{"report_id":"ac38186f-7ff3-4991-aa95-bbe7d76dd7ca","version":6,"status":"done","tags":[],"date":"2026-01-30T19:56:43Z","url":{"schema":"http","addr":"xifudfast.digital","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"104.21.76.18","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"xifudfast.digital/","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"title":"TwisProfit","dom":{"size":133623,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (36999)","md5":"5dd2331bb6acdbfda56150e4569e7873","sha1":"3044f34d39e50da50ba469db6523ab2c17155457","sha256":"3e90b8ca7cf7059c747a183417bb4f1cbfe2eede8fb251c1688f801bca04b2f2","sha512":"ce829d13683052190f367752b1241e59307d569b18226b98426a6b48506e7ddb67d9c5be3da97071d48b636cf82ea8a51379a03c458f00909ac7210397fd4feb","ssdeep":"1536:joJVjiR7QeqF95tsEJPjQBq1Wixx2aX38UCvF4ybK1nLTw:mLqYH8jX0U","tlshash":"04d3df23056a34221533cad431aa5b37e2aadd4bf9970a003fecd7e65feac90715721d","dom_hash":"domhash17f4ea4f95e31ac8320ea9b155b62a2e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"xifudfast.digital","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"104.21.76.18","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-06T19:56:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"xifudfast.digital","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-01-30T18:28:29.864734Z","last_seen":"2026-01-30T18:28:29.864735Z","alert_count":294,"request_count":49,"received_data":1537117,"sent_data":41648,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"ipapi.co","ip":{"addr":"172.67.69.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-04-19","domain_rank":7936,"first_seen":"2017-01-31T09:07:01Z","last_seen":"2026-01-28T12:01:47.614806Z","alert_count":0,"request_count":1,"received_data":2474,"sent_data":434,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-01-25T22:30:32.196824Z","alert_count":0,"request_count":4,"received_data":382560,"sent_data":1947,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"xifudfast.digital/lander/global_lpn_1_2/validation.js","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5ec8fab2fe5f2ea37688e53ac17e107","sha1":"7fd97c718f4c7803166ac1651d08ef44d41baeb1","sha256":"0ebd806817fa3379a90117bded52cd86259e5b8168eeae7b7dcc1ee95bb33ba7","sha512":"a0063ec46538d44fd21bcb65c2f6027f67f129401e5e30b146a986dd16414d578f71490d0cc29be6b52d81e5e36cc367b4e06d9f42126714c496a70357777c03","ssdeep":"96:WOTqLdUpFVkda+pcfQiEnCObOwrSjWDsknMOPOQ0hnu4oGW0s3ALOwu:WOWLdUpFVkda+pmQrnRhrSj0BmQZvGto","tlshash":"90b173e870f10519693356fd26df510669d9710bec45d98e3ecc83800f568e8ee9a3ec","size":5310,"data":"","first_seen":"2025-04-18T11:50:01.200675Z","last_seen":"2026-03-21T18:18:01.318425Z","times_seen":233,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c86b61ae6f79b75c7e08b42a351a7b6e","sha1":"16ee5c0d605e5a30b9f58107dbded4a97ba9bfa2","sha256":"e1759a4dbfab9dcdae85ac8ee40e4c961a098eb49f7e5a96ceb1ab928e6f681f","sha512":"cb1485a28c54e0b665efebb05f6c21696c28e8679f1e818e92657a121286c337231a435ea84bebaaee26b6b6c7e966049c85d1b4db8b9070c096d18ae4d8308c","ssdeep":"768:c603Xlqn/kiIzJT9FSRzA4xXnT2nYdn24X68a:cDiIz8A4knYdw","tlshash":"0cd2e7aeb365673ba6fd82a270e54503af7f79444604083d78ac8ede0288ed171f5b34","size":29872,"data":"","first_seen":"2024-07-10T10:54:41Z","last_seen":"2026-04-07T02:34:18.150961Z","times_seen":391,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f59d21e779d859a183266e5546e1ed5c","sha1":"367ee33932e71dc189d4a624a1d87c7b6eee8883","sha256":"963d5a4b9e56bb5b169d7abc9e3b30dd9509121604348045115e3e6dfa34c62b","sha512":"13d6e890bafde92538eb8ac2e8a3ff601e24589ec44e37b70c95dcf88dec5629bff22775a7c82c0fdf3c8564579ea2cdd89dc9437cdc19b533d2a977e0ec1b48","ssdeep":"","tlshash":"62e02b2b45b504b1026b9666e7cbaf85e272004f5445660abd4c4b3a3fd0dad24f1fd2","size":315,"data":"","first_seen":"2025-07-25T14:18:50.902408Z","last_seen":"2026-02-19T19:52:17.587985Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/utils.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6eae88fad6fe723d8c8d2386a63dd152","sha1":"42046e250c7f2eeff4619a89b0be7b83e01e5edf","sha256":"a4000409a897003b1c5a8e1f9f32e18a11b022452151cc47c17ecdcb76d5223b","sha512":"d356bd87f7170499fbf445353afeda69dbaccc391eb41826290a30752475735a27d56ce1d642af1dcb02f93a1405926a440add5cb38000b7d112cab0f918bd6e","ssdeep":"3072:9klM0hpJjFs3OwPss3MwPKm7i9T2xFM8Mp2xHsNBWUsD56kmLNTg/QKWVRphmVEw:9klMipBKxxFM8Mp2qbZQ","tlshash":"1144f1ebd63c9737a1e97b35968eb3cd5a8cbca3c848567826c3b54f52784e0706c205","size":258914,"data":"","first_seen":"2024-07-10T10:54:41Z","last_seen":"2026-04-12T13:49:54.211301Z","times_seen":1514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/small_coins.webp","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/small_coins.webp HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13166\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Sep 2025 08:50:35 GMT\r\npriority: u=4,i=?0\r\netag: \"68c28d5b-336e\"\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 5293\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=slV5xFzmZ6oV7TZOrmA9HHWB5YmbzaviTBAW8s0Kmoudl%2BQYLO8mlj2fsSG4AZnuSs2U94CXbI4z0%2FZGVJL2YoMPutIOGZu67bxknvX3uA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6388397c4356aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13166,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e1b172f58a4b8d5d2a9d41ed6f2e475d","sha1":"209c75f12005726604e59a5a5ae163ce8200dc8c","sha256":"e7b2693ebe1e3652e4f15486da5a44825134f92978c7f324f2ed0d12cffb5c72","sha512":"ec7fe1946f4ab071379fd358e3f1c9ced372d006b14258fdd8efb3e3bb79e848349074da201e7c6acee088cd741e043d39779ed16e4a9c6ff0fb04c060ff6188","ssdeep":"384:V+jPReXigExu4K3Lh8+CooooN78+07Ybp4c9Gt/1FQWxf+08:qZeXV3Lh8+CooooN78FYbp4c9Gdf+0","tlshash":"8342adb0bd88fd6fed3e9631952ade44ca47fe380711823ca307373695af1969469809","first_seen":"2024-02-05T12:03:30Z","last_seen":"2026-03-22T13:12:40.842483Z","times_seen":74,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/comment-img-3.webp","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/comment-img-3.webp HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3052\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Sep 2025 08:50:35 GMT\r\npriority: u=4,i=?0\r\netag: \"68c28d5b-bec\"\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 5293\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hmaRl3uT3MkvtANzH25ak2YX3M9mY90T3mdpPMusU9ZcBvliQFPee%2BEUi4Q2czxZ8CV1h4dWaFvrcpSJDb5iXPT6AMY8Wh9J1PyVKLCpiw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6388398c6356aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3052,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"157bfdff07f139fce2fced03db56a651","sha1":"9353fa8f27877c56a7c1133d07343e420bbea28a","sha256":"6861623c5b89cd7792ca98bb1e71301fe19bfcbc91b38aa117789a0cd0e0c1e3","sha512":"943d84a59e8ee217dbaa0d5b57bece10471b0e930bb7d926f5b52f17e9718ff08b69de130250b0198df5183257fcbf101bce46b94a294ca3a966b57dff20451d","ssdeep":"","tlshash":"6c518da0bb8009b2ea24777d0cbc7fd38604cf528167d88e360a35c3bcd04b06a11a81","first_seen":"2024-02-05T12:03:30Z","last_seen":"2026-03-22T13:12:40.833387Z","times_seen":74,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/left-arrow.svg","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/left-arrow.svg HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/style.css\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Sep 2025 08:50:35 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\nage: 5293\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BFKdazVnzHVZqAqsHKa6FFX%2F%2BITg5bEp1Yo%2FFD%2Fbe82l0cudIh7U1Zk1dxXVBeQUDh2L6%2BQKV2YbWs7MBxlKN4BeG4fRNU%2BoRapePyYsLw%3D%3D\"}]}\r\netag: W/\"68c28d5b-201\"\r\ncontent-encoding: br\r\ncf-ray: 9c63883ade9256aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":513,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"30b00f723e61133156fcc1bbb18323a1","sha1":"6ef866e5053fb892af43ff6a6ebd9083c41f4b71","sha256":"5098981bd2c231a36e16bb6c856bb2498fbeb5480ded56b4dc3176fc2a374575","sha512":"d2d0a8f1fc5b1e8c2c63733eea6dcf1f90e67091e5cd998ff79f9e492b5dd1659815719b7d7c120b3c6524d99af207e95758aa84f0390cdd0c3ca5bc1a8858ff","ssdeep":"","tlshash":"acf0e9f7e684b9c5ca08e360750018153c5afdf718a795e550447e6bafc44ae0b12c8d","first_seen":"2025-06-15T17:52:30.413119Z","last_seen":"2026-03-22T13:12:40.844571Z","times_seen":71,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/Montserrat-SemiBold.woff2","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/Montserrat-SemiBold.woff2 HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/fonts.css\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 17236\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Sep 2025 08:50:35 GMT\r\npriority: u=4,i=?0\r\netag: \"68c28d5b-4354\"\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 5293\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=svV7l%2Bn7iLqyVNnThHz0aGu4qZPN2ry8TlHZuUzdaY6YelRinQcKE5bArNwQnb%2FCSXQAB4HK4qcQhmkouvDmIu5FfVO477PpvcL%2FwTHZJA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c63883b4f7b56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 17236, version 8.0","md5":"e151fbc6fa6d9631c3a59ee119bf2a64","sha1":"79edbc6424c6f1de040e8894d2d5e989ddb85e8b","sha256":"5a9241b508281799adcaebf0780ac9e1e57b87aa9341e81dfaffb84baff78177","sha512":"96c07a508148fcdf3f788d98ad854759f2b4a38de5561bba9655537f3176c1cdc83a2458c0864c3340092958bbfd72b9f0b21678c1d698ce7026c48694e905dc","ssdeep":"384:z1qV20ERICtaYyrefk5/ez5PCI9ZlTMmwBCygL6+:zEiRIY7yrefcHcPSM6+","tlshash":"3e72c0de83c4ab48d174443d2de083b2057345b134ed77653e86ae3eda6885ad80e6fd","first_seen":"2024-02-05T12:03:30Z","last_seen":"2026-03-22T13:12:40.838216Z","times_seen":79,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/lander/global_lpn_1_2/default-integration.css","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/global_lpn_1_2/default-integration.css HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 03 Sep 2024 07:22:34 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\nage: 5293\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uc%2B9gl61RovBNbxnFvNoKLnm0QZ7Q0uoWi2yuSApYGsHAxI9PhnORPdWHiTxnE%2BpNDd3zPxrRj%2B0yiYkh6%2FPBovLBRVWUeYEM2dPk7e%2BCQ%3D%3D\"}]}\r\netag: W/\"66d6b93a-3db\"\r\ncontent-encoding: br\r\ncf-ray: 9c6388396c2356aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":987,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"241d8b07cc198e58411536bc5db6f958","sha1":"5455523aa41adb2e115d789756c59cde2bf84c76","sha256":"32469ef50810a6569bdf5e0407f68787312b5dc86beb0302827b46e00fedaa15","sha512":"6ee3112bb2d0199f4c52375a1fe98ea7607ae1ddfd8bc30ad848cdb1a549af626e5e504fca8ddaebe9602272ffc2cdf48acf41cacc18e72dc7b45ad2c29b6741","ssdeep":"","tlshash":"1411eb160a660a35a41bd2b46a653a2573191843770fec3b26a728284fc619e127fbe8","first_seen":"2025-04-18T11:50:01.196685Z","last_seen":"2026-04-02T05:38:09.365454Z","times_seen":348,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/right-cloud.webp","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/right-cloud.webp HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4446\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Sep 2025 08:50:35 GMT\r\npriority: u=4,i=?0\r\netag: \"68c28d5b-115e\"\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 5293\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yEl34jdi2A1eZcEdVlAUJZ%2B9MFBVGn0g0JNd7DvKp1i91qH3vKb%2FGfiXnoMkTkMGsZ4Bujd5PxiUBA6mLUY5rQJxsOvp6pfFMV3O4VJMFg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6388397c3f56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4446,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dc8b2aef19a3556a7800df5f10425a85","sha1":"1ad245a9704a2cc8c9325829998d9f1a619fdd58","sha256":"368b6de7041c0b66e143d3fecdbd824fe9df33c06558ea19d6c5baac13e77b88","sha512":"42f19970a8611c8d83f6b12dfa63c07f8cec4e1430e41f145b9680969bf652e8012db2671a826a1afff4f8dcb8d2d85092af884eff50f72037ce419fe63b6d89","ssdeep":"96:kZSn2FJbyji9MpcvcBvngjPD3A86b3Xc4YFTluZzXQvPWjJDp:eFJbAiexvngjbwHb3XcFTluZzuPWVD","tlshash":"50917cc1836e8ab4fac3a170b2cdb402f541949616ede577b4a1ec0074ceaad50e727b","first_seen":"2024-02-05T12:03:30Z","last_seen":"2026-03-22T13:12:40.818779Z","times_seen":74,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/lander/global_lpn_1_2/validation.js","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/global_lpn_1_2/validation.js HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 04 Sep 2024 10:37:59 GMT\r\npriority: u=3,i=?0\r\netag: W/\"66d83887-14be\"\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 5293\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D74hZjSsGDCUcTMOj9nMU0brwtxs5Vl%2FHjilsLJSL4Iqc89C9%2Bsz8lZFZPWQ7O5RMF0%2FkiM%2BMfBRVa0w8%2BoSbnk0%2F4u2YAgClpbAU0W%2FlA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6388398c6a56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5310,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"f5ec8fab2fe5f2ea37688e53ac17e107","sha1":"7fd97c718f4c7803166ac1651d08ef44d41baeb1","sha256":"0ebd806817fa3379a90117bded52cd86259e5b8168eeae7b7dcc1ee95bb33ba7","sha512":"a0063ec46538d44fd21bcb65c2f6027f67f129401e5e30b146a986dd16414d578f71490d0cc29be6b52d81e5e36cc367b4e06d9f42126714c496a70357777c03","ssdeep":"96:WOTqLdUpFVkda+pcfQiEnCObOwrSjWDsknMOPOQ0hnu4oGW0s3ALOwu:WOWLdUpFVkda+pmQrnRhrSj0BmQZvGto","tlshash":"90b173e870f10519693356fd26df510669d9710bec45d98e3ecc83800f568e8ee9a3ec","first_seen":"2025-04-18T11:50:01.200675Z","last_seen":"2026-03-21T18:18:01.318425Z","times_seen":233,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/wallet.webp","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/wallet.webp HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/style.css\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25548\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Sep 2025 08:50:35 GMT\r\npriority: u=4,i=?0\r\netag: \"68c28d5b-63cc\"\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 5293\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EJN%2BeD%2Fy32knM1%2FpI0HJeWIfatnffU85Bt0lu1RAB8kybRZjvlSN3cdhqMRkxrHwjPng3hGMWB7r0ZK6pUffKroJntKmdnOehjIlQYIvXQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c63883ace6856aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25548,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"64192283e8148117c0c5435122f47ccf","sha1":"b371863471a82a9afda7cd973086573c4f694db5","sha256":"8905794925d7cb9d67978d9672f78652b58bd350942b8e78146b46dee59780f8","sha512":"c1c7f85bd1381f7c7f450531399130f90fe9040309458a4ac1514489c565a348c8fcc9f285b09aa8eb047fbcf295eb1bed7ea92c30feaec3faa5d9058f700e05","ssdeep":"384:IoVgkDJE1EkRIrytQTqYDOZcGMkH0rO24keE7+mMQ:IY3oEkRgwn0rO2LenmMQ","tlshash":"d2b2d1942c0371e7e42a347b278fe68209584387dc8f21825c32d5fbf6915e4917636b","first_seen":"2024-02-05T12:03:30Z","last_seen":"2026-03-22T13:12:40.822173Z","times_seen":73,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/TTFirsNeue-Black.woff2","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/TTFirsNeue-Black.woff2 HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/fonts.css\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 30904\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Sep 2025 08:50:35 GMT\r\npriority: u=4,i=?0\r\netag: \"68c28d5b-78b8\"\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 5293\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oKS0gVgdLLWAHVZ79PtvbAhEFQ1nfsZlTzE5YrQW9druAo2AzftaLWhOuZexPpruLrLcg6Tabzu3cJGzcIm9kVo0PNsghC%2BXHRLigJlamQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c63883b0f0456aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30904,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30904, version 1.0","md5":"f439d9e3c02a3c401605e206eaa0dfeb","sha1":"1a668350a1f9602c6c4d2ab17ed4881372d6ef2c","sha256":"fbee3fd150c292c81f25c4fa0fba2b21dfab16241275615e94d292cd7e8dd140","sha512":"e790dd365b43c8e02139b0bf770fbc997c5a98799f94cbf80f848e10b327653a9de8fcdc3fd03d20e409609a6f91ec0f2ccb3662dc50696ca06f01dabf23dbbf","ssdeep":"768:h/2BNsbFnVEg34fGbYHaumeqzHjxLqH7ar0ZIw/exJkB:peNuFCgIPqH1qlWw/WJkB","tlshash":"ddd2e105da1daefe79ecf4c892e7552aac9db228b946d09e0df0888540333d0f67d8c1","first_seen":"2023-12-27T22:07:45Z","last_seen":"2026-03-22T13:12:40.823183Z","times_seen":75,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ipapi.co/json","fqdn":"ipapi.co","domain":"ipapi.co","tld":"co"},"ip":{"addr":"172.67.69.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ipapi.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 12:14:55 GMT","end":"Thu, 19 Mar 2026 13:14:43 GMT"},"fingerprint":{"sha1":"9F:6D:86:C5:B8:42:73:79:95:D9:AD:A7:9E:37:F2:54:CF:A0:9C:90","sha256":"C1:37:01:B7:C2:DD:54:62:A0:93:A6:F0:05:9D:5A:0C:55:E4:49:78:D8:DD:C8:9D:B1:B8:6B:75:83:70:B2:28"}}},"request":{"raw":"GET /json HTTP/1.1\r\nHost: ipapi.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xifudfast.digital/\r\nOrigin: https://xifudfast.digital\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nallow: OPTIONS, HEAD, OPTIONS, POST, GET\r\nx-frame-options: DENY\r\nvary: Host, origin\r\naccess-control-allow-origin: https://xifudfast.digital\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.stripe.com https://*.paddle.com https://www.google.com https://www.gstatic.com https://maps.gstatic.com https://maps.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' https://*.paddle.com https://fonts.gstatic.com https://fonts.googleapis.com; img-src 'self' data: https://ipapi.co https://maps.gstatic.com https://maps.googleapis.com https://*.stripe.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com; frame-src 'self' https://www.google.com https://*.stripe.com https://*.paddle.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/; connect-src 'self' https://ipapi.co/ https://*.paddle.com https://*.stripe.com https://maps.googleapis.com https://www.google.com/recaptcha/; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self';\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tlmrRTRFCaemu08rdJEQpfXgtMmzW6C1qnAjvsOBmFu7l8IYzSDWwx5VH%2Fr7sXshusMVtlKOX5T%2BxhLfBDU2iANKVYGo\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c63883bd944712a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":748,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"460b460d57658b5fd29c5e4934445c33","sha1":"24a724b25ef1401657cafa588835edfb9f7ef1f7","sha256":"93eefe1243dfce9ac06bf199cc9962e610bab6bff4f096662a357d27c9aefa70","sha512":"127d42078b0a87c6d0a70bd359dbcf50844e871ae9e98875a63f2303950b50bcc04fdb72df3f2e157dde3c019355fb67791147d38d6c3c570e1bde1d3b8f31c2","ssdeep":"","tlshash":"a9012428e4680e7b88b80358b4286a07122422075f16354e7fd4878d0f8d8bf20b124e","first_seen":"2025-12-17T10:03:05.72606Z","last_seen":"2026-03-25T09:03:12.863773Z","times_seen":3067,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":16,"dns":1,"connect":1,"send":0,"wait":213,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/utils.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/intl-tel-input@23.0.12/build/js/utils.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xifudfast.digital\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 61923\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 23.0.12\r\nx-jsd-version-type: version\r\netag: W/\"3f362-QgRuJQx/Lu/0YZqJsL57g+AeXt8\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 1936054\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\nx-served-by: cache-fra-eddf8230139-FRA, cache-hel1410033-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":258914,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1903)","md5":"6eae88fad6fe723d8c8d2386a63dd152","sha1":"42046e250c7f2eeff4619a89b0be7b83e01e5edf","sha256":"a4000409a897003b1c5a8e1f9f32e18a11b022452151cc47c17ecdcb76d5223b","sha512":"d356bd87f7170499fbf445353afeda69dbaccc391eb41826290a30752475735a27d56ce1d642af1dcb02f93a1405926a440add5cb38000b7d112cab0f918bd6e","ssdeep":"3072:9klM0hpJjFs3OwPss3MwPKm7i9T2xFM8Mp2xHsNBWUsD56kmLNTg/QKWVRphmVEw:9klMipBKxxFM8Mp2qbZQ","tlshash":"1144f1ebd63c9737a1e97b35968eb3cd5a8cbca3c848567826c3b54f52784e0706c205","first_seen":"2024-07-10T10:54:41Z","last_seen":"2026-04-12T13:49:54.211301Z","times_seen":1514,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":23,"dns":2,"connect":0,"send":0,"wait":15,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/TTFirsNeue-DemiBold.woff2","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/TTFirsNeue-DemiBold.woff2 HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/fonts.css\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 31000\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Sep 2025 08:50:35 GMT\r\npriority: u=4,i=?0\r\netag: \"68c28d5b-7918\"\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 5294\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y9BBDXH8VRJZ7YDLFpHCYuavPs0ayktP%2BAWfuoVuSRApCMvuM%2BgIfLNIURhmDbZCq0ZVTndYR6joGynZveSay%2FDo%2F4qXNVyXPnp%2FgT%2FFdA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c63883cfa3256aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31000, version 1.0","md5":"5a0c49c8eb2cb5601886f27e71d2969b","sha1":"8f39776dee7cd263367c4830f1899c22814cd45f","sha256":"42e9a88202200bf1160ab0c5fd3d72b1df139725528b460d3b6f4ad81bf16a19","sha512":"6bc20d4ce718924dfbfb5a34138c312eb13822dc1fe07c458856a154f5d41a77d11e5c15c8fbe2770f7d892305f208e22c5c25d1738e95e9f9b6b4361df61bb5","ssdeep":"768:adNc9Lk69QGxCjXF57DBXNUSrenETFMsispqb+g8/W4ulyE6Lf:UNcJk62XL7fU6+a00qiW4uY3","tlshash":"62d2f1441b92f00bc64ad6baf127d3fb971955694a3ba337924ec1264cdbcc932ed580","first_seen":"2023-10-29T14:17:32Z","last_seen":"2026-04-11T18:09:05.544869Z","times_seen":166,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/bootstrap-grid.min.css","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/bootstrap-grid.min.css HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Sep 2025 08:50:35 GMT\r\npriority: u=2,i=?0\r\netag: W/\"68c28d5b-ca72\"\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 5293\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fxu%2FzUg5mBy7icUig9b2W2tdj11hZUE10x7kFZF65jxAs8ODNrN03l8dCJfd4oJwuGksg6LQe7NNiWr1ixSyfcMDDYr3fHtlBQOgon9qAQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6388396c1c56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51826,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (51590)","md5":"a37d8f6021726be45fb8404012308dc9","sha1":"4912af4d6fde81ab4ea7b252c779e3d75423d607","sha256":"c705a3e5aed3b4130c154ec89363bbbe76616b64318ee271f1e4ee1d556dd335","sha512":"7b742a437f089d43cb343410dc43cfb0063ef4a35abf14cecc7b9ac5fd9700b13920d98a00ef451f9ae35ccf4567ac99705ddb9164bf3662a7a4cc2d989f4832","ssdeep":"384:C0lptoZygtFjmx/G1Nf+pz600I4jh7GY9z:C0lptoZygthmx/G1Nf+pz600I4T9z","tlshash":"743398c7f9d2284cc592c245c0927bbc4cbf9949a352bc9ba0177fba4b457db08a2d4d","first_seen":"2023-05-17T16:03:09Z","last_seen":"2026-03-22T13:12:40.825445Z","times_seen":78,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/newikonflex1.png","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/newikonflex1.png HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 4348\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Sep 2025 08:50:35 GMT\r\npriority: u=4,i=?0\r\netag: \"68c28d5b-10fc\"\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 5293\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j%2B48fBY%2Fox2Lf4HxZ4lBQID75nMvtg59n1YvRi7bZlf0qpttLIGRwMVV9P%2BrkgmBdBLq5kwFHnPZJyW1HVfOoGyEJnqkw3igiAYacYMLkQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6388396c2456aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4348,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 188 x 220, 8-bit/color RGBA, non-interlaced","md5":"87664523a31fa7aa19c2f29ff77cc266","sha1":"c98d8463384182e70ba3cee2002edde5a98091fa","sha256":"7a134dcb7290a780a5c25b43fa0a3303cfd2b850190f1b32e424e77a8768eef2","sha512":"12419c9bfe6c2f7a9f6f6b35377b91b031a878ee6e123ce4251231492f170afb5604fbc060adb3c1a264e95e0d9239716aa5abcdb58f9ea31fa7f658169ffcfe","ssdeep":"96:UD0JBZppPlaYoGM+ESfPrVvxAfD1cuBLQso4n38x0o:UD0JBZ3daNGM+pr14DzEso238x3","tlshash":"be917db7fbcbd815a712976d7324416629bdb427180cfb4f5cfd484ea204859cc05767","first_seen":"2025-05-05T11:26:06.414517Z","last_seen":"2026-03-22T13:12:40.820592Z","times_seen":70,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/call_symbol.webp","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/call_symbol.webp HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4912\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Sep 2025 08:50:35 GMT\r\npriority: u=4,i=?0\r\netag: \"68c28d5b-1330\"\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 5294\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RntqO964AwSEBt0icoAefNQOPd2HAc32W0ctW1qpO7Jvezy2sYQTXTjE2Mz49nW3iF9gvdHT%2B9Y3E%2BJk4ROUTvTkA01eGu1CVqwunBgIBg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6388396c2b56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4912,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4be5c611bd86d8bf83d52c6177ae07d3","sha1":"b063a6ff4d56b58fbc7ace83a171d496b3739d4f","sha256":"33ef0a31645afb94ce4731d73c27094a3eb265f47af3e68015c7a6da29ba5d51","sha512":"f50945e673186b8ccbff3fad42ade1417d56c722d54ad99761542d39ddff0394e5812589afe42d34e4b410c74fc6a1ac64e17b4185a7721f52023300cb9ed7ac","ssdeep":"96:bwHyzqDwVSN1/mEwkkrySptIhWWfrjvE9gm+4yA9cam1nlMLA:rAxWEfk6hPPvE9gm+4ygc9ln","tlshash":"87a18ef942de9e781bb84a2ccd1a6458c59b11216a304e318f786042f6266cb762a046","first_seen":"2023-11-28T08:07:14Z","last_seen":"2026-03-22T13:12:40.8291Z","times_seen":88,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/review-img-3.webp","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/review-img-3.webp HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: image/webp\r\ncontent-length: 66718\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Sep 2025 08:50:35 GMT\r\npriority: u=4,i=?0\r\netag: \"68c28d5b-1049e\"\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 5293\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j0kC5ILNSTwcXJzsn28xjSJ3tiOi8P0arWoSTWgHwZBZ%2F2cBmYFR%2BlXZsJkTDHDJ6demaOg3iSvh6YHl0tgk6wmYLqYXLOE%2BW784eGOVaQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6388397c3156aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66718,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x800, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"512988da50b59527631aa065d9a51769","sha1":"3b7ca8dd0e30bdae6173b8606af24b00ed66541c","sha256":"f9b44ed4236a4d5dfe9207ef923335aa8ef441838bc8e50cb763c8233d378721","sha512":"e32eff9720b86d01fb578ebbcc3c5c0ce08ac65795eac72bbca5065a581f685c61d298a634471ff150c4100c59083df88f080db7ac6c8738d0d9c6b5da9339f3","ssdeep":"1536:upfumY7tQDheOKRAdWgN8nyPufovlYrWE1JcOhGQ:upfun+eOlr8fozE1JcOhGQ","tlshash":"4963011524d5425d95e408d2ef7ec29e11dbbc0e657e768cb26afe1c323388e7b2109b","first_seen":"2024-02-05T12:03:30Z","last_seen":"2026-03-22T13:12:40.826931Z","times_seen":76,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/lock.webp","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/lock.webp HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1292\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Sep 2025 08:50:35 GMT\r\npriority: u=4,i=?0\r\netag: \"68c28d5b-50c\"\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 5293\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x1CG7fU0DHmnAjCm3KGHIwvV1p4o3Pl%2FEoaOjAKRMo2KyJ8XlpZlUNJCL42Z9%2BF8PKqtfWVg1I6EL5S2xRioB3vsy16p%2Fx8CCE7FGiHeWg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6388397c3b56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1292,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"06ef05e19d3a1da104267c0fc84ab98f","sha1":"563d07b02cc7dc621704af4d55913cd12f3aed37","sha256":"db43c596e982c91a62c4f1aeb2151ce68d268982aca4a0545d311310d96910a0","sha512":"1eab7750329308cebf7ec2da03d41afb7b860cc851b81868d42201275e9959c60019ffbf462b0d84ca310ef4fe6e7cbc3c0975933c84ab262c016916f56a1383","ssdeep":"","tlshash":"1e21e77b037519a3d212223dcdd52ab45593a28be210c321805db700d9d714f5cafb23","first_seen":"2024-02-05T12:03:30Z","last_seen":"2026-03-22T13:12:40.827424Z","times_seen":74,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/intl-tel-input@23.0.12/build/js/intlTelInput.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 23.0.12\r\nx-jsd-version-type: version\r\netag: W/\"74b0-Fu5cDWBeWjC59YEH297UqXupv6I\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 1238262\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\nx-served-by: cache-fra-etou8220056-FRA, cache-hel1410033-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 11469\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29872,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (29515)","md5":"c86b61ae6f79b75c7e08b42a351a7b6e","sha1":"16ee5c0d605e5a30b9f58107dbded4a97ba9bfa2","sha256":"e1759a4dbfab9dcdae85ac8ee40e4c961a098eb49f7e5a96ceb1ab928e6f681f","sha512":"cb1485a28c54e0b665efebb05f6c21696c28e8679f1e818e92657a121286c337231a435ea84bebaaee26b6b6c7e966049c85d1b4db8b9070c096d18ae4d8308c","ssdeep":"768:c603Xlqn/kiIzJT9FSRzA4xXnT2nYdn24X68a:cDiIz8A4knYdw","tlshash":"0cd2e7aeb365673ba6fd82a270e54503af7f79444604083d78ac8ede0288ed171f5b34","first_seen":"2024-07-10T10:54:41Z","last_seen":"2026-04-07T02:34:18.150961Z","times_seen":391,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":41,"dns":30,"connect":26,"send":0,"wait":14,"receive":2,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/fonts-1.css","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/fonts-1.css HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/popup_style.css\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Sep 2025 08:50:35 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\nage: 5293\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VeETlNfDTqg1%2BszN2Cn1IKB8i1H5zTOB7qHBxEg04vpI%2Biyhs4TSnGUOmPx%2FAXn%2FJfhQudi9ZKIR%2FJiyQxxDV0EFpXzPwq9secMyVAlkrQ%3D%3D\"}]}\r\netag: W/\"68c28d5b-1e8\"\r\ncontent-encoding: br\r\ncf-ray: 9c63883a9e0056aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":488,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (488), with no line terminators","md5":"0c42fd0911414b46f3fa9de49b0f12c4","sha1":"81a9c16b375b0f8811c9d46345264a37137fece9","sha256":"28ff97dbbc84ebd2613a1dd24b71998d559d990a3fa34530948a3b0b6bcb5b58","sha512":"39684998caee5ecd207bbd39d79d4d1b4ad91a4b1606820dd8c6b82838fa96ac36b1a4859fa5f0a2d61d917dcb856a26dce30e2ae45cde723c07f7dc36c6bbd0","ssdeep":"","tlshash":"4bf0f8a885add202b5325d9271cafa123d4ff4ab00715db6e81e4c14ecd6ca306e0f3c","first_seen":"2025-06-15T17:52:30.428999Z","last_seen":"2026-03-22T13:12:40.819994Z","times_seen":71,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/pattern.webp","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/pattern.webp HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/style.css\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: image/webp\r\ncontent-length: 98268\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Sep 2025 08:50:35 GMT\r\npriority: u=4,i=?0\r\netag: \"68c28d5b-17fdc\"\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 5293\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hp5WtyGUFj9TdeUusrMYNoimrEMkvDh7XbUBuxi5MX0N6wwnUzv0qT8C8zbpF9MXELWOFo2tSH1lR6OZcmdnRHFmYMAx0gK8vW%2B%2FcCSc5A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c63883ace5656aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98268,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6219fdd4991008a31f57520443e5ca03","sha1":"8e6df9f45164655404db22e6634c92680999e044","sha256":"bf0722b0221d47f1109e78a741dc7f7d8cd097a441fbdf9781db63e3cf41729f","sha512":"68cefa703f5bddcee0ed016d3ae0bea075ae05cc7f019c0c577564ba35b89d20a4b7ce43895439ecc3a0ebb333d165355e6cd9be9874325d75dff7342539a5a4","ssdeep":"1536:YOpXurDJ1HO0lOI8gZ1OuE7dSztMH8V/69Y8CvQW94+Fo3vwwT7XwuEOiPrYTsGR:YO9uXJ1lN8gEUztMHWfoao/wwT7XyDri","tlshash":"06a31256730bd708e6d81afd7b7941bec4c04e774abcb49f020b932e1f8965a9530c99","first_seen":"2024-02-05T12:03:30Z","last_seen":"2026-03-22T13:12:40.834693Z","times_seen":74,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-30T19:56:20.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, no-store, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kd8NpjD1yj0nkUW1ScPPlsqmlp4gE1G8YnOhf4KhsMp9Px0MoJGhdqhtP4MPpdRszU0%2BqrdH0jyku4XbAaoDNGefbtRTspIgU4vBXEGmfg%3D%3D\"}]}\r\nexpires: Fri, 30 Jan 2026 19:56:21 GMT\r\nset-cookie: _subid=1sjos4f1vthrd; expires=Mon, 02 Mar 2026 19:56:21 GMT; path=/\n9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; expires=Sat, 31 Jan 2026 19:56:21 GMT; path=/\n_token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126; expires=Mon, 02 Mar 2026 19:56:21 GMT; path=/\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/7.4.33\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c63883768bb56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":55816,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"74c9e9b2d463e4fd918d866a7c29e951","sha1":"ec61969b294982a5aa427d45aa586a05cf5c5fca","sha256":"48382ddea4adaade5354590f62b7bc7707f7cc709b40b84be1d38b4993bca753","sha512":"3c92227755914088c1d73fa2577bf298ac3b378ea8a77457a109cf18ba2aa609733c6bbf6d27ed8bf261788a54633123ef0e55a4a3299da356ce99a21ec78a06","ssdeep":"768:GoJVjiR7QeqFZorTqZ623xCtccw/J5baacwMILtRM2:GoJVjiR7QeqF60623xCaFJ5bJ+ILDv","tlshash":"f3434f5918f70051b6039ce97bdb6b262aa8d003d006d9247ffc2798cfdbd5286a379d","first_seen":"2026-01-30T19:56:44.376666Z","last_seen":"2026-01-30T19:56:44.376666Z","times_seen":1,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":69,"dns":49,"connect":1,"send":0,"wait":113,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/fonts.css","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/fonts.css HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Sep 2025 08:50:35 GMT\r\npriority: u=2,i=?0\r\netag: W/\"68c28d5b-24b5\"\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 5293\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ujNBAkuVJi39GFQ%2BGlF9ByWii7oL0jcPVS%2FIdRYVgGU%2FtB9d7xNdJDEpG5Di0A3HjTk5sPK8zZWNP5XZ%2BNVsaMUcJWKhTk%2FQvr3mobn7%2BA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6388396c1b56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9397,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9397), with no line terminators","md5":"c3ffa3b68260c70f2883a1ed1895d19c","sha1":"8320106bd1a86011b40004a59299837c99ffd08f","sha256":"453d493cc73f25ae8afd407302d2630ac7f220428d445d6062d839193d9826ea","sha512":"7973449b46af767f2d28882857cb94028a930f32808614cdee2a0140b889cb66b4e2c92766cc6d73fc6851ea7c5f6b2f3464d54717e4f126c3f997421f1b74b6","ssdeep":"96:LzghChlpcQROUGfGmi+6rEjIhXA4d8hiNm:40PClUGfGmi+6rEjIJfd8MNm","tlshash":"d412b976685f604b7063194936cf7f19af0f317a10285832772dac14afebb9646b1f28","first_seen":"2025-06-15T17:52:30.465287Z","last_seen":"2026-03-22T13:12:40.835738Z","times_seen":69,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/table.webp","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/table.webp HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1076\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Sep 2025 08:50:35 GMT\r\npriority: u=4,i=?0\r\netag: \"68c28d5b-434\"\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 5293\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GC1ecr0whHalmOk0gF21jLDLy0DjhsLY4s1SVefygsZGysPOTajZhSQ1DACqFP3M1tzftAHxYHEuoLbiCMMY0K3OTpc8JXFhTGRkoj5L5A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6388397c3456aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1076,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b5943595a996a0a1e2221e1eca8eb38b","sha1":"f309e274d7f0beffbb46c6d5ce92aee159b1dc28","sha256":"3ef1bb677a806593458c582777c686fe99c0022e14009da5bf1d66eb0cecc0fe","sha512":"ccd6e692da2be188b5d44e0c6928013abc17594eb9fa3d4c4589c2a2a62135714cd0d6a021d3a96e1f89914a3dc9d1760c26120f6d77a0c5cd2154372927a8bd","ssdeep":"","tlshash":"bd11b965a81fc4e2971555bf84783e91485206cf4ab13b889534588ff02b7603d16593","first_seen":"2024-02-05T12:03:30Z","last_seen":"2026-03-22T13:12:40.829645Z","times_seen":74,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/left-cloud.webp","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/left-cloud.webp HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3922\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Sep 2025 08:50:35 GMT\r\npriority: u=4,i=?0\r\netag: \"68c28d5b-f52\"\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 5293\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HWyrGpJ2ZDyXB1MgLgvzUk7g7dsBr5%2FwUgPylG7ZlVN0pWoOn7ayTCtwhR5oUfAQx5AdX3NsV0LjQL5vGVYSPuQztxB%2Bl32nvLvYsYHLHg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6388397c3d56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3922,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ca9ed4984a864a05ebd30aea613ebf28","sha1":"01d794a21d7a686984c8957f097a2daf712662a0","sha256":"6b99013d6c7c74fda8660bba4d50b6c3c3cb9fc98c0567a5b6f5740ce98d4c13","sha512":"da260ca32d91f048c134f89bab9252053a9e4500799cc7b8e0b0460437bc8f32f875d8c358c600b02c692496d7096c0ca11d8c9f4ed40b1668bfb1b35ca6ff4b","ssdeep":"","tlshash":"40817c4d3a2e901fb7981c5aa2f30afdc134840b6621ef70767135e5cb2aa29459d4e5","first_seen":"2024-02-05T12:03:30Z","last_seen":"2026-03-22T13:12:40.846281Z","times_seen":74,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/phone.webp","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/phone.webp HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16388\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Sep 2025 08:50:35 GMT\r\npriority: u=4,i=?0\r\netag: \"68c28d5b-4004\"\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 5293\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AHgnVsCC4txFrOD5KSrVA7uuvGWnNj6aom1a%2Fi9Uv9juT8l%2Bw4lrZHDJNokwAtiTv34azV%2FtjhCIyYpxH%2BH7FRN4ccYW9m4GPNQXr76Vxw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6388397c4256aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16388,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b6c093c66267e5a680c51ff88ed32baa","sha1":"9fdae24e07cd2e6308bf4bfc197a875ce46eb931","sha256":"9046cc061db6a7452f042710a694a5e14cc9f482d82cb695c29a278bbc25c415","sha512":"9289c747ec8ce046591de0fe158bbd3732b1e8779a6e792e24d33eb6598cf18c5307857d79d2c6ae8fce72a9d8eed9522557b1d6fc7a1850ff915b5d92d96b36","ssdeep":"384:hXUXfrNyh9m2eUbjQASm1MeG2wdUgNi9EfxFL16cPPj6:hEXUvRxQASmMM9ErL1bu","tlshash":"6872d01546e321f26f1f815a856a9119e0206aa3f70f14caf2360f0dc7def6a34ca724","first_seen":"2024-02-05T12:03:30Z","last_seen":"2026-03-22T13:12:40.83018Z","times_seen":74,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/coinbase-icon.svg","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/coinbase-icon.svg HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Sep 2025 08:50:35 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\nage: 5293\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lBx0gMn2sEQlMvr2llESkVWMY9KTeULydhC302HOZBgfIHCsOQdepV1gGsjBnpv7U2IOxqumTSIb9HtKLYXobwaqJ2mdsP%2Fmo63ldZXXdQ%3D%3D\"}]}\r\netag: W/\"68c28d5b-217\"\r\ncontent-encoding: br\r\ncf-ray: 9c6388398c4956aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":535,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8bb3ac288a680748e699accb1bbc27b8","sha1":"d6321eb04ab71067912af39be6f475400cfb27d1","sha256":"d40f2d37d800e32067b898b9de2b755c20a6ecd44dd4ffd511e61978a3470118","sha512":"cc807103bdacfd5cc1620c4df5575a6bdda6d96d054c340fde1f0ba2c0044450fb319c37a6476c03dac45de49ceb93c08b56d06de190cb8a137fb1d0dd64b374","ssdeep":"","tlshash":"64f0244aa7445a646f2c5e16192494ed03dbe7e9dd8e8368c68c9f02b1d1e867c0de44","first_seen":"2023-04-22T15:10:15Z","last_seen":"2026-03-22T13:12:40.843039Z","times_seen":135,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/comment-img-2.webp","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/comment-img-2.webp HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3532\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Sep 2025 08:50:35 GMT\r\npriority: u=4,i=?0\r\netag: \"68c28d5b-dcc\"\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 5293\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=64S5bpDa40HtWkcceLttcT3ZJvLq7GPN%2FzO3WVw6B8Cvx7I%2FS5h4BgBqiqfktKoEphYDkp40HHWjBpeoMfm0JyZdJVHjRiraOMJlwyG20g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6388398c6156aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3532,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5427d8d0f390062e9705b575b6399e22","sha1":"1f6da8fc91bd474dad2dcea9120d990afb24aadb","sha256":"36bbbb2f60ba7000ea85eb69fc64bd516dc12ae494c4539239b4efbb29014b2d","sha512":"35d506bcab9631c04dc46e7d5e8ef16c05299ef1929693bbc92c7909552340c65191c446723d8fe318482e6f7347f9fd1dd39fbd678c910932c3b940776811b2","ssdeep":"","tlshash":"06714b209bd18ef0cd90c5ae7b1634c2cb0566d915648d6aa9fb8cfc0831b8379b704e","first_seen":"2024-02-05T12:03:30Z","last_seen":"2026-03-22T13:12:40.836554Z","times_seen":74,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/dialog.webp","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/dialog.webp HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/style.css\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6474\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Sep 2025 08:50:35 GMT\r\npriority: u=4,i=?0\r\netag: \"68c28d5b-194a\"\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 5293\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=07X5wWEC4pWP8QfjtuOtwrHD9BeB6AEvZu7ZzVDqDIHI7DUQnGesTLFXUdf0DvnBivRHKncJL%2BQn6F43OsDpo3jlxhpIp7ALZh4sXN1RwQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c63883ade9156aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6474,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5e7d837b6aaa23cefe10613a5fed586d","sha1":"1c92707f9b98a193cd29a2c3e63c794d9fd886ba","sha256":"707fdc89b331151425486e4c142bb8d61c99fa94bcba2608fd9f2ebae02fa748","sha512":"033bcf65d07042da98e51050a3f78aa716a1e218e679150da752b58dd829ecab46c96ffca2b8da3bfadd4265dd4126d50f15fb0a5b85c3194b858aa748efb193","ssdeep":"192:IXyBR7KPBOTSnaA0tVUO83Kz4I8mCbFWCk:I4KUTSn6JCFI","tlshash":"43d16cc148bac83bec257a932d156103d2cb335ab919d53f3223659d7bf8c49208ece6","first_seen":"2024-02-05T12:03:30Z","last_seen":"2026-03-22T13:12:40.837068Z","times_seen":73,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/reset.css","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/reset.css HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Sep 2025 08:50:35 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\nage: 5293\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HFEJSJKRwMv40sS8qAD1YJdiDWLG4aGBqJJLL%2FMZ35XHKClQRTTu2Ptfsz9Mcseo%2FXr4iRksJUOu0oeuQG4DVitFi3oULcWWI7hYS0LEww%3D%3D\"}]}\r\netag: W/\"68c28d5b-375\"\r\ncontent-encoding: br\r\ncf-ray: 9c6388396c1f56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":885,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (885), with no line terminators","md5":"48da51bf25f21a48efcea47615938987","sha1":"d15dbbb5ce15e151fe4ca811a6e53b0af7785447","sha256":"922267779105ca6b060b9448934bff4526b2de07cec3c9e957cd0b92b6875371","sha512":"ce412ae1d353556cabe00ab1f1a67405312172b94fad0d35060a51e7eb527a3c8dbb099104323e76fe876c96de4c96493ce8fa8551cdb5d7568d840ede6c2038","ssdeep":"","tlshash":"9311446122003cba7527483c2be903866c716650d872619ab42ad1b00e590ed87b8a77","first_seen":"2025-06-15T17:52:30.439931Z","last_seen":"2026-03-22T13:12:40.840278Z","times_seen":71,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/popup_style.css","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/popup_style.css HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Sep 2025 08:50:35 GMT\r\npriority: u=2,i=?0\r\netag: W/\"68c28d5b-12d0\"\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 5293\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F4NNZM%2By3Oq7GnEoV0XKBPtHK2tZu0Lwo7fd4QhI4E%2FTnbzdGCg30Tc38%2FTjXAzEZgOXac4DqIfESbrqMvZIi0yWDyGSl5VipT7hyQNE%2Fg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6388396c2756aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4816,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4816), with no line terminators","md5":"b4e5ebff7a0ab81dc3509cb31bdfb123","sha1":"26481263e97f1ff69fc5ebd2bf10f8d6abaffac0","sha256":"047159025d850958056cc8d353458c80042c36a7d39b001949100d99c8df44ef","sha512":"1d9adae666bd3029b7dd675f13ecc02265107eedef281d69c1814d852379eb88c37ac89112273803d53de8924ae403f3bef69f166bc258e507673ef2a98817db","ssdeep":"96:JvisNBtaGoIA/F3cVYLkMjIJAVJmg7jGrwBI3wrHvqxZ4T:J6AtGHlciLkMeWJmejGrxwrHSm","tlshash":"aca1fd33e274fa68b52fd466e053256c3028850ebb77ddb6da50ae3ac1d25a3172433c","first_seen":"2025-06-15T17:52:30.410039Z","last_seen":"2026-03-22T13:12:40.845692Z","times_seen":71,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/stars.webp","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/stars.webp HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3288\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Sep 2025 08:50:35 GMT\r\npriority: u=4,i=?0\r\netag: \"68c28d5b-cd8\"\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 5293\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0k6HSfoXVZFFTQTS6NmZ1Az7xZ%2BRhHFb7kkZQE5lSvyM5NFT4iwXkkH8eFZlEa26KNso%2BJmBCrF%2FuGF5VYr4l%2BNL%2BLAKab5evxj39jMk6Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6388398c5c56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3288,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0b79dfc4c261ec7743cc62d3a6b95f37","sha1":"c02dacbfa208f6c3b89ea94e4a31419b3acf4f51","sha256":"83df6a36b91ec560a0e45b4a4cf760f31f5c71a5a5feb88c9769fe89787a8677","sha512":"f0484b6a6167b0629b80c55bd50fc3c5a7a3f42990a5b1ed5d5b050fa34c9cc5fa9cd280b46b589001d62ee1412082a440c0e63ea847586cc16608830359924e","ssdeep":"","tlshash":"86616c2dd1cd728a9902dfbaa0ebcf2c55c7cc93c6b389e74adc01914568a19f203d54","first_seen":"2024-02-05T12:03:30Z","last_seen":"2026-03-22T13:12:40.819358Z","times_seen":74,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/coins.webp","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/coins.webp HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/style.css\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25344\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Sep 2025 08:50:35 GMT\r\npriority: u=4,i=?0\r\netag: \"68c28d5b-6300\"\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 5293\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cKM7IhNzvhDtEdfOKGiG8GY9ZF34sj69AynownZHZK0QmReY41jMnUE3C5Qu7kMoxsZV9CPdb8B2v7lIogmbS2YWHhdP3KrKrPO0P44mTA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c63883abe5156aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25344,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"739902735455271102d143bcee7f043f","sha1":"f6360b0ee63d04fad62a4e0d9423c523414e35da","sha256":"12d452933aa1fb24db6c758240e546c1bcaeb6649bf75d21cde277b953b99d6e","sha512":"7074378638f5fb25e394f3f9d8b4e318c246de5e7c6331ac8af681c8f9fad43d0066d9cef318e3210591c32e46354eade0026091c484af3794213f5ef62a76af","ssdeep":"384:zsqDpSF4LQHT+GDmQVv+4xIpLxChUpDfx7tiqQxougqt3I+jS5HEHu8:QqD7caGDmQM5xC+xfNuE+jkHwu","tlshash":"42b25d05aa49c9f5d84c71b0f7e387dcc6f7cb9e67324ccb8ba565d9288e0614e96038","first_seen":"2024-02-05T12:03:30Z","last_seen":"2026-03-22T13:12:40.821681Z","times_seen":74,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/comment.webp","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/comment.webp HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/style.css\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1176\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Sep 2025 08:50:35 GMT\r\npriority: u=4,i=?0\r\netag: \"68c28d5b-498\"\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 5293\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VTnd9wM4fWhVgp4VWxMHDv6%2B1BSeg0NpOQGVO7JOoYP3VTrqPgOE4nigwOM4lWCcUxndDNpvDnhO5elJqSkmYIOFIGNE65MCwmoFPh%2BImw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c63883ade9656aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1176,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fc591b5ad4dd026b67ae9de42ea50f1c","sha1":"34808c1636d75722e25fd98042c67d67fed28939","sha256":"73a69f9155c9f46890b7f4d984f8efd4826dd3b5af075394e9adc9a4b503c714","sha512":"78f0c5094b2a8530a5aa83bfd99126c9e368dc5a89d52ed53426a39d7c7b9040b561cefc8587475ad19a1546de7ca8baf8e75ae18829f9801b796ce2c726f809","ssdeep":"","tlshash":"cc21d7891cf24184e84698929e350b13244cbc1f072c89ebf6faf849007230961c7de0","first_seen":"2023-11-28T08:07:14Z","last_seen":"2026-03-22T13:12:40.835189Z","times_seen":121,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/graph.webp","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/graph.webp HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2564\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Sep 2025 08:50:35 GMT\r\npriority: u=4,i=?0\r\netag: \"68c28d5b-a04\"\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 5293\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=41qr12F2jkxjRKAQBfDJHtAXjalXFCUF2qkrUOjYE48n29dNFFQd3ZuC7wL5fa6DMYkkFYcqZ4jlm92%2BQQhg00HpFsz%2Bp4KOQsRvSKhqCQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6388397c3656aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2564,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c10c8a2c624fc380ee8829ac8e31d43b","sha1":"df71a8cfaf2030377705e4db2a51d9323a937680","sha256":"fecd66156e578d8292354ea0120b9808d6dcb0046d37a8bdd5fa10030598163a","sha512":"79f6767d51eaff501bb7b6eb32ebac1fd1b507f800b056e2a6f2d8f5ad1cebc515c0192a835d00b6cb2f6d8dc7d319511c5213d859a5783fa28b4e5e3bd5a546","ssdeep":"","tlshash":"a5513a9b018078154ee099a9762885da7f8c61a0b5d86c52ccca13ddd78729473b7f74","first_seen":"2024-02-05T12:03:30Z","last_seen":"2026-03-22T13:12:40.832385Z","times_seen":74,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/kraken-logo.svg","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/kraken-logo.svg HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Sep 2025 08:50:35 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\nage: 5293\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ADYHBTdDYjjyI%2BjdEHPJAz9zC%2FXfS5tYafpZfmFaLyCQ1FMWUpj7NIxUzUWYtlfAV9ZyBZehenjqN5b2d0W%2B%2FFEU6%2FnXmVpRoxMlmUgtFw%3D%3D\"}]}\r\netag: W/\"68c28d5b-5de\"\r\ncontent-encoding: br\r\ncf-ray: 9c6388398c4f56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1502,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"46e7b488513f42a1567a35b8f5d63d17","sha1":"fe75f4d0667c578c22e62b8f71555c5dc11a2d5e","sha256":"8a3e8cc45c5d9984bba9d10f4b3bbe8ab4f9ea84b0446b85fdedfbdef720a521","sha512":"fed574d12a6f8c0f056055ae12a9bff89f4ea2c2355c41946474856863810432edbf1d23632029a90656dac6d0f1aaf4aee9f507218c1fe594239ca49cbcfa87","ssdeep":"","tlshash":"e4314b6cf37343e6a66452f0a53f45712fcb08fb56996634c3549c14bc9e56088afbe0","first_seen":"2024-02-05T12:03:30Z","last_seen":"2026-03-22T13:12:40.839232Z","times_seen":74,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/bittrex-logo.svg","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/bittrex-logo.svg HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Sep 2025 08:50:35 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\nage: 5293\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cAIVrjV99XAWPGOlswH1I87SU4%2FwHaBgU0apAo%2FsB6aIO4BHwjLhTGvDE40J%2Bp420enoqWfay0z%2FIYh3uHql6%2BTgZTBfaRtCdfKkakqqug%3D%3D\"}]}\r\netag: W/\"68c28d5b-269\"\r\ncontent-encoding: br\r\ncf-ray: 9c6388398c5556aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":617,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"859504fa95fe120b78e146c3d3ba21d8","sha1":"8cdf73201d1036a2452f9169d9a06ba162a143a6","sha256":"f761360cc7120aa80b15e23ac61c7b6aa8807a6632896aa1e3c8d408fccfa17e","sha512":"7a4915ca13571bbdbf539fb46444fa8512eb0bad5176e6d8c100407ac7883264dcec85f41f85f2a7c39d9f77f8f811cc45ee65e38ed93a937fec27b7a16f96cc","ssdeep":"","tlshash":"80f0a21cc3c9ec6974b9cb107ff5cd4b5a1830e7c1d094dad4e2787ee115465160a5c4","first_seen":"2025-05-05T11:26:06.460435Z","last_seen":"2026-03-22T13:12:40.841312Z","times_seen":72,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/karol.jpeg","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/karol.jpeg HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 472987\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Oct 2025 00:26:20 GMT\r\npriority: u=4,i=?0\r\netag: \"68e5afac-7379b\"\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 5293\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2HIW7Nz9ovT53Q%2BP%2BiG%2BqUD5e%2Bu%2FzF5%2FktCob3aXZHZ3K%2B6evDyJgIjKKFObsq44OEENHAa9N%2Bru%2Bt%2B%2FHFUg5Af7p%2BFS%2BGOejZ9%2Fgd5oNw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c63883ace7356aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":472987,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1200x800, components 3","md5":"d5173a34237348cc45c30a9a1c1f729d","sha1":"253be21689f7b69f4d7e846802953e19ae887be8","sha256":"52c3cbbaf29fb0fa419a8d80b395b83c7e60fad750b81809d7ddc04a87506f1f","sha512":"20cca248411dc5646cb572f5f40bb60e8cef7bac5f9313c0a993ee7b0c90ce9a80a9a26e2e8a16ff09bb4c222d1615b60530886e636cea6564c4c1197c4424aa","ssdeep":"12288:2LaidYuY6oSacay1kuyU73Zhn0KtKIwJJhaxmn:2LDGRWR3EU24x+","tlshash":"7da4239856ff191ee69fb0b4a02cab3d573e968d4ac3dfc48803ef59b6650bd205c811","first_seen":"2025-10-13T05:26:18.271467Z","last_seen":"2026-02-08T14:58:15.855886Z","times_seen":42,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/right-arrow.svg","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/right-arrow.svg HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/style.css\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Sep 2025 08:50:35 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\nage: 5293\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SSKewdG9%2FxhdaYm8hWMOeSeNUlTulujbikEpM2%2BXpnIus6IqH83EUqHDHkUfPMcY4oedzwe8n2gq0k7ULs%2FgECBbaxR4I9rpcRr9IaFqZQ%3D%3D\"}]}\r\netag: W/\"68c28d5b-1f2\"\r\ncontent-encoding: br\r\ncf-ray: 9c63883ade9356aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":498,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"301c750e82558b2cd6b04949ecca6d00","sha1":"f93f0c0289e488412fefd460ae8a0b51e40fe72e","sha256":"062cf842ffd1e31b56eb52e217ab4212489da62aca8cec3223a7d1cb6e15ee53","sha512":"3e28ded57d72d8accf1f87553dd8eb9cb4ec17bf734a29b37639731e2fecd159e56b2bae7d5b7894d3603235ed8e5f3217180b54c8c46811b114d3f9eb46c4f4","ssdeep":"","tlshash":"5ef0590f0b4adbc4d484ab608e06ae2935883781ac2484da0aa53a06ee8500dbd714a4","first_seen":"2025-06-15T17:52:30.397316Z","last_seen":"2026-03-22T13:12:40.827947Z","times_seen":71,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/TTFirsNeue-DemiBold.woff2","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/TTFirsNeue-DemiBold.woff2 HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/fonts.css\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 31000\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Sep 2025 08:50:35 GMT\r\npriority: u=4,i=?0\r\netag: \"68c28d5b-7918\"\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 5293\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ig5x4IlBb1TovlGNeijZkflK5ijGaNwrwp5tGYpaT03EcS2LU3KAfy9GM5h1k8g8LUSQDbMj1eChjUUHXuxFZNqdeQwzc4O1TXMpNaXL3Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c63883b0f0356aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31000, version 1.0","md5":"5a0c49c8eb2cb5601886f27e71d2969b","sha1":"8f39776dee7cd263367c4830f1899c22814cd45f","sha256":"42e9a88202200bf1160ab0c5fd3d72b1df139725528b460d3b6f4ad81bf16a19","sha512":"6bc20d4ce718924dfbfb5a34138c312eb13822dc1fe07c458856a154f5d41a77d11e5c15c8fbe2770f7d892305f208e22c5c25d1738e95e9f9b6b4361df61bb5","ssdeep":"768:adNc9Lk69QGxCjXF57DBXNUSrenETFMsispqb+g8/W4ulyE6Lf:UNcJk62XL7fU6+a00qiW4uY3","tlshash":"62d2f1441b92f00bc64ad6baf127d3fb971955694a3ba337924ec1264cdbcc932ed580","first_seen":"2023-10-29T14:17:32Z","last_seen":"2026-04-11T18:09:05.544869Z","times_seen":166,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/TTFirsNeue-Black.woff2","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/TTFirsNeue-Black.woff2 HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/fonts.css\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 30904\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Sep 2025 08:50:35 GMT\r\npriority: u=4,i=?0\r\netag: \"68c28d5b-78b8\"\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 5294\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BJ%2FRzwo08Ewwwic8d2fiFZtQkMTrhZdHGGtsRhiHAf5rFfpMpjPX3LipSyMY%2FmTc70nI0DG1nOdsZMvBeVbiL6PEvXCqQzaooAQZtwNuCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c63883cfa3756aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30904,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30904, version 1.0","md5":"f439d9e3c02a3c401605e206eaa0dfeb","sha1":"1a668350a1f9602c6c4d2ab17ed4881372d6ef2c","sha256":"fbee3fd150c292c81f25c4fa0fba2b21dfab16241275615e94d292cd7e8dd140","sha512":"e790dd365b43c8e02139b0bf770fbc997c5a98799f94cbf80f848e10b327653a9de8fcdc3fd03d20e409609a6f91ec0f2ccb3662dc50696ca06f01dabf23dbbf","ssdeep":"768:h/2BNsbFnVEg34fGbYHaumeqzHjxLqH7ar0ZIw/exJkB:peNuFCgIPqH1qlWw/WJkB","tlshash":"ddd2e105da1daefe79ecf4c892e7552aac9db228b946d09e0df0888540333d0f67d8c1","first_seen":"2023-12-27T22:07:45Z","last_seen":"2026-03-22T13:12:40.823183Z","times_seen":75,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/checkmark.webp","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/checkmark.webp HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: image/webp\r\ncontent-length: 153646\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Sep 2025 08:50:35 GMT\r\npriority: u=4,i=?0\r\netag: \"68c28d5b-2582e\"\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 5293\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BaGcyVAAlO5wMD7XDMqXLC2QbGMU6wD4%2FeqKZptX8tw1a0YFEGqzt9EZ2Z8RIRiwAtvyM4rifFkU8ok0fKGr9ioI8K652glW6kApRHcmog%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6388396c2c56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153646,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e37ee29032cbf67b3f333b0a982f74a6","sha1":"ac78fc7ef6fac82073e7037f65cf30d23c53ed80","sha256":"a3a8a42c8dfbf339de69363e9de57e1f3176e31b4672a983ab82576e98add699","sha512":"71442b4317f97916c1199b50470f45ac8c25d977d9050eb88bc1a94d16ae15cd5856086487d37b9610f03c16297698634352527adfd3c50afe90cb5c138e0b56","ssdeep":"3072:iJ9D5KxpU/zO0yit9zkeh2VgCY7NgtzkhBDfEjOfbQnEf2Zd/Dl:iJ9DkxYyitJkfVJY7WlkhBA8bQnbZ5Dl","tlshash":"68e302024824ee2dcde2e33fbc185e14d43d601e826ded63b7ad96725f66e4a830f591","first_seen":"2023-11-28T08:07:14Z","last_seen":"2026-03-22T13:12:40.824205Z","times_seen":88,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/binance-logo.svg","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/binance-logo.svg HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Sep 2025 08:50:35 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\nage: 5293\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pn9i0T4b7hFNO0eXl51FHRMrtcYIdqC8hkLZuPf9485Tr%2BVgn69SjsUifETvj9jwMxm9m12Yk69D25KJZNTmgnN%2F7sJ0nm4MPrRMR0lyJw%3D%3D\"}]}\r\netag: W/\"68c28d5b-23e\"\r\ncontent-encoding: br\r\ncf-ray: 9c6388398c5156aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":574,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3cc45dec6cb0baae2385156dc4cbd88d","sha1":"77d3ee3b7e456f5376a30fdb59d9ea56eafb4cdf","sha256":"159ccc071ae8ac125368240e859acc201eb5ecbd4de740050f89b50180946afe","sha512":"043ae542f4c2aa2039371a35b987d0b22a9eb1a2c7b98c7a8ff9361449cc62d8756b40df4db59e087633c4d0df4e80df65d76c9c20e57b08c7a7279e2f450b9a","ssdeep":"","tlshash":"89f0fcee1c54e344cc0efa60b315636d3463789b3b359969c7483909dae4f780921bd1","first_seen":"2024-08-19T23:05:10.102901Z","last_seen":"2026-03-22T13:12:40.830851Z","times_seen":73,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/poloniex-logo.svg","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/poloniex-logo.svg HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Sep 2025 08:50:35 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\nage: 5293\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RmSV2XE26EL4QuvFmZHTeGVpgunfjZiUBPfYq2l7K0Y6%2BW4ojB%2BS4UZQr6a4sH%2F8Q3mTSGzQGQ9wPSMxioldBd5bWqMGV6q0xc0drPkIeA%3D%3D\"}]}\r\netag: W/\"68c28d5b-25c\"\r\ncontent-encoding: br\r\ncf-ray: 9c6388398c5356aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":604,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6d34ede3cefdc2f816cc357d65edcf5b","sha1":"a2316a1c2d9cc2b6558996f64fce2111153c0bb2","sha256":"c694d1f6baf5b932a0d5efb35e3542dea9bf99e914fea4df54fdf5c85bb4d0cf","sha512":"a63f05b24a83c9a44eae82f57e330fa6c0c0a5adae68822d499295d163275705f45623968ed0353ebecd914e7af7267028e8182c966e3f67ab1bbe89fc483ff3","ssdeep":"","tlshash":"04f02db8650d996d9840cf1b2f6d713d2472f1edb1960644fc653d0934025b68e617d9","first_seen":"2024-08-19T23:05:10.096477Z","last_seen":"2026-03-22T13:12:40.832884Z","times_seen":73,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/comment-img-1.webp","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/comment-img-1.webp HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3446\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Sep 2025 08:50:35 GMT\r\npriority: u=4,i=?0\r\netag: \"68c28d5b-d76\"\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 5293\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BA%2FMRSltRfm4H%2B0%2FpskKx2HsVb98NYI0InkXd%2BC%2FqX4m7E%2FPAGWptZ74TqwA0qUDYooItrCkAonC%2BIudIaeJrycOGOkHcaXAAUlTAMChoQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6388398c5956aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3446,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b40b30364262b93596b376a0b5c22bba","sha1":"73773cde89881dcae48b67536f0ef75a59c79c97","sha256":"29e62cfebe88b3f23acb8f05a302a31696c8427c7e83a7ea6541dad7e38988ab","sha512":"f6d5e8c8998c5c97b1dbc5c9281a5cd68de1127380b0f74468ad5b7cffadf3f0d9a4dd144a67221e5248fdc3e451635a6e5a446ad45c65ef2789c943f5c66017","ssdeep":"","tlshash":"ed614eaced19815bd49d295bd85ce301c415c3da447cbcdd57776c91373173ab0a3aa0","first_seen":"2024-02-05T12:03:30Z","last_seen":"2026-03-22T13:12:40.839752Z","times_seen":74,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/michal.jpeg","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/michal.jpeg HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 180237\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Oct 2025 00:29:28 GMT\r\npriority: u=4,i=?0\r\netag: \"68e5b068-2c00d\"\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 5293\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=USMxv6z6Vd1fPgX%2B%2FXTl6IPdanVU7rO61hARxAEzhZ0kYR9pNNIgnZ9t9In4AkzFfUzxDUmjjcOCUfFM%2F5M5DtlV5CAT61ckjms3WN4u2w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c63883ade8e56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":180237,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1200x857, components 3","md5":"64eaa0e5cfc2af6258ac303f359845dd","sha1":"6781d9e3f31a296975e0fc24f86235e448c993bb","sha256":"7919eacf07824c30c08f6711e3f3dced3137a4a2a9bb0048f556e0da5268cbe6","sha512":"6d8da25b41a802bc9aa0308eb18ea89996f427154fe294a8e823a58348bb6f466f3ccecc83e9c6d22da1d190cc5a01ac9428317e3e9f87767fac4961408892aa","ssdeep":"3072:gsGwQBI5d9wLmnvaIPj4ecxLGOL5LtnU5ORNnxRE9524EXY1NBVwtzam13OxOotG:JGwQBUQLmvhPncxiiLuunjE53Otz/3OK","tlshash":"540412549c678fa6a94c7cb049ee78f3538dd0688ce8521f60da74dfae20a34736056f","first_seen":"2025-10-13T05:26:18.141896Z","last_seen":"2026-02-08T14:58:15.862348Z","times_seen":42,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/Montserrat-Regular.woff2","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/Montserrat-Regular.woff2 HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/fonts.css\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 17208\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Sep 2025 08:50:35 GMT\r\npriority: u=4,i=?0\r\netag: \"68c28d5b-4338\"\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 5293\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hvWSfI0YtPoyYqn%2BOEJ4aVf4DhJtmjkqSm13Jqkkb7splKEwBg76pFzhU%2B%2Bzwr0rGdr5B%2BKj%2F0KlmHfXwgNQmx7gQ%2F4HGswkPyVLJaCN7w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c63883b4f7956aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17208,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 17208, version 8.0","md5":"8f29bf9c31654fa1d8faa28ea1e9caa0","sha1":"133bc9f8a3c8bb8dc371478319d3493032719c64","sha256":"81e1ca9dd83ee44f626853012d9ab80c2a02eda8d83ae7de2d22b3c10135c540","sha512":"d81bf62cd2aebf030a1f2ac6b8fff93edb44d5f290d963a30425bd2468a90b1120ce0e32744a5f4f9db62e583fd558cac189a5619b377b0ebdd2d3b56ca49b95","ssdeep":"384:Gjclwwm+ODcu+Pv9G9WpsgXWnWOhf7OzM5YoElBXd:IcBu+P4wsgXWnWOIzM3IJd","tlshash":"8272e1974e5e3607f1a6bca1a2b75239e6656c62802b33a27342c7109df04916f4bda1","first_seen":"2024-02-05T12:03:30Z","last_seen":"2026-03-22T13:12:40.837657Z","times_seen":88,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/img/flags.png?1","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/intl-tel-input@23.0.12/build/img/flags.png?1 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/css/intlTelInput.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 70325\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/png\r\nx-jsd-version: 23.0.12\r\nx-jsd-version-type: version\r\netag: W/\"112b5-tFG020MXScxAzCpfJx+YB8oh8dM\"\r\naccept-ranges: bytes\r\nage: 2740291\r\ndate: Fri, 30 Jan 2026 19:56:22 GMT\r\nx-served-by: cache-fra-eddf8230190-FRA, cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70325,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 5762 x 15, 8-bit/color RGBA, non-interlaced","md5":"0b1ca148890222235a0f9903636ca21a","sha1":"b451b4db431749cc40cc2a5f271f9807ca21f1d3","sha256":"54dc5bc49fbe41359681fa0af8add039fa1383a4f4eade34f7a0a5a257dd1caa","sha512":"37553ab4cecdb30b631d883dc0a1afe4b5e81b921fa2fb8054a63fa054c2f57954dddebfee1a5b676f97a392b954aaa553a803e6e9abeedd56f87da0b58a8475","ssdeep":"1536:3Cc3jdCcCx1zjonyR5/Gm5mwoKVehnITl1G/Ghdfal4pMy9c:SczdzCx9jonyT5mwo1hIp1hQ4pMOc","tlshash":"966302b241c2a627f87cb972b955522b673bfb30d280780a00cf15b6979517f04e3a3a","first_seen":"2023-09-16T21:00:24Z","last_seen":"2026-04-12T18:15:38.048539Z","times_seen":5115,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/style.css","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/style.css HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Sep 2025 08:50:35 GMT\r\npriority: u=2,i=?0\r\netag: W/\"68c28d5b-5069\"\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 5293\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rcZcsB%2FejVSmXNEfoGAD3ZE7DNDrs1JY5%2Bg4owBgq3xLzWToYt0q25sSZDUjgpEuKzoZjRwtlfBxLcSDj68Es3BHsl7%2BUNlxnVbwxTMkFg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6388396c2156aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20585,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (20585), with no line terminators","md5":"5889f6fc40da7191dd1837fe9ec5a274","sha1":"bfa593d39d77e1a64b1b211b5e9d705ecfb37dc9","sha256":"2b9797ac70f78d0baf5f8ece0b4bdb8e4d5e7eabd3cdc598d360278ba8a35da8","sha512":"2f2f1f7553499622742839752ce4d24f6d438573d9973991b59dbf6940e460a0fdffa50bec15e9552ce09aab17c9a937004a84d6dd115e5aa39590ef58bd75cd","ssdeep":"96:5bgXvP0P9vSVwMpRoOfI1Ge47C70PM39MNJvjdHurovG8Zpt7ZaM5zVHW5+pZlGN:iXH01BS5QMnN6opN7wcVpZkexI","tlshash":"73922e3361a13748f027cde0a78873aa1028c127e55727fdee65b935cbc759607a278e","first_seen":"2025-06-15T17:52:30.407071Z","last_seen":"2026-03-11T00:33:34.513185Z","times_seen":62,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/like.webp","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/like.webp HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/style.css\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1006\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Sep 2025 08:50:35 GMT\r\npriority: u=4,i=?0\r\netag: \"68c28d5b-3ee\"\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 5293\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=53k4%2BQb9nS1Uabf5%2BdqzaLNWp2bpUxe9ucuQYPFmcn4bGs5kqqxxULv39P4bfZdnKFbwAvckESylDic8AJEBcEuepos3mFIBYgZF6fYFqA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c63883ade9456aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1006,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"656c29963c192316ed36c229427f892c","sha1":"6818a1b313fc5c1391b85d73ab865e6bdcfe4455","sha256":"fe6686f8ced6bf62edd84be94433f25e51126be873f67872ad13f652ab492fae","sha512":"83ba767078330da60da23c23fd3b31dd92cf5679bfc7bff628d2daad03045c4671006861b097187fa766e1597a781180190d659b0bc3bae7ec7f040b35ab2c70","ssdeep":"","tlshash":"84110c185dc0ad43c43330f9edd9f440def715090b4a8f1c635342e51188c43c882477","first_seen":"2023-11-28T08:07:14Z","last_seen":"2026-03-22T13:12:40.822675Z","times_seen":121,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/newikonflex1.png","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/newikonflex1.png HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 4348\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Sep 2025 08:50:35 GMT\r\npriority: u=6,i=?0\r\netag: \"68c28d5b-10fc\"\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 5294\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0aLawgdXHJ6kiU40iKqDWGJNGDWm8DHDrYA4WR4PmtIXmbuUX7OIJxC1vdnBFm1qirnKpNIaOTlDbdXy2xDotIEi%2FtLlf3Kxh9awHqYNBg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c63883cea2556aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4348,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 188 x 220, 8-bit/color RGBA, non-interlaced","md5":"87664523a31fa7aa19c2f29ff77cc266","sha1":"c98d8463384182e70ba3cee2002edde5a98091fa","sha256":"7a134dcb7290a780a5c25b43fa0a3303cfd2b850190f1b32e424e77a8768eef2","sha512":"12419c9bfe6c2f7a9f6f6b35377b91b031a878ee6e123ce4251231492f170afb5604fbc060adb3c1a264e95e0d9239716aa5abcdb58f9ea31fa7f658169ffcfe","ssdeep":"96:UD0JBZppPlaYoGM+ESfPrVvxAfD1cuBLQso4n38x0o:UD0JBZ3daNGM+pr14DzEso238x3","tlshash":"be917db7fbcbd815a712976d7324416629bdb427180cfb4f5cfd484ea204859cc05767","first_seen":"2025-05-05T11:26:06.414517Z","last_seen":"2026-03-22T13:12:40.820592Z","times_seen":70,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/css/intlTelInput.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/intl-tel-input@23.0.12/build/css/intlTelInput.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 23.0.12\r\nx-jsd-version-type: version\r\netag: W/\"4f9c-YW++h4sxifKlsVyMHgLARnQAuWE\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\nage: 1412274\r\nx-served-by: cache-fra-eddf8230088-FRA, cache-hel1410033-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 3384\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20380,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (830)","md5":"b46140e6a10359c79822e7b801f0391b","sha1":"616fbe878b3189f2a5b15c8c1e02c0467400b961","sha256":"def1a0f6d2bd2a01f1f842475b7e7da7f2596f2783fd8872c37624ae406425af","sha512":"3a44a85b26a849c8d784e9bced73b9843cf51396eebe6d9a024abee73266698a72940d0e289e67a39a9ce1946b980a686971205dcde7d22c954b5ab91608898e","ssdeep":"192:WTxfNDsX5uVsAPkkk8ii/yE9y6czvZzorr8/zJHVyT1bK0VN12o7tHPVEVtVaVb2:IVsXk1kdCqE9y6mporr8LJj0H12o7U5","tlshash":"c5929e2346b00d3e965dc1fa38a2c1b5773f0c8a35eecc96eed9504a5887b90e5ebc54","first_seen":"2024-06-08T15:25:15Z","last_seen":"2026-04-12T18:15:38.064266Z","times_seen":808,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":55,"dns":50,"connect":13,"send":0,"wait":13,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/adaptive.css","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/adaptive.css HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Sep 2025 08:50:35 GMT\r\npriority: u=2,i=?0\r\netag: W/\"68c28d5b-482e\"\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 5293\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LH8FF2hnEtizNUB2IcW2zBKIIy%2FiVzqpRx4oKHRhc5cCb2nx%2BpvN3ZcmZvH8TCzSV9PRYX8EhkcchF8HmZqNIj6JSQ08bHmHhlHqOzrDNQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6388396c2256aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18478,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (18478), with no line terminators","md5":"2c008cd3b71b86df805a25338e1edefd","sha1":"8d1dcac54d69ae5958e4625653c60c213c070110","sha256":"6cdf3842992d1134b16d942f9c976c50e6c85e47a4aec28010074542be261472","sha512":"442e4e2caab6741dca9648294dbd5a1fdcc02d612ea9a86e17b64e38aa6fe112238fe25b90e965854d0e081546cd85a8dd1f1c3ad28bc6bf07b49a01162fd58d","ssdeep":"96:d5NAlCGKLw6J+3usFpRJ6OTDVRgAmvt3suYovjm/vnvUZyAfbSNhRJBNlRR0qGCT:FiXBJJbfwtdYoLA/cf+hxR0BCEMU4cO","tlshash":"c0822f133a1524b8b00f5e91bea591e47024db35b35721fbef12d932e39a3a247b174e","first_seen":"2025-07-25T14:18:50.870543Z","last_seen":"2026-03-22T13:12:40.840831Z","times_seen":60,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/review-img-1.webp","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/review-img-1.webp HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: image/webp\r\ncontent-length: 29522\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Sep 2025 08:50:35 GMT\r\npriority: u=4,i=?0\r\netag: \"68c28d5b-7352\"\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 5293\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gAsQ8dNJFiVlTeWDHh29airqbvGmyjc5hbJw7SLm3DRjeg26I9Ve46us3cDykI4%2B%2FHkHuYHsHx6Y0XS7Ax3brpJjXqH7W6TJlEsrvzWfbg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6388397c2e56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29522,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 660x660, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"46417a733e909af1f2a48a505103ab70","sha1":"0ee3545e567b27a2f70700577cae9e12de49eccc","sha256":"1fe63aa1a246a6d966edcffb393d444f2713031a7ff08cc70e96912590d984ed","sha512":"1e1926775ea528e4c0af6d8f8edb7b6a9a2d52dd6948cb9eaea4df3312e74c4b30459a9f143a3533eb7ea6da4f2d68fb5a49d965af6da7cddca49a061fad6259","ssdeep":"768:xPAI7NTVgdUZ6pVru4YJKfi5rrxzY+SCFR:1AILgdUwphnYEK5rJpSYR","tlshash":"3cd2f269edb4d383ab3cf775947963abe4a12f16317e98ad7130d9250a4c3dac70404d","first_seen":"2024-08-19T23:05:10.087218Z","last_seen":"2026-03-22T13:12:40.841926Z","times_seen":73,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xifudfast.digital/lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/review-img-2.webp","fqdn":"xifudfast.digital","domain":"xifudfast.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xifudfast.digital/","date":"2026-01-30T19:56:21.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xifudfast.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 16:30:33 GMT","end":"Tue, 14 Apr 2026 17:29:05 GMT"},"fingerprint":{"sha1":"4B:E9:C7:A0:DA:14:24:E1:99:2E:4E:38:BF:A4:94:88:09:F4:77:89","sha256":"17:CC:AC:D7:88:D3:33:5D:67:32:95:F9:84:E8:8D:32:63:42:DC:11:61:48:96:CC:80:BE:DA:D2:E8:43:86:09"}}},"request":{"raw":"GET /lander/immediate-flex--pl--new-crm-elnopy--new-integ-1.1-_1757580000/review-img-2.webp HTTP/1.1\r\nHost: xifudfast.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xifudfast.digital/\r\nCookie: _subid=1sjos4f1vthrd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjg2NjRcIjoxNzY5ODAyOTgxfSxcImNhbXBhaWduc1wiOntcIjI0OTZcIjoxNzY5ODAyOTgxfSxcInRpbWVcIjoxNzY5ODAyOTgxfSJ9.feSfGJw-tgmj5zlLvsmTyGRCht6SQ93pHFh2tEQEosc; _token=uuid_1sjos4f1vthrd_1sjos4f1vthrd697d0ce518cba8.03311126\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 19:56:21 GMT\r\ncontent-type: image/webp\r\ncontent-length: 36474\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Sep 2025 08:50:35 GMT\r\npriority: u=4,i=?0\r\netag: \"68c28d5b-8e7a\"\r\nexpires: Mon, 09 Feb 2026 18:28:07 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 5293\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RQOxWd3hPoMuuEh%2BAPal7LDLtvrLaMz%2BrC4C%2Fq%2BhP1i4QQ30zsslAZsM11pTrHHZNfhp8B%2B19VJEv%2Bh9%2BUcokuxBU0C0Xn%2BRay3ssAdeQQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6388397c2f56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36474,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 900x900, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"27c267b0eb6dc6055032f11655f7b1d2","sha1":"18e2a8a90f1cc457e07b4800893416b0215803fa","sha256":"e449b5ef44c2de4ad44ea2b84b956bd2ba3af1fa3a0ca51fd1b2bc8a54040b33","sha512":"601b86ffaf6dbb9e95ca53b816ec9afcc09be595827615ab54003fde3604a42bdb039134450b0f1d66eea977a3ebfab050f348ac5de6fa4af258b147bdbdc1f4","ssdeep":"768:k9+b/xsH/sLp0CAGEaIN/9U+VLRqVZJB4jQ:0s/a/sCvaS2+VLR+3GQ","tlshash":"9df2f13cb7cd26dae6467e19630b910d8cef3fe7570b5109902457285dabac069fc2a3","first_seen":"2024-01-30T12:09:04Z","last_seen":"2026-03-22T13:12:40.831889Z","times_seen":94,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"xifudfast.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"xifudfast.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}