a4c13329d30f7973aabcded2dbaf63a5d8c46565cd83ead6abbf002ef24419e7c2","ssdeep":"","tlshash":"9931e03029f80172a037027977ee6fc4a5211872224cfc18b77f4259afd6ae04fa19c1","first_seen":"2026-07-05T04:52:57.89206Z","last_seen":"2026-09-09T19:11:39.022434Z","times_seen":8,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/shared/images/flags/da.svg","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.062Z","timestamp":1788981052062,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /shared/images/flags/da.svg HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 11 Aug 2026 05:37:36 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rWfTrSM0kgfOmRVBdiDDwymEK%2BZA8daNWMZZ1mHm2js4c6qLD1fgZnpNfkivqkwQ6Dv3%2Bw0qHAGDFmxs8pDKF249EZ0mu%2BGMX2%2FAZ4Rx%2BqAm1396%2FRihrpQpnL0M\"}]}\r\nstrict-transport-security: max-age=31536000;\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a7ab520-16a\"\r\ncf-ray: a3887ed77a483f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":362,"size_decoded":1039,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c4d7abcf4c21c729ea9aab45faa1912a","sha1":"6ecbf40cb392204b8c7af284352108b500111969","sha256":"33815e73a3d07b3ae77cec1fdc77a285646e4e730136632f0ff5de6f8697c98c","sha512":"6d928963ac9562306e34f006030ddb4430cf81f3e37d8a5d805f90d5cc89659457e9f98257a2ec971205cf044387b7c3e87847c85bf7760ecfa2b667bdab3230","ssdeep":"","tlshash":"f6e0c09260ae8a0d4e1543205a3c70e2526770cf218e04fcf0c13e28fd667ab3800f5c","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-09-09T19:11:39.023286Z","times_seen":5497,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/shared/images/flags/ca.svg","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.083Z","timestamp":1788981052083,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /shared/images/flags/ca.svg HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 11 Aug 2026 05:37:36 GMT\r\netag: W/\"6a7ab520-9258\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=70H6ckFhyxHrAIbRfyRbySE7NA8zMjPif5Hw1cgaOdaD1KVH07cdSxK7QO5kPgzf3kAlZyymLeR8onY8lj4QIX47D3wwmCJm7BCywjk%2FAAh21ilrRiIgIx2TUS5m\"}]}\r\npriority: u=5,i\r\nvary: accept-encoding\r\ncf-ray: a3887ed79a5d3f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37464,"size_decoded":26131,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"82aa56b4cab5f3fa77c6df190e723c29","sha1":"f3042ab8b4e3205ac0e832f68167a354b8272728","sha256":"065d6deb0eefa2e3662943bfd1b49beaa8ae3931b01de129218f9743e7b55398","sha512":"8542d614ebe33230c9362e598452cdb7178a1875539880fa9216c07fe1f338cbdbb1237e6818b8513e9d4c523f7227d8e9df2154beccf7c897d737b9cb98adcb","ssdeep":"768:PkC6QnHwTjdGKYkgq9gMaD84niAV27mTPOd8sH:PkC6QnQ/dGpL4gM28Ix/5U","tlshash":"77f28db6861a7ab8bab6ccbc49080c675c1c18c59160d5deed4ee3f68b7a5b08c4cd74","first_seen":"2026-07-05T04:52:57.868625Z","last_seen":"2026-09-09T19:11:39.024258Z","times_seen":6,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/images/tick-yes.svg","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.088Z","timestamp":1788981052088,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /images/tick-yes.svg HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 11 Aug 2026 05:37:28 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pi894lkoJkbgDUnxJ6uy0z%2FHI2%2B4h8UliTwQj%2F%2BbCi6llIaE9huXvMmTyaxojCcvdvSmXvSPEn9rmp%2BH3gyDjanN%2B9NDr4ZJzjjd0XmJuRN5wXf2f6pIa3uVe65g\"}]}\r\nstrict-transport-security: max-age=31536000;\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a7ab518-f8\"\r\ncf-ray: a3887ed79a623f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":248,"size_decoded":960,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"47e8b69d29a2d39d15c543e2b20123d3","sha1":"a3a7603dcdeeda7262c5d106cb1e6c920dee4e94","sha256":"33638a4183a499e8ba07c74b76598fa67b5d061c7211229d8c53714aa682f634","sha512":"d2acde711866819e07776e7a87fc903702c128846bea561818bb70b4728618cd3372eddeb7c844383aff86cfb19cf435f94aa7370454914bcb9d0d5ee163cf9a","ssdeep":"","tlshash":"10d0a759531c1c3cfa264614f72cb7751069a2c1864d1159d473653061149df787f5dd","first_seen":"2026-07-05T04:52:57.790234Z","last_seen":"2026-09-09T19:11:39.025254Z","times_seen":6,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estrax.net/images/tick-no.svg","fqdn":"estrax.net","domain":"estrax.net","tld":"net"},"ip":{"addr":"104.21.84.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://estrax.net/","date":"2026-09-09T19:10:52.090Z","timestamp":1788981052090,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estrax.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 14:53:03 GMT","end":"Tue, 27 Oct 2026 15:49:04 GMT"},"fingerprint":{"sha1":"AA:7B:B5:44:C6:03:2C:29:E8:B5:22:74:0E:1E:B7:AF:87:43:71:23","sha256":"12:F9:AF:13:49:DA:D2:10:2E:9E:5D:27:C6:14:D6:F2:9F:7E:0E:EB:82:39:99:D2:FD:86:04:26:5D:8C:C8:52"}}},"request":{"raw":"GET /images/tick-no.svg HTTP/1.1\r\nHost: estrax.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://estrax.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 19:10:52 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 11 Aug 2026 05:37:28 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GFj3kD0nWDnpzf4zJ9R6EzxxPW%2FEix9fFxzifccDxKhbfszjLBCdofCnyc8coC9161v%2BCB3EBFb%2FT0hULwhZonKPhrsqgsnXoV%2FXrhW8rvtYoosuo%2F13gD0d%2Fko%2B\"}]}\r\nstrict-transport-security: max-age=31536000;\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a7ab518-108\"\r\ncf-ray: a3887ed79a633f14-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":264,"size_decoded":970,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3020386d269073e8046e4f67b499f157","sha1":"3e7ffa54153bd61cb83e4dc6f584d843cf0adf0d","sha256":"feef125d94c5ea4bc9f236ea2b076764be56e3cb5d7c93feade572663d3296d7","sha512":"73a5c9391a99206c3a893f8e944cf9b560c4c15b27c2835efac58225267203bf5d9a3448b5c5c503b13938f4f09485543056a86fd5180c1a174db21fe4cec020","ssdeep":"","tlshash":"2fd02e8aab0c0a3ca26e8910ea28ba3400a97223c20f100a88f701709a0d16d3876ac8","first_seen":"2026-01-19T22:26:53.613845Z","last_seen":"2026-09-09T19:11:39.026111Z","times_seen":12,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"estrax.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"estrax.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}